@salesforce/b2c-tooling-sdk 1.24.2 → 2.0.0

package/dist/esm/operations/bm-roles/ocapi-backend.d.ts

@@ -0,0 +1,17 @@
+import type { B2CInstance } from '../../instance/index.js';
+import type { RolesBackend, RoleInfo, ListRolesResult, ListRolesOptions, RolePermissionsInfo, CreateRoleInput } from './types.js';
+export declare class OcapiRolesBackend implements RolesBackend {
+    private instance;
+    readonly name: "ocapi";
+    constructor(instance: B2CInstance);
+    listRoles(options?: ListRolesOptions): Promise<ListRolesResult>;
+    getRole(roleId: string, options?: {
+        expand?: ('users' | 'permissions')[];
+    }): Promise<RoleInfo>;
+    createRole(roleId: string, input?: CreateRoleInput): Promise<RoleInfo>;
+    deleteRole(roleId: string): Promise<void>;
+    getPermissions(roleId: string): Promise<RolePermissionsInfo>;
+    setPermissions(roleId: string, permissions: RolePermissionsInfo): Promise<RolePermissionsInfo>;
+    grantRole(roleId: string, login: string): Promise<void>;
+    revokeRole(roleId: string, login: string): Promise<void>;
+}

package/dist/esm/operations/bm-roles/ocapi-backend.js

@@ -0,0 +1,151 @@
+import { listBmRoles as ocapiListBmRoles, getBmRole as ocapiGetBmRole, createBmRole as ocapiCreateBmRole, deleteBmRole as ocapiDeleteBmRole, getBmRolePermissions as ocapiGetBmRolePermissions, setBmRolePermissions as ocapiSetBmRolePermissions, grantBmRole as ocapiGrantBmRole, revokeBmRole as ocapiRevokeBmRole, } from './roles.js';
+function mapOcapiRole(ocapi) {
+    return {
+        id: ocapi.id ?? '',
+        description: ocapi.description,
+        userCount: ocapi.user_count,
+        userManager: ocapi.user_manager,
+        // OCAPI returns permissions inline on the role when expanded, same as SCAPI.
+        // Map snake_case → camelCase to match the canonical RoleInfo shape so that
+        // callers see consistent data after a fallback from SCAPI to OCAPI.
+        permissions: ocapi.permissions ? mapOcapiPermissions(ocapi.permissions) : undefined,
+        _raw: ocapi,
+    };
+}
+function mapOcapiModulePermission(permission) {
+    return {
+        application: permission.application,
+        name: permission.name,
+        type: permission.type,
+        system: permission.system,
+        value: permission.value,
+        values: permission.values,
+    };
+}
+function mapOcapiFunctionalPermission(permission) {
+    return {
+        name: permission.name,
+        type: permission.type,
+        value: permission.value,
+        values: permission.values,
+    };
+}
+function mapOcapiLocalePermission(permission) {
+    return {
+        localeId: permission.locale_id,
+        type: permission.type,
+        value: permission.value,
+        values: permission.values,
+    };
+}
+function mapOcapiWebdavPermission(permission) {
+    return {
+        folder: permission.folder,
+        type: permission.type,
+        value: permission.value,
+        values: permission.values,
+    };
+}
+function mapOcapiPermissions(ocapi) {
+    // OCAPI uses snake_case for innermost permission fields (locale_id, etc.)
+    // while SCAPI uses camelCase (localeId). Convert at this boundary.
+    const result = {};
+    if (ocapi.module) {
+        result.module = {
+            organization: (ocapi.module.organization ?? []).map(mapOcapiModulePermission),
+            site: (ocapi.module.site ?? []).map(mapOcapiModulePermission),
+        };
+    }
+    if (ocapi.functional) {
+        result.functional = {
+            organization: (ocapi.functional.organization ?? []).map(mapOcapiFunctionalPermission),
+            site: (ocapi.functional.site ?? []).map(mapOcapiFunctionalPermission),
+        };
+    }
+    if (ocapi.locale) {
+        result.locale = {
+            unscoped: (ocapi.locale.unscoped ?? []).map(mapOcapiLocalePermission),
+        };
+    }
+    if (ocapi.webdav) {
+        result.webdav = {
+            unscoped: (ocapi.webdav.unscoped ?? []).map(mapOcapiWebdavPermission),
+        };
+    }
+    return result;
+}
+function mapScapiPermissionsToOcapi(perms) {
+    // Reverse: camelCase → snake_case for the inner locale field.
+    const result = {};
+    if (perms.module) {
+        result.module = {
+            organization: (perms.module.organization ?? []).map((permission) => ({ ...permission })),
+            site: (perms.module.site ?? []).map((permission) => ({ ...permission })),
+        };
+    }
+    if (perms.functional) {
+        result.functional = {
+            organization: (perms.functional.organization ?? []).map((permission) => ({ ...permission })),
+            site: (perms.functional.site ?? []).map((permission) => ({ ...permission })),
+        };
+    }
+    if (perms.locale) {
+        result.locale = {
+            unscoped: (perms.locale.unscoped ?? []).map((permission) => ({
+                locale_id: permission.localeId,
+                type: permission.type,
+                value: permission.value,
+                values: permission.values,
+            })),
+        };
+    }
+    if (perms.webdav) {
+        result.webdav = {
+            unscoped: (perms.webdav.unscoped ?? []).map((permission) => ({ ...permission })),
+        };
+    }
+    return result;
+}
+export class OcapiRolesBackend {
+    instance;
+    name = 'ocapi';
+    constructor(instance) {
+        this.instance = instance;
+    }
+    async listRoles(options = {}) {
+        const result = await ocapiListBmRoles(this.instance, { start: options.start, count: options.count });
+        const items = (result.data ?? []);
+        return {
+            total: result.total ?? 0,
+            start: result.start ?? 0,
+            count: result.count ?? items.length,
+            hits: items.map(mapOcapiRole),
+        };
+    }
+    async getRole(roleId, options) {
+        const role = await ocapiGetBmRole(this.instance, roleId, { expand: options?.expand });
+        return mapOcapiRole(role);
+    }
+    async createRole(roleId, input) {
+        const role = await ocapiCreateBmRole(this.instance, roleId, { description: input?.description });
+        return mapOcapiRole(role);
+    }
+    async deleteRole(roleId) {
+        await ocapiDeleteBmRole(this.instance, roleId);
+    }
+    async getPermissions(roleId) {
+        const perms = await ocapiGetBmRolePermissions(this.instance, roleId);
+        return mapOcapiPermissions(perms);
+    }
+    async setPermissions(roleId, permissions) {
+        const updated = await ocapiSetBmRolePermissions(this.instance, roleId, mapScapiPermissionsToOcapi(permissions));
+        return mapOcapiPermissions(updated);
+    }
+    async grantRole(roleId, login) {
+        await ocapiGrantBmRole(this.instance, roleId, login);
+    }
+    async revokeRole(roleId, login) {
+        await ocapiRevokeBmRole(this.instance, roleId, login);
+    }
+}
+//# sourceMappingURL=ocapi-backend.js.map

