@salesforce/b2c-tooling-sdk 1.16.0 → 1.18.0

package/data/xsd/order.xsd

@@ -32,6 +32,7 @@
                     custom-attributes of ProductShippingLineItem are exported. Since version 21.9 the
                     fields account-id and account-type are exported. Since version 22.9 details to a 
                     Salesforce Payments payment are no longer exported in a custom method element.
+                    Since version 26.5 multi-level tax items can be exported for line items.
                 </xsd:documentation>
             </xsd:annotation>
             <xsd:enumeration value="18.5" />
@@ -43,6 +44,7 @@
             <xsd:enumeration value="22.1" />
             <xsd:enumeration value="22.9" />
             <xsd:enumeration value="23.4" />
+            <xsd:enumeration value="26.5" />
         </xsd:restriction>
     </xsd:simpleType>
 
@@ -211,6 +213,32 @@
         </xsd:complexContent>
     </xsd:complexType>
 
+    <xsd:complexType name="complexType.LineItemTaxItem">
+        <xsd:sequence>
+            <xsd:element name="tax-id" type="simpleType.Generic.NonEmptyString.256" minOccurs="1" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>Tax identifier (e.g., "federal", "state_CA")</xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="tax-rate" type="xsd:decimal" minOccurs="1" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>Tax rate as decimal (0.07 = 7%)</xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="tax-amount" type="xsd:decimal" minOccurs="1" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>Tax amount in purchase currency.</xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="complexType.LineItemTaxItems">
+        <xsd:sequence>
+            <xsd:element name="tax-item" type="complexType.LineItemTaxItem" minOccurs="1" maxOccurs="10" />
+        </xsd:sequence>
+    </xsd:complexType>
+
     <xsd:complexType name="complexType.ProductLineItem">
         <xsd:complexContent>
             <xsd:extension base="complexType.LineItemAmounts">
@@ -236,6 +264,11 @@
                     <xsd:element name="gift-message" type="simpleType.Generic.String.4000" minOccurs="0" maxOccurs="1"></xsd:element>
                     <xsd:element name="external-line-item-status" type="simpleType.Generic.String.256" minOccurs="0" maxOccurs="1"></xsd:element>
                     <xsd:element name="external-line-item-text" type="simpleType.Generic.String" minOccurs="0" maxOccurs="1"></xsd:element>
+                    <xsd:element name="tax-items" type="complexType.LineItemTaxItems" minOccurs="0" maxOccurs="1">
+                        <xsd:annotation>
+                            <xsd:documentation>Since version 26.5. Multi-level tax items per line item.</xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:element>
                     <xsd:element name="custom-attributes" type="sharedType.CustomAttributes" minOccurs="0" maxOccurs="1"></xsd:element>
                     <xsd:element name="price-adjustments" type="complexType.PriceAdjustments" maxOccurs="1" minOccurs="0"></xsd:element>
                 </xsd:sequence>
@@ -424,6 +457,11 @@
                     <xsd:element name="recipient-name" type="simpleType.Generic.String.256" maxOccurs="1" minOccurs="0"></xsd:element>
                     <xsd:element name="message" type="simpleType.Generic.String.4000" maxOccurs="1" minOccurs="0"></xsd:element>
                     <xsd:element name="shipment-id" type="simpleType.Generic.NonEmptyString.256" maxOccurs="1" minOccurs="0"></xsd:element>
+                    <xsd:element name="tax-items" type="complexType.LineItemTaxItems" minOccurs="0" maxOccurs="1">
+                        <xsd:annotation>
+                            <xsd:documentation>Since version 26.5, multi-level tax items per line item are supported.</xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:element>
                     <xsd:element name="custom-attributes" type="sharedType.CustomAttributes" minOccurs="0" maxOccurs="1"></xsd:element>
                 </xsd:sequence>
             </xsd:extension>
@@ -482,6 +520,11 @@
                     </xsd:element>
                     <xsd:element name="shipment-id" type="simpleType.Generic.NonEmptyString.256" maxOccurs="1" minOccurs="0"></xsd:element>
                     <xsd:element name="tax-rate" type="xsd:double" minOccurs="1"></xsd:element>
+                    <xsd:element name="tax-items" type="complexType.LineItemTaxItems" minOccurs="0" maxOccurs="1">
+                        <xsd:annotation>
+                            <xsd:documentation>Since version 26.5. Multi-level tax items per line item.</xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:element>
                     <xsd:element name="custom-attributes" type="sharedType.CustomAttributes" minOccurs="0" maxOccurs="1"></xsd:element>
                 </xsd:sequence>
             </xsd:extension>
@@ -495,6 +538,11 @@
                     <xsd:element name="quantity" type="complexType.Quantity" minOccurs="1"></xsd:element>
                     <xsd:element name="tax-rate" type="xsd:double" minOccurs="1"></xsd:element>
                     <xsd:element name="type" type="simpleType.ProductShippingCostType" minOccurs="1"></xsd:element>
+                    <xsd:element name="tax-items" type="complexType.LineItemTaxItems" minOccurs="0" maxOccurs="1">
+                        <xsd:annotation>
+                            <xsd:documentation>Since version 26.5. Multi-level tax items per line item.</xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:element>
                     <xsd:element name="custom-attributes" type="sharedType.CustomAttributes" minOccurs="0" maxOccurs="1"></xsd:element>
                     <xsd:element name="price-adjustments" type="complexType.PriceAdjustments" minOccurs="0" maxOccurs="1" ></xsd:element>
                 </xsd:sequence>
@@ -544,6 +592,11 @@
                     <xsd:element name="option-id" type="simpleType.Generic.NonEmptyString.256"></xsd:element>
                     <xsd:element name="value-id" type="simpleType.Generic.NonEmptyString.256"></xsd:element>
                     <xsd:element name="product-id" type="simpleType.Generic.NonEmptyString.100" minOccurs="1"  maxOccurs="1" ></xsd:element>
+                    <xsd:element name="tax-items" type="complexType.LineItemTaxItems" minOccurs="0" maxOccurs="1">
+                        <xsd:annotation>
+                            <xsd:documentation>Since version 26.5. Multi-level tax items per line item.</xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:element>
                     <xsd:element name="custom-attributes" type="sharedType.CustomAttributes" minOccurs="0" maxOccurs="1"></xsd:element>
                     <xsd:element name="price-adjustments" type="complexType.PriceAdjustments" minOccurs="0" maxOccurs="1" ></xsd:element>
                 </xsd:sequence>

