@salesforce/b2c-tooling-sdk 1.24.1 → 2.0.0

package/dist/esm/clients/error-utils.js

@@ -8,6 +8,78 @@
  *
  * @module clients/error-utils
  */
+/**
+ * The OCAPI `fault.type` returned (with HTTP 403) when an instance has OCAPI
+ * disabled. The platform is progressively deprecating OCAPI; on a deprecated
+ * instance every Data API call fails with this fault regardless of scopes or
+ * credentials. SCAPI is the supported path forward.
+ */
+const OCAPI_DEPRECATED_FAULT_TYPE = 'OcapiDeprecatedException';
+/** Doc anchor users are directed to when OCAPI is deprecated for an instance. */
+const SCAPI_SETUP_DOC_URL = 'https://salesforcecommercecloud.github.io/b2c-developer-tooling/guide/authentication.html#scapi-authentication';
+/**
+ * Renders the scope portion of the deprecation message. When the operation has
+ * a SCAPI equivalent, names the exact scope(s) that unlock it (e.g.
+ * `the "sfcc.scripts" or "sfcc.scripts.rw" scope`); otherwise falls back to the
+ * generic `sfcc.*` phrasing.
+ */
+function scopeClause(requiredScopes) {
+    if (!requiredScopes || requiredScopes.length === 0) {
+        return 'the required sfcc.* scopes';
+    }
+    const quoted = requiredScopes.map((s) => `"${s}"`);
+    const list = quoted.length === 1 ? quoted[0] : `${quoted.slice(0, -1).join(', ')} or ${quoted[quoted.length - 1]}`;
+    return `the ${list} scope`;
+}
+/**
+ * Builds the user-facing guidance shown when an instance has OCAPI deprecated.
+ *
+ * Pass the SCAPI scope(s) the failed operation requires to name them in the
+ * message (e.g. an operation needing `sfcc.scripts.rw` tells the user exactly
+ * which scope to add). Omit `requiredScopes` for operations that have no SCAPI
+ * equivalent — the message then uses the generic `sfcc.*` phrasing.
+ */
+export function ocapiDeprecatedMessage(requiredScopes) {
+    return ('OCAPI is deprecated and disabled for this instance. ' +
+        `Configure SCAPI access (shortCode, tenantId, and ${scopeClause(requiredScopes)}) on your Account Manager API client to continue. ` +
+        `See: ${SCAPI_SETUP_DOC_URL}`);
+}
+/**
+ * Generic OCAPI deprecation message (no specific scope named). Convenience for
+ * call sites that surface the guidance directly without an operation scope.
+ */
+export const OCAPI_DEPRECATED_MESSAGE = ocapiDeprecatedMessage();
+/**
+ * Returns true if an API error object is an OCAPI deprecation fault
+ * (`fault.type === 'OcapiDeprecatedException'`).
+ *
+ * Detection keys off the structured `fault.type`, not the message text, so it
+ * is robust to message wording changes. Used to convert the opaque OCAPI 403
+ * into actionable "configure SCAPI" guidance at every OCAPI-terminal site.
+ */
+export function isOcapiDeprecatedFault(error) {
+    if (!error || typeof error !== 'object')
+        return false;
+    const fault = error.fault;
+    if (!fault || typeof fault !== 'object')
+        return false;
+    return fault.type === OCAPI_DEPRECATED_FAULT_TYPE;
+}
+/**
+ * Error thrown when an OCAPI operation fails because OCAPI is deprecated for
+ * the instance. Carries actionable SCAPI-setup guidance — including the exact
+ * scope the failed operation needs, when supplied — so the CLI surfaces a
+ * helpful message instead of an opaque "Failed to ..." line.
+ *
+ * Thrown by OCAPI-terminal operations (those with no SCAPI fallback, or whose
+ * SCAPI path was already exhausted) when {@link isOcapiDeprecatedFault} matches.
+ */
+export class OcapiDeprecatedError extends Error {
+    constructor(options = {}) {
+        super(ocapiDeprecatedMessage(options.requiredScopes), options.cause === undefined ? undefined : { cause: options.cause });
+        this.name = 'OcapiDeprecatedError';
+    }
+}
 /**
  * Extract a clean error message from an API error response.
  *
@@ -66,4 +138,30 @@ export function getApiErrorMessage(error, response) {
     // Fallback to HTTP status
     return `HTTP ${response.status} ${response.statusText}`;
 }
+/**
+ * Throws a well-formed Error for a failed OCAPI call.
+ *
+ * Centralizes OCAPI-terminal error handling so every call site behaves
+ * consistently:
+ * - OCAPI deprecation faults become an {@link OcapiDeprecatedError} with
+ *   actionable SCAPI-setup guidance, naming `requiredScopes` when the operation
+ *   has a SCAPI equivalent.
+ * - Everything else throws `Error(`${prefix}: ${message}`)` where `message`
+ *   is the fault text from {@link getApiErrorMessage}.
+ *
+ * The original `error` is always attached as `cause` for debug logging.
+ *
+ * @param error - The error object from an openapi-fetch result.
+ * @param response - The HTTP response (for status fallback).
+ * @param prefix - Operation-specific prefix, e.g. `'Failed to list code versions'`.
+ * @param requiredScopes - SCAPI scope(s) the equivalent operation needs, named
+ *   in the deprecation message. Omit for OCAPI-only operations.
+ * @throws Always throws — return type is `never`.
+ */
+export function throwOcapiError(error, response, prefix, requiredScopes) {
+    if (isOcapiDeprecatedFault(error)) {
+        throw new OcapiDeprecatedError({ cause: error, requiredScopes });
+    }
+    throw new Error(`${prefix}: ${getApiErrorMessage(error, response)}`, { cause: error });
+}
 //# sourceMappingURL=error-utils.js.map

