@salesforce/b2c-tooling-sdk 1.17.0 → 1.18.0

package/data/tooling/index.json

@@ -0,0 +1,222 @@
+{
+  "version": "2.0.0",
+  "generatedAt": "2026-07-08T01:12:00.365Z",
+  "entries": [
+    {
+      "id": "guide-account-manager",
+      "title": "Account Manager Guide",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/account-manager.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/account-manager.md",
+      "headings": "Authentication • Zero-Config (Default) • User Authentication (`--user-auth`) • Client Credentials • Authentication Order • Role Requirements • Setting Up Credentials • For Interactive Use • For CI/CD and Automation • Common Workflows • User Onboarding • User Offboarding • Auditing • API Client Provisioning • Bulk Operations with JSON Output • CI/CD Examples • GitHub Actions • Shell Script Automation • Troubleshooting • \"operation forbidden\" or \"authentication invalid\" • \"No valid auth method available\" • Redirect URL errors with `--user-auth` • Next Steps",
+      "preview": "Manage Account Manager users, roles, organizations, and API clients with the B2C CLI, including authentication options, CI/CD automation, and common workflows."
+    },
+    {
+      "id": "guide-agent-skills",
+      "title": "Agent Skills & Plugins",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/agent-skills.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/agent-skills.md",
+      "headings": "Quick Start • Available Plugins • Claude Code • Codex • Cursor • Skill Discovery Locations • Install with the B2C CLI • Reuse Claude Code Plugin Installs • Copilot • Copilot (VS Code) • Copilot CLI • B2C CLI • Agentforce Vibes • Other IDEs • Manual Installation • Usage Examples",
+      "preview": "Agentic B2C Developer Toolkit — AI agent skills and plugins that teach Agentforce Vibes, Claude Code, Codex, Cursor, and GitHub Copilot the full B2C Commerce stack."
+    },
+    {
+      "id": "guide-analytics-reports-cip-ccac",
+      "title": "Analytics Reports (CIP/CCAC)",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/analytics-reports-cip-ccac.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/analytics-reports-cip-ccac.md",
+      "headings": "Authentication and Access • Non-Production Support (26.1+) • Host Selection Behavior • Quick Start • Curated reports (`cip report`) • Raw SQL (`cip query`) • Metadata discovery (`cip tables`, `cip describe`) • Choosing Query vs Report • Rate Limits and Query Discipline • Site ID Parameter Note • JSON Output • SDK Support • Next Steps",
+      "preview": "User guide for running CIP/CCAC analytics reports and SQL queries with the B2C CLI."
+    },
+    {
+      "id": "guide-authentication",
+      "title": "Authentication Setup",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/authentication.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/authentication.md",
+      "headings": "Overview • Account Manager API Client • Authentication Methods • Creating an API Client • Assigning Roles • Understanding Roles and Tenant Filters • For Client Credentials (Roles on API Client) • For User Authentication (roles on User) • Configuring Scopes • Configuring Tenant Filter • Redirect URLs • JWT Authentication (Certificate-Based) • How It Works • Benefits • Setup Instructions • Step 1: Generate Certificate Pair • Step 2: Register Certificate in Account Manager • Step 3: Configure CLI • Authentication Priority • Troubleshooting • Security Best Practices • OCAPI Configuration • Configuring OCAPI in Business Manager • Example OCAPI Configuration • Minimal Configuration by Feature • SCAPI Authentication • Required Setup • Scopes by Command • Configuration • WebDAV Access • Option A: Basic Authentication (user access) • Option B: OAuth-based WebDAV (API client access) • Managed Runtime API Key • Getting an MRT API Key • Configuring the API Key • Quick Start Example • 1. Create API Client in Account Manager • 2. Configure OCAPI (for code list/activate/delete, jobs, sites) • 3. Configure WebDAV Access (for code deploy/watch, webdav commands) • 4. Set Environment Variables • 5. Test the Configuration • Troubleshooting • \"Unauthorized\" errors • \"Forbidden\" on WebDAV operations • \"Invalid scope\" errors • Next Steps",
+      "preview": "Set up authentication for the B2C CLI including Account Manager API clients, OCAPI permissions, and WebDAV access keys."
+    },
+    {
+      "id": "guide-ci-cd",
+      "title": "CI/CD with GitHub Actions",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/ci-cd.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/ci-cd.md",
+      "headings": "Overview • Authentication • Quick Start: Deploy Cartridges • Actions Reference • Root Action • Setup • Run • Code Deploy • Data Import • MRT Deploy • Job Run • WebDAV Upload • Staging Environments (Two-Factor mTLS) • CLI Flags • GitHub Actions • Patterns • Data Import Pipeline • MRT Release Deploy • Using Outputs • Version Pinning • Plugins • Logging • CI Defaults",
+      "preview": "Automate B2C Commerce code deployment, data import, MRT bundles, and job execution with the official B2C CLI GitHub Actions for CI/CD pipelines."
+    },
+    {
+      "id": "guide-commerce-apps",
+      "title": "Commerce Apps (CAPs)",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/commerce-apps.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/commerce-apps.md",
+      "headings": "Develop CAPs with AI Agent Skills • Claude Code • CLI Workflow • Creating a Storefront Pull Request • Inspecting Installed State • VS Code Extension Integration • Authentication Requirements • CI/CD Integration • Reference",
+      "preview": "Use the B2C CLI and agent skills to validate, package, install, uninstall, and pull Commerce App Packages (CAPs). Links to the official Commerce Apps ISV Developer Guide for the full specification."
+    },
+    {
+      "id": "guide-configuration",
+      "title": "Configuration",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/configuration.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/configuration.md",
+      "headings": "CLI Flags • OAuth (SCAPI/OCAPI) • Client Credentials • JWT Bearer • Implicit Flow • Basic Authentication (WebDAV) • Environment Variables • .env File • Configuration File • Single Instance • Multiple Instances • Managing Instances with the CLI • Quick Setup • Switching Instances • Listing and Removing • Supported Fields • Two-Factor Authentication (mTLS) • Project Configuration (package.json) • Allowed Fields • Content Libraries Example • Resolution Priority • Credential Grouping • MRT API Key • Overriding Authentication Behavior • Available Auth Methods • Specifying Auth Methods • Debugging Configuration • Next Steps",
