@salesforce/b2c-tooling-sdk 1.24.2 → 2.1.0

package/dist/esm/operations/bm-roles/roles.js

@@ -1,4 +1,8 @@
-import { getApiErrorMessage } from '../../clients/error-utils.js';
+import { throwOcapiError } from '../../clients/error-utils.js';
+import { SCAPI_MERCHANT_ROLES_READ_SCOPES, SCAPI_MERCHANT_ROLES_RW_SCOPES } from '../../clients/scapi-merchant-roles.js';
+// SCAPI Merchant Roles scopes named in the OCAPI-deprecation message.
+const ROLES_READ_SCOPES = [...SCAPI_MERCHANT_ROLES_READ_SCOPES, ...SCAPI_MERCHANT_ROLES_RW_SCOPES];
+const ROLES_RW_SCOPES = SCAPI_MERCHANT_ROLES_RW_SCOPES;
 /**
  * Lists all access roles on a B2C Commerce instance.
  *
@@ -20,7 +24,7 @@ export async function listBmRoles(instance, options = {}) {
         params: { query: { start, count, select: '(**)' } },
     });
     if (error) {
-        throw new Error(`Failed to list roles: ${getApiErrorMessage(error, response)}`, { cause: error });
+        throwOcapiError(error, response, 'Failed to list roles', ROLES_READ_SCOPES);
     }
     return data;
 }
@@ -44,7 +48,7 @@ export async function getBmRole(instance, roleId, options = {}) {
         params: { path: { id: roleId }, query: { expand } },
     });
     if (error) {
-        throw new Error(`Failed to get role ${roleId}: ${getApiErrorMessage(error, response)}`, { cause: error });
+        throwOcapiError(error, response, `Failed to get role ${roleId}`, ROLES_READ_SCOPES);
     }
     return data;
 }
@@ -67,7 +71,7 @@ export async function createBmRole(instance, roleId, role = {}) {
         body: { id: roleId, ...role },
     });
     if (error) {
-        throw new Error(`Failed to create role ${roleId}: ${getApiErrorMessage(error, response)}`, { cause: error });
+        throwOcapiError(error, response, `Failed to create role ${roleId}`, ROLES_RW_SCOPES);
     }
     return data;
 }
@@ -89,7 +93,7 @@ export async function deleteBmRole(instance, roleId) {
         params: { path: { id: roleId } },
     });
     if (error) {
-        throw new Error(`Failed to delete role ${roleId}: ${getApiErrorMessage(error, response)}`, { cause: error });
+        throwOcapiError(error, response, `Failed to delete role ${roleId}`, ROLES_RW_SCOPES);
     }
 }
 /**
@@ -110,9 +114,7 @@ export async function grantBmRole(instance, roleId, login) {
         params: { path: { id: roleId, login } },
     });
     if (error) {
-        throw new Error(`Failed to grant role ${roleId} to ${login}: ${getApiErrorMessage(error, response)}`, {
-            cause: error,
-        });
+        throwOcapiError(error, response, `Failed to grant role ${roleId} to ${login}`, ROLES_RW_SCOPES);
     }
     return data;
 }
@@ -133,9 +135,7 @@ export async function revokeBmRole(instance, roleId, login) {
         params: { path: { id: roleId, login } },
     });
     if (error) {
-        throw new Error(`Failed to revoke role ${roleId} from ${login}: ${getApiErrorMessage(error, response)}`, {
-            cause: error,
-        });
+        throwOcapiError(error, response, `Failed to revoke role ${roleId} from ${login}`, ROLES_RW_SCOPES);
     }
 }
 /**
@@ -156,9 +156,7 @@ export async function getBmRolePermissions(instance, roleId) {
         params: { path: { id: roleId } },
     });
     if (error) {
-        throw new Error(`Failed to get permissions for role ${roleId}: ${getApiErrorMessage(error, response)}`, {
-            cause: error,
-        });
+        throwOcapiError(error, response, `Failed to get permissions for role ${roleId}`, ROLES_READ_SCOPES);
     }
     return data;
 }
@@ -185,9 +183,7 @@ export async function setBmRolePermissions(instance, roleId, permissions) {
         body: permissions,
     });
     if (error) {
-        throw new Error(`Failed to set permissions for role ${roleId}: ${getApiErrorMessage(error, response)}`, {
-            cause: error,
-        });
+        throwOcapiError(error, response, `Failed to set permissions for role ${roleId}`, ROLES_RW_SCOPES);
     }
     return data;
 }