package/dist/esm/clients/error-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-utils.js","sourceRoot":"","sources":["../../../src/clients/error-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;GAIG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,QAAyD;IAC1G,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAgC,CAAC;QAE7C,kDAAkD;QAClD,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAgC,CAAC;YACpD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzD,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAgC,CAAC;YACnD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC,OAAO,CAAC;YACvB,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACjD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC/C,OAAO,GAAG,CAAC,KAAK,CAAC;QACnB,CAAC;QAED,6CAA6C;QAC7C,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACnD,OAAO,GAAG,CAAC,OAAO,CAAC;QACrB,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,OAAO,QAAQ,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"error-utils.js","sourceRoot":"","sources":["../../../src/clients/error-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;GAIG;AAEH;;;;;GAKG;AACH,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAE/D,iFAAiF;AACjF,MAAM,mBAAmB,GACvB,gHAAgH,CAAC;AAEnH;;;;;GAKG;AACH,SAAS,WAAW,CAAC,cAAyB;IAC5C,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IACnH,OAAO,OAAO,IAAI,QAAQ,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,cAAyB;IAC9D,OAAO,CACL,sDAAsD;QACtD,oDAAoD,WAAW,CAAC,cAAc,CAAC,oDAAoD;QACnI,QAAQ,mBAAmB,EAAE,CAC9B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,EAAE,CAAC;AAEjE;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAQ,KAAiC,CAAC,IAAI,KAAK,2BAA2B,CAAC;AACjF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,UAAwD,EAAE;QACpE,KAAK,CACH,sBAAsB,CAAC,OAAO,CAAC,cAAc,CAAC,EAC9C,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAC,CACjE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,QAAyD;IAC1G,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAgC,CAAC;QAE7C,kDAAkD;QAClD,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAgC,CAAC;YACpD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzD,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAgC,CAAC;YACnD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC,OAAO,CAAC;YACvB,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACjD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC/C,OAAO,GAAG,CAAC,KAAK,CAAC;QACnB,CAAC;QAED,6CAA6C;QAC7C,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACnD,OAAO,GAAG,CAAC,OAAO,CAAC;QACrB,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,OAAO,QAAQ,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,QAAyD,EACzD,MAAc,EACd,cAAyB;IAEzB,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,oBAAoB,CAAC,EAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;AACvF,CAAC"}

package/dist/esm/clients/granular-replications.js

@@ -15,9 +15,8 @@
 import createClient, {} from 'openapi-fetch';
 import { createAuthMiddleware, createLoggingMiddleware, createRateLimitMiddleware } from './middleware.js';
 import { globalMiddlewareRegistry } from './middleware-registry.js';
-import { OAuthStrategy } from '../auth/oauth.js';
-import { JwtOAuthStrategy } from '../auth/oauth-jwt.js';
 import { buildTenantScope, toOrganizationId, normalizeTenantId } from './custom-apis.js';
+import { withScopes } from './scapi-backend-utils.js';
 export { toOrganizationId, normalizeTenantId, buildTenantScope };
 /**
  * Creates a Granular Replications API client for publishing individual items.
@@ -68,9 +67,7 @@ export function createGranularReplicationsClient(config, auth) {
     });
     // Build required scopes: domain scope + tenant-specific scope
     const requiredScopes = config.scopes ?? ['sfcc.granular-replications.rw', buildTenantScope(config.tenantId)];
-    const scopedAuth = auth instanceof OAuthStrategy || auth instanceof JwtOAuthStrategy
-        ? auth.withAdditionalScopes(requiredScopes)
-        : auth;
+    const scopedAuth = withScopes(auth, requiredScopes);
     client.use(createAuthMiddleware(scopedAuth));
     for (const middleware of registry.getMiddleware('granular-replications')) {
         client.use(middleware);

package/dist/esm/clients/granular-replications.js.map

@@ -1 +1 @@
-{"version":3,"file":"granular-replications.js","sourceRoot":"","sources":["../../../src/clients/granular-replications.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;GAQG;AACH,OAAO,YAAY,EAAE,EAAa,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAC,oBAAoB,EAAE,uBAAuB,EAAE,yBAAyB,EAAC,MAAM,iBAAiB,CAAC;AACzG,OAAO,EAAC,wBAAwB,EAA0B,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAC,MAAM,kBAAkB,CAAC;AAEvF,OAAO,EAAC,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAC,CAAC;AA+B/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,UAAU,gCAAgC,CAC9C,MAAwC,EACxC,IAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,IAAI,wBAAwB,CAAC;IAEvE,MAAM,MAAM,GAAG,YAAY,CAAQ;QACjC,OAAO,EAAE,WAAW,MAAM,CAAC,SAAS,6DAA6D;KAClG,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,+BAA+B,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7G,MAAM,UAAU,GACd,IAAI,YAAY,aAAa,IAAI,IAAI,YAAY,gBAAgB;QAC/D,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IAE7C,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,aAAa,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAC,MAAM,EAAE,uBAAuB,EAAC,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE7D,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"granular-replications.js","sourceRoot":"","sources":["../../../src/clients/granular-replications.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;GAQG;AACH,OAAO,YAAY,EAAE,EAAa,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAC,oBAAoB,EAAE,uBAAuB,EAAE,yBAAyB,EAAC,MAAM,iBAAiB,CAAC;AACzG,OAAO,EAAC,wBAAwB,EAA0B,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAC,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AAEpD,OAAO,EAAC,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAC,CAAC;AA+B/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,UAAU,gCAAgC,CAC9C,MAAwC,EACxC,IAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,IAAI,wBAAwB,CAAC;IAEvE,MAAM,MAAM,GAAG,YAAY,CAAQ;QACjC,OAAO,EAAE,WAAW,MAAM,CAAC,SAAS,6DAA6D;KAClG,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,+BAA+B,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7G,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAEpD,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IAE7C,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,aAAa,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAC,MAAM,EAAE,uBAAuB,EAAC,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE7D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/clients/index.d.ts

