@salesforce/b2c-tooling-sdk 1.24.2 → 2.0.0

package/dist/esm/scapi/auth-primitives.js

@@ -0,0 +1,104 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+import { resolve } from 'node:path';
+import { validate } from 'jsonschema';
+import { OAuthStrategy } from '../auth/oauth.js';
+import { JwtOAuthStrategy } from '../auth/oauth-jwt.js';
+import { buildTenantScope, toOrganizationId } from '../clients/custom-apis.js';
+import { getGuestToken, getRegisteredToken } from '../slas/token.js';
+/** Token exports for external clients; managed SCAPI requests authenticate independently. */
+export function createScapiAuth(config, cwd = process.cwd()) {
+    return async (operation, options, signal) => {
+        signal.throwIfAborted();
+        const string = { type: 'string', minLength: 1 };
+        const properties = operation === 'accountManager'
+            ? { scopes: { type: 'array', items: { ...string, pattern: '^\\S+$' } }, scapi: { type: 'boolean' } }
+            : {
+                flow: { enum: ['guest', 'registered'] },
+                siteId: string,
+                redirectUri: { ...string, format: 'uri' },
+                shopperLogin: string,
+                shopperPassword: string,
+            };
+        if (!['accountManager', 'slas'].includes(operation) ||
+            !validate(options, {
+                type: 'object',
+                properties,
+                additionalProperties: false,
+            }).valid)
+            throw new Error('SCAPI_AUTH_INPUT: Invalid token options. Read the SCAPI token-export reference.');
+        try {
+            if (operation === 'accountManager') {
+                const args = options;
+                if (!config.clientId)
+                    throw new Error('Configure clientId. Use config_inspect.');
+                if (args.scapi && !config.tenantId)
+                    throw new Error('Configure tenantId for a SCAPI token.');
+                const scopes = [
+                    ...new Set([
+                        ...(config.scopes ?? []),
+                        ...(args.scopes ?? []),
+                        ...(args.scapi ? [buildTenantScope(config.tenantId)] : []),
+                    ]),
+                ];
+                for (const method of config.authMethods ?? ['client-credentials', 'jwt']) {
+                    if (method === 'client-credentials' && config.clientSecret) {
+                        return await new OAuthStrategy({
+                            clientId: config.clientId,
+                            clientSecret: config.clientSecret,
+                            accountManagerHost: config.accountManagerHost,
+                            scopes,
+                        }).getTokenResponse(signal);
+                    }
+                    if (method === 'jwt' && config.jwtCertPath && config.jwtKeyPath) {
+                        return await new JwtOAuthStrategy({
+                            clientId: config.clientId,
+                            certPath: resolve(cwd, config.jwtCertPath),
+                            keyPath: resolve(cwd, config.jwtKeyPath),
+                            passphrase: config.jwtPassphrase,
+                            accountManagerHost: config.accountManagerHost ?? 'account.demandware.com',
+                            scopes,
+                        }).getTokenResponse(signal);
+                    }
+                }
+                throw new Error('Configure an allowed client-credentials or jwt method. Browser authentication requires the CLI: b2c auth token.');
+            }
+            const args = options;
+            const { shortCode, tenantId, slasClientId, slasClientSecret } = config;
+            const siteId = args.siteId ?? config.siteId;
+            const missing = Object.entries({ shortCode, tenantId, slasClientId, siteId })
+                .filter(([, value]) => !value)
+                .map(([name]) => name);
+            if (missing.length)
+                throw new Error(`Configure ${missing.join(', ')}. Use config_inspect; SLAS client scopes and redirect URI must permit the requested flow.`);
+            const tokenConfig = {
+                shortCode: shortCode,
+                organizationId: toOrganizationId(tenantId),
+                slasClientId: slasClientId,
+                slasClientSecret,
+                siteId: siteId,
+                redirectUri: args.redirectUri ?? 'http://localhost:3000/callback',
+                signal,
+            };
+            if (args.flow !== 'registered' && (args.shopperLogin || args.shopperPassword))
+                throw new Error('Set flow: registered when supplying shopper credentials.');
+            if (args.flow === 'registered' && (!args.shopperLogin || !args.shopperPassword))
+                throw new Error('Registered flow requires shopperLogin and shopperPassword.');
+            return args.flow === 'registered'
+                ? await getRegisteredToken({
+                    ...tokenConfig,
+                    shopperLogin: args.shopperLogin,
+                    shopperPassword: args.shopperPassword,
+                })
+                : await getGuestToken(tokenConfig);
+        }
+        catch (error) {
+            signal.throwIfAborted();
+            throw new Error(`SCAPI_AUTH_${operation === 'accountManager' ? 'AM' : 'SLAS'}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    };
+}
+//# sourceMappingURL=auth-primitives.js.map