+      "preview": "Configure the B2C CLI with environment variables, dw.json files, and multi-instance setups for different environments."
+    },
+    {
+      "id": "guide-extending",
+      "title": "Extending the CLI",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/extending.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/extending.md",
+      "headings": "Available Hooks • Plugin Architecture • Installing Plugins • Custom Configuration Sources • Hook: `b2c:config-sources` • Priority Ordering • Example: Custom Config Source Plugin • Plugin Structure • package.json • Hook Implementation • ConfigSource Implementation • Instance Management Methods • Credential Storage Methods • Error Handling • Plugin Configuration • NormalizedConfig Fields • HTTP Middleware • Hook: `b2c:http-middleware` • HttpMiddlewareProvider Interface • Example: Request Logging Middleware • SDK Usage (without CLI) • B2C Operation Lifecycle Hooks • Hook: `b2c:operation-lifecycle` • Supported Operations • B2COperationLifecycleProvider Interface • B2COperationContext • B2COperationResult • Example: Audit Logging Plugin • Example: Deployment Freeze Policy • Cartridge Providers • Hook: `b2c:cartridge-providers` • CartridgeProvider Interface • CartridgeTransformer Interface • CartridgeDiscoveryOptions • Example: Manifest-Based Discovery • Example: Environment-Based Filtering • Scaffold Providers • Hook: `b2c:scaffold-providers` • ScaffoldProvider Interface • ScaffoldTransformer Interface • SDK Usage (without CLI) • Adding Custom Commands • Base Command Classes • Testing Plugins • Next Steps",
+      "preview": "Extend the B2C CLI with custom plugins, configuration sources, HTTP middleware, and lifecycle hooks."
+    },
+    {
+      "id": "guide-ide-integration",
+      "title": "IDE Integration",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/ide-integration.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/ide-integration.md",
+      "headings": "Script API IntelliSense • B2C DX VS Code Extension (recommended) • Standalone VS Code, WebStorm, or IntelliJ Ultimate • Neovim, Helix, Zed, Sublime, or other LSP-based editors • Notes • Prophet VS Code Extension • Benefits • Setup • Switching Active Instances • Manual `dw.js` Example • Fields Written by `setup ide prophet` • Notes • IntelliJ SFCC Plugin • Setup",
+      "preview": "Configure IDE tooling like Prophet VS Code extension and IntelliJ SFCC plugin to consume resolved B2C CLI configuration, plus enable Script API IntelliSense via TypeScript definitions."
+    },
+    {
+      "id": "guide-installation",
+      "title": "Installation",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/installation.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/installation.md",
+      "headings": "Prerequisites • Install via npm (Recommended) • Verify Installation • Install the SDK (Optional) • Next Steps",
+      "preview": "Install the B2C CLI via npm or GitHub releases, and optionally install the SDK for programmatic use."
+    },
+    {
+      "id": "guide-mrt-utilities",
+      "title": "MRT Utilities",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/mrt-utilities.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/mrt-utilities.md",
+      "headings": "When to use • Prerequisites • Installation • Package exports • Basic setup • Middleware • createMRTCommonMiddleware() • createMRTRequestProcessorMiddleware(requestProcessorPath, proxyConfigs) • createMRTProxyMiddlewares(proxyConfigs) • createMRTStaticAssetServingMiddleware(staticAssetDir) • createMRTCleanUpMiddleware() • Environment detection • Streaming (Lambda) • Metrics • Data Store In Development • Related",
+      "preview": "Use the mrt-utilities package to simulate a deployed Managed Runtime environment locally with Express middleware and streaming adapters."
+    },
+    {
+      "id": "guide-safety",
+      "title": "Safety Mode",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/safety.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/safety.md",
+      "headings": "Quick Start • Safety Levels • Setting a Level • Safety Rules • Rule Actions • Rule Matchers • HTTP Method + Path • Job ID • CLI Command ID • Evaluation Order • Confirmation Mode • Per-Instance Configuration • Global Safety Config • Configuration Merge • Example • Environment Variables Reference • SDK Usage",
+      "preview": "Configure Safety Mode to prevent accidental destructive operations with safety levels, per-instance rules, confirmation mode, and global policies."
+    },
+    {
+      "id": "guide-scaffolding",
+      "title": "Scaffolding",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/scaffolding.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/scaffolding.md",
+      "headings": "Quick Start • Built-in Scaffolds • Using Scaffolds • Interactive Mode • Non-Interactive Mode • Providing Parameters • Preview Changes • Output Directory • Scaffold Details • cartridge • controller • hook • service • custom-api • job-step • page-designer-component • Creating Custom Scaffolds • Scaffold Locations • Initialize a New Scaffold • Scaffold Manifest • Parameter Types • Dynamic Sources • Conditional Parameters • Template Files • Template Helpers • File Mappings • File Modifications • Post Instructions • Validation • Scaffold Discovery Priority • Programmatic Usage (SDK) • Discovery and Generation • Parameter Schema Discovery • Validation",
+      "preview": "Generate B2C Commerce cartridges, controllers, hooks, custom APIs, and more from templates using the scaffolding framework."
+    },
+    {
+      "id": "guide-script-debugger",
+      "title": "Script Debugger",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/script-debugger.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/script-debugger.md",
+      "headings": "Requirements • Choosing an interface • Server affinity (hitting breakpoints) • See Also",
+      "preview": "Debug server-side B2C Commerce scripts (controllers, hooks, jobs, custom APIs) with the Script Debugger — via the VS Code extension, the CLI DAP debug adapter, or the MCP diagnostics tools."
+    },
+    {
+      "id": "guide-sdk-migration",
+      "title": "Migrating from sfcc-ci's JavaScript API",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/sdk-migration.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/sdk-migration.md",