package/data/xsd/store.xsd

@@ -54,6 +54,7 @@
                 </xsd:annotation>
             </xsd:element>
             <xsd:element name="pos-enabled-flag" type="xsd:boolean" minOccurs="0" maxOccurs="1" />
+            <xsd:element name="pos-store-id" type="simpleType.Generic.String.128" minOccurs="0" maxOccurs="1" />
             <xsd:element name="custom-attributes" type="sharedType.CustomAttributes" minOccurs="0" maxOccurs="1" />
         </xsd:sequence>
         <xsd:attribute name="store-id" type="simpleType.Generic.NonEmptyString.256" use="required" />
@@ -128,6 +129,13 @@
         </xsd:restriction>
     </xsd:simpleType>
 
+    <xsd:simpleType name="simpleType.Generic.String.128">
+        <xsd:restriction base="simpleType.Generic.String">
+            <xsd:minLength value="0" />
+            <xsd:maxLength value="128" />
+        </xsd:restriction>
+    </xsd:simpleType>
+
     <xsd:simpleType name="simpleType.Generic.String.256">
         <xsd:restriction base="simpleType.Generic.String">
             <xsd:minLength value="0" />

package/data/xsd/storefronts.xsd

@@ -12,7 +12,7 @@
     <xsd:element name="storefronts">
         <xsd:complexType>
             <xsd:sequence>
-                <xsd:element name="storefront" type="complexType.Storefront" minOccurs="0" maxOccurs="unbounded"/>
+                <xsd:element name="storefront" type="complexType.Storefront" minOccurs="0" maxOccurs="1"/>
             </xsd:sequence>
         </xsd:complexType>
     </xsd:element>
@@ -25,17 +25,31 @@
         <xsd:sequence>
             <xsd:element name="ecom-site" type="simpleType.Generic.String.48" minOccurs="0" maxOccurs="1"/>
             <xsd:element name="storefront-type" type="simpleType.StorefrontType" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="storefront-status" type="simpleType.StorefrontStatus" minOccurs="1" maxOccurs="1"/>
             <xsd:element name="associated-sites" type="complexType.AssociatedSites" minOccurs="0" maxOccurs="1"/>
             <xsd:element name="user-id" type="simpleType.Generic.String.48" minOccurs="1" maxOccurs="1"/>
             <xsd:element name="org-slug" type="simpleType.Generic.String.64" minOccurs="1" maxOccurs="1"/>
             <xsd:element name="mrt-site" type="simpleType.Generic.String.64" minOccurs="1" maxOccurs="1"/>
             <xsd:element name="scm-repo" type="simpleType.Generic.String.512" minOccurs="0" maxOccurs="1"/>
             <xsd:element name="scm-target" type="simpleType.Generic.String.64" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="github-app-installation" type="complexType.GitHubAppInstallation" minOccurs="0" maxOccurs="1"/>
         </xsd:sequence>
         <xsd:attribute name="storefront-name" type="simpleType.Generic.NonEmptyString.64" use="required"/>
         <xsd:attribute name="mode" type="simpleType.ImportMode"/>
     </xsd:complexType>
 