package/dist/esm/scapi/auth-primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-primitives.js","sourceRoot":"","sources":["../../../src/scapi/auth-primitives.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,QAAQ,EAAC,MAAM,YAAY,CAAC;AACpC,OAAO,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAC,aAAa,EAAE,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAEnE,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,MAAwB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAC3E,OAAO,KAAK,EAAE,SAAiB,EAAE,OAAgB,EAAE,MAAmB,EAAoB,EAAE;QAC1F,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,EAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAC,CAAC;QAC9C,MAAM,UAAU,GACd,SAAS,KAAK,gBAAgB;YAC5B,CAAC,CAAC,EAAC,MAAM,EAAE,EAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAC,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAC,EAAC,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC,EAAC;YAC5F,CAAC,CAAC;gBACE,IAAI,EAAE,EAAC,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,EAAC;gBACrC,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,EAAC,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAC;gBACvC,YAAY,EAAE,MAAM;gBACpB,eAAe,EAAE,MAAM;aACxB,CAAC;QACR,IACE,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC/C,CAAC,QAAQ,CAAC,OAAO,EAAE;gBACjB,IAAI,EAAE,QAAQ;gBACd,UAAU;gBACV,oBAAoB,EAAE,KAAK;aAC5B,CAAC,CAAC,KAAK;YAER,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,IAAI,CAAC;YACH,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,OAA+C,CAAC;gBAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACjF,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC7F,MAAM,MAAM,GAAG;oBACb,GAAG,IAAI,GAAG,CAAC;wBACT,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;wBACxB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;wBACtB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5D,CAAC;iBACH,CAAC;gBACF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC;oBACzE,IAAI,MAAM,KAAK,oBAAoB,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;wBAC3D,OAAO,MAAM,IAAI,aAAa,CAAC;4BAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,YAAY,EAAE,MAAM,CAAC,YAAY;4BACjC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;4BAC7C,MAAM;yBACP,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBAC9B,CAAC;oBACD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;wBAChE,OAAO,MAAM,IAAI,gBAAgB,CAAC;4BAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC;4BAC1C,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;4BACxC,UAAU,EAAE,MAAM,CAAC,aAAa;4BAChC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,wBAAwB;4BACzE,MAAM;yBACP,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,OAMZ,CAAC;YACF,MAAM,EAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAC,GAAG,MAAM,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAC,CAAC;iBACxE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;iBAC7B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,MAAM;gBAChB,MAAM,IAAI,KAAK,CACb,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2FAA2F,CAC3H,CAAC;YACJ,MAAM,WAAW,GAAG;gBAClB,SAAS,EAAE,SAAU;gBACrB,cAAc,EAAE,gBAAgB,CAAC,QAAS,CAAC;gBAC3C,YAAY,EAAE,YAAa;gBAC3B,gBAAgB;gBAChB,MAAM,EAAE,MAAO;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,gCAAgC;gBACjE,MAAM;aACP,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,eAAe,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY;gBAC/B,CAAC,CAAC,MAAM,kBAAkB,CAAC;oBACvB,GAAG,WAAW;oBACd,YAAY,EAAE,IAAI,CAAC,YAAa;oBAChC,eAAe,EAAE,IAAI,CAAC,eAAgB;iBACvC,CAAC;gBACJ,CAAC,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/scapi/authentication.d.ts

