@salesforce/b2c-tooling-sdk 1.24.2 → 2.1.0

package/dist/esm/scapi/authentication.js

@@ -0,0 +1,136 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+import { ScapiUserAuthUnsupportedError } from '../clients/scapi-backend-utils.js';
+import { resolveScapiReference, SCAPI_METHODS } from './catalog.js';
+export function isScapiTextMediaType(mediaType) {
+    const type = mediaType.split(';')[0].trim().toLowerCase();
+    return type.startsWith('text/') || type === 'application/json' || type.endsWith('+json');
+}
+/** Shared discovery/execution limit: code mode transports JSON requests and text responses. */
+export function unsupportedScapiTransfer(document, operation) {
+    const body = operation.requestBody && resolveScapiReference(operation.requestBody, document.schema);
+    if (body?.required && !body.content?.['application/json'])
+        return 'This operation requires a non-JSON request body. File uploads are not supported.';
+    const mediaTypes = Object.entries(operation.responses ?? {})
+        .filter(([status]) => /^2(?:\d\d|XX)$/i.test(status))
+        .flatMap(([, response]) => Object.keys(resolveScapiReference(response, document.schema).content ?? {}));
+    if (mediaTypes.length && !mediaTypes.some(isScapiTextMediaType))
+        return 'This operation returns a binary file. File downloads are not supported.';
+}
+/** Identify supported authentication per operation, including mixed Admin/Shopper contracts. */
+export function getScapiAuthInfo(document, operation) {
+    const security = operation.security ?? document.schema.security ?? [];
+    const schemes = [...new Set(security.flatMap((requirement) => Object.keys(requirement)))];
+    const types = new Set();
+    for (const scheme of schemes) {
+        if (scheme === 'AmOAuth2' || (scheme === 'BearerToken' && document.entry.id === 'shopper/auth-admin/v1'))
+            types.add('admin');
+        else if (/^(Shopper|RegisteredShopper)/.test(scheme))
+            types.add('shopper');
+        else
+            types.add('unknown');
+    }
+    // OAuth endpoints can declare credentials in grant parameters instead of security schemes.
+    if (!types.size)
+        types.add(document.entry.id === 'shopper/auth/v1' ? 'shopper' : 'unknown');
+    const admin = security.some((requirement) => Array.isArray(requirement.AmOAuth2) && Object.keys(requirement).length === 1);
+    return {
+        types: [...types].sort(),
+        schemes,
+        executable: admin && !unsupportedScapiTransfer(document, operation),
+    };
+}
+/** Add discovery metadata and filter operations without modifying the bundled source documents. */
+export function describeScapiSchemas(documents, authType) {
+    return documents.flatMap((document) => {
+        const paths = {};
+        const authTypes = new Set();
+        for (const [path, item] of Object.entries(document.schema.paths)) {
+            const selected = { ...item };
+            let count = 0;
+            for (const method of SCAPI_METHODS) {
+                if (!item[method])
+                    continue;
+                const auth = getScapiAuthInfo(document, item[method]);
+                if (authType && !auth.types.includes(authType)) {
+                    delete selected[method];
+                    continue;
+                }
+                selected[method] = { ...item[method], auth };
+                for (const type of auth.types)
+                    authTypes.add(type);
+                count++;
+            }
+            if (count)
+                paths[path] = selected;
+        }
+        return Object.keys(paths).length
+            ? [
+                {
+                    ...document,
+                    entry: { ...document.entry, authTypes: [...authTypes].sort() },
+                    schema: { ...document.schema, paths },
+                },
+            ]
+            : [];
+    });
+}
+function scopeAdvice(context) {
+    const choices = context.candidates.map((candidate) => candidate.join(' + ')).join(' OR ');
+    return (`Account Manager client grants: ${choices}; tenant scope: ${context.tenantScope}. ` +
+        'Operation scopes are requested automatically; also check any extra configured scopes and instance access.');
+}
+/** Enrich known OAuth failures; leave network and unrelated errors intact. */
+export function scapiAuthError(error, context) {
+    const message = error instanceof Error ? error.message : String(error);
+    const target = `${context.operationId} (${context.api})`;
+    let diagnostic;
+    if (/\binvalid_scope\b|\binsufficient_scope\b/i.test(message))
+        diagnostic = {
+            code: 'SCAPI_SCOPE_MISSING',
+            message: `Admin authentication rejected scopes for ${target}. ${scopeAdvice(context)}`,
+        };
+    else if (/OAuth requires clientId/.test(message))
+        diagnostic = {
+            code: 'SCAPI_ADMIN_CONFIG_MISSING',
+            message: `${target} requires an Account Manager clientId and Admin credentials (clientSecret or configured JWT strategy). Inspect resolved configuration with secrets masked; slasClientId is for Shopper authentication.`,
+        };
+    else if (error instanceof ScapiUserAuthUnsupportedError)
+        diagnostic = {
+            code: 'SCAPI_ADMIN_AUTH_UNSUPPORTED',
+            message: `${target} cannot use browser user authentication. Configure Account Manager client credentials or a supported JWT strategy. Inspect resolved configuration with secrets masked.`,
+        };
+    else if (/\binvalid_client\b|\bunauthorized_client\b|(?:authentication failed|Failed to get access token).*401/i.test(message))
+        diagnostic = {
+            code: 'SCAPI_ADMIN_CREDENTIALS_REJECTED',
+            message: `Account Manager rejected credentials for ${target}. Check clientId, clientSecret or JWT setup, client enablement, and Account Manager host. Use Admin credentials, not a SLAS Shopper client.`,
+        };
+    return diagnostic ? new Error(`${diagnostic.code}: ${diagnostic.message}`, { cause: error }) : error;
+}
+/** HTTP status alone cannot prove that a grant is missing. Keep the original status and body. */
+export function scapiAuthResponse(status, context) {
+    if (status === 401)
+        return {
+            code: 'SCAPI_UNAUTHORIZED',
+            message: `${context.operationId}: API rejected the Admin token. Check token validity and the resolved tenant. ${scopeAdvice(context)}`,
+        };
+    if (status === 403)
+        return {
+            code: 'SCAPI_FORBIDDEN',
+            message: `${context.operationId}: access denied; a 403 alone does not identify the missing permission. ${scopeAdvice(context)}`,
+        };
+}
+export function unsupportedScapiAuth(document, operation) {
+    const auth = getScapiAuthInfo(document, operation);
+    const target = `${operation.operationId} (${document.entry.id})`;
+    const schemes = auth.schemes.join(' OR ') || 'OAuth grant parameters';
+    if (document.entry.id === 'shopper/auth-admin/v1')
+        return new Error(`SCAPI_AUTH_UNSUPPORTED: ${target} requires SLAS administration authentication and its declared admin roles. This executor supports AmOAuth2 only; use the SLAS administration CLI/SDK. A SLAS Shopper client is not an admin credential.`);
+    if (auth.types.includes('shopper'))
+        return new Error(`SCAPI_SHOPPER_AUTH_UNSUPPORTED: ${target} requires ${schemes}. Shopper execution is not supported by this executor yet. Use a Shopper client/SDK with SLAS authentication (slasClientId, siteId, and the required token flow; slasClientSecret for private clients). Follow the operation's security scopes. Adding SLAS settings will not enable this executor; do not substitute Account Manager credentials.`);
+    return new Error(`SCAPI_AUTH_UNSUPPORTED: ${target} declares ${schemes}; this executor supports AmOAuth2 only. Inspect the operation's security requirements before choosing a client.`);
+}
+//# sourceMappingURL=authentication.js.map