+      "headings": "Key Paradigm Shifts • Callbacks to async/await • Token Passing to Config-Based Auth • Untyped Objects to Typed Clients • Quick Start: Replacing a Typical sfcc-ci Script • API Mapping by Module • Authentication (`sfcc.auth`) • Code Management (`sfcc.code`) • Job Execution (`sfcc.job`) • Instance / WebDAV (`sfcc.instance`, `sfcc.webdav`) • Account Manager Users (`sfcc.user`) • Account Manager & BM Roles (`sfcc.role`) • Organizations (`sfcc.org`) • Using Typed Clients Directly • SLAS Client Management • Direct OCAPI Access • Comprehensive Mapping Table • What the SDK Adds Beyond sfcc-ci • Error Handling • Next Steps",
+      "preview": "Migrate from sfcc-ci's programmatic JavaScript API to @salesforce/b2c-tooling-sdk with side-by-side code examples and API mapping."
+    },
+    {
+      "id": "guide-security",
+      "title": "Security",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/security.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/security.md",
+      "headings": "Supply Chain Security • Minimum Release Age • Trust Policy • Restricting Build Scripts • NPM Trusted Publishing • Operational Security: Safety Mode • Best Practices • For Contributors • For Users",
+      "preview": "Security practices for the B2C Developer Tooling project including supply chain protections and dependency management."
+    },
+    {
+      "id": "guide-sfcc-ci-migration",
+      "title": "Migrating from sfcc-ci",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/sfcc-ci-migration.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/sfcc-ci-migration.md",
+      "headings": "Authentication • Stateful Auth (sfcc-ci Compatible) • Stateless Auth (Recommended for CI/CD) • Command Mapping • Code Management • Instance / Data • Cartridge Path • Jobs • Sandbox • SLAS • User / Org / Role • Environment Variables • Configuration • CI/CD Migration • Before (sfcc-ci) • After (b2c-cli — stateless) • After (b2c-cli — stateful, sfcc-ci compatible) • GitHub Actions • Next Steps",
+      "preview": "Migrate from sfcc-ci to @salesforce/b2c-cli with command mappings, environment variable compatibility, and CI/CD pipeline updates."
+    },
+    {
+      "id": "guide-storefront-next",
+      "title": "Storefront Next",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/storefront-next.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/storefront-next.md",
+      "headings": "Prerequisites • Step 1: Create an On-Demand Sandbox (Optional) • Step 2: Create a SLAS Client • Step 3: Create an MRT Environment • Connect the B2C Commerce Instance • Step 4: Set Environment Variables • Variable Reference • Multi-Site Configuration • Step 5: Deploy • Step 6: Debugging with Log Tailing • Summary • Next Steps",
+      "preview": "Set up Storefront Next development environments using the B2C CLI to create sandboxes, SLAS clients, MRT environments, and deploy."
+    },
+    {
+      "id": "guide-third-party-plugins",
+      "title": "3rd Party Plugins",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/third-party-plugins.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/third-party-plugins.md",
+      "headings": "Installing Plugins • Available Plugins • IntelliJ SFCC Config Plugin • Installation • Features • Environment Variables • Usage • Password Store Plugin • Installation • Features • Storing Credentials • Environment Variables • Usage • macOS Keychain Plugin • Installation • Features • Storing Credentials • Environment Variables • Usage • Docs Viewer Plugin • Installation • Features • Usage • Catalog Reducer Plugin • Installation • Features • Usage • Pipeline Visualizer Plugin • Installation • Features • Usage • Creating Your Own Plugin • Submitting Plugins",
+      "preview": "Community plugins for the B2C CLI including IntelliJ SFCC config integration, credential storage, docs search, catalog reduction, and pipeline visualization."
+    },
+    {
+      "id": "mcp-configuration",
+      "title": "Configuration",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/configuration.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/configuration.md",
+      "headings": "Credentials • `dw.json` (Recommended) {#dw-json} • `.env` File {#env-file} • MRT Credentials (`~/.mobify`) {#mrt-credentials} • Configuration Priority • Toolset Selection • Auto-Discovery (Default) • Manual Selection • Individual Tool Selection • Logging • Telemetry • MCP Server Flags Reference {#mcp-server-flags} • Documentation Tools Restriction • Environment Variables Reference {#environment-variables-reference} • MCP Server Environment Variables {#mcp-server-environment-variables} • Next Steps",
+      "preview": "Configure the B2C DX MCP Server with credentials, flags, environment variables, and toolset selection."
+    },
+    {
+      "id": "mcp-figma-tools-setup",
+      "title": "Figma-to-Component Tools Setup",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/figma-tools-setup.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/figma-tools-setup.md",
+      "headings": "Overview • Figma MCP Setup • Figma Design File • Verification • Related Documentation",
+      "preview": "Prerequisites and setup for Figma-to-component tools (workflow orchestrator, generate component, map tokens)."
+    },
+    {
+      "id": "mcp-index",
+      "title": "MCP Server",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/index.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/index.md",
+      "headings": "Quick Start • Project Type Detection • Plugins • Next Steps",
+      "preview": "MCP Server for Salesforce B2C Commerce - AI-assisted development tools for Claude, Cursor, and other AI assistants."
+    },
+    {
+      "id": "mcp-installation",
+      "title": "Installation",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/installation.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/installation.md",
+      "headings": "Prerequisites • Claude Code • Plugin Marketplace • CLI • Cursor • Project-Level Configuration (Recommended) • Quick Install (User-Level) • GitHub Copilot • After Installation • Troubleshooting • Server Not Starting • `spawn npx ENOENT` Error • \"Could not determine executable to run\" Error (Windows) • Tools Not Available • Configuration Not Loading • Next Steps",
+      "preview": "Install and configure the B2C DX MCP Server for Claude Code, Cursor, GitHub Copilot, and other MCP clients."
+    },
+    {
+      "id": "mcp-toolsets",
+      "title": "Toolsets & Tools",
+      "category": "tooling",
+      "url": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/toolsets.html",
+      "sourceUrl": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/toolsets.md",
+      "headings": "CARTRIDGES • DIAGNOSTICS • MRT • PWAV3 • SCAPI • STOREFRONTNEXT • STOREFRONTNEXT_DEPRECATED • Next Steps",
+      "preview": "Available toolsets and tools in the B2C DX MCP Server for SCAPI, CARTRIDGES, DIAGNOSTICS, MRT, PWAV3, and STOREFRONTNEXT development."
+    }
+  ]
+}