@@ -0,0 +1,30 @@
+import { type ApiDocument, type ScapiSchemaDocument } from './catalog.js';
+export type ScapiAuthType = 'admin' | 'shopper' | 'unknown';
+export interface ScapiAuthInfo {
+    types: ScapiAuthType[];
+    schemes: string[];
+    executable: boolean;
+}
+export declare function isScapiTextMediaType(mediaType: string): boolean;
+/** Shared discovery/execution limit: code mode transports JSON requests and text responses. */
+export declare function unsupportedScapiTransfer(document: ScapiSchemaDocument, operation: ApiDocument): string | undefined;
+/** Identify supported authentication per operation, including mixed Admin/Shopper contracts. */
+export declare function getScapiAuthInfo(document: ScapiSchemaDocument, operation: ApiDocument): ScapiAuthInfo;
+/** Add discovery metadata and filter operations without modifying the bundled source documents. */
+export declare function describeScapiSchemas(documents: ScapiSchemaDocument[], authType?: ScapiAuthType): ScapiSchemaDocument[];
+export interface ScapiAuthDiagnostic {
+    code: string;
+    message: string;
+}
+interface AuthContext {
+    operationId: string;
+    api: string;
+    tenantScope: string;
+    candidates: string[][];
+}
+/** Enrich known OAuth failures; leave network and unrelated errors intact. */
+export declare function scapiAuthError(error: unknown, context: AuthContext): unknown;
+/** HTTP status alone cannot prove that a grant is missing. Keep the original status and body. */
+export declare function scapiAuthResponse(status: number, context: AuthContext): ScapiAuthDiagnostic | undefined;
+export declare function unsupportedScapiAuth(document: ScapiSchemaDocument, operation: ApiDocument): Error;
+export {};

