@salesforce/b2c-tooling-sdk 1.24.2 → 2.1.0

package/dist/esm/scapi/runtime.d.ts

@@ -0,0 +1,27 @@
+import type { ScapiSchemaDocument } from './catalog.js';
+import { type ScapiAuthType } from './authentication.js';
+import { type ScapiSnippet } from './snippets.js';
+/** Host-only controls for an execution retained while awaiting user input. */
+export interface ScapiRuntimeControl {
+    pauseTimeout(): void;
+    resumeTimeout(): void;
+}
+export interface ScapiCodeOptions {
+    code: string;
+    input?: unknown;
+    snippets?: ScapiSnippet[];
+    documents?: ScapiSchemaDocument[];
+    authType?: ScapiAuthType;
+    request?: (options: unknown, signal: AbortSignal) => Promise<unknown>;
+    auth?: (operation: string, options: unknown, signal: AbortSignal) => Promise<unknown>;
+    organizationId?: string;
+    siteId?: string;
+    cwd?: string;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+    maxOutputBytes?: number;
+    /** The host owns cancellation and cleanup while paused; approval may wait indefinitely. Never exposed to the child. */
+    onControl?: (control: ScapiRuntimeControl) => void;
+}
+/** Execute one JavaScript async function in a disposable Node process. */
+export declare function runScapiCode(options: ScapiCodeOptions): Promise<unknown>;