@@ -121,11 +121,13 @@ export type { HttpClientType, HttpMiddlewareProvider, UnifiedMiddleware } from '
 export { createOcapiClient } from './ocapi.js';
 export type { OcapiClient, OcapiClientOptions, OcapiError, OcapiResponse, paths as OcapiPaths, components as OcapiComponents, } from './ocapi.js';
 export { createSlasClient } from './slas-admin.js';
+export { createSlasShopperClient, type SlasShopperClient, type SlasShopperClientConfig } from './slas-shopper.js';
+export type { paths as SlasShopperPaths, components as SlasShopperComponents } from './slas-shopper.js';
 export type { SlasClient, SlasClientConfig, SlasError, SlasResponse, paths as SlasPaths, components as SlasComponents, } from './slas-admin.js';
 export { createOdsClient } from './ods.js';
 export type { OdsClient, OdsClientConfig, OdsError, OdsResponse, paths as OdsPaths, components as OdsComponents, } from './ods.js';
-export { createMrtClient, DEFAULT_MRT_ORIGIN } from './mrt.js';
-export type { MrtClient, MrtClientConfig, MrtError, MrtResponse, BuildPushResponse, paths as MrtPaths, components as MrtComponents, } from './mrt.js';
+export { createMrtClient, createMrtMaintenanceMiddleware, runWithMrtReadOnlyListener, DEFAULT_MRT_ORIGIN, MRT_READ_ONLY_HEADER, isMrtReadOnlyResponse, MrtMaintenanceError, } from './mrt.js';
+export type { MrtClient, MrtClientConfig, MrtError, MrtResponse, MrtReadOnlyListener, BuildPushResponse, paths as MrtPaths, components as MrtComponents, } from './mrt.js';
 export { createCustomApisClient, toOrganizationId, normalizeTenantId, buildTenantScope, ORGANIZATION_ID_PREFIX, SCAPI_TENANT_SCOPE_PREFIX, CUSTOM_APIS_DEFAULT_SCOPES, } from './custom-apis.js';
 export type { CustomApisClient, CustomApisClientConfig, CustomApisError, CustomApisResponse, paths as CustomApisPaths, components as CustomApisComponents, } from './custom-apis.js';
 export { createScapiSchemasClient, SCAPI_SCHEMAS_DEFAULT_SCOPES } from './scapi-schemas.js';
@@ -144,6 +146,29 @@ export { createMetricsClient, METRICS_DEFAULT_SCOPES } from './metrics.js';
 export type { MetricsClient, MetricsClientConfig, MetricsResponse, MetricsDataResponse, Metric, MetricDataSeries, MetricDataPoint, MetricsError, paths as MetricsPaths, components as MetricsComponents, } from './metrics.js';
 export { createGranularReplicationsClient } from './granular-replications.js';
 export type { GranularReplicationsClient, GranularReplicationsClientConfig, GranularReplicationsError, GranularReplicationsResponse, ProductItem, PriceTableItem, ContentAssetItemPrivate, ContentAssetItemShared, PublishProcessResponse, PublishProcessListResponse, PublishIdResponse, paths as GranularReplicationsPaths, components as GranularReplicationsComponents, } from './granular-replications.js';
-export { getApiErrorMessage } from './error-utils.js';
+export { createScapiJobsClient, SCAPI_JOBS_CASCADE } from './scapi-jobs.js';
+export type { ScapiJobsClient, ScapiJobsClientConfig, ScapiJobsError, ScapiJobsResponse, paths as ScapiJobsPaths, components as ScapiJobsComponents, } from './scapi-jobs.js';
+export { createScapiMerchantRolesClient, SCAPI_MERCHANT_ROLES_READ_SCOPES, SCAPI_MERCHANT_ROLES_RW_SCOPES, } from './scapi-merchant-roles.js';
+export type { ScapiMerchantRolesClient, ScapiMerchantRolesClientConfig, ScapiMerchantRolesError, ScapiMerchantRolesResponse, paths as ScapiMerchantRolesPaths, components as ScapiMerchantRolesComponents, } from './scapi-merchant-roles.js';
+export { createScapiMerchantUsersClient, SCAPI_MERCHANT_USERS_READ_SCOPES, SCAPI_MERCHANT_USERS_RW_SCOPES, } from './scapi-merchant-users.js';
+export type { ScapiMerchantUsersClient, ScapiMerchantUsersClientConfig, ScapiMerchantUsersError, ScapiMerchantUsersResponse, paths as ScapiMerchantUsersPaths, components as ScapiMerchantUsersComponents, } from './scapi-merchant-users.js';
+export { createScapiScriptsClient, SCAPI_SCRIPTS_READ_SCOPES, SCAPI_SCRIPTS_RW_SCOPES } from './scapi-scripts.js';
+export type { ScapiScriptsClient, ScapiScriptsClientConfig, ScapiScriptsError, ScapiScriptsResponse, paths as ScapiScriptsPaths, components as ScapiScriptsComponents, } from './scapi-scripts.js';
+export { createScapiSitesClient, SCAPI_SITES_CASCADE } from './scapi-sites.js';
+export type { ScapiSitesClient, ScapiSitesClientConfig, ScapiSitesError, Site as ScapiSite, Sites as ScapiSites, SiteSearchResult as ScapiSiteSearchResult, paths as ScapiSitesPaths, components as ScapiSitesComponents, } from './scapi-sites.js';
+export { createScapiCatalogsClient, SCAPI_CATALOGS_CASCADE } from './scapi-catalogs.js';
+export type { ScapiCatalogsClient, ScapiCatalogsClientConfig, Catalog as ScapiCatalog, Catalogs as ScapiCatalogs, paths as ScapiCatalogsPaths, components as ScapiCatalogsComponents, } from './scapi-catalogs.js';
+export { createStorefrontDeploymentsClient, STOREFRONT_DEPLOYMENTS_CASCADE } from './storefront-deployments.js';
+export type { StorefrontDeploymentsClient, StorefrontDeploymentsClientConfig, StorefrontDeploymentsError, StorefrontDeploymentsResponse, Bundle as StorefrontBundle, BundleResult as StorefrontBundleResult, BundleUploadResponse as StorefrontBundleUploadResponse, Deployment as StorefrontDeployment, DeploymentResult as StorefrontDeploymentResult, DeploymentCreateRequest as StorefrontDeploymentCreateRequest, DeploymentStatus as StorefrontDeploymentStatus, paths as StorefrontDeploymentsPaths, components as StorefrontDeploymentsComponents, } from './storefront-deployments.js';
+export { createScapiRequestError, assertOcapiCompatibilityAllowed, assertScapiAdminAuthSupported, isFallbackTrigger, isInvalidScopeError, resolvePreferredBackend, resolveScapiOrOcapi, SAFE_SCAPI_FALLBACK_STATUSES, SCAPI_CAPABILITY_BASELINE_RELEASE, ScapiCapabilityUnsupportedError, ScapiRequestError, ScapiUserAuthUnsupportedError, scapiUnavailableMessage, scapiCapabilityUnsupportedMessage, withScopes, } from './scapi-backend-utils.js';
+export type { ApiBackendPreference, BackendBase, ResolveBackendOptions, ResolvePreferredBackendOptions, } from './scapi-backend-utils.js';
+export { createFallbackBackend } from './scapi-fallback-backend.js';
+export { createDualBackend } from './dual-backend-factory.js';
+export type { DualBackendConfig, DualBackendCtors, ScapiBackendCtorConfig } from './dual-backend-factory.js';
+export { buildScapiClient } from './scapi-client-factory.js';
+export type { BuildScapiClientOptions, ScapiClientConfig } from './scapi-client-factory.js';
+export { ScopeTierManager } from './scapi-scope-tier.js';
+export type { ScopeTier, ScopeTierManagerOptions } from './scapi-scope-tier.js';
+export { getApiErrorMessage, isOcapiDeprecatedFault, throwOcapiError, OcapiDeprecatedError, OCAPI_DEPRECATED_MESSAGE, ocapiDeprecatedMessage, } from './error-utils.js';
 export { createTlsDispatcher } from './tls-dispatcher.js';
 export type { TlsOptions } from './tls-dispatcher.js';