package/dist/esm/scapi/authentication.js

@@ -0,0 +1,136 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+import { ScapiUserAuthUnsupportedError } from '../clients/scapi-backend-utils.js';
+import { resolveScapiReference, SCAPI_METHODS } from './catalog.js';
+export function isScapiTextMediaType(mediaType) {
+    const type = mediaType.split(';')[0].trim().toLowerCase();
+    return type.startsWith('text/') || type === 'application/json' || type.endsWith('+json');
+}
+/** Shared discovery/execution limit: code mode transports JSON requests and text responses. */
+export function unsupportedScapiTransfer(document, operation) {
+    const body = operation.requestBody && resolveScapiReference(operation.requestBody, document.schema);
+    if (body?.required && !body.content?.['application/json'])
+        return 'This operation requires a non-JSON request body. File uploads are not supported.';
+    const mediaTypes = Object.entries(operation.responses ?? {})
+        .filter(([status]) => /^2(?:\d\d|XX)$/i.test(status))
+        .flatMap(([, response]) => Object.keys(resolveScapiReference(response, document.schema).content ?? {}));
+    if (mediaTypes.length && !mediaTypes.some(isScapiTextMediaType))
+        return 'This operation returns a binary file. File downloads are not supported.';
+}
+/** Identify supported authentication per operation, including mixed Admin/Shopper contracts. */
+export function getScapiAuthInfo(document, operation) {
+    const security = operation.security ?? document.schema.security ?? [];
+    const schemes = [...new Set(security.flatMap((requirement) => Object.keys(requirement)))];
+    const types = new Set();
+    for (const scheme of schemes) {
+        if (scheme === 'AmOAuth2' || (scheme === 'BearerToken' && document.entry.id === 'shopper/auth-admin/v1'))
+            types.add('admin');
+        else if (/^(Shopper|RegisteredShopper)/.test(scheme))
+            types.add('shopper');
+        else
+            types.add('unknown');
+    }
+    // OAuth endpoints can declare credentials in grant parameters instead of security schemes.
+    if (!types.size)
+        types.add(document.entry.id === 'shopper/auth/v1' ? 'shopper' : 'unknown');
+    const admin = security.some((requirement) => Array.isArray(requirement.AmOAuth2) && Object.keys(requirement).length === 1);
+    return {
+        types: [...types].sort(),
+        schemes,
+        executable: admin && !unsupportedScapiTransfer(document, operation),
+    };
+}
+/** Add discovery metadata and filter operations without modifying the bundled source documents. */
+export function describeScapiSchemas(documents, authType) {
+    return documents.flatMap((document) => {
+        const paths = {};
+        const authTypes = new Set();
+        for (const [path, item] of Object.entries(document.schema.paths)) {
+            const selected = { ...item };
+            let count = 0;
+            for (const method of SCAPI_METHODS) {
+                if (!item[method])
+                    continue;
+                const auth = getScapiAuthInfo(document, item[method]);
+                if (authType && !auth.types.includes(authType)) {
+                    delete selected[method];
+                    continue;
+                }
+                selected[method] = { ...item[method], auth };
+                for (const type of auth.types)
+                    authTypes.add(type);
+                count++;
+            }
+            if (count)
+                paths[path] = selected;
+        }
+        return Object.keys(paths).length
+            ? [
+                {
+                    ...document,
+                    entry: { ...document.entry, authTypes: [...authTypes].sort() },
+                    schema: { ...document.schema, paths },
+                },
+            ]
+            : [];
+    });
+}
+function scopeAdvice(context) {
+    const choices = context.candidates.map((candidate) => candidate.join(' + ')).join(' OR ');
+    return (`Account Manager client grants: ${choices}; tenant scope: ${context.tenantScope}. ` +
+        'Operation scopes are requested automatically; also check any extra configured scopes and instance access.');
+}
+/** Enrich known OAuth failures; leave network and unrelated errors intact. */
+export function scapiAuthError(error, context) {
+    const message = error instanceof Error ? error.message : String(error);
+    const target = `${context.operationId} (${context.api})`;
+    let diagnostic;
+    if (/\binvalid_scope\b|\binsufficient_scope\b/i.test(message))
+        diagnostic = {
+            code: 'SCAPI_SCOPE_MISSING',
+            message: `Admin authentication rejected scopes for ${target}. ${scopeAdvice(context)}`,
+        };
+    else if (/OAuth requires clientId/.test(message))
+        diagnostic = {
+            code: 'SCAPI_ADMIN_CONFIG_MISSING',
+            message: `${target} requires an Account Manager clientId and Admin credentials (clientSecret or configured JWT strategy). Inspect resolved configuration with secrets masked; slasClientId is for Shopper authentication.`,
+        };
+    else if (error instanceof ScapiUserAuthUnsupportedError)
+        diagnostic = {
+            code: 'SCAPI_ADMIN_AUTH_UNSUPPORTED',
+            message: `${target} cannot use browser user authentication. Configure Account Manager client credentials or a supported JWT strategy. Inspect resolved configuration with secrets masked.`,
+        };
+    else if (/\binvalid_client\b|\bunauthorized_client\b|(?:authentication failed|Failed to get access token).*401/i.test(message))
+        diagnostic = {
+            code: 'SCAPI_ADMIN_CREDENTIALS_REJECTED',
+            message: `Account Manager rejected credentials for ${target}. Check clientId, clientSecret or JWT setup, client enablement, and Account Manager host. Use Admin credentials, not a SLAS Shopper client.`,
+        };
+    return diagnostic ? new Error(`${diagnostic.code}: ${diagnostic.message}`, { cause: error }) : error;
+}
+/** HTTP status alone cannot prove that a grant is missing. Keep the original status and body. */
+export function scapiAuthResponse(status, context) {
+    if (status === 401)
+        return {
+            code: 'SCAPI_UNAUTHORIZED',
+            message: `${context.operationId}: API rejected the Admin token. Check token validity and the resolved tenant. ${scopeAdvice(context)}`,
+        };
+    if (status === 403)
+        return {
+            code: 'SCAPI_FORBIDDEN',
+            message: `${context.operationId}: access denied; a 403 alone does not identify the missing permission. ${scopeAdvice(context)}`,
+        };
+}
+export function unsupportedScapiAuth(document, operation) {
+    const auth = getScapiAuthInfo(document, operation);
+    const target = `${operation.operationId} (${document.entry.id})`;
+    const schemes = auth.schemes.join(' OR ') || 'OAuth grant parameters';
+    if (document.entry.id === 'shopper/auth-admin/v1')
+        return new Error(`SCAPI_AUTH_UNSUPPORTED: ${target} requires SLAS administration authentication and its declared admin roles. This executor supports AmOAuth2 only; use the SLAS administration CLI/SDK. A SLAS Shopper client is not an admin credential.`);
+    if (auth.types.includes('shopper'))
+        return new Error(`SCAPI_SHOPPER_AUTH_UNSUPPORTED: ${target} requires ${schemes}. Shopper execution is not supported by this executor yet. Use a Shopper client/SDK with SLAS authentication (slasClientId, siteId, and the required token flow; slasClientSecret for private clients). Follow the operation's security scopes. Adding SLAS settings will not enable this executor; do not substitute Account Manager credentials.`);
+    return new Error(`SCAPI_AUTH_UNSUPPORTED: ${target} declares ${schemes}; this executor supports AmOAuth2 only. Inspect the operation's security requirements before choosing a client.`);
+}
+//# sourceMappingURL=authentication.js.map