package/dist/esm/scapi/runtime.js

@@ -0,0 +1,161 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+import { spawn } from 'node:child_process';
+import { getLogger } from '../logging/logger.js';
+import { SCAPI_WORKER_SOURCE } from './worker-source.js';
+import { describeScapiSchemas } from './authentication.js';
+import { createScapiSnippetResolver, loadBuiltinScapiSnippets } from './snippets.js';
+/** Execute one JavaScript async function in a disposable Node process. */
+export async function runScapiCode(options) {
+    const timeoutMs = Math.min(options.timeoutMs ?? 30_000, 60_000);
+    if (!options.code.trim() || Buffer.byteLength(options.code) > 32_768)
+        throw new Error('Code must contain 1-32768 bytes.');
+    if (options.signal?.aborted)
+        throw new Error('SCAPI_EXECUTION_CANCELLED');
+    const documents = describeScapiSchemas(options.documents ?? [], options.authType);
+    const resolveSnippet = createScapiSnippetResolver(options.snippets ?? loadBuiltinScapiSnippets());
+    if (options.authType && !documents.length)
+        throw new Error(`No ${options.authType} operations match this search. Omit authType to inspect all authentication requirements.`);
+    return new Promise((resolve, reject) => {
+        const controller = new AbortController();
+        const child = spawn(process.execPath, ['--permission', '--max-old-space-size=128', '--input-type=commonjs', '--eval', SCAPI_WORKER_SOURCE], {
+            cwd: options.cwd,
+            // Credentials stay in the parent; explicit token helpers return only tokens and metadata.
+            env: { PATH: process.env.PATH, SYSTEMROOT: process.env.SYSTEMROOT, TEMP: process.env.TEMP },
+            stdio: ['ignore', 'pipe', 'pipe', 'ipc'],
+            windowsHide: true,
+        });
+        let settled = false;
+        let outputBytes = 0;
+        let calls = 0;
+        let active = 0;
+        let snippetCalls = 0;
+        let outcome;
+        const finish = (value, error) => {
+            if (settled)
+                return;
+            settled = true;
+            outcome = { value, error };
+            clearTimeout(timer);
+            options.signal?.removeEventListener('abort', cancel);
+            controller.abort();
+            child.kill('SIGKILL');
+        };
+        const cancel = () => finish(undefined, new Error('SCAPI_EXECUTION_CANCELLED: check any in-flight write before retrying.'));
+        let remainingMs = timeoutMs;
+        let startedAt = performance.now();
+        const timedOut = () => finish(undefined, new Error('SCAPI_EXECUTION_TIMEOUT: check any in-flight write before retrying.'));
+        let timer = setTimeout(timedOut, remainingMs);
+        const control = {
+            pauseTimeout() {
+                if (settled || !timer)
+                    return;
+                remainingMs = Math.max(0, remainingMs - (performance.now() - startedAt));
+                clearTimeout(timer);
+                timer = undefined;
+            },
+            resumeTimeout() {
+                if (settled || timer)
+                    return;
+                startedAt = performance.now();
+                timer = setTimeout(timedOut, remainingMs);
+            },
+        };
+        options.signal?.addEventListener('abort', cancel, { once: true });
+        const drain = (chunk) => {
+            outputBytes += chunk.length;
+            if (outputBytes > 65_536)
+                finish(undefined, new Error('SCAPI_CONSOLE_LIMIT: return results instead of logging.'));
+        };
+        child.stdout?.on('data', drain);
+        child.stderr?.on('data', drain);
+        child.on('spawn', () => getLogger().debug({ workerPid: child.pid }, 'SCAPI code worker started'));
+        child.on('error', (error) => finish(undefined, error));
+        child.on('close', (code) => {
+            clearTimeout(timer);
+            options.signal?.removeEventListener('abort', cancel);
+            controller.abort();
+            if (outcome?.error)
+                reject(outcome.error);
+            else if (outcome)
+                resolve(outcome.value);
+            else
+                reject(new Error(`SCAPI_EXECUTION_EXITED: ${code}. Check writes before retrying.`));
+        });
+        child.on('message', async (raw) => {
+            if (settled || !raw || typeof raw !== 'object')
+                return;
+            const message = raw;
+            if (message.type === 'result')
+                return finish(message.value);
+            if (message.type === 'error')
+                return finish(undefined, new Error(message.error));
+            const reply = (value, error) => {
+                if (!settled && child.connected)
+                    child.send({ type: 'reply', id: message.id, value, error }, () => { });
+            };
+            if (message.type === 'snippet') {
+                try {
+                    if (++snippetCalls > 100)
+                        throw new Error('SCAPI_SNIPPET_LIMIT: at most 100 snippet operations per execution.');
+                    if (message.operation === 'run' && !options.request)
+                        throw new Error('Use scapi_execute to run snippets.');
+                    reply(resolveSnippet(message.operation ?? '', message.name ?? '', message.input));
+                }
+                catch (error) {
+                    reply(undefined, error instanceof Error ? error.message : String(error));
+                }
+                return;
+            }
+            if (message.type !== 'request' && message.type !== 'auth')
+                return;
+            if (message.type === 'auth' ? !options.auth : !options.request)
+                return reply(undefined, 'Schema search cannot make SCAPI or authentication requests. Use scapi_execute.');
+            if (++calls > 20)
+                return reply(undefined, 'SCAPI_CALL_LIMIT: at most 20 requests per execution.');
+            if (active >= 4)
+                return reply(undefined, 'SCAPI_CONCURRENCY_LIMIT: at most four concurrent requests.');
+            active++;
+            try {
+                reply(message.type === 'auth'
+                    ? await options.auth(message.operation ?? '', message.options, controller.signal)
+                    : await options.request(message.options, controller.signal));
+            }
+            catch (error) {
+                reply(undefined, error instanceof Error ? error.message : String(error));
+            }
+            finally {
+                active--;
+            }
+        });
+        try {
+            options.onControl?.(control);
+        }
+        catch (error) {
+            finish(undefined, error instanceof Error ? error : new Error(String(error)));
+            return;
+        }
+        if (options.signal?.aborted) {
+            cancel();
+            return;
+        }
+        child.send({
+            type: 'run',
+            ...options,
+            documents,
+            request: undefined,
+            auth: undefined,
+            snippets: undefined,
+            signal: undefined,
+            onControl: undefined,
+            maxOutputBytes: Math.min(options.maxOutputBytes ?? 24_000, 65_536),
+        }, (error) => {
+            if (error)
+                finish(undefined, error);
+        });
+    });
+}
+//# sourceMappingURL=runtime.js.map