package/dist/esm/clients/index.js

@@ -123,8 +123,9 @@ export { setUserAgent, getUserAgent, resetUserAgent, userAgentProvider } from '.
 export { MiddlewareRegistry, globalMiddlewareRegistry } from './middleware-registry.js';
 export { createOcapiClient } from './ocapi.js';
 export { createSlasClient } from './slas-admin.js';
+export { createSlasShopperClient } from './slas-shopper.js';
 export { createOdsClient } from './ods.js';
-export { createMrtClient, DEFAULT_MRT_ORIGIN } from './mrt.js';
+export { createMrtClient, createMrtMaintenanceMiddleware, runWithMrtReadOnlyListener, DEFAULT_MRT_ORIGIN, MRT_READ_ONLY_HEADER, isMrtReadOnlyResponse, MrtMaintenanceError, } from './mrt.js';
 export { createCustomApisClient, toOrganizationId, normalizeTenantId, buildTenantScope, ORGANIZATION_ID_PREFIX, SCAPI_TENANT_SCOPE_PREFIX, CUSTOM_APIS_DEFAULT_SCOPES, } from './custom-apis.js';
 export { createScapiSchemasClient, SCAPI_SCHEMAS_DEFAULT_SCOPES } from './scapi-schemas.js';
 export { createAccountManagerClient, createAccountManagerUsersClient, getUser, listUsers, createUser, updateUser, deleteUser, purgeUser, resetUser, findUserByLogin, fetchRoleMapping, resolveToInternalRole, resolveFromInternalRole, createAccountManagerRolesClient, getRole, listRoles, createAccountManagerApiClientsClient, createAccountManagerOrgsClient, isValidRoleTenantFilter, ROLE_TENANT_FILTER_PATTERN, } from './am-api.js';
@@ -134,6 +135,27 @@ export { createCipClient, CipClient, DEFAULT_CIP_HOST, DEFAULT_CIP_STAGING_HOST
 export { createPreferencesClient, PREFERENCES_READ_SCOPES, PREFERENCES_RW_SCOPES } from './preferences.js';
 export { createMetricsClient, METRICS_DEFAULT_SCOPES } from './metrics.js';
 export { createGranularReplicationsClient } from './granular-replications.js';
-export { getApiErrorMessage } from './error-utils.js';
+// SCAPI Jobs
+export { createScapiJobsClient, SCAPI_JOBS_CASCADE } from './scapi-jobs.js';
+// SCAPI Merchant Roles
+export { createScapiMerchantRolesClient, SCAPI_MERCHANT_ROLES_READ_SCOPES, SCAPI_MERCHANT_ROLES_RW_SCOPES, } from './scapi-merchant-roles.js';
+// SCAPI Merchant Users
+export { createScapiMerchantUsersClient, SCAPI_MERCHANT_USERS_READ_SCOPES, SCAPI_MERCHANT_USERS_RW_SCOPES, } from './scapi-merchant-users.js';
+// SCAPI Scripts (code versions)
+export { createScapiScriptsClient, SCAPI_SCRIPTS_READ_SCOPES, SCAPI_SCRIPTS_RW_SCOPES } from './scapi-scripts.js';
+// SCAPI Sites
+export { createScapiSitesClient, SCAPI_SITES_CASCADE } from './scapi-sites.js';
+// SCAPI Catalogs
+export { createScapiCatalogsClient, SCAPI_CATALOGS_CASCADE } from './scapi-catalogs.js';
+// SCAPI Storefront family (storefront/*/v1) — the modern MRT backend. One
+// client per API; Deployments now, Environments + Storefronts to follow.
+export { createStorefrontDeploymentsClient, STOREFRONT_DEPLOYMENTS_CASCADE } from './storefront-deployments.js';
+// SCAPI dual-backend utilities (shared across SCAPI/OCAPI domains)
+export { createScapiRequestError, assertOcapiCompatibilityAllowed, assertScapiAdminAuthSupported, isFallbackTrigger, isInvalidScopeError, resolvePreferredBackend, resolveScapiOrOcapi, SAFE_SCAPI_FALLBACK_STATUSES, SCAPI_CAPABILITY_BASELINE_RELEASE, ScapiCapabilityUnsupportedError, ScapiRequestError, ScapiUserAuthUnsupportedError, scapiUnavailableMessage, scapiCapabilityUnsupportedMessage, withScopes, } from './scapi-backend-utils.js';
+export { createFallbackBackend } from './scapi-fallback-backend.js';
+export { createDualBackend } from './dual-backend-factory.js';
+export { buildScapiClient } from './scapi-client-factory.js';
+export { ScopeTierManager } from './scapi-scope-tier.js';
+export { getApiErrorMessage, isOcapiDeprecatedFault, throwOcapiError, OcapiDeprecatedError, OCAPI_DEPRECATED_MESSAGE, ocapiDeprecatedMessage, } from './error-utils.js';
 export { createTlsDispatcher } from './tls-dispatcher.