+    <!-- GitHub App Installation -->
+    <xsd:complexType name="complexType.GitHubAppInstallation" mixed="false">
+        <xsd:sequence>
+            <xsd:element name="app-id" type="simpleType.Generic.String.64" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="installation-id" type="simpleType.Generic.String.64" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="target-id" type="simpleType.Generic.String.64" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="target-name" type="simpleType.Generic.String.256" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="target-url" type="simpleType.Generic.String.512" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="target-type" type="simpleType.Generic.String.32" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
     <!-- Associated Sites -->
     <xsd:complexType name="complexType.AssociatedSites" mixed="false">
         <xsd:sequence>
@@ -51,6 +65,34 @@
         </xsd:restriction>
     </xsd:simpleType>
 
+    <!--
+        Storefront Status enumeration.
+
+        These values must stay in sync with StorefrontSetupStatusEnum (core/internal/storefront).
+        There is no compile-time link between this XSD and the Java enum; drift is caught by
+        comparing the JAXB-generated SimpleTypeStorefrontStatus against StorefrontSetupStatusEnum
+        in _JAXBStorefrontExportHandler (testStorefrontStatusEnumAndXsdInSync).
+
+        Export currently restricts output to SUCCESS storefronts only
+        (JAXBStorefrontExportHandler.mapStorefront). Adding a new exportable status requires:
+          1. Adding the value here
+          2. Adding the enum constant in StorefrontSetupStatusEnum
+          3. Updating the export guard in mapStorefront to allow the new status
+          4. Updating the sync unit test's expected set if needed
+    -->
+    <xsd:simpleType name="simpleType.StorefrontStatus">
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="in_progress"/>
+            <xsd:enumeration value="success"/>
+            <xsd:enumeration value="backfilled"/>
+            <xsd:enumeration value="failed"/>
+            <xsd:enumeration value="delete_in_progress"/>
+            <xsd:enumeration value="delete_failed"/>
+            <xsd:enumeration value="deleted"/>
+            <xsd:enumeration value="unknown"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
     <!-- Import Mode -->
     <xsd:simpleType name="simpleType.ImportMode">
         <xsd:restriction base="xsd:string">
@@ -63,6 +105,13 @@
         <xsd:restriction base="xsd:string"/>
     </xsd:simpleType>
 
+    <xsd:simpleType name="simpleType.Generic.String.32">
+        <xsd:restriction base="simpleType.Generic.String">
+            <xsd:minLength value="0"/>
+            <xsd:maxLength value="32"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
     <xsd:simpleType name="simpleType.Generic.String.48">
         <xsd:restriction base="simpleType.Generic.String">
             <xsd:minLength value="0"/>
@@ -77,6 +126,13 @@
         </xsd:restriction>
     </xsd:simpleType>
 
+    <xsd:simpleType name="simpleType.Generic.String.256">
+        <xsd:restriction base="simpleType.Generic.String">
+            <xsd:minLength value="0"/>
+            <xsd:maxLength value="256"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
     <xsd:simpleType name="simpleType.Generic.String.512">
         <xsd:restriction base="simpleType.Generic.String">
             <xsd:minLength value="0"/>