package/dist/esm/scapi/authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../../src/scapi/authentication.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,6BAA6B,EAAC,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAC,qBAAqB,EAAE,aAAa,EAA6C,MAAM,cAAc,CAAC;AAS9G,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,wBAAwB,CAAC,QAA6B,EAAE,SAAsB;IAC5F,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,IAAI,qBAAqB,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpG,IAAI,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC;QACvD,OAAO,kFAAkF,CAAC;IAC5F,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAc,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;SACtE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACpD,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1G,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC;QAC7D,OAAO,yEAAyE,CAAC;AACrF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,QAA6B,EAAE,SAAsB;IACpF,MAAM,QAAQ,GAAkB,SAAS,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,KAAK,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,uBAAuB,CAAC;YACtG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;aAChB,IAAI,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;;YACtE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,2FAA2F;IAC3F,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CACzB,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,CAC9F,CAAC;IACF,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;QACxB,OAAO;QACP,UAAU,EAAE,KAAK,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAClC,SAAgC,EAChC,QAAwB;IAExB,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAA4B,EAAE,CAAC;YAC5F,MAAM,QAAQ,GAAgB,EAAC,GAAG,IAAI,EAAC,CAAC;YACxC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtD,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC/C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAC,CAAC;gBAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;oBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnD,KAAK,EAAE,CAAC;YACV,CAAC;YACD,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;YAC9B,CAAC,CAAC;gBACE;oBACE,GAAG,QAAQ;oBACX,KAAK,EAAE,EAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAC;oBAC5D,MAAM,EAAE,EAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAC;iBACpC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC;AAcD,SAAS,WAAW,CAAC,OAAoB;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO,CACL,kCAAkC,OAAO,mBAAmB,OAAO,CAAC,WAAW,IAAI;QACnF,2GAA2G,CAC5G,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAoB;IACjE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC;IACzD,IAAI,UAA2C,CAAC;IAChD,IAAI,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3D,UAAU,GAAG;YACX,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,4CAA4C,MAAM,KAAK,WAAW,CAAC,OAAO,CAAC,EAAE;SACvF,CAAC;SACC,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,UAAU,GAAG;YACX,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,GAAG,MAAM,wMAAwM;SAC3N,CAAC;SACC,IAAI,KAAK,YAAY,6BAA6B;QACrD,UAAU,GAAG;YACX,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,GAAG,MAAM,wKAAwK;SAC3L,CAAC;SACC,IACH,uGAAuG,CAAC,IAAI,CAC1G,OAAO,CACR;QAED,UAAU,GAAG;YACX,IAAI,EAAE,kCAAkC;YACxC,OAAO,EAAE,4CAA4C,MAAM,6IAA6I;SACzM,CAAC;IACJ,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACrG,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAoB;IACpE,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,iFAAiF,WAAW,CAAC,OAAO,CAAC,EAAE;SACvI,CAAC;IACJ,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,0EAA0E,WAAW,CAAC,OAAO,CAAC,EAAE;SAChI,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA6B,EAAE,SAAsB;IACxF,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC;IACtE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,uBAAuB;QAC/C,OAAO,IAAI,KAAK,CACd,2BAA2B,MAAM,yMAAyM,CAC3O,CAAC;IACJ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChC,OAAO,IAAI,KAAK,CACd,mCAAmC,MAAM,aAAa,OAAO,oVAAoV,CAClZ,CAAC;IACJ,OAAO,IAAI,KAAK,CACd,2BAA2B,MAAM,aAAa,OAAO,iHAAiH,CACvK,CAAC;AACJ,CAAC"}