package/dist/esm/operations/bm-roles/roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../src/operations/bm-roles/roles.ts"],"names":[],"mappings":"AAYA,OAAO,EAAC,kBAAkB,EAAC,MAAM,8BAA8B,CAAC;AAmChE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAqB,EAAE,UAA8B,EAAE;IACvF,MAAM,EAAC,KAAK,EAAE,KAAK,EAAC,GAAG,OAAO,CAAC;IAE/B,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;QACjE,MAAM,EAAE,EAAC,KAAK,EAAE,EAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAC,EAAC;KAChD,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,yBAAyB,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,IAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAqB,EACrB,MAAc,EACd,UAA4B,EAAE;IAE9B,MAAM,EAAC,MAAM,EAAC,GAAG,OAAO,CAAC;IAEzB,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QACtE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAE,KAAK,EAAE,EAAC,MAAM,EAAC,EAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,IAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAqB,EACrB,MAAc,EACd,OAA+B,EAAE;IAEjC,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QACtE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;QAC5B,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAkC;KAC7D,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAC7G,CAAC;IAED,OAAO,IAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAqB,EAAE,MAAc;IACtE,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE;QACnE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAqB,EACrB,MAAc,EACd,KAAa;IAEb,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,EAAE;QACpF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;KACpC,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,OAAO,KAAK,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;YACpG,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAqC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAqB,EAAE,MAAc,EAAE,KAAa;IACrF,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,EAAE;QACjF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;KACpC,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,SAAS,KAAK,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;YACvG,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAqB,EAAE,MAAc;IAC9E,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE;QAClF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;YACtG,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAyB,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAqB,EACrB,MAAc,EACd,WAA8B;IAE9B,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE;QAClF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;QAC5B,IAAI,EAAE,WAAwD;KAC/D,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,KAAK,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE;YACtG,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAyB,CAAC;AACnC,CAAC"}
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../src/operations/bm-roles/roles.ts"],"names":[],"mappings":"AAYA,OAAO,EAAC,eAAe,EAAC,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAC,gCAAgC,EAAE,8BAA8B,EAAC,MAAM,uCAAuC,CAAC;AAEvH,sEAAsE;AACtE,MAAM,iBAAiB,GAAG,CAAC,GAAG,gCAAgC,EAAE,GAAG,8BAA8B,CAAC,CAAC;AACnG,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAmCvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAqB,EAAE,UAA8B,EAAE;IACvF,MAAM,EAAC,KAAK,EAAE,KAAK,EAAC,GAAG,OAAO,CAAC;IAE/B,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;QACjE,MAAM,EAAE,EAAC,KAAK,EAAE,EAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAC,EAAC;KAChD,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,IAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAqB,EACrB,MAAc,EACd,UAA4B,EAAE;IAE9B,MAAM,EAAC,MAAM,EAAC,GAAG,OAAO,CAAC;IAEzB,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QACtE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAE,KAAK,EAAE,EAAC,MAAM,EAAC,EAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,sBAAsB,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,IAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAqB,EACrB,MAAc,EACd,OAA+B,EAAE;IAEjC,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE;QACtE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;QAC5B,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAkC;KAC7D,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,IAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAqB,EAAE,MAAc;IACtE,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE;QACnE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAqB,EACrB,MAAc,EACd,KAAa;IAEb,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,EAAE;QACpF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;KACpC,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,wBAAwB,MAAM,OAAO,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,IAAqC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAqB,EAAE,MAAc,EAAE,KAAa;IACrF,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,EAAE;QACjF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;KACpC,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,SAAS,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAqB,EAAE,MAAc;IAC9E,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE;QAClF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,sCAAsC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,IAAyB,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAqB,EACrB,MAAc,EACd,WAA8B;IAE9B,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE;QAClF,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,EAAE,EAAE,MAAM,EAAC,EAAC;QAC5B,IAAI,EAAE,WAAwD;KAC/D,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,sCAAsC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,IAAyB,CAAC;AACnC,CAAC"}