package/dist/esm/operations/bm-roles/ocapi-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ocapi-backend.js","sourceRoot":"","sources":["../../../../src/operations/bm-roles/ocapi-backend.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,WAAW,IAAI,gBAAgB,EAC/B,SAAS,IAAI,cAAc,EAC3B,YAAY,IAAI,iBAAiB,EACjC,YAAY,IAAI,iBAAiB,EACjC,oBAAoB,IAAI,yBAAyB,EACjD,oBAAoB,IAAI,yBAAyB,EACjD,WAAW,IAAI,gBAAgB,EAC/B,YAAY,IAAI,iBAAiB,GAClC,MAAM,YAAY,CAAC;AAEpB,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,UAAU;QAC3B,WAAW,EAAE,KAAK,CAAC,YAAY;QAC/B,6EAA6E;QAC7E,2EAA2E;QAC3E,oEAAoE;QACpE,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QACnF,IAAI,EAAE,KAAK;KACZ,CAAC;AACJ,CAAC;AAWD,SAAS,wBAAwB,CAAC,UAAiC;IACjE,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAqC;IACzE,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAiC;IACjE,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,SAAS;QAC9B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAiC;IACjE,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAwB;IACnD,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG;YACd,YAAY,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAC7E,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,CAAC,UAAU,GAAG;YAClB,YAAY,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;YACrF,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG;YACd,QAAQ,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG;YACd,QAAQ,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;SACtE,CAAC;IACJ,CAAC;IACD,OAAO,MAA6B,CAAC;AACvC,CAAC;AAED,SAAS,0BAA0B,CAAC,KAA0B;IAC5D,8DAA8D;IAC9D,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG;YACd,YAAY,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,UAAU,EAAC,CAAC,CAAC;YACtF,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,UAAU,EAAC,CAAC,CAAC;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,CAAC,UAAU,GAAG;YAClB,YAAY,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,UAAU,EAAC,CAAC,CAAC;YAC1F,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,UAAU,EAAC,CAAC,CAAC;SAC3E,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG;YACd,QAAQ,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC3D,SAAS,EAAE,UAAU,CAAC,QAAQ;gBAC9B,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG;YACd,QAAQ,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,UAAU,EAAC,CAAC,CAAC;SAC/E,CAAC;IACJ,CAAC;IACD,OAAO,MAA2B,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,iBAAiB;IAGR;IAFX,IAAI,GAAG,OAAgB,CAAC;IAEjC,YAAoB,QAAqB;QAArB,aAAQ,GAAR,QAAQ,CAAa;IAAG,CAAC;IAE7C,KAAK,CAAC,SAAS,CAAC,UAA4B,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAC,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAa,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM;YACnC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,OAAgD;QAC5E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAC,CAAC,CAAC;QACpF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,KAAuB;QACtD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAC,WAAW,EAAE,KAAK,EAAE,WAAW,EAAC,CAAC,CAAC;QAC/F,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,WAAgC;QACnE,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAC;QAChH,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,KAAa;QAC3C,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,KAAa;QAC5C,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;CACF"}