package/dist/esm/scapi/catalog.d.ts

@@ -0,0 +1,29 @@
+/** OpenAPI documents are dynamic JSON; no generated client type is required. */
+export type ApiDocument = Record<string, any>;
+export interface ScapiSchemaEntry {
+    id: string;
+    apiFamily: string;
+    apiName: string;
+    apiVersion: string;
+    schemaVersion: string;
+    status: string;
+    file: string;
+    source: string;
+}
+export interface ScapiSchemaDocument {
+    entry: ScapiSchemaEntry;
+    schema: ApiDocument;
+}
+/** Load the versioned, language-neutral corpus without network or configuration. */
+export declare function loadScapiSchemas(): ScapiSchemaDocument[];
+export declare const SCAPI_METHODS: readonly ["get", "head", "post", "put", "patch", "delete", "options"];
+/** Match an actual API path to its schema, ignoring untrusted schema server origins. */
+export declare function findScapiOperation(documents: ScapiSchemaDocument[], method: string, path: string): {
+    document: ScapiSchemaDocument;
+    operation: ApiDocument;
+    pathItem: ApiDocument;
+    template: string;
+    parameters: Record<string, string>;
+};
+/** Resolve one local reference for request contract inspection. */
+export declare function resolveScapiReference(value: ApiDocument, schema: ApiDocument): ApiDocument;

package/dist/esm/scapi/catalog.js

@@ -0,0 +1,81 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+import { readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, resolve, sep } from 'node:path';
+let bundled;
+/** Load the versioned, language-neutral corpus without network or configuration. */
+export function loadScapiSchemas() {
+    if (bundled)
+        return bundled;
+    const require = createRequire(import.meta.url);
+    const manifestFile = require.resolve('@salesforce/b2c-api-schemas/manifest.json');
+    const root = dirname(manifestFile);
+    const manifest = JSON.parse(readFileSync(manifestFile, 'utf8'));
+    if (manifest.formatVersion !== 1)
+        throw new Error('Unsupported SCAPI schema manifest.');
+    bundled = manifest.schemas.map((entry) => {
+        const file = resolve(root, entry.file);
+        if (!file.startsWith(root + sep))
+            throw new Error('Invalid bundled schema path.');
+        return { entry, schema: JSON.parse(readFileSync(file, 'utf8')) };
+    });
+    return bundled;
+}
+export const SCAPI_METHODS = ['get', 'head', 'post', 'put', 'patch', 'delete', 'options'];
+/** Match an actual API path to its schema, ignoring untrusted schema server origins. */
+export function findScapiOperation(documents, method, path) {
+    for (const document of documents) {
+        const base = `/${document.entry.id}`;
+        if (!path.startsWith(base + '/'))
+            continue;
+        for (const [template, item] of Object.entries(document.schema.paths ?? {})) {
+            const operation = item[method.toLowerCase()];
+            if (!operation)
+                continue;
+            const actual = path.slice(base.length).split('/');
+            const operationPath = document.entry.apiFamily === 'custom' ? `/organizations/{organizationId}${template}` : template;
+            const expected = operationPath.split('/');
+            if (actual.length !== expected.length)
+                continue;
+            const parameters = {};
+            const match = expected.every((part, index) => {
+                if (part.startsWith('{') && part.endsWith('}')) {
+                    parameters[part.slice(1, -1)] = decodeURIComponent(actual[index]);
+                    return actual[index].length > 0;
+                }
+                return part === actual[index];
+            });
+            if (match)
+                return {
+                    document,
+                    operation: operation,
+                    pathItem: item,
+                    template: base + operationPath,
+                    parameters,
+                };
+        }
+    }
+    throw new Error(`SCAPI_OPERATION_NOT_FOUND: ${method} ${path}. Search the schema before calling.`);
+}
+/** Resolve one local reference for request contract inspection. */
+export function resolveScapiReference(value, schema) {
+    const visited = new Set();
+    while (typeof value?.$ref === 'string') {
+        const ref = value.$ref;
+        if (!ref.startsWith('#/') || visited.has(ref))
+            throw new Error(`Unsupported schema reference: ${ref}`);
+        visited.add(ref);
+        value = ref
+            .slice(2)
+            .split('/')
+            .reduce((parent, key) => parent?.[key.replaceAll('~1', '/').replaceAll('~0', '~')], schema);
+        if (!value)
+            throw new Error(`Missing schema reference: ${ref}`);
+    }
+    return value;
+}
+//# sourceMappingURL=catalog.js.map