package/dist/esm/scapi/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/scapi/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,KAAK,EAAC,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAC,SAAS,EAAC,MAAM,sBAAsB,CAAC;AAE/C,OAAO,EAAC,mBAAmB,EAAC,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAC,oBAAoB,EAAqB,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAC,0BAA0B,EAAE,wBAAwB,EAAoB,MAAM,eAAe,CAAC;AA0BtG,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM;QAClE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,IAAI,wBAAwB,EAAE,CAAC,CAAC;IAClG,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM;QACvC,MAAM,IAAI,KAAK,CACb,MAAM,OAAO,CAAC,QAAQ,0FAA0F,CACjH,CAAC;IACJ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,cAAc,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,QAAQ,EAAE,mBAAmB,CAAC,EACpG;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,0FAA0F;YAC1F,GAAG,EAAE,EAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAC;YACzF,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;YACxC,WAAW,EAAE,IAAI;SAClB,CACF,CAAC;QACF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,OAAqD,CAAC;QAC1D,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,KAAa,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,GAAG,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,EAAE,CAClB,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC,CAAC;QACxG,IAAI,WAAW,GAAG,SAAS,CAAC;QAC5B,IAAI,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC,CAAC;QACtG,IAAI,KAAK,GAA8C,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACzF,MAAM,OAAO,GAAwB;YACnC,YAAY;gBACV,IAAI,OAAO,IAAI,CAAC,KAAK;oBAAE,OAAO;gBAC9B,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;gBACzE,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,aAAa;gBACX,IAAI,OAAO,IAAI,KAAK;oBAAE,OAAO;gBAC7B,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBAC9B,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC5C,CAAC;SACF,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE;YAC9B,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;YAC5B,IAAI,WAAW,GAAG,MAAM;gBAAE,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC,CAAC;QACpH,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,EAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC;QAChG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,OAAO,EAAE,KAAK;gBAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;iBACrC,IAAI,OAAO;gBAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;gBACpC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,iCAAiC,CAAC,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;YACzC,IAAI,OAAO,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,OAAO;YACvD,MAAM,OAAO,GAAG,GASf,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACjF,MAAM,KAAK,GAAG,CAAC,KAAe,EAAE,KAAc,EAAE,EAAE;gBAChD,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS;oBAAE,KAAK,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACvG,CAAC,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,IAAI,EAAE,YAAY,GAAG,GAAG;wBACtB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;oBACxF,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;oBAC3G,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACpF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,KAAK,CAAC,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3E,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO;YAClE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;gBAC5D,OAAO,KAAK,CAAC,SAAS,EAAE,gFAAgF,CAAC,CAAC;YAC5G,IAAI,EAAE,KAAK,GAAG,EAAE;gBAAE,OAAO,KAAK,CAAC,SAAS,EAAE,sDAAsD,CAAC,CAAC;YAClG,IAAI,MAAM,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC,SAAS,EAAE,4DAA4D,CAAC,CAAC;YACvG,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,KAAK,CACH,OAAO,CAAC,IAAI,KAAK,MAAM;oBACrB,CAAC,CAAC,MAAM,OAAO,CAAC,IAAK,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;oBAClF,CAAC,CAAC,MAAM,OAAO,CAAC,OAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAC/D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAC,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CACR;YACE,IAAI,EAAE,KAAK;YACX,GAAG,OAAO;YACV,SAAS;YACT,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,SAAS;YACpB,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM,EAAE,MAAM,CAAC;SACnE,EACD,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,KAAK;gBAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/esm/scapi/snippets.d.ts

@@ -0,0 +1,22 @@
+import { type Schema } from 'jsonschema';
+/** A parameterized program, discoverable without loading its source. */
+export interface ScapiSnippet {
+    name: string;
+    description: string;
+    effect: 'read' | 'write' | 'destructive';
+    code: string;
+    inputSchema: Schema;
+    savedAt?: string;
+}
+/** Use the host's resolved oclif data directory; standalone SDK uses the shared B2C directory. */
+export declare function initializeScapiSnippetStore(dataDir: string): void;
+/** Durable user library location, shared by CLI and MCP. */
+export declare function getScapiSnippetDirectory(): string;
+/** Load the release's read-only catalog. Sources ship as ordinary JavaScript files. */
+export declare function loadBuiltinScapiSnippets(): ScapiSnippet[];
+/** Load shipped and user snippets; a malformed user file is reported, never silently substituted. */
+export declare function loadScapiSnippets(directory?: string): ScapiSnippet[];
+/** Save a new user snippet without replacing an existing workflow. */
+export declare function saveScapiSnippet(snippet: ScapiSnippet, directory?: string): void;
+/** Build the runtime's search/describe/run resolver using the shared documentation ranking. */
+export declare function createScapiSnippetResolver(snippets: ScapiSnippet[]): (operation: string, name: string, input?: unknown) => unknown;