package/dist/esm/operations/bm-roles/roles.js

@@ -1,4 +1,8 @@
-import { getApiErrorMessage } from '../../clients/error-utils.js';
+import { throwOcapiError } from '../../clients/error-utils.js';
+import { SCAPI_MERCHANT_ROLES_READ_SCOPES, SCAPI_MERCHANT_ROLES_RW_SCOPES } from '../../clients/scapi-merchant-roles.js';
+// SCAPI Merchant Roles scopes named in the OCAPI-deprecation message.
+const ROLES_READ_SCOPES = [...SCAPI_MERCHANT_ROLES_READ_SCOPES, ...SCAPI_MERCHANT_ROLES_RW_SCOPES];
+const ROLES_RW_SCOPES = SCAPI_MERCHANT_ROLES_RW_SCOPES;
 /**
  * Lists all access roles on a B2C Commerce instance.
  *
@@ -20,7 +24,7 @@ export async function listBmRoles(instance, options = {}) {
         params: { query: { start, count, select: '(**)' } },
     });
     if (error) {
-        throw new Error(`Failed to list roles: ${getApiErrorMessage(error, response)}`, { cause: error });
+        throwOcapiError(error, response, 'Failed to list roles', ROLES_READ_SCOPES);
     }
     return data;
 }
@@ -44,7 +48,7 @@ export async function getBmRole(instance, roleId, options = {}) {
         params: { path: { id: roleId }, query: { expand } },
     });
     if (error) {
-        throw new Error(`Failed to get role ${roleId}: ${getApiErrorMessage(error, response)}`, { cause: error });
+        throwOcapiError(error, response, `Failed to get role ${roleId}`, ROLES_READ_SCOPES);
     }
     return data;
 }
@@ -67,7 +71,7 @@ export async function createBmRole(instance, roleId, role = {}) {
         body: { id: roleId, ...role },
     });
     if (error) {
-        throw new Error(`Failed to create role ${roleId}: ${getApiErrorMessage(error, response)}`, { cause: error });
+        throwOcapiError(error, response, `Failed to create role ${roleId}`, ROLES_RW_SCOPES);
     }
     return data;
 }
@@ -89,7 +93,7 @@ export async function deleteBmRole(instance, roleId) {
         params: { path: { id: roleId } },
     });
     if (error) {
-        throw new Error(`Failed to delete role ${roleId}: ${getApiErrorMessage(error, response)}`, { cause: error });
+        throwOcapiError(error, response, `Failed to delete role ${roleId}`, ROLES_RW_SCOPES);
     }
 }
 /**
@@ -110,9 +114,7 @@ export async function grantBmRole(instance, roleId, login) {
         params: { path: { id: roleId, login } },
     });
     if (error) {
-        throw new Error(`Failed to grant role ${roleId} to ${login}: ${getApiErrorMessage(error, response)}`, {
-            cause: error,
-        });
+        throwOcapiError(error, response, `Failed to grant role ${roleId} to ${login}`, ROLES_RW_SCOPES);
     }
     return data;
 }
@@ -133,9 +135,7 @@ export async function revokeBmRole(instance, roleId, login) {
         params: { path: { id: roleId, login } },
     });
     if (error) {
-        throw new Error(`Failed to revoke role ${roleId} from ${login}: ${getApiErrorMessage(error, response)}`, {
-            cause: error,
-        });
+        throwOcapiError(error, response, `Failed to revoke role ${roleId} from ${login}`, ROLES_RW_SCOPES);
     }
 }
 /**
@@ -156,9 +156,7 @@ export async function getBmRolePermissions(instance, roleId) {
         params: { path: { id: roleId } },
     });
     if (error) {
-        throw new Error(`Failed to get permissions for role ${roleId}: ${getApiErrorMessage(error, response)}`, {
-            cause: error,
-        });
+        throwOcapiError(error, response, `Failed to get permissions for role ${roleId}`, ROLES_READ_SCOPES);
     }
     return data;
 }
@@ -185,9 +183,7 @@ export async function setBmRolePermissions(instance, roleId, permissions) {
         body: permissions,
     });
     if (error) {
-        throw new Error(`Failed to set permissions for role ${roleId}: ${getApiErrorMessage(error, response)}`, {
-            cause: error,
-        });
+        throwOcapiError(error, response, `Failed to set permissions for role ${roleId}`, ROLES_RW_SCOPES);
     }
     return data;
 }