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/clients/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/clients/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgHG;AACH,OAAO,EAAC,YAAY,EAAC,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAQzB,iDAAiD;AACjD,OAAO,EAAC,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAE9F,OAAO,EAAC,kBAAkB,EAAE,wBAAwB,EAAC,MAAM,0BAA0B,CAAC;AAGtF,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAU7C,OAAO,EAAC,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AAUjD,OAAO,EAAC,eAAe,EAAC,MAAM,UAAU,CAAC;AAUzC,OAAO,EAAC,eAAe,EAAE,kBAAkB,EAAC,MAAM,UAAU,CAAC;AAW7D,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAU1B,OAAO,EAAC,wBAAwB,EAAE,4BAA4B,EAAC,MAAM,oBAAoB,CAAC;AAa1F,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,+BAA+B,EAC/B,OAAO,EACP,SAAS,EACT,oCAAoC,EACpC,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAmCrB,OAAO,EAAC,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAC,MAAM,gBAAgB,CAAC;AAgBhG,OAAO,EAAC,kBAAkB,EAAE,sBAAsB,EAAC,MAAM,cAAc,CAAC;AAaxE,OAAO,EAAC,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,wBAAwB,EAAC,MAAM,UAAU,CAAC;AAWhG,OAAO,EAAC,uBAAuB,EAAE,uBAAuB,EAAE,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AAmBzG,OAAO,EAAC,mBAAmB,EAAE,sBAAsB,EAAC,MAAM,cAAc,CAAC;AAczE,OAAO,EAAC,gCAAgC,EAAC,MAAM,4BAA4B,CAAC;AAiB5E,OAAO,EAAC,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAC,mBAAmB,EAAC,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/clients/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgHG;AACH,OAAO,EAAC,YAAY,EAAC,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAQzB,iDAAiD;AACjD,OAAO,EAAC,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAE9F,OAAO,EAAC,kBAAkB,EAAE,wBAAwB,EAAC,MAAM,0BAA0B,CAAC;AAGtF,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAU7C,OAAO,EAAC,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAC,uBAAuB,EAAuD,MAAM,mBAAmB,CAAC;AAWhH,OAAO,EAAC,eAAe,EAAC,MAAM,UAAU,CAAC;AAUzC,OAAO,EACL,eAAe,EACf,8BAA8B,EAC9B,0BAA0B,EAC1B,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAYlB,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAU1B,OAAO,EAAC,wBAAwB,EAAE,4BAA4B,EAAC,MAAM,oBAAoB,CAAC;AAa1F,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,+BAA+B,EAC/B,OAAO,EACP,SAAS,EACT,oCAAoC,EACpC,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAmCrB,OAAO,EAAC,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAC,MAAM,gBAAgB,CAAC;AAgBhG,OAAO,EAAC,kBAAkB,EAAE,sBAAsB,EAAC,MAAM,cAAc,CAAC;AAaxE,OAAO,EAAC,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,wBAAwB,EAAC,MAAM,UAAU,CAAC;AAWhG,OAAO,EAAC,uBAAuB,EAAE,uBAAuB,EAAE,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AAmBzG,OAAO,EAAC,mBAAmB,EAAE,sBAAsB,EAAC,MAAM,cAAc,CAAC;AAczE,OAAO,EAAC,gCAAgC,EAAC,MAAM,4BAA4B,CAAC;AAiB5E,aAAa;AACb,OAAO,EAAC,qBAAqB,EAAE,kBAAkB,EAAC,MAAM,iBAAiB,CAAC;AAU1E,uBAAuB;AACvB,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AAUnC,uBAAuB;AACvB,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AAUnC,gCAAgC;AAChC,OAAO,EAAC,wBAAwB,EAAE,yBAAyB,EAAE,uBAAuB,EAAC,MAAM,oBAAoB,CAAC;AAUhH,cAAc;AACd,OAAO,EAAC,sBAAsB,EAAE,mBAAmB,EAAC,MAAM,kBAAkB,CAAC;AAY7E,iBAAiB;AACjB,OAAO,EAAC,yBAAyB,EAAE,sBAAsB,EAAC,MAAM,qBAAqB,CAAC;AAUtF,0EAA0E;AAC1E,yEAAyE;AACzE,OAAO,EAAC,iCAAiC,EAAE,8BAA8B,EAAC,MAAM,6BAA6B,CAAC;AAiB9G,mEAAmE;AACnE,OAAO,EACL,uBAAuB,EACvB,+BAA+B,EAC/B,6BAA6B,EAC7B,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,EAC/B,iBAAiB,EACjB,6BAA6B,EAC7B,uBAAuB,EACvB,iCAAiC,EACjC,UAAU,GACX,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EAAC,qBAAqB,EAAC,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAC,iBAAiB,EAAC,MAAM,2BAA2B,CAAC;AAE5D,OAAO,EAAC,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAC,gBAAgB,EAAC,MAAM,uBAAuB,CAAC;AAGvD,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAC,mBAAmB,EAAC,MAAM,qBAAqB,CAAC"}

package/dist/esm/clients/metrics.js

@@ -15,11 +15,10 @@
  * @module clients/metrics
  */
 import createClient, {} from 'openapi-fetch';
-import { OAuthStrategy } from '../auth/oauth.js';
-import { JwtOAuthStrategy } from '../auth/oauth-jwt.js';
 import { createAuthMiddleware, createLoggingMiddleware } from './middleware.js';
 import { globalMiddlewareRegistry } from './middleware-registry.js';
 import { buildTenantScope } from './custom-apis.js';
+import { withScopes } from './scapi-backend-utils.js';
 /** Default OAuth scope required for the Metrics API (read-only). */
 export const METRICS_DEFAULT_SCOPES = ['sfcc.metrics'];
 /**
@@ -49,9 +48,7 @@ export function createMetricsClient(config, auth) {
     // Build required scopes: domain scope + tenant-specific scope
     const requiredScopes = config.scopes ?? [...METRICS_DEFAULT_SCOPES, buildTenantScope(config.tenantId)];
     // If auth supports scopes, add required scopes; otherwise use as-is
-    const scopedAuth = auth instanceof OAuthStrategy || auth instanceof JwtOAuthStrategy
-        ? auth.withAdditionalScopes(requiredScopes)
-        : auth;
+    const scopedAuth = withScopes(auth, requiredScopes);
     // Core middleware: auth first
     client.use(createAuthMiddleware(scopedAuth));
     // Plugin middleware from registry