package/dist/esm/scapi/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/scapi/catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,YAAY,EAAC,MAAM,SAAS,CAAC;AACrC,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAC,MAAM,WAAW,CAAC;AAmBhD,IAAI,OAA0C,CAAC;AAE/C,oFAAoF;AACpF,MAAM,UAAU,gBAAgB;IAC9B,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAG7D,CAAC;IACF,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxF,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClF,OAAO,EAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,EAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEnG,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,SAAgC,EAAE,MAAc,EAAE,IAAY;IAC/F,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAA4B,EAAE,CAAC;YACtG,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,aAAa,GACjB,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClG,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAAE,SAAS;YAChD,MAAM,UAAU,GAA2B,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAClE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,IAAI,KAAK;gBACP,OAAO;oBACL,QAAQ;oBACR,SAAS,EAAE,SAAwB;oBACnC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI,GAAG,aAAa;oBAC9B,UAAU;iBACX,CAAC;QACN,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,IAAI,IAAI,qCAAqC,CAAC,CAAC;AACrG,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,KAAkB,EAAE,MAAmB;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAc,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QACvG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,KAAK,GAAG,GAAG;aACR,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CAAC,CAAC,MAAmB,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/esm/scapi/index.d.ts

@@ -0,0 +1,12 @@
+/** Bundled SCAPI contracts and local JavaScript execution with SDK-authenticated requests. @module scapi */
+export { loadScapiSchemas, findScapiOperation, resolveScapiReference } from './catalog.js';
+export type { ApiDocument, ScapiSchemaEntry, ScapiSchemaDocument } from './catalog.js';
+export { runScapiCode } from './runtime.js';
+export { createScapiAuth } from './auth-primitives.js';
+export type { ScapiCodeOptions, ScapiRuntimeControl } from './runtime.js';
+export { loadBuiltinScapiSnippets, loadScapiSnippets, saveScapiSnippet, getScapiSnippetDirectory, initializeScapiSnippetStore, } from './snippets.js';
+export type { ScapiSnippet } from './snippets.js';
+export { createScapiRequest } from './request.js';
+export type { ScapiRequestOptions, ScapiConfirmation } from './request.js';
+export { getScapiAuthInfo } from './authentication.js';
+export type { ScapiAuthType, ScapiAuthInfo, ScapiAuthDiagnostic } from './authentication.js';

package/dist/esm/scapi/index.js

@@ -0,0 +1,13 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+/** Bundled SCAPI contracts and local JavaScript execution with SDK-authenticated requests. @module scapi */
+export { loadScapiSchemas, findScapiOperation, resolveScapiReference } from './catalog.js';
+export { runScapiCode } from './runtime.js';
+export { createScapiAuth } from './auth-primitives.js';
+export { loadBuiltinScapiSnippets, loadScapiSnippets, saveScapiSnippet, getScapiSnippetDirectory, initializeScapiSnippetStore, } from './snippets.js';
+export { createScapiRequest } from './request.js';
+export { getScapiAuthInfo } from './authentication.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/scapi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scapi/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,4GAA4G;AAC5G,OAAO,EAAC,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAC,MAAM,cAAc,CAAC;AAEzF,OAAO,EAAC,YAAY,EAAC,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAErD,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAC,kBAAkB,EAAC,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAC,gBAAgB,EAAC,MAAM,qBAAqB,CAAC"}

package/dist/esm/scapi/request.d.ts

@@ -0,0 +1,28 @@
+import type { AuthStrategy } from '../auth/types.js';
+import { type MiddlewareRegistry } from '../clients/middleware-registry.js';
+import { type SafetyConfig } from '../safety/index.js';
+import { type ScapiSchemaDocument } from './catalog.js';
+/** Exact, resolved request awaiting approval. Credentials are never included. */
+export interface ScapiConfirmation {
+    operationId: string;
+    method: string;
+    url: string;
+    query: Record<string, unknown>;
+    body?: unknown;
+    reason: string;
+}
+export interface ScapiRequestOptions {
+    shortCode: string;
+    tenantId: string;
+    siteId?: string;
+    auth: AuthStrategy | (() => AuthStrategy);
+    safety: SafetyConfig;
+    documents: ScapiSchemaDocument[];
+    middlewareRegistry?: MiddlewareRegistry;
+    /** Resolve only after user approval; reject on decline/cancellation. Omit to block confirmations. */
+    confirm?: (request: ScapiConfirmation, signal: AbortSignal) => Promise<void>;
+    /** Called immediately before network dispatch, for tracking potentially applied writes. */
+    onDispatch?: () => void;
+}
+/** Build one execution's SCAPI request helper. Auth, policy, and responses stay in the host. */
+export declare function createScapiRequest(options: ScapiRequestOptions): (input: unknown, signal: AbortSignal) => Promise<unknown>;