package/dist/esm/operations/bm-roles/roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../src/operations/bm-roles/roles.ts"],"names":[],"mappings":"AAYA,OAAO,EAAC,kBAAkB,EAAC,MAAM,8BAA8B,CAAC;AAmChE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAqB,EAAE,UAA8B,EAAE;IACvF,MAAM,EAAC,KAAK,EAAE,KAAK,EAAC,GAAG,OAAO,CAAC;IAE/B,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;QACjE,MAAM,EAAE,EAAC,KAAK,EAAE,EAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAC,EAAC;KAChD,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,yBAAyB,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,IAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAqB,EACrB,MAAc,EACd,UAA4B,EAAE;IAE9B,MAAM,EAAC,MAAM,EAAC,GAAG,OAAO,CAAC;IAEzB,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QACtE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAE,KAAK,EAAE,EAAC,MAAM,EAAC,EAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,IAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAqB,EACrB,MAAc,EACd,OAA+B,EAAE;IAEjC,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QACtE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;QAC5B,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAkC;KAC7D,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAC7G,CAAC;IAED,OAAO,IAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAqB,EAAE,MAAc;IACtE,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE;QACnE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAqB,EACrB,MAAc,EACd,KAAa;IAEb,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,EAAE;QACpF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;KACpC,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,OAAO,KAAK,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;YACpG,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAqC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAqB,EAAE,MAAc,EAAE,KAAa;IACrF,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,EAAE;QACjF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;KACpC,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,SAAS,KAAK,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;YACvG,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAqB,EAAE,MAAc;IAC9E,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE;QAClF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;YACtG,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAyB,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAqB,EACrB,MAAc,EACd,WAA8B;IAE9B,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE;QAClF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;QAC5B,IAAI,EAAE,WAAwD;KAC/D,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;YACtG,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAyB,CAAC;AACnC,CAAC"}
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../src/operations/bm-roles/roles.ts"],"names":[],"mappings":"AAYA,OAAO,EAAC,eAAe,EAAC,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAC,gCAAgC,EAAE,8BAA8B,EAAC,MAAM,uCAAuC,CAAC;AAEvH,sEAAsE;AACtE,MAAM,iBAAiB,GAAG,CAAC,GAAG,gCAAgC,EAAE,GAAG,8BAA8B,CAAC,CAAC;AACnG,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAmCvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAqB,EAAE,UAA8B,EAAE;IACvF,MAAM,EAAC,KAAK,EAAE,KAAK,EAAC,GAAG,OAAO,CAAC;IAE/B,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;QACjE,MAAM,EAAE,EAAC,KAAK,EAAE,EAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAC,EAAC;KAChD,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,IAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAqB,EACrB,MAAc,EACd,UAA4B,EAAE;IAE9B,MAAM,EAAC,MAAM,EAAC,GAAG,OAAO,CAAC;IAEzB,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QACtE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAE,KAAK,EAAE,EAAC,MAAM,EAAC,EAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,sBAAsB,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,IAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAqB,EACrB,MAAc,EACd,OAA+B,EAAE;IAEjC,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QACtE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;QAC5B,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAkC;KAC7D,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,IAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAqB,EAAE,MAAc;IACtE,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE;QACnE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAqB,EACrB,MAAc,EACd,KAAa;IAEb,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,EAAE;QACpF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;KACpC,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,wBAAwB,MAAM,OAAO,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,IAAqC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAqB,EAAE,MAAc,EAAE,KAAa;IACrF,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,EAAE;QACjF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;KACpC,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,SAAS,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAqB,EAAE,MAAc;IAC9E,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE;QAClF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,sCAAsC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,IAAyB,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAqB,EACrB,MAAc,EACd,WAA8B;IAE9B,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE;QAClF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;QAC5B,IAAI,EAAE,WAAwD;KAC/D,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,sCAAsC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,IAAyB,CAAC;AACnC,CAAC"}