package/dist/esm/clients/metrics.js.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../src/clients/metrics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;GAUG;AACH,OAAO,YAAY,EAAE,EAAa,MAAM,eAAe,CAAC;AAExD,OAAO,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAC,oBAAoB,EAAE,uBAAuB,EAAC,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAC,wBAAwB,EAA0B,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAAC,gBAAgB,EAAC,MAAM,kBAAkB,CAAC;AAiElD,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,cAAc,CAAC,CAAC;AAiCvD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B,EAAE,IAAkB;IACjF,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,IAAI,wBAAwB,CAAC;IAEvE,MAAM,MAAM,GAAG,YAAY,CAAQ;QACjC,OAAO,EAAE,WAAW,MAAM,CAAC,SAAS,4DAA4D;KACjG,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,sBAAsB,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEvG,oEAAoE;IACpE,MAAM,UAAU,GACd,IAAI,YAAY,aAAa,IAAI,IAAI,YAAY,gBAAgB;QAC/D,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC;IAEX,8BAA8B;IAC9B,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IAE7C,kCAAkC;IAClC,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,yEAAyE;IACzE,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;IAE/C,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../src/clients/metrics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;GAUG;AACH,OAAO,YAAY,EAAE,EAAa,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAC,oBAAoB,EAAE,uBAAuB,EAAC,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAC,wBAAwB,EAA0B,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAAC,gBAAgB,EAAC,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AAiEpD,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,cAAc,CAAC,CAAC;AAiCvD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B,EAAE,IAAkB;IACjF,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,IAAI,wBAAwB,CAAC;IAEvE,MAAM,MAAM,GAAG,YAAY,CAAQ;QACjC,OAAO,EAAE,WAAW,MAAM,CAAC,SAAS,4DAA4D;KACjG,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,sBAAsB,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEvG,oEAAoE;IACpE,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAEpD,8BAA8B;IAC9B,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IAE7C,kCAAkC;IAClC,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,yEAAyE;IACzE,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;IAE/C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/clients/middleware-registry.d.ts

@@ -38,7 +38,7 @@ import type { Middleware } from 'openapi-fetch';
 /**
  * Types of HTTP clients that can receive middleware.
  */
-export type HttpClientType = 'cip' | 'ocapi' | 'slas' | 'ods' | 'mrt' | 'mrt-b2c' | 'custom-apis' | 'scapi-schemas' | 'metrics' | 'cdn-zones' | 'granular-replications' | 'preferences' | 'webdav' | 'am-users-api' | 'am-roles-api' | 'am-apiclients-api' | 'am-orgs-api';
+export type HttpClientType = 'cip' | 'ocapi' | 'slas' | 'ods' | 'mrt' | 'mrt-b2c' | 'custom-apis' | 'scapi-schemas' | 'metrics' | 'cdn-zones' | 'granular-replications' | 'preferences' | 'webdav' | 'am-users-api' | 'am-roles-api' | 'am-apiclients-api' | 'am-orgs-api' | 'scapi-jobs' | 'scapi-scripts' | 'scapi-merchant-users' | 'scapi-merchant-roles' | 'scapi-sites' | 'scapi-catalogs' | 'scapi' | 'storefront-deployments';
 /**
  * Middleware interface compatible with openapi-fetch.
  *
@@ -142,7 +142,9 @@ export declare class MiddlewareRegistry {
      * @param clientType - The type of client requesting middleware
      * @returns Array of middleware in registration order
      */
-    getMiddleware(clientType: HttpClientType): UnifiedMiddleware[];
+    getMiddleware(clientType: HttpClientType, options?: {
+        exclude?: string[];
+    }): UnifiedMiddleware[];
     /**
      * Clears all registered providers.
      *

package/dist/esm/clients/middleware-registry.js

@@ -46,9 +46,11 @@ export class MiddlewareRegistry {
      * @param clientType - The type of client requesting middleware
      * @returns Array of middleware in registration order
      */
-    getMiddleware(clientType) {
+    getMiddleware(clientType, options = {}) {
         const middleware = [];
         for (const provider of this.providers) {
+            if (options.exclude?.includes(provider.name))
+                continue;
             const m = provider.getMiddleware(clientType);
             if (m) {
                 middleware.push(m);

package/dist/esm/clients/middleware-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware-registry.js","sourceRoot":"","sources":["../../../src/clients/middleware-registry.ts"],"names":[],"mappings":"AAoIA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,kBAAkB;IACrB,SAAS,GAA6B,EAAE,CAAC;IAEjD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAgC;QACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,IAAY;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC/D,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,UAA0B;QACtC,MAAM,UAAU,GAAwB,EAAE,CAAC;QAE3C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,CAAC,EAAE,CAAC;gBACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"middleware-registry.js","sourceRoot":"","sources":["../../../src/clients/middleware-registry.ts"],"names":[],"mappings":"AA4IA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,kBAAkB;IACrB,SAAS,GAA6B,EAAE,CAAC;IAEjD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAgC;QACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,IAAY;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC/D,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,UAA0B,EAAE,UAAgC,EAAE;QAC1E,MAAM,UAAU,GAAwB,EAAE,CAAC;QAE3C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,CAAC,EAAE,CAAC;gBACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/esm/clients/middleware.d.ts