package/dist/esm/scapi/authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../../src/scapi/authentication.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,6BAA6B,EAAC,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAC,qBAAqB,EAAE,aAAa,EAA6C,MAAM,cAAc,CAAC;AAS9G,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,wBAAwB,CAAC,QAA6B,EAAE,SAAsB;IAC5F,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,IAAI,qBAAqB,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpG,IAAI,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC;QACvD,OAAO,kFAAkF,CAAC;IAC5F,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAc,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;SACtE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACpD,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1G,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC;QAC7D,OAAO,yEAAyE,CAAC;AACrF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,QAA6B,EAAE,SAAsB;IACpF,MAAM,QAAQ,GAAkB,SAAS,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,KAAK,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,uBAAuB,CAAC;YACtG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;aAChB,IAAI,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;;YACtE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,2FAA2F;IAC3F,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CACzB,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,CAC9F,CAAC;IACF,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;QACxB,OAAO;QACP,UAAU,EAAE,KAAK,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAClC,SAAgC,EAChC,QAAwB;IAExB,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAA4B,EAAE,CAAC;YAC5F,MAAM,QAAQ,GAAgB,EAAC,GAAG,IAAI,EAAC,CAAC;YACxC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtD,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC/C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAC,CAAC;gBAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;oBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnD,KAAK,EAAE,CAAC;YACV,CAAC;YACD,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;YAC9B,CAAC,CAAC;gBACE;oBACE,GAAG,QAAQ;oBACX,KAAK,EAAE,EAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAC;oBAC5D,MAAM,EAAE,EAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAC;iBACpC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC;AAcD,SAAS,WAAW,CAAC,OAAoB;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO,CACL,kCAAkC,OAAO,mBAAmB,OAAO,CAAC,WAAW,IAAI;QACnF,2GAA2G,CAC5G,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAoB;IACjE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC;IACzD,IAAI,UAA2C,CAAC;IAChD,IAAI,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3D,UAAU,GAAG;YACX,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,4CAA4C,MAAM,KAAK,WAAW,CAAC,OAAO,CAAC,EAAE;SACvF,CAAC;SACC,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,UAAU,GAAG;YACX,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,GAAG,MAAM,wMAAwM;SAC3N,CAAC;SACC,IAAI,KAAK,YAAY,6BAA6B;QACrD,UAAU,GAAG;YACX,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,GAAG,MAAM,wKAAwK;SAC3L,CAAC;SACC,IACH,uGAAuG,CAAC,IAAI,CAC1G,OAAO,CACR;QAED,UAAU,GAAG;YACX,IAAI,EAAE,kCAAkC;YACxC,OAAO,EAAE,4CAA4C,MAAM,6IAA6I;SACzM,CAAC;IACJ,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACrG,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAoB;IACpE,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,iFAAiF,WAAW,CAAC,OAAO,CAAC,EAAE;SACvI,CAAC;IACJ,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,0EAA0E,WAAW,CAAC,OAAO,CAAC,EAAE;SAChI,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA6B,EAAE,SAAsB;IACxF,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC;IACtE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,uBAAuB;QAC/C,OAAO,IAAI,KAAK,CACd,2BAA2B,MAAM,yMAAyM,CAC3O,CAAC;IACJ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChC,OAAO,IAAI,KAAK,CACd,mCAAmC,MAAM,aAAa,OAAO,oVAAoV,CAClZ,CAAC;IACJ,OAAO,IAAI,KAAK,CACd,2BAA2B,MAAM,aAAa,OAAO,iHAAiH,CACvK,CAAC;AACJ,CAAC"}