package/data/xsd/index.json

@@ -1,6 +1,6 @@
 {
   "version": "1.0.0",
-  "generatedAt": "2026-06-23T22:27:06.448Z",
+  "generatedAt": "2026-07-02T15:36:28.098Z",
   "entries": [
     {
       "id": "abtest",

package/dist/esm/auth/client-credentials.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Encoding of OAuth client credentials for the HTTP Basic `Authorization` header.
+ *
+ * @module auth/client-credentials
+ */
+/**
+ * Builds the base64 payload for an `Authorization: Basic` header carrying OAuth
+ * client credentials, per RFC 6749 §2.3.1.
+ *
+ * The client identifier and client password are each form-url-encoded (RFC 6749
+ * Appendix B) *before* being joined with a colon and Base64-encoded (RFC 7617
+ * §2, the HTTP Basic scheme). Skipping the per-component encoding corrupts any
+ * credential containing characters the server form-url-decodes: a raw `+` is
+ * read as a space and a valid `%xx` escape is decoded to another byte (both
+ * yield `invalid_client` -- a wrong-but-valid secret), while an invalid escape
+ * such as `%zz` makes a strict decoder error out (`unauthorized_client` /
+ * "Unexpected error when authenticating client"). The same credential succeeds
+ * when sent in the request body, which is form-url-encoded by construction --
+ * the "body works, Basic fails" symptom.
+ *
+ * @param clientId - The OAuth client identifier
+ * @param clientSecret - The OAuth client password/secret
+ * @returns The Base64 string to place after `Basic ` in the `Authorization` header
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#appendix-B
+ */
+export declare function encodeBasicClientCredentials(clientId: string, clientSecret: string): string;