package/dist/esm/operations/bm-roles/scapi-backend.d.ts

@@ -0,0 +1,27 @@
+import type { AuthStrategy } from '../../auth/types.js';
+import type { RolesBackend, RoleInfo, ListRolesResult, ListRolesOptions, RolePermissionsInfo, CreateRoleInput } from './types.js';
+export interface ScapiRolesBackendConfig {
+    shortCode: string;
+    tenantId: string;
+    auth: AuthStrategy;
+    /** Unused by Roles; accepted for compatibility with the dual-backend factory. */
+    instance?: unknown;
+}
+export declare class ScapiRolesBackend implements RolesBackend {
+    private config;
+    readonly name: "scapi";
+    private organizationId;
+    private scopeTier;
+    constructor(config: ScapiRolesBackendConfig);
+    listRoles(options?: ListRolesOptions): Promise<ListRolesResult>;
+    getRole(roleId: string, options?: {
+        expand?: ('users' | 'permissions')[];
+    }): Promise<RoleInfo>;
+    createRole(roleId: string, input?: CreateRoleInput): Promise<RoleInfo>;
+    deleteRole(roleId: string): Promise<void>;
+    getPermissions(roleId: string): Promise<RolePermissionsInfo>;
+    setPermissions(roleId: string, permissions: RolePermissionsInfo): Promise<RolePermissionsInfo>;
+    grantRole(roleId: string, login: string): Promise<void>;
+    revokeRole(roleId: string, login: string): Promise<void>;
+    private buildClient;
+}

package/dist/esm/operations/bm-roles/scapi-backend.js

@@ -0,0 +1,138 @@
+import { createScapiMerchantRolesClient, SCAPI_MERCHANT_ROLES_RW_SCOPES, SCAPI_MERCHANT_ROLES_READ_SCOPES, } from '../../clients/scapi-merchant-roles.js';
+import { buildTenantScope, toOrganizationId } from '../../clients/custom-apis.js';
+import { ScopeTierManager } from '../../clients/scapi-scope-tier.js';
+import { createScapiRequestError } from '../../clients/scapi-backend-utils.js';
+function mapScapiRole(scapi) {
+    return {
+        id: scapi.id ?? '',
+        description: scapi.description,
+        userCount: scapi.userCount,
+        userManager: scapi.userManager,
+        permissions: scapi.permissions,
+        _raw: scapi,
+    };
+}
+export class ScapiRolesBackend {
+    config;
+    name = 'scapi';
+    organizationId;
+    scopeTier;
+    constructor(config) {
+        this.config = config;
+        this.organizationId = toOrganizationId(config.tenantId);
+        this.scopeTier = new ScopeTierManager({
+            buildClient: (scopes) => this.buildClient(scopes),
+            rwScopes: SCAPI_MERCHANT_ROLES_RW_SCOPES,
+            readScopes: SCAPI_MERCHANT_ROLES_READ_SCOPES,
+            domainName: 'Roles',
+        });
+    }
+    async listRoles(options = {}) {
+        const { start = 0, count = 25, expand } = options;
+        return this.scopeTier.tryRead(async (client) => {
+            const { data, error, response } = await client.GET('/organizations/{organizationId}/roles', {
+                params: {
+                    path: { organizationId: this.organizationId },
+                    query: { limit: count, offset: start, expand },
+                },
+            });
+            if (error || !data) {
+                throw createScapiRequestError(error, response, 'Failed to list roles');
+            }
+            const result = data;
+            return {
+                total: result.total ?? 0,
+                start: result.offset ?? start,
+                count: result.limit ?? count,
+                hits: (result.data ?? []).map(mapScapiRole),
+            };
+        });
+    }
+    async getRole(roleId, options) {
+        return this.scopeTier.tryRead(async (client) => {
+            const { data, error, response } = await client.GET('/organizations/{organizationId}/roles/{roleId}', {
+                params: {
+                    path: { organizationId: this.organizationId, roleId },
+                    query: { expand: options?.expand },
+                },
+            });
+            if (error || !data) {
+                throw createScapiRequestError(error, response, `Failed to get role ${roleId}`);
+            }
+            return mapScapiRole(data);
+        });
+    }
+    async createRole(roleId, input) {
+        const client = this.scopeTier.getClientForWrite();
+        const body = {
+            id: roleId,
+            description: input?.description,
+        };
+        const { data, error, response } = await client.PUT('/organizations/{organizationId}/roles/{roleId}', {
+            params: { path: { organizationId: this.organizationId, roleId } },
+            body,
+        });
+        if (error || !data) {
+            throw createScapiRequestError(error, response, `Failed to create role ${roleId}`);
+        }
+        return mapScapiRole(data);
+    }
+    async deleteRole(roleId) {
+        const client = this.scopeTier.getClientForWrite();
+        const { error, response } = await client.DELETE('/organizations/{organizationId}/roles/{roleId}', {
+            params: { path: { organizationId: this.organizationId, roleId } },
+        });
+        if (error) {
+            throw createScapiRequestError(error, response, `Failed to delete role ${roleId}`);
+        }
+    }
+    async getPermissions(roleId) {
+        return this.scopeTier.tryRead(async (client) => {
+            const { data, error, response } = await client.GET('/organizations/{organizationId}/roles/{roleId}/permissions', {
+                params: { path: { organizationId: this.organizationId, roleId } },
+            });
+            if (error || !data) {
+                throw createScapiRequestError(error, response, `Failed to get permissions for role ${roleId}`);
+            }
+            return data;
+        });
+    }
+    async setPermissions(roleId, permissions) {
+        const client = this.scopeTier.getClientForWrite();
+        const { data, error, response } = await client.PUT('/organizations/{organizationId}/roles/{roleId}/permissions', {
+            params: { path: { organizationId: this.organizationId, roleId } },
+            body: permissions,
+        });
+        if (error || !data) {
+            throw createScapiRequestError(error, response, `Failed to set permissions for role ${roleId}`);
+        }
+        return data;
+    }
+    async grantRole(roleId, login) {
+        const client = this.scopeTier.getClientForWrite();
+        const { error, response } = await client.PUT('/organizations/{organizationId}/roles/{roleId}/users/{login}', {
+            params: { path: { organizationId: this.organizationId, roleId, login } },
+        });
+        if (error) {
+            throw createScapiRequestError(error, response, `Failed to grant role ${roleId} to ${login}`);
+        }
+    }
+    async revokeRole(roleId, login) {
+        const client = this.scopeTier.getClientForWrite();
+        const { error, response } = await client.DELETE('/organizations/{organizationId}/roles/{roleId}/users/{login}', {
+            params: { path: { organizationId: this.organizationId, roleId, login } },
+        });
+        if (error) {
+            throw createScapiRequestError(error, response, `Failed to revoke role ${roleId} from ${login}`);
+        }
+    }
+    buildClient(scopes) {
+        const clientConfig = {
+            shortCode: this.config.shortCode,
+            tenantId: this.config.tenantId,
+            scopes: [...scopes, buildTenantScope(this.config.tenantId)],
+        };
+        return createScapiMerchantRolesClient(clientConfig, this.config.auth);
+    }
+}
+//# sourceMappingURL=scapi-backend.js.map