package/dist/esm/operations/bm-roles/scapi-backend.d.ts

@@ -0,0 +1,27 @@
+import type { AuthStrategy } from '../../auth/types.js';
+import type { RolesBackend, RoleInfo, ListRolesResult, ListRolesOptions, RolePermissionsInfo, CreateRoleInput } from './types.js';
+export interface ScapiRolesBackendConfig {
+    shortCode: string;
+    tenantId: string;
+    auth: AuthStrategy;
+    /** Unused by Roles; accepted for compatibility with the dual-backend factory. */
+    instance?: unknown;
+}
+export declare class ScapiRolesBackend implements RolesBackend {
+    private config;
+    readonly name: "scapi";
+    private organizationId;
+    private scopeTier;
+    constructor(config: ScapiRolesBackendConfig);
+    listRoles(options?: ListRolesOptions): Promise<ListRolesResult>;
+    getRole(roleId: string, options?: {
+        expand?: ('users' | 'permissions')[];
+    }): Promise<RoleInfo>;
+    createRole(roleId: string, input?: CreateRoleInput): Promise<RoleInfo>;
+    deleteRole(roleId: string): Promise<void>;
+    getPermissions(roleId: string): Promise<RolePermissionsInfo>;
+    setPermissions(roleId: string, permissions: RolePermissionsInfo): Promise<RolePermissionsInfo>;
+    grantRole(roleId: string, login: string): Promise<void>;
+    revokeRole(roleId: string, login: string): Promise<void>;
+    private buildClient;
+}

package/dist/esm/operations/bm-roles/scapi-backend.js

@@ -0,0 +1,138 @@
+import { createScapiMerchantRolesClient, SCAPI_MERCHANT_ROLES_RW_SCOPES, SCAPI_MERCHANT_ROLES_READ_SCOPES, } from '../../clients/scapi-merchant-roles.js';
+import { buildTenantScope, toOrganizationId } from '../../clients/custom-apis.js';
+import { ScopeTierManager } from '../../clients/scapi-scope-tier.js';
+import { createScapiRequestError } from '../../clients/scapi-backend-utils.js';
+function mapScapiRole(scapi) {
+    return {
+        id: scapi.id ?? '',
+        description: scapi.description,
+        userCount: scapi.userCount,
+        userManager: scapi.userManager,
+        permissions: scapi.permissions,
+        _raw: scapi,
+    };
+}
+export class ScapiRolesBackend {
+    config;
+    name = 'scapi';
+    organizationId;
+    scopeTier;
+    constructor(config) {
+        this.config = config;
+        this.organizationId = toOrganizationId(config.tenantId);
+        this.scopeTier = new ScopeTierManager({
+            buildClient: (scopes) => this.buildClient(scopes),
+            rwScopes: SCAPI_MERCHANT_ROLES_RW_SCOPES,
+            readScopes: SCAPI_MERCHANT_ROLES_READ_SCOPES,
+            domainName: 'Roles',
+        });
+    }
+    async listRoles(options = {}) {
+        const { start = 0, count = 25, expand } = options;
+        return this.scopeTier.tryRead(async (client) => {
+            const { data, error, response } = await client.GET('/organizations/{organizationId}/roles', {
+                params: {
+                    path: { organizationId: this.organizationId },
+                    query: { limit: count, offset: start, expand },
+                },
+            });
+            if (error || !data) {
+                throw createScapiRequestError(error, response, 'Failed to list roles');
+            }
+            const result = data;
+            return {
+                total: result.total ?? 0,
+                start: result.offset ?? start,
+                count: result.limit ?? count,
+                hits: (result.data ?? []).map(mapScapiRole),
+            };
+        });
+    }
+    async getRole(roleId, options) {
+        return this.scopeTier.tryRead(async (client) => {
+            const { data, error, response } = await client.GET('/organizations/{organizationId}/roles/{roleId}', {
+                params: {
+                    path: { organizationId: this.organizationId, roleId },
+                    query: { expand: options?.expand },
+                },
+            });
+            if (error || !data) {
+                throw createScapiRequestError(error, response, `Failed to get role ${roleId}`);
+            }
+            return mapScapiRole(data);
+        });
+    }
+    async createRole(roleId, input) {
+        const client = this.scopeTier.getClientForWrite();
+        const body = {
+            id: roleId,
+            description: input?.description,
+        };
+        const { data, error, response } = await client.PUT('/organizations/{organizationId}/roles/{roleId}', {
+            params: { path: { organizationId: this.organizationId, roleId } },
+            body,
+        });
+        if (error || !data) {
+            throw createScapiRequestError(error, response, `Failed to create role ${roleId}`);
+        }
+        return mapScapiRole(data);
+    }
+    async deleteRole(roleId) {
+        const client = this.scopeTier.getClientForWrite();
+        const { error, response } = await client.DELETE('/organizations/{organizationId}/roles/{roleId}', {
+            params: { path: { organizationId: this.organizationId, roleId } },
+        });
+        if (error) {
+            throw createScapiRequestError(error, response, `Failed to delete role ${roleId}`);
+        }
+    }
+    async getPermissions(roleId) {
+        return this.scopeTier.tryRead(async (client) => {
+            const { data, error, response } = await client.GET('/organizations/{organizationId}/roles/{roleId}/permissions', {
+                params: { path: { organizationId: this.organizationId, roleId } },
+            });
+            if (error || !data) {
+                throw createScapiRequestError(error, response, `Failed to get permissions for role ${roleId}`);
+            }
+            return data;
+        });
+    }
+    async setPermissions(roleId, permissions) {
+        const client = this.scopeTier.getClientForWrite();
+        const { data, error, response } = await client.PUT('/organizations/{organizationId}/roles/{roleId}/permissions', {
+            params: { path: { organizationId: this.organizationId, roleId } },
+            body: permissions,
+        });
+        if (error || !data) {
+            throw createScapiRequestError(error, response, `Failed to set permissions for role ${roleId}`);
+        }
+        return data;
+    }
+    async grantRole(roleId, login) {
+        const client = this.scopeTier.getClientForWrite();
+        const { error, response } = await client.PUT('/organizations/{organizationId}/roles/{roleId}/users/{login}', {
+            params: { path: { organizationId: this.organizationId, roleId, login } },
+        });
+        if (error) {
+            throw createScapiRequestError(error, response, `Failed to grant role ${roleId} to ${login}`);
+        }
+    }
+    async revokeRole(roleId, login) {
+        const client = this.scopeTier.getClientForWrite();
+        const { error, response } = await client.DELETE('/organizations/{organizationId}/roles/{roleId}/users/{login}', {
+            params: { path: { organizationId: this.organizationId, roleId, login } },
+        });
+        if (error) {
+            throw createScapiRequestError(error, response, `Failed to revoke role ${roleId} from ${login}`);
+        }
+    }
+    buildClient(scopes) {
+        const clientConfig = {
+            shortCode: this.config.shortCode,
+            tenantId: this.config.tenantId,
+            scopes: [...scopes, buildTenantScope(this.config.tenantId)],
+        };
+        return createScapiMerchantRolesClient(clientConfig, this.config.auth);
+    }
+}
+//# sourceMappingURL=scapi-backend.js.map