package/dist/esm/auth/client-credentials.js

@@ -0,0 +1,60 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+/**
+ * Encoding of OAuth client credentials for the HTTP Basic `Authorization` header.
+ *
+ * @module auth/client-credentials
+ */
+/**
+ * Form-url-encode a single value using the `application/x-www-form-urlencoded`
+ * escaping rules that RFC 6749 Appendix B references -- the W3C HTML form rules
+ * (UTF-8 first), NOT RFC 3986 percent-encoding. `URLSearchParams` implements
+ * exactly these rules.
+ *
+ * The two encodings differ only for a space (form rules -> `+`, RFC 3986 ->
+ * `%20`) and a few punctuation chars (`!`, `~`, `(`, `)`). They agree on every
+ * other byte, INCLUDING `+` and `%` -- the characters that actually trigger the
+ * auth failure this module fixes -- so the encoder choice does not affect that
+ * bug. We use the form rules (`URLSearchParams`) regardless because:
+ *   1. they are precisely the Appendix B algorithm -- its worked example encodes
+ *      U+0020 (space) as `+`, which `URLSearchParams` reproduces; and
+ *   2. they are the same rules the token-request body uses, so a credential is
+ *      byte-identical whether sent in the Basic header or in the body.
+ * The two are only interchangeable against a server that form-url-decodes (as
+ * Account Manager does); a strict RFC 3986 decoder would read a form-encoded
+ * space (`+`) as a literal `+`, so matching the algorithm the RFC names is the
+ * safe choice rather than a coincidence that happens to work.
+ */
+function formUrlEncodeComponent(value) {
+    // The name is empty, so the serialized "=value" is sliced to just the value.
+    return new URLSearchParams([['', value]]).toString().slice(1);
+}
+/**
+ * Builds the base64 payload for an `Authorization: Basic` header carrying OAuth
+ * client credentials, per RFC 6749 §2.3.1.
+ *
+ * The client identifier and client password are each form-url-encoded (RFC 6749
+ * Appendix B) *before* being joined with a colon and Base64-encoded (RFC 7617
+ * §2, the HTTP Basic scheme). Skipping the per-component encoding corrupts any
+ * credential containing characters the server form-url-decodes: a raw `+` is
+ * read as a space and a valid `%xx` escape is decoded to another byte (both
+ * yield `invalid_client` -- a wrong-but-valid secret), while an invalid escape
+ * such as `%zz` makes a strict decoder error out (`unauthorized_client` /
+ * "Unexpected error when authenticating client"). The same credential succeeds
+ * when sent in the request body, which is form-url-encoded by construction --
+ * the "body works, Basic fails" symptom.
+ *
+ * @param clientId - The OAuth client identifier
+ * @param clientSecret - The OAuth client password/secret
+ * @returns The Base64 string to place after `Basic ` in the `Authorization` header
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#appendix-B
+ */
+export function encodeBasicClientCredentials(clientId, clientSecret) {
+    const userPass = `${formUrlEncodeComponent(clientId)}:${formUrlEncodeComponent(clientSecret)}`;
+    return Buffer.from(userPass).toString('base64');
+}
+//# sourceMappingURL=client-credentials.js.map

package/dist/esm/auth/client-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.js","sourceRoot":"","sources":["../../../src/auth/client-credentials.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;GAIG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,sBAAsB,CAAC,KAAa;IAC3C,6EAA6E;IAC7E,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAgB,EAAE,YAAoB;IACjF,MAAM,QAAQ,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,IAAI,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC;IAC/F,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClD,CAAC"}

package/dist/esm/auth/index.d.ts

@@ -56,6 +56,7 @@
  */
 export type { AuthStrategy, FetchInit, AccessTokenResponse, DecodedJWT, AuthConfig, BasicAuthConfig, OAuthAuthConfig, ApiKeyAuthConfig, AuthMethod, AuthCredentials, } from './types.js';
 export { ALL_AUTH_METHODS } from './types.js';
+export { encodeBasicClientCredentials } from './client-credentials.js';
 export { BasicAuthStrategy } from './basic.js';
 export { OAuthStrategy, decodeJWT } from './oauth.js';
 export type { OAuthConfig } from './oauth.js';

package/dist/esm/auth/index.js

@@ -60,6 +60,8 @@
  * @module auth
  */
 export { ALL_AUTH_METHODS } from './types.js';
+// Client credential encoding (RFC 6749 §2.3.1)
+export { encodeBasicClientCredentials } from './client-credentials.js';
 // Strategies
 export { BasicAuthStrategy } from './basic.js';
 export { OAuthStrategy, decodeJWT } from './oauth.js';

package/dist/esm/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAeH,OAAO,EAAC,gBAAgB,EAAC,MAAM,YAAY,CAAC;AAE5C,aAAa;AACb,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAC,aAAa,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAC,qBAAqB,EAAC,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAC,gBAAgB,EAAC,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAC,cAAc,EAAC,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAC,qBAAqB,EAAC,MAAM,8BAA8B,CAAC;AAGnE,sBAAsB;AACtB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAG7B,qBAAqB;AACrB,OAAO,EAAC,mBAAmB,EAAE,yBAAyB,EAAC,MAAM,cAAc,CAAC;AAG5E,kBAAkB;AAClB,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAeH,OAAO,EAAC,gBAAgB,EAAC,MAAM,YAAY,CAAC;AAE5C,+CAA+C;AAC/C,OAAO,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAC;AAErE,aAAa;AACb,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAC,aAAa,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAC,qBAAqB,EAAC,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAC,gBAAgB,EAAC,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAC,cAAc,EAAC,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAC,qBAAqB,EAAC,MAAM,8BAA8B,CAAC;AAGnE,sBAAsB;AACtB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAG7B,qBAAqB;AACrB,OAAO,EAAC,mBAAmB,EAAE,yBAAyB,EAAC,MAAM,cAAc,CAAC;AAG5E,kBAAkB;AAClB,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC"}