package/dist/esm/scapi/catalog.d.ts

@@ -0,0 +1,29 @@
+/** OpenAPI documents are dynamic JSON; no generated client type is required. */
+export type ApiDocument = Record<string, any>;
+export interface ScapiSchemaEntry {
+    id: string;
+    apiFamily: string;
+    apiName: string;
+    apiVersion: string;
+    schemaVersion: string;
+    status: string;
+    file: string;
+    source: string;
+}
+export interface ScapiSchemaDocument {
+    entry: ScapiSchemaEntry;
+    schema: ApiDocument;
+}
+/** Load the versioned, language-neutral corpus without network or configuration. */
+export declare function loadScapiSchemas(): ScapiSchemaDocument[];
+export declare const SCAPI_METHODS: readonly ["get", "head", "post", "put", "patch", "delete", "options"];
+/** Match an actual API path to its schema, ignoring untrusted schema server origins. */
+export declare function findScapiOperation(documents: ScapiSchemaDocument[], method: string, path: string): {
+    document: ScapiSchemaDocument;
+    operation: ApiDocument;
+    pathItem: ApiDocument;
+    template: string;
+    parameters: Record<string, string>;
+};
+/** Resolve one local reference for request contract inspection. */
+export declare function resolveScapiReference(value: ApiDocument, schema: ApiDocument): ApiDocument;

package/dist/esm/scapi/catalog.js

@@ -0,0 +1,81 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+import { readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, resolve, sep } from 'node:path';
+let bundled;
+/** Load the versioned, language-neutral corpus without network or configuration. */
+export function loadScapiSchemas() {
+    if (bundled)
+        return bundled;
+    const require = createRequire(import.meta.url);
+    const manifestFile = require.resolve('@salesforce/b2c-api-schemas/manifest.json');
+    const root = dirname(manifestFile);
+    const manifest = JSON.parse(readFileSync(manifestFile, 'utf8'));
+    if (manifest.formatVersion !== 1)
+        throw new Error('Unsupported SCAPI schema manifest.');
+    bundled = manifest.schemas.map((entry) => {
+        const file = resolve(root, entry.file);
+        if (!file.startsWith(root + sep))
+            throw new Error('Invalid bundled schema path.');
+        return { entry, schema: JSON.parse(readFileSync(file, 'utf8')) };
+    });
+    return bundled;
+}
+export const SCAPI_METHODS = ['get', 'head', 'post', 'put', 'patch', 'delete', 'options'];
+/** Match an actual API path to its schema, ignoring untrusted schema server origins. */
+export function findScapiOperation(documents, method, path) {
+    for (const document of documents) {
+        const base = `/${document.entry.id}`;
+        if (!path.startsWith(base + '/'))
+            continue;
+        for (const [template, item] of Object.entries(document.schema.paths ?? {})) {
+            const operation = item[method.toLowerCase()];
+            if (!operation)
+                continue;
+            const actual = path.slice(base.length).split('/');
+            const operationPath = document.entry.apiFamily === 'custom' ? `/organizations/{organizationId}${template}` : template;
+            const expected = operationPath.split('/');
+            if (actual.length !== expected.length)
+                continue;
+            const parameters = {};
+            const match = expected.every((part, index) => {
+                if (part.startsWith('{') && part.endsWith('}')) {
+                    parameters[part.slice(1, -1)] = decodeURIComponent(actual[index]);
+                    return actual[index].length > 0;
+                }
+                return part === actual[index];
+            });
+            if (match)
+                return {
+                    document,
+                    operation: operation,
+                    pathItem: item,
+                    template: base + operationPath,
+                    parameters,
+                };
+        }
+    }
+    throw new Error(`SCAPI_OPERATION_NOT_FOUND: ${method} ${path}. Search the schema before calling.`);
+}
+/** Resolve one local reference for request contract inspection. */
+export function resolveScapiReference(value, schema) {
+    const visited = new Set();
+    while (typeof value?.$ref === 'string') {
+        const ref = value.$ref;
+        if (!ref.startsWith('#/') || visited.has(ref))
+            throw new Error(`Unsupported schema reference: ${ref}`);
+        visited.add(ref);
+        value = ref
+            .slice(2)
+            .split('/')
+            .reduce((parent, key) => parent?.[key.replaceAll('~1', '/').replaceAll('~0', '~')], schema);
+        if (!value)
+            throw new Error(`Missing schema reference: ${ref}`);
+    }
+    return value;
+}
+//# sourceMappingURL=catalog.js.map