package/dist/esm/operations/bm-roles/scapi-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scapi-backend.js","sourceRoot":"","sources":["../../../../src/operations/bm-roles/scapi-backend.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC9B,gCAAgC,GAKjC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAC,gBAAgB,EAAC,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAC,uBAAuB,EAAC,MAAM,sCAAsC,CAAC;AAE7E,SAAS,YAAY,CAAC,KAAgB;IACpC,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,KAAK;KACZ,CAAC;AACJ,CAAC;AAUD,MAAM,OAAO,iBAAiB;IAMR;IALX,IAAI,GAAG,OAAgB,CAAC;IAEzB,cAAc,CAAS;IACvB,SAAS,CAA6C;IAE9D,YAAoB,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;QACjD,IAAI,CAAC,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAA2B;YAC9D,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACjD,QAAQ,EAAE,8BAA8B;YACxC,UAAU,EAAE,gCAAgC;YAC5C,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAA4B,EAAE;QAC5C,MAAM,EAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,EAAC,GAAG,OAAO,CAAC;QAEhD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,uCAAuC,EAAE;gBACxF,MAAM,EAAE;oBACN,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAC;oBAC3C,KAAK,EAAE,EAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAC;iBAC7C;aACF,CAAC,CAAC;YACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,MAAM,GAAG,IAAkB,CAAC;YAClC,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;gBACxB,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;gBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;gBAC5B,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;aAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,OAAgD;QAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,gDAAgD,EAAE;gBACjG,MAAM,EAAE;oBACN,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC;oBACnD,KAAK,EAAE,EAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAC;iBACjC;aACF,CAAC,CAAC;YACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,sBAAsB,MAAM,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,KAAuB;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,IAAI,GAAc;YACtB,EAAE,EAAE,MAAM;YACV,WAAW,EAAE,KAAK,EAAE,WAAW;SAChC,CAAC;QACF,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,gDAAgD,EAAE;YACjG,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC,EAAC;YAC7D,IAAI;SACL,CAAC,CAAC;QACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,gDAAgD,EAAE;YAC9F,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC,EAAC;SAC9D,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,4DAA4D,EAAE;gBAC7G,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC,EAAC;aAC9D,CAAC,CAAC;YACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,sCAAsC,MAAM,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,WAAgC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,4DAA4D,EAAE;YAC7G,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC,EAAC;YAC7D,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,sCAAsC,MAAM,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,KAAa;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,8DAA8D,EAAE;YACzG,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;SACrE,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,wBAAwB,MAAM,OAAO,KAAK,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,KAAa;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,8DAA8D,EAAE;YAC5G,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;SACrE,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,SAAS,KAAK,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,MAAgB;QAClC,MAAM,YAAY,GAAmC;YACnD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;SAC5D,CAAC;QACF,OAAO,8BAA8B,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;CACF"}