package/dist/esm/scapi/request.js

@@ -0,0 +1,273 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+import createClient, { createQuerySerializer } from 'openapi-fetch';
+import { buildTenantScope, toOrganizationId } from '../clients/custom-apis.js';
+import { withScopes } from '../clients/scapi-backend-utils.js';
+import { createAuthMiddleware, createSafetyMiddleware } from '../clients/middleware.js';
+import { globalMiddlewareRegistry } from '../clients/middleware-registry.js';
+import { SafetyGuard, extractJobIdFromPath } from '../safety/index.js';
+import { getLogger } from '../logging/logger.js';
+import { findScapiOperation, resolveScapiReference } from './catalog.js';
+import { scapiAuthError, scapiAuthResponse, unsupportedScapiAuth, unsupportedScapiTransfer, isScapiTextMediaType, } from './authentication.js';
+/** Build one execution's SCAPI request helper. Auth, policy, and responses stay in the host. */
+export function createScapiRequest(options) {
+    if (!/^[a-z0-9-]+$/i.test(options.shortCode))
+        throw new Error('Invalid SCAPI shortCode.');
+    const origin = `https://${options.shortCode}.api.commercecloud.salesforce.com`;
+    const organizationId = toOrganizationId(options.tenantId);
+    const documents = [...options.documents];
+    let totalBytes = 0;
+    return async (input, signal) => {
+        signal.throwIfAborted();
+        if (!input || typeof input !== 'object' || Array.isArray(input))
+            throw new Error('Request must be an object.');
+        // Detach the request from caller mutations while a confirmation is outstanding.
+        const args = structuredClone(input);
+        if (Object.keys(args).some((key) => !['method', 'path', 'query', 'body'].includes(key)))
+            throw new Error('Request accepts method, path, query, body only.');
+        const method = typeof args.method === 'string' ? args.method.toUpperCase() : '';
+        if (!['GET', 'HEAD', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'].includes(method))
+            throw new Error('Unsupported SCAPI method.');
+        if (typeof args.path !== 'string' ||
+            !args.path.startsWith('/') ||
+            args.path.startsWith('//') ||
+            /[?#\\]/.test(args.path))
+            throw new Error('Use a SCAPI path, without origin, query, or fragment.');
+        const path = args.path.replaceAll('{organizationId}', encodeURIComponent(organizationId));
+        const decoded = decodeURIComponent(path);
+        if (decoded.includes('\\') || decoded.split('/').some((part) => part === '.' || part === '..') || /[{}]/.test(path))
+            throw new Error('Invalid SCAPI path; substitute path parameters.');
+        if (path.startsWith('/custom/')) {
+            const [, , apiName, apiVersion] = path.split('/');
+            const id = `custom/${apiName}/${apiVersion}`;
+            if (!documents.some((document) => document.entry.id === id))
+                throw new Error(`SCAPI_CUSTOM_SCHEMA_REQUIRED: Fetch /dx/scapi-schemas/v1/organizations/{organizationId}/schemas/${id} ` +
+                    'with scapi.request in this execution before calling its endpoints. Inspect the contract and declared authentication.');
+        }
+        const matched = findScapiOperation(documents, method, path);
+        if (matched.parameters.organizationId && matched.parameters.organizationId !== organizationId)
+            throw new Error('SCAPI target differs from resolved organizationId.');
+        const { schema } = matched.document;
+        const { operation } = matched;
+        const security = operation.security ?? schema.security ?? [];
+        const admin = security.find((requirement) => Array.isArray(requirement.AmOAuth2) && Object.keys(requirement).length === 1);
+        if (!admin)
+            throw unsupportedScapiAuth(matched.document, operation);
+        const transferLimit = unsupportedScapiTransfer(matched.document, operation);
+        if (transferLimit)
+            throw new Error(`SCAPI_TRANSFER_UNSUPPORTED: ${operation.operationId}. ${transferLimit} Use a file-capable HTTP client.`);
+        const query = args.query === undefined ? {} : args.query;
+        if (!query || typeof query !== 'object' || Array.isArray(query))
+            throw new Error('query must be an object.');
+        const queryValues = { ...query };
+        const parameters = [...(matched.pathItem.parameters ?? []), ...(operation.parameters ?? [])].map((param) => resolveScapiReference(param, schema));
+        for (const parameter of parameters) {
+            if (parameter.in === 'query' && parameter.name === 'siteId' && queryValues.siteId === undefined && options.siteId)
+                queryValues.siteId = options.siteId;
+            const value = parameter.in === 'path'
+                ? matched.parameters[parameter.name]
+                : parameter.in === 'query'
+                    ? queryValues[parameter.name]
+                    : undefined;
+            if (parameter.required && value === undefined)
+                throw new Error(`SCAPI_ARGUMENT_INVALID: ${operation.operationId} requires ${parameter.in} ${parameter.name}.` +
+                    (parameter.name === 'siteId'
+                        ? ' Set query.siteId or configure siteId for the selected project.'
+                        : ' Inspect the operation parameters with scapi_search.'));
+        }
+        const body = operation.requestBody ? resolveScapiReference(operation.requestBody, schema) : undefined;
+        if (body?.required && args.body === undefined)
+            throw new Error('SCAPI_ARGUMENT_INVALID: request body is required.');
+        if (args.body !== undefined) {
+            if (!body?.content?.['application/json'])
+                throw new Error('This operation does not accept a JSON body.');
+            if (Buffer.byteLength(JSON.stringify(args.body)) > 1_048_576)
+                throw new Error('SCAPI_REQUEST_TOO_LARGE');
+        }
+        const scopes = admin.AmOAuth2;
+        // SCAPI standard contracts list ro/rw domain alternatives together; reuse SDK scope negotiation.
+        const alternatives = scopes.length === 2 && scopes.some((scope) => scopes.includes(`${scope}.rw`));
+        const candidates = alternatives
+            ? [...scopes].sort((a, b) => Number(a.endsWith('.rw')) - Number(b.endsWith('.rw'))).map((scope) => [scope])
+            : [scopes];
+        const authContext = {
+            operationId: operation.operationId,
+            api: matched.document.entry.id,
+            candidates,
+            tenantScope: buildTenantScope(options.tenantId),
+        };
+        const querySerializer = (values) => Object.entries(values)
+            .map(([name, value]) => {
+            const parameter = parameters.find((item) => item.in === 'query' && item.name === name);
+            return createQuerySerializer({
+                array: { style: parameter?.style ?? 'form', explode: parameter?.explode ?? true },
+                object: { style: parameter?.style ?? 'form', explode: parameter?.explode ?? true },
+                allowReserved: parameter?.allowReserved,
+            })({ [name]: value });
+        })
+            .filter(Boolean)
+            .join('&');
+        // Use per-execution policy instead of the CLI's startup-bound safety provider.
+        const url = origin + path;
+        const pathname = new URL(url).pathname;