package/dist/esm/auth/oauth.js

@@ -3,6 +3,7 @@ import { wrapNetworkError } from '../errors/network-error.js';
 import { getLogger } from '../logging/logger.js';
 import { DEFAULT_ACCOUNT_MANAGER_HOST } from '../defaults.js';
 import { globalAuthMiddlewareRegistry, applyAuthRequestMiddleware, applyAuthResponseMiddleware } from './middleware.js';
+import { encodeBasicClientCredentials } from './client-credentials.js';
 // Module-level token cache to support multiple instances with same clientId
 const ACCESS_TOKEN_CACHE = new Map();
 // In-flight token requests, keyed by cacheKey, so concurrent callers coalesce
@@ -233,7 +234,7 @@ export class OAuthStrategy {
         if (this.config.scopes && this.config.scopes.length > 0) {
             params.append('scope', this.config.scopes.join(' '));
         }
-        const credentials = Buffer.from(`${this.config.clientId}:${this.config.clientSecret}`).toString('base64');
+        const credentials = encodeBasicClientCredentials(this.config.clientId, this.config.clientSecret);
         // Build request object for middleware
         let request = new Request(url, {
             method,

package/dist/esm/auth/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAC,gBAAgB,EAAC,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAC,4BAA4B,EAAC,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAC,4BAA4B,EAAE,0BAA0B,EAAE,2BAA2B,EAAC,MAAM,iBAAiB,CAAC;AAEtH,4EAA4E;AAC5E,MAAM,kBAAkB,GAAqC,IAAI,GAAG,EAAE,CAAC;AAEvE,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,sBAAsB,GAA8C,IAAI,GAAG,EAAE,CAAC;AASpF;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,MAAoC,EACpC,kBAA0B,EAC1B,MAAiB;IAEjB,MAAM,SAAS,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,GAAG,kBAAkB,IAAI,QAAQ,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,iBAA2B,EAAE;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpF,uDAAuD;IACvD,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,aAAkC;IACtF,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,aAAa;IAUJ;IATZ,kBAAkB,CAAS;IAC3B,cAAc,GAAG,KAAK,CAAC;IACvB,QAAQ,CAAS;IAEzB;;;;OAIG;IACH,YAAoB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QACrC,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;QACpF,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,oBAAoB,EACpB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CACnB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAkB,EAAE;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpD,mEAAmE;QACnE,IAAI,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QAEvD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,4EAA4E;QAC5E,4EAA4E;QAC5E,oEAAoE;QACpE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9C,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;YACnD,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,UAAU,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,gBAA0B;QAC7C,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO,IAAI,aAAa,CAAC;YACvB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC5D,OAAO,aAAa,CAAC,WAAW,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACK,wBAAwB;QAC9B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,EAAE,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,SAAS,EAAE,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC1D,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAClD,OAAO,aAAa,CAAC;QACvB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAChB,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB;QAClC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,kBAAkB,4BAA4B,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE1G,sCAAsC;QACtC,IAAI,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,WAAW,EAAE;gBACrC,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,UAAU,GAAG,4BAA4B,CAAC,aAAa,EAAE,CAAC;QAChE,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEhE,wCAAwC;QACxC,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CACV,EAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAC,EAChC,2DAA2D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAClF,CAAC;QACF,2BAA2B;QAC3B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,EAAE,cAAc,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAE3D,6BAA6B;QAC7B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAC,EAAE,mBAAmB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAElH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC/B,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAC,CAAC,CAAC;QACxE,CAAC;QAED,4BAA4B;QAC5B,QAAQ,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CACV,EAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAC,EAChD,eAAe,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,IAAI,CAChE,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;QAEF,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAEvG,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAC,EAAE,oBAAoB,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAE5C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,OAAO,EAAE,UAAU;YACnB,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAC,gBAAgB,EAAC,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAC,4BAA4B,EAAC,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAC,4BAA4B,EAAE,0BAA0B,EAAE,2BAA2B,EAAC,MAAM,iBAAiB,CAAC;AACtH,OAAO,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAC;AAErE,4EAA4E;AAC5E,MAAM,kBAAkB,GAAqC,IAAI,GAAG,EAAE,CAAC;AAEvE,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,sBAAsB,GAA8C,IAAI,GAAG,EAAE,CAAC;AASpF;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,MAAoC,EACpC,kBAA0B,EAC1B,MAAiB;IAEjB,MAAM,SAAS,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,GAAG,kBAAkB,IAAI,QAAQ,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,iBAA2B,EAAE;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpF,uDAAuD;IACvD,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,aAAkC;IACtF,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,aAAa;IAUJ;IATZ,kBAAkB,CAAS;IAC3B,cAAc,GAAG,KAAK,CAAC;IACvB,QAAQ,CAAS;IAEzB;;;;OAIG;IACH,YAAoB,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QACrC,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;QACpF,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,oBAAoB,EACpB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CACnB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAkB,EAAE;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpD,mEAAmE;QACnE,IAAI,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QAEvD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,4EAA4E;QAC5E,4EAA4E;QAC5E,oEAAoE;QACpE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9C,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;YACnD,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAC,GAAG,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,UAAU,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,gBAA0B;QAC7C,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO,IAAI,aAAa,CAAC;YACvB,GAAG,IAAI,CAAC,MAAM;YACd,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE5E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC5D,OAAO,aAAa,CAAC,WAAW,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACK,wBAAwB;QAC9B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,EAAE,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,SAAS,EAAE,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC1D,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAClD,OAAO,aAAa,CAAC;QACvB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAChB,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB;QAClC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,kBAAkB,4BAA4B,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC;QAEtB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEjG,sCAAsC;QACtC,IAAI,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,WAAW,EAAE;gBACrC,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,UAAU,GAAG,4BAA4B,CAAC,aAAa,EAAE,CAAC;QAChE,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEhE,wCAAwC;QACxC,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CACV,EAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAC,EAChC,2DAA2D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAClF,CAAC;QACF,2BAA2B;QAC3B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,EAAE,cAAc,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAE3D,6BAA6B;QAC7B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAC,EAAE,mBAAmB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAElH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC/B,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,qBAAqB,EAAE,IAAI,EAAC,CAAC,CAAC;QACxE,CAAC;QAED,4BAA4B;QAC5B,QAAQ,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CACV,EAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAC,EAChD,eAAe,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,IAAI,CAChE,CAAC;QAEF,uBAAuB;QACvB,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;QAEF,8BAA8B;QAC9B,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,oBAAoB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAEvG,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAC,EAAE,oBAAoB,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAE5C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,OAAO,EAAE,UAAU;YACnB,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}