@@ -30,6 +30,43 @@ export interface ExtraParamsConfig {
  * @returns Middleware that adds auth headers to requests and retries on 401
  */
 export declare function createAuthMiddleware(auth: AuthStrategy): Middleware;
+/**
+ * Scope cascade for a SCAPI domain. The auth middleware picks `read` or
+ * `write` based on the per-operation `scopeMode` hint and walks the chosen
+ * cascade through the auth strategy until one candidate survives at AM.
+ *
+ * Each candidate is an array of scopes; the auth strategy adds any base
+ * scopes (e.g. tenant scope) automatically.
+ */
+export interface ScopeCascade {
+    /** Scope candidates to try for read operations, in order of preference. */
+    read: string[][];
+    /** Scope candidates to try for write operations, in order of preference. */
+    write: string[][];
+}
+/**
+ * Internal request header read by {@link createScapiAuthMiddleware} to choose
+ * a cascade tier. Operations attach `'read'` or `'write'`; the header is
+ * stripped before the request leaves the middleware.
+ */
+export declare const SCOPE_MODE_HEADER = "x-b2c-scope-mode";
+/**
+ * Auth middleware for SCAPI clients with a configured {@link ScopeCascade}.
+ *
+ * Reads the {@link SCOPE_MODE_HEADER} from the request, picks the matching
+ * cascade, and asks the auth strategy to resolve it (cache-first, then AM
+ * with `invalid_scope` fallback). Strips the header before the request is
+ * sent.
+ *
+ * Falls back to `getAuthorizationHeader()` when:
+ *   - the strategy doesn't implement `getAccessTokenForCascade` (e.g.
+ *     stateful sessions, basic auth), or
+ *   - the request didn't supply a `scopeMode` header.
+ *
+ * 401 retry behavior matches {@link createAuthMiddleware}: on a 401 after a
+ * prior success, invalidate the token and retry once.
+ */
+export declare function createScapiAuthMiddleware(auth: AuthStrategy, cascade: ScopeCascade): Middleware;
 /**
  * Configuration for rate limiting middleware.
  */
@@ -90,6 +127,8 @@ export interface LoggingMiddlewareConfig {
      * @example ['data', 'password', 'secret']
      */
     maskBodyKeys?: string[];
+    /** Log headers and bodies at trace level. Disable for authentication endpoints. Defaults to true. */
+    logDetails?: boolean;
 }
 /**
  * Creates logging middleware for openapi-fetch clients.