package/dist/esm/scapi/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/scapi/catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,YAAY,EAAC,MAAM,SAAS,CAAC;AACrC,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAC,MAAM,WAAW,CAAC;AAmBhD,IAAI,OAA0C,CAAC;AAE/C,oFAAoF;AACpF,MAAM,UAAU,gBAAgB;IAC9B,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAG7D,CAAC;IACF,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxF,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClF,OAAO,EAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,EAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEnG,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,SAAgC,EAAE,MAAc,EAAE,IAAY;IAC/F,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAA4B,EAAE,CAAC;YACtG,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,aAAa,GACjB,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClG,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAAE,SAAS;YAChD,MAAM,UAAU,GAA2B,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAClE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,IAAI,KAAK;gBACP,OAAO;oBACL,QAAQ;oBACR,SAAS,EAAE,SAAwB;oBACnC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI,GAAG,aAAa;oBAC9B,UAAU;iBACX,CAAC;QACN,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,IAAI,IAAI,qCAAqC,CAAC,CAAC;AACrG,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,KAAkB,EAAE,MAAmB;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAc,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QACvG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,KAAK,GAAG,GAAG;aACR,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CAAC,CAAC,MAAmB,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/esm/scapi/index.d.ts

@@ -0,0 +1,12 @@
+/** Bundled SCAPI contracts and local JavaScript execution with SDK-authenticated requests. @module scapi */
+export { loadScapiSchemas, findScapiOperation, resolveScapiReference } from './catalog.js';
+export type { ApiDocument, ScapiSchemaEntry, ScapiSchemaDocument } from './catalog.js';
+export { runScapiCode } from './runtime.js';
+export { createScapiAuth } from './auth-primitives.js';
+export type { ScapiCodeOptions } from './runtime.js';
+export { loadBuiltinScapiSnippets, loadScapiSnippets, saveScapiSnippet, getScapiSnippetDirectory, initializeScapiSnippetStore, } from './snippets.js';
+export type { ScapiSnippet } from './snippets.js';
+export { createScapiRequest } from './request.js';
+export type { ScapiRequestOptions } from './request.js';
+export { getScapiAuthInfo } from './authentication.js';
+export type { ScapiAuthType, ScapiAuthInfo, ScapiAuthDiagnostic } from './authentication.js';

package/dist/esm/scapi/index.js

@@ -0,0 +1,13 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+/** Bundled SCAPI contracts and local JavaScript execution with SDK-authenticated requests. @module scapi */
+export { loadScapiSchemas, findScapiOperation, resolveScapiReference } from './catalog.js';
+export { runScapiCode } from './runtime.js';
+export { createScapiAuth } from './auth-primitives.js';
+export { loadBuiltinScapiSnippets, loadScapiSnippets, saveScapiSnippet, getScapiSnippetDirectory, initializeScapiSnippetStore, } from './snippets.js';
+export { createScapiRequest } from './request.js';
+export { getScapiAuthInfo } from './authentication.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/scapi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scapi/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,4GAA4G;AAC5G,OAAO,EAAC,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAC,MAAM,cAAc,CAAC;AAEzF,OAAO,EAAC,YAAY,EAAC,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAErD,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAC,kBAAkB,EAAC,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAC,gBAAgB,EAAC,MAAM,qBAAqB,CAAC"}

package/dist/esm/scapi/request.d.ts

@@ -0,0 +1,15 @@
+import type { AuthStrategy } from '../auth/types.js';
+import { type MiddlewareRegistry } from '../clients/middleware-registry.js';
+import { type SafetyConfig } from '../safety/index.js';
+import { type ScapiSchemaDocument } from './catalog.js';
+export interface ScapiRequestOptions {
+    shortCode: string;
+    tenantId: string;
+    siteId?: string;
+    auth: AuthStrategy | (() => AuthStrategy);
+    safety: SafetyConfig;
+    documents: ScapiSchemaDocument[];
+    middlewareRegistry?: MiddlewareRegistry;
+}
+/** Build one execution's SCAPI request helper. Auth, policy, and responses stay in the host. */
+export declare function createScapiRequest(options: ScapiRequestOptions): (input: unknown, signal: AbortSignal) => Promise<unknown>;