package/dist/esm/operations/bm-roles/types.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Canonical types and backend interface for Business Manager role operations.
+ *
+ * The OCAPI Data API and the SCAPI Merchant Roles API both manage instance-
+ * level access roles. Permission shapes are virtually identical across the
+ * two APIs — module/functional/locale/webdav permission groups — so the
+ * canonical type re-exports the SCAPI shape and the OCAPI backend converts.
+ *
+ * @module operations/bm-roles/types
+ */
+import type { BackendBase } from '../../clients/scapi-backend-utils.js';
+import type { RolePermissions as ScapiRolePermissions } from '../../clients/scapi-merchant-roles.js';
+export type RolePermissionsInfo = ScapiRolePermissions;
+export interface RoleInfo {
+    id: string;
+    description?: string;
+    userCount?: number;
+    userManager?: boolean;
+    permissions?: RolePermissionsInfo;
+    /** Original backend response, for advanced consumers. */
+    _raw?: unknown;
+}
+export interface ListRolesResult {
+    total: number;
+    start: number;
+    count: number;
+    hits: RoleInfo[];
+}
+export interface ListRolesOptions {
+    start?: number;
+    count?: number;
+    expand?: ('users' | 'permissions')[];
+}
+export interface CreateRoleInput {
+    description?: string;
+}
+export interface RolesBackend extends BackendBase {
+    listRoles(options?: ListRolesOptions): Promise<ListRolesResult>;
+    getRole(roleId: string, options?: {
+        expand?: ('users' | 'permissions')[];
+    }): Promise<RoleInfo>;
+    createRole(roleId: string, input?: CreateRoleInput): Promise<RoleInfo>;
+    deleteRole(roleId: string): Promise<void>;
+    getPermissions(roleId: string): Promise<RolePermissionsInfo>;
+    setPermissions(roleId: string, permissions: RolePermissionsInfo): Promise<RolePermissionsInfo>;
+    /** Assigns a user to a role. Returns void; OCAPI returns the user but we don't surface that. */
+    grantRole(roleId: string, login: string): Promise<void>;
+    revokeRole(roleId: string, login: string): Promise<void>;
+}

package/dist/esm/operations/bm-roles/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/operations/bm-roles/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/operations/bm-roles/types.ts"],"names":[],"mappings":""}

package/dist/esm/operations/bm-users/backend.d.ts

@@ -0,0 +1,4 @@
+import type { UsersBackend } from './types.js';
+import { type DualBackendConfig } from '../../clients/dual-backend-factory.js';
+export type UsersBackendConfig = DualBackendConfig;
+export declare function createUsersBackend(config: UsersBackendConfig): UsersBackend;

package/dist/esm/operations/bm-users/backend.js

@@ -0,0 +1,11 @@
+import { OcapiUsersBackend } from './ocapi-backend.js';
+import { ScapiUsersBackend } from './scapi-backend.js';
+import { createDualBackend } from '../../clients/dual-backend-factory.js';
+export function createUsersBackend(config) {
+    return createDualBackend(config, {
+        domainName: 'Users',
+        Scapi: ScapiUsersBackend,
+        Ocapi: OcapiUsersBackend,
+    });
+}
+//# sourceMappingURL=backend.js.map

package/dist/esm/operations/bm-users/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../../../src/operations/bm-users/backend.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAC,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAC,iBAAiB,EAAyB,MAAM,uCAAuC,CAAC;AAIhG,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,OAAO,iBAAiB,CAAe,MAAM,EAAE;QAC7C,UAAU,EAAE,OAAO;QACnB,KAAK,EAAE,iBAAiB;QACxB,KAAK,EAAE,iBAAiB;KACzB,CAAC,CAAC;AACL,CAAC"}