+        // Each request owns its guard: an approval must not exempt concurrent requests.
+        const guard = new SafetyGuard(options.safety);
+        const safetyOperation = { type: 'http', method, url, path: pathname, jobId: extractJobIdFromPath(pathname) };
+        const evaluation = guard.evaluate(safetyOperation);
+        let approved = false;
+        if (evaluation.action === 'confirm' && options.confirm) {
+            await options.confirm(structuredClone({
+                operationId: operation.operationId,
+                method,
+                url,
+                query: queryValues,
+                body: args.body,
+                reason: evaluation.reason,
+            }), signal);
+            signal.throwIfAborted();
+            guard.temporarilyAllow(safetyOperation);
+            approved = true;
+        }
+        guard.assert(safetyOperation);
+        const queryString = querySerializer(queryValues);
+        const approvedUrl = new URL(url + (queryString ? `?${queryString}` : '')).href;
+        const approvedBody = args.body === undefined ? '' : JSON.stringify(args.body);
+        const checkApprovedRequest = async (request) => {
+            if (approved &&
+                (request.method !== method || request.url !== approvedUrl || (await request.clone().text()) !== approvedBody))
+                throw new Error('SCAPI_APPROVAL_MISMATCH: request changed after approval; no request sent.');
+        };
+        let baseAuth;
+        try {
+            baseAuth = withScopes(typeof options.auth === 'function' ? options.auth() : options.auth, [
+                authContext.tenantScope,
+            ]);
+        }
+        catch (error) {
+            throw scapiAuthError(error, authContext);
+        }
+        const auth = {
+            fetch: baseAuth.fetch.bind(baseAuth),
+            getAuthorizationHeader: async () => {
+                try {
+                    if (baseAuth.getAccessTokenForCascade)
+                        return `Bearer ${await baseAuth.getAccessTokenForCascade(candidates)}`;
+                    const scoped = withScopes(baseAuth, scopes);
+                    if (!scoped.getAuthorizationHeader)
+                        throw new Error('SCAPI_ADMIN_AUTH_UNSUPPORTED: The configured auth strategy cannot provide an authorization header. Use Account Manager OAuth credentials or a supported JWT strategy.');
+                    return await scoped.getAuthorizationHeader();
+                }
+                catch (error) {
+                    throw scapiAuthError(error, authContext);
+                }
+            },
+        };
+        const client = createClient({
+            baseUrl: origin,
+            headers: { Accept: 'application/json, text/*' },
+            fetch: async (request) => {
+                signal.throwIfAborted();
+                await checkApprovedRequest(request);
+                signal.throwIfAborted();
+                options.onDispatch?.();
+                const response = await fetch(request, { signal, redirect: 'error' });
+                const mediaType = response.headers.get('content-type');
+                if (response.ok && mediaType && !isScapiTextMediaType(mediaType)) {
+                    void response.body?.cancel().catch(() => { });
+                    throw new Error('SCAPI_TRANSFER_UNSUPPORTED: API returned a non-text response. Use a file-capable HTTP client; check any write before retrying.');
+                }
+                const chunks = [];
+                let bytes = 0;
+                const reader = response.body?.getReader();
+                try {
+                    while (reader) {
+                        const chunk = await reader.read();
+                        if (chunk.done)
+                            break;
+                        bytes += chunk.value.length;
+                        totalBytes += chunk.value.length;
+                        if (bytes > 1_048_576 || totalBytes > 5_242_880)
+                            throw new Error('SCAPI_RESPONSE_TOO_LARGE: request a smaller page.');
+                        chunks.push(chunk.value);
+                    }
+                }
+                finally {
+                    // A tee'd response can wait for another consumer; cleanup must not delay a limit error.
+                    void reader?.cancel().catch(() => { });
+                }
+                getLogger().debug({ method, path: matched.template, status: response.status, bytes }, 'SCAPI code request');
+                return new Response(chunks.length ? Buffer.concat(chunks) : null, {
+                    status: response.status,
+                    statusText: response.statusText,
+                    headers: response.headers,
+                });
+            },
+        });
+        for (const middleware of (options.middlewareRegistry ?? globalMiddlewareRegistry).getMiddleware('scapi', {
+            exclude: ['cli-safety-guard'],
+        }))
+            client.use(middleware);
+        client.use({
+            onRequest: async ({ request }) => {
+                await checkApprovedRequest(request);
+            },
+        }, createSafetyMiddleware(guard), createAuthMiddleware(auth));
+        const result = await client.request(method, path, {
+            params: { query: queryValues },
+            querySerializer,
+            body: args.body,
+            signal,
+            redirect: 'error',
+            parseAs: 'text',
+        });
+        const text = result.data ?? result.error;
+        let data = text ?? null;
+        if (typeof text === 'string' && text) {
+            try {
+                data = JSON.parse(text);
+            }
+            catch {
+                /* Keep non-JSON responses as text. */
+            }
+        }
+        const diagnostic = scapiAuthResponse(result.response.status, authContext);
+        // Only authenticated live schema responses extend this execution's custom API catalog.
+        if (result.response.ok &&
+            method === 'GET' &&
+            matched.document.entry.id === 'dx/scapi-schemas/v1' &&
+            matched.parameters.apiFamily === 'custom') {
+            const schema = data;
+            if (!schema ||
+                !/^3\./.test(schema.openapi) ||
+                !schema.paths ||
+                typeof schema.paths !== 'object' ||
+                Array.isArray(schema.paths))
+                throw new Error('SCAPI_CUSTOM_SCHEMA_INVALID: Expected an OpenAPI 3 contract with paths from the Schemas API.');
+            const { apiName, apiVersion } = matched.parameters;
+            const id = `custom/${apiName}/${apiVersion}`;
+            const document = {
+                entry: {
+                    id,
+                    apiFamily: 'custom',
+                    apiName,
+                    apiVersion,
+                    schemaVersion: schema.info?.version ?? apiVersion,
+                    status: 'live',
+                    file: '',
+                    source: url,
+                },
+                schema,
+            };
+            const previous = documents.findIndex((item) => item.entry.id === id);
+            if (previous < 0)
+                documents.push(document);
+            else
+                documents[previous] = document;
+        }
+        return { status: result.response.status, ok: result.response.ok, data, ...(diagnostic ? { diagnostic } : {}) };
+    };
+}
+//# sourceMappingURL=request.js.map