package/dist/esm/operations/bm-roles/scapi-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scapi-backend.js","sourceRoot":"","sources":["../../../../src/operations/bm-roles/scapi-backend.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC9B,gCAAgC,GAKjC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAC,gBAAgB,EAAC,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAC,uBAAuB,EAAC,MAAM,sCAAsC,CAAC;AAE7E,SAAS,YAAY,CAAC,KAAgB;IACpC,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,KAAK;KACZ,CAAC;AACJ,CAAC;AAUD,MAAM,OAAO,iBAAiB;IAMR;IALX,IAAI,GAAG,OAAgB,CAAC;IAEzB,cAAc,CAAS;IACvB,SAAS,CAA6C;IAE9D,YAAoB,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;QACjD,IAAI,CAAC,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,IAAI,gBAAgB,CAA2B;YAC9D,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACjD,QAAQ,EAAE,8BAA8B;YACxC,UAAU,EAAE,gCAAgC;YAC5C,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAA4B,EAAE;QAC5C,MAAM,EAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,EAAC,GAAG,OAAO,CAAC;QAEhD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,uCAAuC,EAAE;gBACxF,MAAM,EAAE;oBACN,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAC;oBAC3C,KAAK,EAAE,EAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAC;iBAC7C;aACF,CAAC,CAAC;YACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,MAAM,GAAG,IAAkB,CAAC;YAClC,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;gBACxB,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;gBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;gBAC5B,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;aAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,OAAgD;QAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,gDAAgD,EAAE;gBACjG,MAAM,EAAE;oBACN,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC;oBACnD,KAAK,EAAE,EAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAC;iBACjC;aACF,CAAC,CAAC;YACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,sBAAsB,MAAM,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,KAAuB;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,IAAI,GAAc;YACtB,EAAE,EAAE,MAAM;YACV,WAAW,EAAE,KAAK,EAAE,WAAW;SAChC,CAAC;QACF,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,gDAAgD,EAAE;YACjG,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC,EAAC;YAC7D,IAAI;SACL,CAAC,CAAC;QACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,gDAAgD,EAAE;YAC9F,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC,EAAC;SAC9D,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,4DAA4D,EAAE;gBAC7G,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC,EAAC;aAC9D,CAAC,CAAC;YACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,sCAAsC,MAAM,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,WAAgC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,4DAA4D,EAAE;YAC7G,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAC,EAAC;YAC7D,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QACH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,sCAAsC,MAAM,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,KAAa;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,8DAA8D,EAAE;YACzG,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;SACrE,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,wBAAwB,MAAM,OAAO,KAAK,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,KAAa;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,EAAC,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,8DAA8D,EAAE;YAC5G,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAC,EAAC;SACrE,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,MAAM,SAAS,KAAK,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,MAAgB;QAClC,MAAM,YAAY,GAAmC;YACnD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;SAC5D,CAAC;QACF,OAAO,8BAA8B,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;CACF"}