package/dist/esm/operations/bm-users/index.d.ts

@@ -4,9 +4,11 @@
  * Provides functions for querying and managing instance-level users via OCAPI Data API.
  * These are distinct from Account Manager users managed via {@link @salesforce/b2c-tooling-sdk/operations/users | operations/users}.
  *
- * On instances using SSO with Account Manager (the default for production), creating local
- * BM users via the Data API is rejected with `LocalUserCreationException`. These operations
- * focus on read/search/lifecycle of AM-managed users plus access-key administration.
+ * Create-or-replace is supported via the backend's `createOrReplaceUser` method (PUT), obtained
+ * from {@link createUsersBackend}. On instances using SSO with Account Manager (the default for
+ * production) this is rejected with `LocalUserCreationException` — local user creation must be
+ * enabled on the instance for it to succeed; otherwise provision users in Account Manager and
+ * use these operations for read/search/update/delete plus access-key administration.
  *
  * ## Core User Functions
  *
@@ -48,3 +50,9 @@
  */
 export { ACCESS_KEY_SCOPES, listBmUsers, getBmUser, whoamiBmUser, searchBmUsers, updateBmUser, deleteBmUser, getBmUserAccessKey, createBmUserAccessKey, setBmUserAccessKeyEnabled, deleteBmUserAccessKey, } from './users.js';
 export type { AccessKeyScope, BmUser, BmUsers, BmUserSearchResult, BmAccessKeyDetails, ListBmUsersOptions, SearchBmUsersOptions, UpdateBmUserChanges, } from './users.js';
+export { createUsersBackend } from './backend.js';
+export type { UsersBackendConfig } from './backend.js';
+export { OcapiUsersBackend } from './ocapi-backend.js';
+export { ScapiUsersBackend } from './scapi-backend.js';
+export type { ScapiUsersBackendConfig } from './scapi-backend.js';
+export type { UsersBackend, UserInfo, ListUsersResult, ListUsersOptions, SearchUsersOptions, CreateUserInput, UpdateUserChanges, } from './types.js';

package/dist/esm/operations/bm-users/index.js

@@ -9,9 +9,11 @@
  * Provides functions for querying and managing instance-level users via OCAPI Data API.
  * These are distinct from Account Manager users managed via {@link @salesforce/b2c-tooling-sdk/operations/users | operations/users}.
  *
- * On instances using SSO with Account Manager (the default for production), creating local
- * BM users via the Data API is rejected with `LocalUserCreationException`. These operations
- * focus on read/search/lifecycle of AM-managed users plus access-key administration.
+ * Create-or-replace is supported via the backend's `createOrReplaceUser` method (PUT), obtained
+ * from {@link createUsersBackend}. On instances using SSO with Account Manager (the default for
+ * production) this is rejected with `LocalUserCreationException` — local user creation must be
+ * enabled on the instance for it to succeed; otherwise provision users in Account Manager and
+ * use these operations for read/search/update/delete plus access-key administration.
  *
  * ## Core User Functions
  *
@@ -52,4 +54,8 @@
  * @module operations/bm-users
  */
 export { ACCESS_KEY_SCOPES, listBmUsers, getBmUser, whoamiBmUser, searchBmUsers, updateBmUser, deleteBmUser, getBmUserAccessKey, createBmUserAccessKey, setBmUserAccessKeyEnabled, deleteBmUserAccessKey, } from './users.js';
+// Users backend abstraction — supports OCAPI + SCAPI
+export { createUsersBackend } from './backend.js';
+export { OcapiUsersBackend } from './ocapi-backend.js';
+export { ScapiUsersBackend } from './scapi-backend.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/operations/bm-users/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/operations/bm-users/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/operations/bm-users/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAapB,qDAAqD;AACrD,OAAO,EAAC,kBAAkB,EAAC,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAC,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAC,iBAAiB,EAAC,MAAM,oBAAoB,CAAC"}

package/dist/esm/operations/bm-users/ocapi-backend.d.ts

@@ -0,0 +1,13 @@
+import type { B2CInstance } from '../../instance/index.js';
+import type { UsersBackend, UserInfo, ListUsersResult, ListUsersOptions, UpdateUserChanges, CreateUserInput, SearchUsersOptions } from './types.js';
+export declare class OcapiUsersBackend implements UsersBackend {
+    private instance;
+    readonly name: "ocapi";
+    constructor(instance: B2CInstance);
+    listUsers(options?: ListUsersOptions): Promise<ListUsersResult>;
+    getUser(login: string): Promise<UserInfo>;
+    searchUsers(options?: SearchUsersOptions): Promise<ListUsersResult>;
+    createOrReplaceUser(login: string, input: CreateUserInput): Promise<UserInfo>;
+    updateUser(login: string, changes: UpdateUserChanges): Promise<UserInfo>;
+    deleteUser(login: string): Promise<void>;
+}