package/dist/esm/auth/client-credentials.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Encoding of OAuth client credentials for the HTTP Basic `Authorization` header.
+ *
+ * @module auth/client-credentials
+ */
+/**
+ * Builds the base64 payload for an `Authorization: Basic` header carrying OAuth
+ * client credentials, per RFC 6749 §2.3.1.
+ *
+ * The client identifier and client password are each form-url-encoded (RFC 6749
+ * Appendix B) *before* being joined with a colon and Base64-encoded (RFC 7617
+ * §2, the HTTP Basic scheme). Skipping the per-component encoding corrupts any
+ * credential containing characters the server form-url-decodes: a raw `+` is
+ * read as a space and a valid `%xx` escape is decoded to another byte (both
+ * yield `invalid_client` -- a wrong-but-valid secret), while an invalid escape
+ * such as `%zz` makes a strict decoder error out (`unauthorized_client` /
+ * "Unexpected error when authenticating client"). The same credential succeeds
+ * when sent in the request body, which is form-url-encoded by construction --
+ * the "body works, Basic fails" symptom.
+ *
+ * @param clientId - The OAuth client identifier
+ * @param clientSecret - The OAuth client password/secret
+ * @returns The Base64 string to place after `Basic ` in the `Authorization` header
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#appendix-B
+ */
+export declare function encodeBasicClientCredentials(clientId: string, clientSecret: string): string;

package/dist/esm/auth/client-credentials.js

@@ -0,0 +1,60 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+/**
+ * Encoding of OAuth client credentials for the HTTP Basic `Authorization` header.
+ *
+ * @module auth/client-credentials
+ */
+/**
+ * Form-url-encode a single value using the `application/x-www-form-urlencoded`
+ * escaping rules that RFC 6749 Appendix B references -- the W3C HTML form rules
+ * (UTF-8 first), NOT RFC 3986 percent-encoding. `URLSearchParams` implements
+ * exactly these rules.
+ *
+ * The two encodings differ only for a space (form rules -> `+`, RFC 3986 ->
+ * `%20`) and a few punctuation chars (`!`, `~`, `(`, `)`). They agree on every
+ * other byte, INCLUDING `+` and `%` -- the characters that actually trigger the
+ * auth failure this module fixes -- so the encoder choice does not affect that
+ * bug. We use the form rules (`URLSearchParams`) regardless because:
+ *   1. they are precisely the Appendix B algorithm -- its worked example encodes
+ *      U+0020 (space) as `+`, which `URLSearchParams` reproduces; and
+ *   2. they are the same rules the token-request body uses, so a credential is
+ *      byte-identical whether sent in the Basic header or in the body.
+ * The two are only interchangeable against a server that form-url-decodes (as
+ * Account Manager does); a strict RFC 3986 decoder would read a form-encoded
+ * space (`+`) as a literal `+`, so matching the algorithm the RFC names is the
+ * safe choice rather than a coincidence that happens to work.
+ */
+function formUrlEncodeComponent(value) {
+    // The name is empty, so the serialized "=value" is sliced to just the value.
+    return new URLSearchParams([['', value]]).toString().slice(1);
+}
+/**
+ * Builds the base64 payload for an `Authorization: Basic` header carrying OAuth
+ * client credentials, per RFC 6749 §2.3.1.
+ *
+ * The client identifier and client password are each form-url-encoded (RFC 6749
+ * Appendix B) *before* being joined with a colon and Base64-encoded (RFC 7617
+ * §2, the HTTP Basic scheme). Skipping the per-component encoding corrupts any
+ * credential containing characters the server form-url-decodes: a raw `+` is
+ * read as a space and a valid `%xx` escape is decoded to another byte (both
+ * yield `invalid_client` -- a wrong-but-valid secret), while an invalid escape
+ * such as `%zz` makes a strict decoder error out (`unauthorized_client` /
+ * "Unexpected error when authenticating client"). The same credential succeeds
+ * when sent in the request body, which is form-url-encoded by construction --
+ * the "body works, Basic fails" symptom.
+ *
+ * @param clientId - The OAuth client identifier
+ * @param clientSecret - The OAuth client password/secret
+ * @returns The Base64 string to place after `Basic ` in the `Authorization` header
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#appendix-B
+ */
+export function encodeBasicClientCredentials(clientId, clientSecret) {
+    const userPass = `${formUrlEncodeComponent(clientId)}:${formUrlEncodeComponent(clientSecret)}`;
+    return Buffer.from(userPass).toString('base64');
+}
+//# sourceMappingURL=client-credentials.js.map

package/dist/esm/auth/client-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.js","sourceRoot":"","sources":["../../../src/auth/client-credentials.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;GAIG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,sBAAsB,CAAC,KAAa;IAC3C,6EAA6E;IAC7E,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAgB,EAAE,YAAoB;IACjF,MAAM,QAAQ,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,IAAI,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC;IAC/F,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClD,CAAC"}