package/dist/esm/operations/bm-roles/types.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Canonical types and backend interface for Business Manager role operations.
+ *
+ * The OCAPI Data API and the SCAPI Merchant Roles API both manage instance-
+ * level access roles. Permission shapes are virtually identical across the
+ * two APIs — module/functional/locale/webdav permission groups — so the
+ * canonical type re-exports the SCAPI shape and the OCAPI backend converts.
+ *
+ * @module operations/bm-roles/types
+ */
+import type { BackendBase } from '../../clients/scapi-backend-utils.js';
+import type { RolePermissions as ScapiRolePermissions } from '../../clients/scapi-merchant-roles.js';
+export type RolePermissionsInfo = ScapiRolePermissions;
+export interface RoleInfo {
+    id: string;
+    description?: string;
+    userCount?: number;
+    userManager?: boolean;
+    permissions?: RolePermissionsInfo;
+    /** Original backend response, for advanced consumers. */
+    _raw?: unknown;
+}
+export interface ListRolesResult {
+    total: number;
+    start: number;
+    count: number;
+    hits: RoleInfo[];
+}
+export interface ListRolesOptions {
+    start?: number;
+    count?: number;
+    expand?: ('users' | 'permissions')[];
+}
+export interface CreateRoleInput {
+    description?: string;
+}
+export interface RolesBackend extends BackendBase {
+    listRoles(options?: ListRolesOptions): Promise<ListRolesResult>;
+    getRole(roleId: string, options?: {
+        expand?: ('users' | 'permissions')[];
+    }): Promise<RoleInfo>;
+    createRole(roleId: string, input?: CreateRoleInput): Promise<RoleInfo>;
+    deleteRole(roleId: string): Promise<void>;
+    getPermissions(roleId: string): Promise<RolePermissionsInfo>;
+    setPermissions(roleId: string, permissions: RolePermissionsInfo): Promise<RolePermissionsInfo>;
+    /** Assigns a user to a role. Returns void; OCAPI returns the user but we don't surface that. */
+    grantRole(roleId: string, login: string): Promise<void>;
+    revokeRole(roleId: string, login: string): Promise<void>;
+}

package/dist/esm/operations/bm-roles/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/operations/bm-roles/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/operations/bm-roles/types.ts"],"names":[],"mappings":""}

package/dist/esm/operations/bm-users/backend.d.ts

@@ -0,0 +1,4 @@
+import type { UsersBackend } from './types.js';
+import { type DualBackendConfig } from '../../clients/dual-backend-factory.js';
+export type UsersBackendConfig = DualBackendConfig;
+export declare function createUsersBackend(config: UsersBackendConfig): UsersBackend;

package/dist/esm/operations/bm-users/backend.js

@@ -0,0 +1,11 @@
+import { OcapiUsersBackend } from './ocapi-backend.js';
+import { ScapiUsersBackend } from './scapi-backend.js';
+import { createDualBackend } from '../../clients/dual-backend-factory.js';
+export function createUsersBackend(config) {
+    return createDualBackend(config, {
+        domainName: 'Users',
+        Scapi: ScapiUsersBackend,
+        Ocapi: OcapiUsersBackend,
+    });
+}
+//# sourceMappingURL=backend.js.map