package/dist/esm/cli/base-command.d.ts

@@ -8,6 +8,34 @@ import type { SafetyEvaluation } from '../safety/types.js';
 import { Telemetry, type TelemetryAttributes } from '../telemetry/index.js';
 export type Flags<T extends typeof Command> = Interfaces.InferredFlags<(typeof BaseCommand)['baseFlags'] & T['flags']>;
 export type Args<T extends typeof Command> = Interfaces.InferredArgs<T['args']>;
+/**
+ * Stable error-code values passed to oclif's `this.error(msg, {code})` so that
+ * {@link classifyError} can categorize the resulting telemetry without parsing
+ * error messages.
+ *
+ * - `VALIDATION` — user/config input error (missing flag, bad value). Expected,
+ *   not a reliability defect.
+ * - `GUARDRAIL` — blocked by the user's own safety configuration. Working as
+ *   intended, not a failure of the tool.
+ */
+export declare const ERROR_CODE: {
+    readonly VALIDATION: "VALIDATION";
+    readonly GUARDRAIL: "GUARDRAIL";
+};
+/** Telemetry category recorded on COMMAND_ERROR (see {@link classifyError}). */
+export type ErrorCategory = 'guardrail' | 'runtime' | 'validation';
+/**
+ * Classify a thrown command error for telemetry so analytics can exclude
+ * expected validation/guardrail errors from reliability (defect-rate) metrics.
+ *
+ * Resolution order:
+ * 1. An explicit oclif `code` of {@link ERROR_CODE.VALIDATION} / `GUARDRAIL`
+ *    (set at the throw site via `this.error(msg, {code})`).
+ * 2. Safety error class names thrown from HTTP/auth middleware that do not flow
+ *    through `this.error` (`SafetyBlockedError`, `SafetyConfirmationRequired`).
+ * 3. Everything else is a genuine `runtime` error (the reliability signal).
+ */
+export declare function classifyError(err: unknown): ErrorCategory;
 /**
  * Base command class for B2C CLI tools.
  *
@@ -105,6 +133,18 @@ export declare abstract class BaseCommand<T extends typeof Command> extends Comm
      * COMMAND_EXCEPTION events include organizational context.
      */
     protected addTelemetryContext(): void;
+    /**
+     * Build a suffix appended to "X is required" config errors.
+     *
+     * When NO config source contributed any values (no dw.json found, no env
+     * vars, no flags — the dominant cause of these errors in telemetry), the user
+     * is almost certainly unconfigured rather than missing one specific field, so
+     * we point them at the configuration guide. When a source DID load, we stay
+     * quiet: the existing message already lists the precise flag/env var to set.
+     *
+     * @returns A "\n\nSee: <url>" suffix, or '' when config is already partially present.
+     */
+    protected configDocsHint(): string;
     /**
      * Collects config sources from plugins via the `b2c:config-sources` hook.
      *