package/dist/esm/auth/index.d.ts

@@ -56,6 +56,7 @@
  */
 export type { AuthStrategy, FetchInit, AccessTokenResponse, DecodedJWT, AuthConfig, BasicAuthConfig, OAuthAuthConfig, ApiKeyAuthConfig, AuthMethod, AuthCredentials, } from './types.js';
 export { ALL_AUTH_METHODS } from './types.js';
+export { encodeBasicClientCredentials } from './client-credentials.js';
 export { BasicAuthStrategy } from './basic.js';
 export { OAuthStrategy, decodeJWT } from './oauth.js';
 export type { OAuthConfig } from './oauth.js';

package/dist/esm/auth/index.js

@@ -60,6 +60,8 @@
  * @module auth
  */
 export { ALL_AUTH_METHODS } from './types.js';
+// Client credential encoding (RFC 6749 §2.3.1)
+export { encodeBasicClientCredentials } from './client-credentials.js';
 // Strategies
 export { BasicAuthStrategy } from './basic.js';
 export { OAuthStrategy, decodeJWT } from './oauth.js';

package/dist/esm/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAeH,OAAO,EAAC,gBAAgB,EAAC,MAAM,YAAY,CAAC;AAE5C,aAAa;AACb,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAC,aAAa,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAC,qBAAqB,EAAC,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAC,gBAAgB,EAAC,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAC,cAAc,EAAC,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAC,qBAAqB,EAAC,MAAM,8BAA8B,CAAC;AAGnE,sBAAsB;AACtB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAG7B,qBAAqB;AACrB,OAAO,EAAC,mBAAmB,EAAE,yBAAyB,EAAC,MAAM,cAAc,CAAC;AAG5E,kBAAkB;AAClB,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAeH,OAAO,EAAC,gBAAgB,EAAC,MAAM,YAAY,CAAC;AAE5C,+CAA+C;AAC/C,OAAO,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAC;AAErE,aAAa;AACb,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAC,aAAa,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAC,qBAAqB,EAAC,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAC,gBAAgB,EAAC,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAC,cAAc,EAAC,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAC,qBAAqB,EAAC,MAAM,8BAA8B,CAAC;AAGnE,sBAAsB;AACtB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAG7B,qBAAqB;AACrB,OAAO,EAAC,mBAAmB,EAAE,yBAAyB,EAAC,MAAM,cAAc,CAAC;AAG5E,kBAAkB;AAClB,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC"}

package/dist/esm/auth/oauth.js

@@ -3,6 +3,7 @@ import { wrapNetworkError } from '../errors/network-error.js';
 import { getLogger } from '../logging/logger.js';
 import { DEFAULT_ACCOUNT_MANAGER_HOST } from '../defaults.js';
 import { globalAuthMiddlewareRegistry, applyAuthRequestMiddleware, applyAuthResponseMiddleware } from './middleware.js';
+import { encodeBasicClientCredentials } from './client-credentials.js';
 // Module-level token cache to support multiple instances with same clientId
 const ACCESS_TOKEN_CACHE = new Map();
 // In-flight token requests, keyed by cacheKey, so concurrent callers coalesce
@@ -233,7 +234,7 @@ export class OAuthStrategy {
         if (this.config.scopes && this.config.scopes.length > 0) {
             params.append('scope', this.config.scopes.join(' '));
         }
-        const credentials = Buffer.from(`${this.config.clientId}:${this.config.clientSecret}`).toString('base64');
+        const credentials = encodeBasicClientCredentials(this.config.clientId, this.config.clientSecret);
         // Build request object for middleware
         let request = new Request(url, {
             method,