package/dist/esm/operations/bm-users/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../../../src/operations/bm-users/backend.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAC,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAC,iBAAiB,EAAyB,MAAM,uCAAuC,CAAC;AAIhG,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,OAAO,iBAAiB,CAAe,MAAM,EAAE;QAC7C,UAAU,EAAE,OAAO;QACnB,KAAK,EAAE,iBAAiB;QACxB,KAAK,EAAE,iBAAiB;KACzB,CAAC,CAAC;AACL,CAAC"}

package/dist/esm/operations/bm-users/index.d.ts

@@ -4,9 +4,11 @@
  * Provides functions for querying and managing instance-level users via OCAPI Data API.
  * These are distinct from Account Manager users managed via {@link @salesforce/b2c-tooling-sdk/operations/users | operations/users}.
  *
- * On instances using SSO with Account Manager (the default for production), creating local
- * BM users via the Data API is rejected with `LocalUserCreationException`. These operations
- * focus on read/search/lifecycle of AM-managed users plus access-key administration.
+ * Create-or-replace is supported via the backend's `createOrReplaceUser` method (PUT), obtained
+ * from {@link createUsersBackend}. On instances using SSO with Account Manager (the default for
+ * production) this is rejected with `LocalUserCreationException` — local user creation must be
+ * enabled on the instance for it to succeed; otherwise provision users in Account Manager and
+ * use these operations for read/search/update/delete plus access-key administration.
  *
  * ## Core User Functions
  *
@@ -48,3 +50,9 @@
  */
 export { ACCESS_KEY_SCOPES, listBmUsers, getBmUser, whoamiBmUser, searchBmUsers, updateBmUser, deleteBmUser, getBmUserAccessKey, createBmUserAccessKey, setBmUserAccessKeyEnabled, deleteBmUserAccessKey, } from './users.js';
 export type { AccessKeyScope, BmUser, BmUsers, BmUserSearchResult, BmAccessKeyDetails, ListBmUsersOptions, SearchBmUsersOptions, UpdateBmUserChanges, } from './users.js';
+export { createUsersBackend } from './backend.js';
+export type { UsersBackendConfig } from './backend.js';
+export { OcapiUsersBackend } from './ocapi-backend.js';
+export { ScapiUsersBackend } from './scapi-backend.js';
+export type { ScapiUsersBackendConfig } from './scapi-backend.js';
+export type { UsersBackend, UserInfo, ListUsersResult, ListUsersOptions, SearchUsersOptions, CreateUserInput, UpdateUserChanges, } from './types.js';

package/dist/esm/operations/bm-users/index.js

@@ -9,9 +9,11 @@
  * Provides functions for querying and managing instance-level users via OCAPI Data API.
  * These are distinct from Account Manager users managed via {@link @salesforce/b2c-tooling-sdk/operations/users | operations/users}.
  *
- * On instances using SSO with Account Manager (the default for production), creating local
- * BM users via the Data API is rejected with `LocalUserCreationException`. These operations
- * focus on read/search/lifecycle of AM-managed users plus access-key administration.
+ * Create-or-replace is supported via the backend's `createOrReplaceUser` method (PUT), obtained
+ * from {@link createUsersBackend}. On instances using SSO with Account Manager (the default for
+ * production) this is rejected with `LocalUserCreationException` — local user creation must be
+ * enabled on the instance for it to succeed; otherwise provision users in Account Manager and
+ * use these operations for read/search/update/delete plus access-key administration.
  *
  * ## Core User Functions
  *
@@ -52,4 +54,8 @@
  * @module operations/bm-users
  */
 export { ACCESS_KEY_SCOPES, listBmUsers, getBmUser, whoamiBmUser, searchBmUsers, updateBmUser, deleteBmUser, getBmUserAccessKey, createBmUserAccessKey, setBmUserAccessKeyEnabled, deleteBmUserAccessKey, } from './users.js';
+// Users backend abstraction — supports OCAPI + SCAPI
+export { createUsersBackend } from './backend.js';
+export { OcapiUsersBackend } from './ocapi-backend.js';
+export { ScapiUsersBackend } from './scapi-backend.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/operations/bm-users/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/operations/bm-users/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/operations/bm-users/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAapB,qDAAqD;AACrD,OAAO,EAAC,kBAAkB,EAAC,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAC,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAC,iBAAiB,EAAC,MAAM,oBAAoB,CAAC"}