package/dist/esm/clients/middleware.js

@@ -14,6 +14,10 @@ function headersToObject(headers) {
 const retriedRequests = new WeakSet();
 // Store cloned request bodies for potential retry (body can only be read once)
 const requestBodies = new WeakMap();
+// Remembers the SCAPI scope mode ('read' or 'write') a request was authorized
+// with, so the 401 retry path can re-authorize at the same tier instead of
+// hard-coding write.
+const requestScopeModes = new WeakMap();
 /**
  * Creates authentication middleware for openapi-fetch.
  *
@@ -89,6 +93,91 @@ export function createAuthMiddleware(auth) {
         },
     };
 }
+/**
+ * Internal request header read by {@link createScapiAuthMiddleware} to choose
+ * a cascade tier. Operations attach `'read'` or `'write'`; the header is
+ * stripped before the request leaves the middleware.
+ */
+export const SCOPE_MODE_HEADER = 'x-b2c-scope-mode';
+/**
+ * Auth middleware for SCAPI clients with a configured {@link ScopeCascade}.
+ *
+ * Reads the {@link SCOPE_MODE_HEADER} from the request, picks the matching
+ * cascade, and asks the auth strategy to resolve it (cache-first, then AM
+ * with `invalid_scope` fallback). Strips the header before the request is
+ * sent.
+ *
+ * Falls back to `getAuthorizationHeader()` when:
+ *   - the strategy doesn't implement `getAccessTokenForCascade` (e.g.
+ *     stateful sessions, basic auth), or
+ *   - the request didn't supply a `scopeMode` header.
+ *
+ * 401 retry behavior matches {@link createAuthMiddleware}: on a 401 after a
+ * prior success, invalidate the token and retry once.
+ */
+export function createScapiAuthMiddleware(auth, cascade) {
+    const logger = getLogger();
+    let hasHadSuccess = false;
+    async function authorize(request) {
+        const mode = request.headers.get(SCOPE_MODE_HEADER);
+        request.headers.delete(SCOPE_MODE_HEADER);
+        if (mode && auth.getAccessTokenForCascade) {
+            requestScopeModes.set(request, mode);
+            const candidates = cascade[mode];
+            const token = await auth.getAccessTokenForCascade(candidates);
+            request.headers.set('Authorization', `Bearer ${token}`);
+            return;
+        }
+        if (auth.getAuthorizationHeader) {
+            request.headers.set('Authorization', await auth.getAuthorizationHeader());
+        }
+    }
+    return {
+        async onRequest({ request }) {
+            await authorize(request);
+            // Clone body for potential 401 retry (body is single-use).
+            if (request.body && auth.invalidateToken) {
+                const cloned = request.clone();
+                const bodyBuffer = await cloned.arrayBuffer();
+                requestBodies.set(request, bodyBuffer);
+            }
+            return request;
+        },
+        async onResponse({ request, response }) {
+            if (response.status !== 401) {
+                hasHadSuccess = true;
+            }
+            if (response.status === 401 && hasHadSuccess && !retriedRequests.has(request) && auth.invalidateToken) {
+                logger.debug('[ScapiAuthMiddleware] Received 401, invalidating token and retrying');
+                retriedRequests.add(request);
+                auth.invalidateToken();
+                const newHeaders = new Headers(request.headers);
+                // The original scope-mode header was stripped on the way in. Re-run
+                // the cascade at the same tier the original request used so a
+                // read-only request doesn't get retried as a write (which would fail
+                // for clients that only have the read scope).
+                const retryRequest = new Request(request.url, {
+                    method: request.method,
+                    headers: newHeaders,
+                    body: requestBodies.get(request) ?? undefined,
+                    ...(requestBodies.get(request) ? { duplex: 'half' } : {}),
+                });
+                if (auth.getAccessTokenForCascade) {
+                    const originalMode = requestScopeModes.get(request) ?? 'write';
+                    const token = await auth.getAccessTokenForCascade(cascade[originalMode]);
+                    retryRequest.headers.set('Authorization', `Bearer ${token}`);
+                }
+                else if (auth.getAuthorizationHeader) {
+                    retryRequest.headers.set('Authorization', await auth.getAuthorizationHeader());
+                }
+                const retryResponse = await fetch(retryRequest);
+                logger.debug({ status: retryResponse.status }, `[ScapiAuthMiddleware] Retry response: ${retryResponse.status}`);
+                return retryResponse;
+            }
+            return response;
+        },
+    };
+}
 const DEFAULT_RATE_LIMIT_MAX_RETRIES = 3;
 const DEFAULT_RATE_LIMIT_BASE_DELAY_MS = 1000;
 const DEFAULT_RATE_LIMIT_MAX_DELAY_MS = 30000;
@@ -286,7 +375,7 @@ function maskBody(body, keysToMask) {
  */
 export function createLoggingMiddleware(config) {
     // Support both string (prefix) and config object for backwards compatibility
-    const { prefix, maskBodyKeys } = typeof config === 'string' ? { prefix: config, maskBodyKeys: undefined } : (config ?? {});
+    const { prefix, maskBodyKeys, logDetails = true, } = typeof config === 'string' ? { prefix: config, maskBodyKeys: undefined } : (config ?? {});
     const reqTag = prefix ? `[${prefix} REQ]` : '';
     const respTag = prefix ? `[${prefix} RESP]` : '';
     return {
@@ -294,22 +383,34 @@ export function createLoggingMiddleware(config) {
             const logger = getLogger();
             const url = request.url;
             logger.debug({ method: request.method, url }, `${reqTag} ${request.method} ${url}`);
-            // Read body from the request (already serialized by openapi-fetch)
+            request._startTime = Date.now();
+            if (!logDetails)
+                return request;
+            // Read body from the request (already serialized by openapi-fetch).
+            // Skip binary/multipart payloads: reading them would buffer the entire
+            // (potentially large) body into memory on every request, and the raw
+            // bytes should never be logged. maskBodyKeys only covers JSON keys, so a
+            // multipart bundle upload would otherwise leak its archive at trace level.
             let body;
             if (request.body) {
-                const clonedRequest = request.clone();
-                const text = await clonedRequest.text();
-                try {
-                    body = JSON.parse(text);
+                const contentType = request.headers.get('content-type') ?? '';
+                if (contentType.startsWith('multipart/') || contentType.startsWith('application/octet-stream')) {
+                    body = `[${contentType} body omitted]`;
                 }
-                catch {
-                    body = text;
+                else {
+                    const clonedRequest = request.clone();
+                    const text = await clonedRequest.text();
+                    try {
+                        body = JSON.parse(text);
+                    }
+                    catch {
+                        body = text;
+                    }
                 }
             }
             // Mask sensitive/large body keys before logging
             const maskedBody = maskBody(body, maskBodyKeys);
             logger.trace({ method: request.method, url, headers: headersToObject(request.headers), body: maskedBody }, `${reqTag} ${request.method} ${url} body`);
-            request._startTime = Date.now();
             return request;
         },
         async onResponse({ request, response }) {
@@ -317,7 +418,17 @@ export function createLoggingMiddleware(config) {
             const startTime = request._startTime ?? Date.now();
             const duration = Date.now() - startTime;
             const url = request.url;
-            logger.debug({ method: request.method, url, status: response.status, duration }, `${respTag} ${request.method} ${url} ${response.status} ${duration}ms`);
+            logger.debug({
+                method: request.method,
+                url,
+                status: response.status,
+                duration,
+                ...(response.headers.has('sfdc_correlation_id')
+                    ? { correlationId: response.headers.get('sfdc_correlation_id') }
+                    : {}),
+            }, `${respTag} ${request.method} ${url} ${response.status} ${duration}ms`);
+            if (!logDetails)
+                return response;
             const clonedResponse = response.clone();
             let responseBody;
             // Read as text first, then try to parse as JSON.
@@ -413,11 +524,7 @@ export function createExtraParamsMiddleware(config) {
                     newHeaders.set(key, value);
                 }
                 logger.trace({ extraHeaders: config.headers }, '[ExtraParams] Adding extra headers to request');
-                modifiedRequest = new Request(modifiedRequest.url, {
-                    method: modifiedRequest.method,
-                    headers: newHeaders,
-                    ...(canHaveBody && modifiedRequest.body ? { body: modifiedRequest.body, duplex: 'half' } : {}),
-                });
+                modifiedRequest = new Request(modifiedRequest, { headers: newHeaders });
             }
             // Add extra query parameters
             if (config.query && Object.keys(config.query).length > 0) {
@@ -428,11 +535,8 @@ export function createExtraParamsMiddleware(config) {
                     }
                 }
                 logger.trace({ extraQuery: config.query, originalUrl: modifiedRequest.url, newUrl: url.toString() }, '[ExtraParams] Adding extra query params to URL');
-                modifiedRequest = new Request(url.toString(), {
-                    method: modifiedRequest.method,
-                    headers: modifiedRequest.headers,
-                    ...(canHaveBody && modifiedRequest.body ? { body: modifiedRequest.body, duplex: 'half' } : {}),
-                });
+                // Preserve redirect mode and other fetch options when replacing the URL.
+                modifiedRequest = new Request(url, modifiedRequest);
             }
             // Merge extra body fields for JSON requests
             if (config.body && Object.keys(config.body).length > 0) {
@@ -444,9 +548,7 @@ export function createExtraParamsMiddleware(config) {
                         const parsedBody = JSON.parse(originalBody);
                         const mergedBody = { ...parsedBody, ...config.body };
                         logger.trace({ originalBody: parsedBody, extraBody: config.body, mergedBody }, '[ExtraParams] Merging extra body fields into request');
-                        modifiedRequest = new Request(modifiedRequest.url, {
-                            method: modifiedRequest.method,
-                            headers: modifiedRequest.headers,
+                        modifiedRequest = new Request(modifiedRequest, {
                             body: JSON.stringify(mergedBody),
                         });
                     }
@@ -459,8 +561,7 @@ export function createExtraParamsMiddleware(config) {
                     logger.trace({ body: config.body }, '[ExtraParams] Creating new body with extra fields');
                     const headers = new Headers(modifiedRequest.headers);
                     headers.set('content-type', 'application/json');
-                    modifiedRequest = new Request(modifiedRequest.url, {
-                        method: modifiedRequest.method,
+                    modifiedRequest = new Request(modifiedRequest, {
                         headers,
                         body: JSON.stringify(config.body),
                     });