package/dist/esm/auth/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAC,gBAAgB,EAAC,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAC,4BAA4B,EAAC,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAC,4BAA4B,EAAE,0BAA0B,EAAE,2BAA2B,EAAC,MAAM,iBAAiB,CAAC;AAEtH,4EAA4E;AAC5E,MAAM,kBAAkB,GAAqC,IAAI,GAAG,EAAE,CAAC;AAEvE,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,sBAAsB,GAA8C,IAAI,GAAG,EAAE,CAAC;AASpF;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,MAAoC,EACpC,kBAA0B,EAC1B,MAAiB;IAEjB,MAAM,SAAS,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,GAAG,kBAAkB,IAAI,QAAQ,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,iBAA2B,EAAE;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpF,uDAAuD;IACvD,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,aAAkC;IACtF,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,aAAa;IAUJ;IATZ,kBAAkB,CAAS;IAC3B,cAAc,GAAG,KAAK,CAAC;IACvB,QAAQ,CAAS;IAEzB;;;;OAIG;IACH,YAAoB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QACrC,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;QACpF,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,oBAAoB,EACpB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CACnB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAkB,EAAE;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpD,mEAAmE;QACnE,IAAI,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QAEvD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,4EAA4E;QAC5E,4EAA4E;QAC5E,oEAAoE;QACpE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9C,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;YACnD,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,UAAU,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,gBAA0B;QAC7C,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO,IAAI,aAAa,CAAC;YACvB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC5D,OAAO,aAAa,CAAC,WAAW,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACK,wBAAwB;QAC9B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,EAAE,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,SAAS,EAAE,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC1D,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAClD,OAAO,aAAa,CAAC;QACvB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAChB,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB;QAClC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,kBAAkB,4BAA4B,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE1G,sCAAsC;QACtC,IAAI,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,WAAW,EAAE;gBACrC,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,UAAU,GAAG,4BAA4B,CAAC,aAAa,EAAE,CAAC;QAChE,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEhE,wCAAwC;QACxC,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CACV,EAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAC,EAChC,2DAA2D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAClF,CAAC;QACF,2BAA2B;QAC3B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,EAAE,cAAc,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAE3D,6BAA6B;QAC7B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAC,EAAE,mBAAmB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAElH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC/B,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAC,CAAC,CAAC;QACxE,CAAC;QAED,4BAA4B;QAC5B,QAAQ,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CACV,EAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAC,EAChD,eAAe,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,IAAI,CAChE,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;QAEF,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAEvG,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAC,EAAE,oBAAoB,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAE5C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,OAAO,EAAE,UAAU;YACnB,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAC,gBAAgB,EAAC,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAC,4BAA4B,EAAC,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAC,4BAA4B,EAAE,0BAA0B,EAAE,2BAA2B,EAAC,MAAM,iBAAiB,CAAC;AACtH,OAAO,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAC;AAErE,4EAA4E;AAC5E,MAAM,kBAAkB,GAAqC,IAAI,GAAG,EAAE,CAAC;AAEvE,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,sBAAsB,GAA8C,IAAI,GAAG,EAAE,CAAC;AASpF;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,MAAoC,EACpC,kBAA0B,EAC1B,MAAiB;IAEjB,MAAM,SAAS,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,GAAG,kBAAkB,IAAI,QAAQ,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,iBAA2B,EAAE;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpF,uDAAuD;IACvD,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,aAAkC;IACtF,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,aAAa;IAUJ;IATZ,kBAAkB,CAAS;IAC3B,cAAc,GAAG,KAAK,CAAC;IACvB,QAAQ,CAAS;IAEzB;;;;OAIG;IACH,YAAoB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QACrC,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;QACpF,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,oBAAoB,EACpB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CACnB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAkB,EAAE;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpD,mEAAmE;QACnE,IAAI,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QAEvD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,4EAA4E;QAC5E,4EAA4E;QAC5E,oEAAoE;QACpE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9C,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;YACnD,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,UAAU,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,gBAA0B;QAC7C,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO,IAAI,aAAa,CAAC;YACvB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC5D,OAAO,aAAa,CAAC,WAAW,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACK,wBAAwB;QAC9B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,EAAE,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,SAAS,EAAE,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC1D,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAClD,OAAO,aAAa,CAAC;QACvB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAChB,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB;QAClC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,kBAAkB,4BAA4B,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEjG,sCAAsC;QACtC,IAAI,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,WAAW,EAAE;gBACrC,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,UAAU,GAAG,4BAA4B,CAAC,aAAa,EAAE,CAAC;QAChE,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEhE,wCAAwC;QACxC,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CACV,EAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAC,EAChC,2DAA2D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAClF,CAAC;QACF,2BAA2B;QAC3B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,EAAE,cAAc,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAE3D,6BAA6B;QAC7B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAC,EAAE,mBAAmB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAElH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC/B,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAC,CAAC,CAAC;QACxE,CAAC;QAED,4BAA4B;QAC5B,QAAQ,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CACV,EAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAC,EAChD,eAAe,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,IAAI,CAChE,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;QAEF,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAEvG,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAC,EAAE,oBAAoB,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAE5C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,OAAO,EAAE,UAAU;YACnB,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}