package/dist/esm/operations/bm-users/ocapi-backend.d.ts

@@ -0,0 +1,13 @@
+import type { B2CInstance } from '../../instance/index.js';
+import type { UsersBackend, UserInfo, ListUsersResult, ListUsersOptions, UpdateUserChanges, CreateUserInput, SearchUsersOptions } from './types.js';
+export declare class OcapiUsersBackend implements UsersBackend {
+    private instance;
+    readonly name: "ocapi";
+    constructor(instance: B2CInstance);
+    listUsers(options?: ListUsersOptions): Promise<ListUsersResult>;
+    getUser(login: string): Promise<UserInfo>;
+    searchUsers(options?: SearchUsersOptions): Promise<ListUsersResult>;
+    createOrReplaceUser(login: string, input: CreateUserInput): Promise<UserInfo>;
+    updateUser(login: string, changes: UpdateUserChanges): Promise<UserInfo>;
+    deleteUser(login: string): Promise<void>;
+}

package/dist/esm/operations/bm-users/ocapi-backend.js

@@ -0,0 +1,92 @@
+import { listBmUsers as ocapiListBmUsers, getBmUser as ocapiGetBmUser, updateBmUser as ocapiUpdateBmUser, deleteBmUser as ocapiDeleteBmUser, searchBmUsers as ocapiSearchBmUsers, } from './users.js';
+import { throwOcapiError } from '../../clients/error-utils.js';
+import { SCAPI_MERCHANT_USERS_RW_SCOPES } from '../../clients/scapi-merchant-users.js';
+function mapOcapiUser(ocapi) {
+    return {
+        login: ocapi.login ?? '',
+        email: ocapi.email,
+        firstName: ocapi.first_name,
+        lastName: ocapi.last_name,
+        externalId: ocapi.external_id,
+        disabled: ocapi.disabled,
+        locked: ocapi.locked,
+        lastLoginDate: ocapi.last_login_date,
+        passwordExpirationDate: ocapi.password_expiration_date,
+        passwordModificationDate: ocapi.password_modification_date,
+        preferredDataLocale: ocapi.preferred_data_locale,
+        preferredUiLocale: ocapi.preferred_ui_locale,
+        roles: ocapi.roles,
+        _raw: ocapi,
+    };
+}
+export class OcapiUsersBackend {
+    instance;
+    name = 'ocapi';
+    constructor(instance) {
+        this.instance = instance;
+    }
+    async listUsers(options = {}) {
+        const result = await ocapiListBmUsers(this.instance, options);
+        const users = (result.data ?? []);
+        return {
+            total: result.total ?? 0,
+            start: result.start ?? 0,
+            count: result.count ?? users.length,
+            hits: users.map(mapOcapiUser),
+        };
+    }
+    async getUser(login) {
+        const user = await ocapiGetBmUser(this.instance, login);
+        return mapOcapiUser(user);
+    }
+    async searchUsers(options = {}) {
+        const result = await ocapiSearchBmUsers(this.instance, options);
+        const users = (result.hits ?? []);
+        return {
+            total: result.total ?? 0,
+            start: result.start ?? options.start ?? 0,
+            count: result.count ?? users.length,
+            hits: users.map(mapOcapiUser),
+        };
+    }
+    async createOrReplaceUser(login, input) {
+        // Map canonical camelCase → OCAPI snake_case.
+        const body = {
+            login: input.login,
+            email: input.email,
+            first_name: input.firstName,
+            last_name: input.lastName,
+            external_id: input.externalId,
+            password: input.password,
+            disabled: input.disabled,
+            preferred_data_locale: input.preferredDataLocale,
+            preferred_ui_locale: input.preferredUiLocale,
+            roles: input.roles,
+        };
+        const { data, error, response } = await this.instance.ocapi.PUT('/users/{login}', {
+            params: { path: { login } },
+            body: body,
+        });
+        if (error) {
+            throwOcapiError(error, response, `Failed to create user ${login}`, SCAPI_MERCHANT_USERS_RW_SCOPES);
+        }
+        return mapOcapiUser(data);
+    }
+    async updateUser(login, changes) {
+        const ocapiChanges = {
+            email: changes.email,
+            first_name: changes.firstName,
+            last_name: changes.lastName,
+            external_id: changes.externalId,
+            disabled: changes.disabled,
+            preferred_data_locale: changes.preferredDataLocale,
+            preferred_ui_locale: changes.preferredUiLocale,
+        };
+        const updated = await ocapiUpdateBmUser(this.instance, login, ocapiChanges);
+        return mapOcapiUser(updated);
+    }
+    async deleteUser(login) {
+        await ocapiDeleteBmUser(this.instance, login);
+    }
+}
+//# sourceMappingURL=ocapi-backend.js.map