package/dist/esm/cli/base-command.js

@@ -19,6 +19,46 @@ import { initializeStatefulStore } from '../auth/stateful-store.js';
 import { setUserAgent } from '../clients/user-agent.js';
 import { createTelemetry, Telemetry } from '../telemetry/index.js';
 const LOG_LEVELS = ['trace', 'debug', 'info', 'warn', 'error', 'silent'];
+/**
+ * Stable error-code values passed to oclif's `this.error(msg, {code})` so that
+ * {@link classifyError} can categorize the resulting telemetry without parsing
+ * error messages.
+ *
+ * - `VALIDATION` — user/config input error (missing flag, bad value). Expected,
+ *   not a reliability defect.
+ * - `GUARDRAIL` — blocked by the user's own safety configuration. Working as
+ *   intended, not a failure of the tool.
+ */
+export const ERROR_CODE = {
+    VALIDATION: 'VALIDATION',
+    GUARDRAIL: 'GUARDRAIL',
+};
+/** Base URL for the online documentation site. */
+const DOCS_BASE_URL = 'https://salesforcecommercecloud.github.io/b2c-developer-tooling';
+/** Configuration guide — how to point the CLI at an instance and authenticate. */
+const DOCS_CONFIGURATION_URL = `${DOCS_BASE_URL}/guide/configuration.html`;
+/**
+ * Classify a thrown command error for telemetry so analytics can exclude
+ * expected validation/guardrail errors from reliability (defect-rate) metrics.
+ *
+ * Resolution order:
+ * 1. An explicit oclif `code` of {@link ERROR_CODE.VALIDATION} / `GUARDRAIL`
+ *    (set at the throw site via `this.error(msg, {code})`).
+ * 2. Safety error class names thrown from HTTP/auth middleware that do not flow
+ *    through `this.error` (`SafetyBlockedError`, `SafetyConfirmationRequired`).
+ * 3. Everything else is a genuine `runtime` error (the reliability signal).
+ */
+export function classifyError(err) {
+    const code = err?.code;
+    if (code === ERROR_CODE.VALIDATION)
+        return 'validation';
+    if (code === ERROR_CODE.GUARDRAIL)
+        return 'guardrail';
+    const name = err?.name;
+    if (name === 'SafetyBlockedError' || name === 'SafetyConfirmationRequired')
+        return 'guardrail';
+    return 'runtime';
+}
 /**
  * Base command class for B2C CLI tools.
  *
@@ -342,6 +382,25 @@ export class BaseCommand extends Command {
             // Best-effort: telemetry context enrichment must never prevent command execution
         }
     }
+    /**
+     * Build a suffix appended to "X is required" config errors.
+     *
+     * When NO config source contributed any values (no dw.json found, no env
+     * vars, no flags — the dominant cause of these errors in telemetry), the user
+     * is almost certainly unconfigured rather than missing one specific field, so
+     * we point them at the configuration guide. When a source DID load, we stay
+     * quiet: the existing message already lists the precise flag/env var to set.
+     *
+     * @returns A "\n\nSee: <url>" suffix, or '' when config is already partially present.
+     */
+    configDocsHint() {
+        // resolvedConfig may be unset if the error is thrown before loadConfiguration().
+        const sources = this.resolvedConfig?.sources;
+        if (sources && sources.length === 0) {
+            return t('base.configDocsHint', '\n\nNo configuration was found. See the configuration guide to connect an instance: {{url}}', { url: DOCS_CONFIGURATION_URL });
+        }
+        return '';
+    }
     /**
      * Collects config sources from plugins via the `b2c:config-sources` hook.
      *
@@ -471,14 +530,16 @@ export class BaseCommand extends Command {
     async catch(err) {
         const exitCode = err.exitCode ?? 1;
         const duration = this.commandStartTime ? Date.now() - this.commandStartTime : undefined;
+        const errorCategory = classifyError(err);
         // Send exception and COMMAND_ERROR event so the error appears in custom events (same view as COMMAND_START)
         // Flush explicitly before stop to ensure events are sent before process exits
         if (this.telemetry) {
-            this.telemetry.sendException(err, { command: this.id, exitCode, duration });
+            this.telemetry.sendException(err, { command: this.id, errorCategory, exitCode, duration });
             this.telemetry.sendEvent('COMMAND_ERROR', {
                 command: this.id,
                 exitCode,
                 duration,
+                errorCategory,
                 errorMessage: err.message,
                 ...(err.cause ? { errorCause: String(err.cause) } : {}),
             });
@@ -564,7 +625,7 @@ export class BaseCommand extends Command {
             operation,
             safetyLevel,
             description: describeSafetyLevel(safetyLevel),
-        }), { exit: 1 });
+        }), { code: ERROR_CODE.GUARDRAIL, exit: 1 });
     }
     /**
      * Parse extra params from --extra-query, --extra-body, and --extra-headers flags.
@@ -652,7 +713,7 @@ export class BaseCommand extends Command {
             commandId: this.id,
         });
         if (evaluation.action === 'block' && evaluation.rule) {
-            this.error(evaluation.reason, { exit: 1 });
+            this.error(evaluation.reason, { code: ERROR_CODE.GUARDRAIL, exit: 1 });
         }
         if (evaluation.action === 'confirm' && evaluation.rule) {
             await this.confirmOrBlock(evaluation);
@@ -671,11 +732,11 @@ export class BaseCommand extends Command {
         if (!process.stdin.isTTY) {
             this.error(`Your safety configuration requires confirmation for this operation, ` +
                 `but no interactive session is available.\n\n  ${evaluation.reason}\n\n` +
-                `To change this, update the "safety" section in your dw.json or the SFCC_SAFETY_CONFIRM environment variable.`, { exit: 1 });
+                `To change this, update the "safety" section in your dw.json or the SFCC_SAFETY_CONFIRM environment variable.`, { code: ERROR_CODE.GUARDRAIL, exit: 1 });
         }
         const confirmed = await safetyConfirm(`Your safety configuration requires confirmation for this operation:\n  ${evaluation.reason}\n  Proceed?`);
         if (!confirmed) {
-            this.error('Operation cancelled.', { exit: 1 });
+            this.error('Operation cancelled.', { code: ERROR_CODE.GUARDRAIL, exit: 1 });
         }
     }
     /**