package/dist/esm/cli/base-command.d.ts

@@ -8,6 +8,34 @@ import type { SafetyEvaluation } from '../safety/types.js';
 import { Telemetry, type TelemetryAttributes } from '../telemetry/index.js';
 export type Flags<T extends typeof Command> = Interfaces.InferredFlags<(typeof BaseCommand)['baseFlags'] & T['flags']>;
 export type Args<T extends typeof Command> = Interfaces.InferredArgs<T['args']>;
+/**
+ * Stable error-code values passed to oclif's `this.error(msg, {code})` so that
+ * {@link classifyError} can categorize the resulting telemetry without parsing
+ * error messages.
+ *
+ * - `VALIDATION` — user/config input error (missing flag, bad value). Expected,
+ *   not a reliability defect.
+ * - `GUARDRAIL` — blocked by the user's own safety configuration. Working as
+ *   intended, not a failure of the tool.
+ */
+export declare const ERROR_CODE: {
+    readonly VALIDATION: "VALIDATION";
+    readonly GUARDRAIL: "GUARDRAIL";
+};
+/** Telemetry category recorded on COMMAND_ERROR (see {@link classifyError}). */
+export type ErrorCategory = 'guardrail' | 'runtime' | 'validation';
+/**
+ * Classify a thrown command error for telemetry so analytics can exclude
+ * expected validation/guardrail errors from reliability (defect-rate) metrics.
+ *
+ * Resolution order:
+ * 1. An explicit oclif `code` of {@link ERROR_CODE.VALIDATION} / `GUARDRAIL`
+ *    (set at the throw site via `this.error(msg, {code})`).
+ * 2. Safety error class names thrown from HTTP/auth middleware that do not flow
+ *    through `this.error` (`SafetyBlockedError`, `SafetyConfirmationRequired`).
+ * 3. Everything else is a genuine `runtime` error (the reliability signal).
+ */
+export declare function classifyError(err: unknown): ErrorCategory;
 /**
  * Base command class for B2C CLI tools.
  *
@@ -105,6 +133,18 @@ export declare abstract class BaseCommand<T extends typeof Command> extends Comm
      * COMMAND_EXCEPTION events include organizational context.
      */
     protected addTelemetryContext(): void;
+    /**
+     * Build a suffix appended to "X is required" config errors.
+     *
+     * When NO config source contributed any values (no dw.json found, no env
+     * vars, no flags — the dominant cause of these errors in telemetry), the user
+     * is almost certainly unconfigured rather than missing one specific field, so
+     * we point them at the configuration guide. When a source DID load, we stay
+     * quiet: the existing message already lists the precise flag/env var to set.
+     *
+     * @returns A "\n\nSee: <url>" suffix, or '' when config is already partially present.
+     */
+    protected configDocsHint(): string;
     /**
      * Collects config sources from plugins via the `b2c:config-sources` hook.
      *