package/dist/esm/operations/bm-users/ocapi-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ocapi-backend.js","sourceRoot":"","sources":["../../../../src/operations/bm-users/ocapi-backend.ts"],"names":[],"mappings":"AAeA,OAAO,EACL,WAAW,IAAI,gBAAgB,EAC/B,SAAS,IAAI,cAAc,EAC3B,YAAY,IAAI,iBAAiB,EACjC,YAAY,IAAI,iBAAiB,EAEjC,aAAa,IAAI,kBAAkB,GACpC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAC,eAAe,EAAC,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAC,8BAA8B,EAAC,MAAM,uCAAuC,CAAC;AAGrF,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,UAAU;QAC3B,QAAQ,EAAE,KAAK,CAAC,SAAS;QACzB,UAAU,EAAE,KAAK,CAAC,WAAW;QAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa,EAAE,KAAK,CAAC,eAAe;QACpC,sBAAsB,EAAE,KAAK,CAAC,wBAAwB;QACtD,wBAAwB,EAAE,KAAK,CAAC,0BAA0B;QAC1D,mBAAmB,EAAE,KAAK,CAAC,qBAAqB;QAChD,iBAAiB,EAAE,KAAK,CAAC,mBAAmB;QAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,iBAAiB;IAGR;IAFX,IAAI,GAAG,OAAgB,CAAC;IAEjC,YAAoB,QAAqB;QAArB,aAAQ,GAAR,QAAQ,CAAa;IAAG,CAAC;IAE7C,KAAK,CAAC,SAAS,CAAC,UAA4B,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAa,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM;YACnC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAA8B,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAa,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC;YACzC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM;YACnC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAa,EAAE,KAAsB;QAC7D,8CAA8C;QAC9C,MAAM,IAAI,GAA4B;YACpC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,qBAAqB,EAAE,KAAK,CAAC,mBAAmB;YAChD,mBAAmB,EAAE,KAAK,CAAC,iBAAiB;YAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACF,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE;YAC9E,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,KAAK,EAAC,EAAC;YACvB,IAAI,EAAE,IAAqC;SAC5C,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,yBAAyB,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,YAAY,CAAC,IAAc,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,OAA0B;QACxD,MAAM,YAAY,GAA4B;YAC5C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,WAAW,EAAE,OAAO,CAAC,UAAU;YAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,qBAAqB,EAAE,OAAO,CAAC,mBAAmB;YAClD,mBAAmB,EAAE,OAAO,CAAC,iBAAiB;SAC/C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAC5E,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/esm/operations/bm-users/scapi-backend.d.ts

@@ -0,0 +1,23 @@
+import type { AuthStrategy } from '../../auth/types.js';
+import type { UsersBackend, UserInfo, ListUsersResult, ListUsersOptions, UpdateUserChanges, CreateUserInput, SearchUsersOptions } from './types.js';
+export interface ScapiUsersBackendConfig {
+    shortCode: string;
+    tenantId: string;
+    auth: AuthStrategy;
+    /** Unused by Users; accepted for compatibility with the dual-backend factory. */
+    instance?: unknown;
+}
+export declare class ScapiUsersBackend implements UsersBackend {
+    private config;
+    readonly name: "scapi";
+    private organizationId;
+    private scopeTier;
+    constructor(config: ScapiUsersBackendConfig);
+    listUsers(options?: ListUsersOptions): Promise<ListUsersResult>;
+    searchUsers(options?: SearchUsersOptions): Promise<ListUsersResult>;
+    getUser(login: string): Promise<UserInfo>;
+    createOrReplaceUser(login: string, input: CreateUserInput): Promise<UserInfo>;
+    updateUser(login: string, changes: UpdateUserChanges): Promise<UserInfo>;
+    deleteUser(login: string): Promise<void>;
+    private buildClient;
+}