package/dist/esm/scapi/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../../src/scapi/request.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,YAAY,EAAE,EAAC,qBAAqB,EAAC,MAAM,eAAe,CAAC;AAGlE,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAC,UAAU,EAAC,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAC,oBAAoB,EAAE,sBAAsB,EAAC,MAAM,0BAA0B,CAAC;AACtF,OAAO,EAAC,wBAAwB,EAA0B,MAAM,mCAAmC,CAAC;AACpG,OAAO,EAAC,WAAW,EAAE,oBAAoB,EAAoB,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAC,kBAAkB,EAAE,qBAAqB,EAA6C,MAAM,cAAc,CAAC;AACnH,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AA0B7B,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAChC,OAA4B;IAE5B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,WAAW,OAAO,CAAC,SAAS,mCAAmC,CAAC;IAC/E,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC/G,gFAAgF;QAChF,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAA4B,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,IACE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAExB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACjH,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,EAAE,AAAD,EAAG,OAAO,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,EAAE,GAAG,UAAU,OAAO,IAAI,UAAU,EAAE,CAAC;YAC7C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CACb,mGAAmG,EAAE,GAAG;oBACtG,sHAAsH,CACzH,CAAC;QACN,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,cAAc,KAAK,cAAc;YAC3F,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,MAAM,EAAC,MAAM,EAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,EAAC,SAAS,EAAC,GAAG,OAAO,CAAC;QAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CACzB,CAAC,WAAwB,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,CAC3G,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,MAAM,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5E,IAAI,aAAa;YACf,MAAM,IAAI,KAAK,CACb,+BAA+B,SAAS,CAAC,WAAW,KAAK,aAAa,kCAAkC,CACzG,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACzD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC7G,MAAM,WAAW,GAAG,EAAC,GAAG,KAAK,EAA4B,CAAC;QAC1D,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACzG,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,CACrC,CAAC;QACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,SAAS,CAAC,EAAE,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM;gBAC/G,WAAW,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACtC,MAAM,KAAK,GACT,SAAS,CAAC,EAAE,KAAK,MAAM;gBACrB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;gBACpC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO;oBACxB,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC7B,CAAC,CAAC,SAAS,CAAC;YAClB,IAAI,SAAS,CAAC,QAAQ,IAAI,KAAK,KAAK,SAAS;gBAC3C,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,CAAC,WAAW,aAAa,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,IAAI,GAAG;oBAC5F,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;wBAC1B,CAAC,CAAC,iEAAiE;wBACnE,CAAC,CAAC,sDAAsD,CAAC,CAC9D,CAAC;QACN,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtG,IAAI,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACpH,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACzG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAoB,CAAC;QAC1C,iGAAiG;QACjG,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC;QACnG,MAAM,UAAU,GAAG,YAAY;YAC7B,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3G,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACb,MAAM,WAAW,GAAG;YAClB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAC9B,UAAU;YACV,WAAW,EAAE,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC;SAChD,CAAC;QACF,MAAM,eAAe,GAAG,CAAC,MAA+B,EAAE,EAAE,CAC1D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aACnB,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACvF,OAAO,qBAAqB,CAAC;gBAC3B,KAAK,EAAE,EAAC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,IAAI,EAAC;gBAC/E,MAAM,EAAE,EAAC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,IAAI,EAAC;gBAChF,aAAa,EAAE,SAAS,EAAE,aAAa;aACxC,CAAC,CAAC,EAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAC,CAAC,CAAC;QACtB,CAAC,CAAC;aACD,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,+EAA+E;QAC/E,MAAM,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACvC,gFAAgF;QAChF,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,eAAe,GAAG,EAAC,IAAI,EAAE,MAAe,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAC,CAAC;QACpH,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACnD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,OAAO,CAAC,OAAO,CACnB,eAAe,CAAC;gBACd,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM;gBACN,GAAG;gBACH,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,EACF,MAAM,CACP,CAAC;YACF,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;YACxC,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAgB,EAAE,EAAE;YACtD,IACE,QAAQ;gBACR,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,YAAY,CAAC;gBAE7G,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACjG,CAAC,CAAC;QACF,IAAI,QAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,QAAQ,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE;gBACxF,WAAW,CAAC,WAAW;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,GAAiB;YACzB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YACpC,sBAAsB,EAAE,KAAK,IAAI,EAAE;gBACjC,IAAI,CAAC;oBACH,IAAI,QAAQ,CAAC,wBAAwB;wBAAE,OAAO,UAAU,MAAM,QAAQ,CAAC,wBAAwB,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9G,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAC5C,IAAI,CAAC,MAAM,CAAC,sBAAsB;wBAChC,MAAM,IAAI,KAAK,CACb,uKAAuK,CACxK,CAAC;oBACJ,OAAO,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBAC/C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;SACF,CAAC;QACF,MAAM,MAAM,GAAG,YAAY,CAAc;YACvC,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,EAAC,MAAM,EAAE,0BAA0B,EAAC;YAC7C,KAAK,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;gBAChC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBACpC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAC,CAAC,CAAC;gBACnE,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACvD,IAAI,QAAQ,CAAC,EAAE,IAAI,SAAS,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;oBACjE,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAC7C,MAAM,IAAI,KAAK,CACb,gIAAgI,CACjI,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAiB,EAAE,CAAC;gBAChC,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;gBAC1C,IAAI,CAAC;oBACH,OAAO,MAAM,EAAE,CAAC;wBACd,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;wBAClC,IAAI,KAAK,CAAC,IAAI;4BAAE,MAAM;wBACtB,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;wBAC5B,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;wBACjC,IAAI,KAAK,GAAG,SAAS,IAAI,UAAU,GAAG,SAAS;4BAC7C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;wBACvE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,wFAAwF;oBACxF,KAAK,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACxC,CAAC;gBACD,SAAS,EAAE,CAAC,KAAK,CAAC,EAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAC,EAAE,oBAAoB,CAAC,CAAC;gBAC1G,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;oBAChE,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;iBAC1B,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;QACH,KAAK,MAAM,UAAU,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,wBAAwB,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE;YACvG,OAAO,EAAE,CAAC,kBAAkB,CAAC;SAC9B,CAAC;YACA,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,CACR;YACE,SAAS,EAAE,KAAK,EAAE,EAAC,OAAO,EAAC,EAAE,EAAE;gBAC7B,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACtC,CAAC;SACF,EACD,sBAAsB,CAAC,KAAK,CAAC,EAC7B,oBAAoB,CAAC,IAAI,CAAC,CAC3B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAoB,EAAE,IAAI,EAAE;YAC9D,MAAM,EAAE,EAAC,KAAK,EAAE,WAAW,EAAC;YAC5B,eAAe;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM;YACN,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC;QACzC,IAAI,IAAI,GAAY,IAAI,IAAI,IAAI,CAAC;QACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1E,uFAAuF;QACvF,IACE,MAAM,CAAC,QAAQ,CAAC,EAAE;YAClB,MAAM,KAAK,KAAK;YAChB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,qBAAqB;YACnD,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,QAAQ,EACzC,CAAC;YACD,MAAM,MAAM,GAAG,IAA0B,CAAC;YAC1C,IACE,CAAC,MAAM;gBACP,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC5B,CAAC,MAAM,CAAC,KAAK;gBACb,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;gBAChC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;gBAE3B,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;YAClH,MAAM,EAAC,OAAO,EAAE,UAAU,EAAC,GAAG,OAAO,CAAC,UAAU,CAAC;YACjD,MAAM,EAAE,GAAG,UAAU,OAAO,IAAI,UAAU,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAwB;gBACpC,KAAK,EAAE;oBACL,EAAE;oBACF,SAAS,EAAE,QAAQ;oBACnB,OAAO;oBACP,UAAU;oBACV,aAAa,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,UAAU;oBACjD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,EAAE;oBACR,MAAM,EAAE,GAAG;iBACZ;gBACD,MAAM;aACP,CAAC;YACF,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,IAAI,QAAQ,GAAG,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;;gBACtC,SAAS,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;QACtC,CAAC;QACD,OAAO,EAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC;IAC7G,CAAC,CAAC;AACJ,CAAC"}