package/dist/esm/cli/base-command.js

@@ -19,6 +19,46 @@ import { initializeStatefulStore } from '../auth/stateful-store.js';
 import { setUserAgent } from '../clients/user-agent.js';
 import { createTelemetry, Telemetry } from '../telemetry/index.js';
 const LOG_LEVELS = ['trace', 'debug', 'info', 'warn', 'error', 'silent'];
+/**
+ * Stable error-code values passed to oclif's `this.error(msg, {code})` so that
+ * {@link classifyError} can categorize the resulting telemetry without parsing
+ * error messages.
+ *
+ * - `VALIDATION` — user/config input error (missing flag, bad value). Expected,
+ *   not a reliability defect.
+ * - `GUARDRAIL` — blocked by the user's own safety configuration. Working as
+ *   intended, not a failure of the tool.
+ */
+export const ERROR_CODE = {
+    VALIDATION: 'VALIDATION',
+    GUARDRAIL: 'GUARDRAIL',
+};
+/** Base URL for the online documentation site. */
+const DOCS_BASE_URL = 'https://salesforcecommercecloud.github.io/b2c-developer-tooling';
+/** Configuration guide — how to point the CLI at an instance and authenticate. */
+const DOCS_CONFIGURATION_URL = `${DOCS_BASE_URL}/guide/configuration.html`;
+/**
+ * Classify a thrown command error for telemetry so analytics can exclude
+ * expected validation/guardrail errors from reliability (defect-rate) metrics.
+ *
+ * Resolution order:
+ * 1. An explicit oclif `code` of {@link ERROR_CODE.VALIDATION} / `GUARDRAIL`
+ *    (set at the throw site via `this.error(msg, {code})`).
+ * 2. Safety error class names thrown from HTTP/auth middleware that do not flow
+ *    through `this.error` (`SafetyBlockedError`, `SafetyConfirmationRequired`).
+ * 3. Everything else is a genuine `runtime` error (the reliability signal).
+ */
+export function classifyError(err) {
+    const code = err?.code;
+    if (code === ERROR_CODE.VALIDATION)
+        return 'validation';
+    if (code === ERROR_CODE.GUARDRAIL)
+        return 'guardrail';
+    const name = err?.name;
+    if (name === 'SafetyBlockedError' || name === 'SafetyConfirmationRequired')
+        return 'guardrail';
+    return 'runtime';
+}
 /**
  * Base command class for B2C CLI tools.
  *
@@ -342,6 +382,25 @@ export class BaseCommand extends Command {
             // Best-effort: telemetry context enrichment must never prevent command execution
         }
     }
+    /**
+     * Build a suffix appended to "X is required" config errors.
+     *
+     * When NO config source contributed any values (no dw.json found, no env
+     * vars, no flags — the dominant cause of these errors in telemetry), the user
+     * is almost certainly unconfigured rather than missing one specific field, so
+     * we point them at the configuration guide. When a source DID load, we stay
+     * quiet: the existing message already lists the precise flag/env var to set.
+     *
+     * @returns A "\n\nSee: <url>" suffix, or '' when config is already partially present.
+     */
+    configDocsHint() {
+        // resolvedConfig may be unset if the error is thrown before loadConfiguration().
+        const sources = this.resolvedConfig?.sources;
+        if (sources && sources.length === 0) {
+            return t('base.configDocsHint', '\n\nNo configuration was found. See the configuration guide to connect an instance: {{url}}', { url: DOCS_CONFIGURATION_URL });
+        }
+        return '';
+    }
     /**
      * Collects config sources from plugins via the `b2c:config-sources` hook.
      *
@@ -471,14 +530,16 @@ export class BaseCommand extends Command {
     async catch(err) {
         const exitCode = err.exitCode ?? 1;
         const duration = this.commandStartTime ? Date.now() - this.commandStartTime : undefined;
+        const errorCategory = classifyError(err);
         // Send exception and COMMAND_ERROR event so the error appears in custom events (same view as COMMAND_START)
         // Flush explicitly before stop to ensure events are sent before process exits
         if (this.telemetry) {
-            this.telemetry.sendException(err, { command: this.id, exitCode, duration });
+            this.telemetry.sendException(err, { command: this.id, errorCategory, exitCode, duration });
             this.telemetry.sendEvent('COMMAND_ERROR', {
                 command: this.id,
                 exitCode,
                 duration,
+                errorCategory,
                 errorMessage: err.message,
                 ...(err.cause ? { errorCause: String(err.cause) } : {}),
             });
@@ -564,7 +625,7 @@ export class BaseCommand extends Command {
             operation,
             safetyLevel,
             description: describeSafetyLevel(safetyLevel),
-        }), { exit: 1 });
+        }), { code: ERROR_CODE.GUARDRAIL, exit: 1 });
     }
     /**
      * Parse extra params from --extra-query, --extra-body, and --extra-headers flags.
@@ -652,7 +713,7 @@ export class BaseCommand extends Command {
             commandId: this.id,
         });
         if (evaluation.action === 'block' && evaluation.rule) {
-            this.error(evaluation.reason, { exit: 1 });
+            this.error(evaluation.reason, { code: ERROR_CODE.GUARDRAIL, exit: 1 });
         }
         if (evaluation.action === 'confirm' && evaluation.rule) {
             await this.confirmOrBlock(evaluation);
@@ -671,11 +732,11 @@ export class BaseCommand extends Command {
         if (!process.stdin.isTTY) {
             this.error(`Your safety configuration requires confirmation for this operation, ` +
                 `but no interactive session is available.\n\n  ${evaluation.reason}\n\n` +
-                `To change this, update the "safety" section in your dw.json or the SFCC_SAFETY_CONFIRM environment variable.`, { exit: 1 });
+                `To change this, update the "safety" section in your dw.json or the SFCC_SAFETY_CONFIRM environment variable.`, { code: ERROR_CODE.GUARDRAIL, exit: 1 });
         }
         const confirmed = await safetyConfirm(`Your safety configuration requires confirmation for this operation:\n  ${evaluation.reason}\n  Proceed?`);
         if (!confirmed) {
-            this.error('Operation cancelled.', { exit: 1 });
+            this.error('Operation cancelled.', { code: ERROR_CODE.GUARDRAIL, exit: 1 });
         }
     }
     /**