package/dist/esm/scapi/snippets.js

@@ -0,0 +1,140 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+import { readFileSync, readdirSync, mkdirSync, writeFileSync, linkSync, unlinkSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { createRequire } from 'node:module';
+import { join, dirname } from 'node:path';
+import { Validator } from 'jsonschema';
+import { resolveOclifDataDir } from '../plugins/discovery.js';
+import { createRankedIndex } from '../search/ranking.js';
+let injectedDataDir;
+/** Use the host's resolved oclif data directory; standalone SDK uses the shared B2C directory. */
+export function initializeScapiSnippetStore(dataDir) {
+    injectedDataDir = dataDir;
+}
+/** Durable user library location, shared by CLI and MCP. */
+export function getScapiSnippetDirectory() {
+    return join(injectedDataDir ?? resolveOclifDataDir(), 'scapi', 'snippets');
+}
+function validateSnippet(snippet) {
+    if (!snippet ||
+        !/^(builtin|user)\/[a-z0-9][a-z0-9-]{0,79}$/.test(snippet.name) ||
+        typeof snippet.description !== 'string' ||
+        !snippet.description.trim() ||
+        snippet.description.length > 500 ||
+        !['read', 'write', 'destructive'].includes(snippet.effect) ||
+        typeof snippet.code !== 'string' ||
+        !snippet.code.trim() ||
+        Buffer.byteLength(snippet.code) > 32_768 ||
+        !snippet.inputSchema ||
+        typeof snippet.inputSchema !== 'object' ||
+        Array.isArray(snippet.inputSchema))
+        throw new Error('SCAPI_SNIPPET_INVALID: invalid name, description, effect, code, or input schema.');
+    // Native syntax validation only; execution and input validation happen at invocation.
+    new Function('return (' + snippet.code + ');');
+}
+/** Load the release's read-only catalog. Sources ship as ordinary JavaScript files. */
+export function loadBuiltinScapiSnippets() {
+    const root = join(dirname(createRequire(import.meta.url).resolve('@salesforce/b2c-tooling-sdk/package.json')), 'data/scapi-snippets');
+    const manifest = JSON.parse(readFileSync(join(root, 'manifest.json'), 'utf8'));
+    if (manifest.version !== 1)
+        throw new Error('Unsupported snippet manifest.');
+    return manifest.snippets.map(({ file, ...entry }) => {
+        if (!/^[a-z0-9-]+\.js$/.test(file))
+            throw new Error('Invalid snippet source path.');
+        const snippet = { ...entry, code: readFileSync(join(root, file), 'utf8') };
+        validateSnippet(snippet);
+        if (!snippet.name.startsWith('builtin/'))
+            throw new Error('Invalid built-in snippet name.');
+        return snippet;
+    });
+}
+/** Load shipped and user snippets; a malformed user file is reported, never silently substituted. */
+export function loadScapiSnippets(directory = getScapiSnippetDirectory()) {
+    const snippets = loadBuiltinScapiSnippets();
+    let files;
+    try {
+        files = readdirSync(directory);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return snippets;
+        throw error;
+    }
+    for (const file of files.filter((name) => name.endsWith('.json')).sort()) {
+        try {
+            const content = readFileSync(join(directory, file), 'utf8');
+            if (Buffer.byteLength(content) > 65_536)
+                throw new Error('File exceeds 64 KiB.');
+            const snippet = JSON.parse(content);
+            validateSnippet(snippet);
+            if (snippet.name !== `user/${file.slice(0, -5)}`)
+                throw new Error('File must match the user snippet name.');
+            snippets.push(snippet);
+        }
+        catch (error) {
+            throw new Error(`SCAPI_SNIPPET_INVALID: repair or remove ${join(directory, file)}: ${String(error)}`);
+        }
+    }
+    return snippets;
+}
+/** Save a new user snippet without replacing an existing workflow. */
+export function saveScapiSnippet(snippet, directory = getScapiSnippetDirectory()) {
+    validateSnippet(snippet);
+    if (!snippet.name.startsWith('user/'))
+        throw new Error('SCAPI_SNIPPET_NAME: saved snippets require user/ prefix.');
+    const content = JSON.stringify({ ...snippet, savedAt: new Date().toISOString() }, null, 2) + '\n';
+    if (Buffer.byteLength(content) > 65_536)
+        throw new Error('SCAPI_SNIPPET_INVALID: snippet exceeds 64 KiB.');
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const path = join(directory, snippet.name.slice(5) + '.json');
+    const temporary = join(directory, randomUUID() + '.tmp');
+    writeFileSync(temporary, content, { flag: 'wx', mode: 0o600 });
+    try {
+        // Publish the complete file atomically without replacing an existing name.
+        linkSync(temporary, path);
+    }
+    catch (error) {
+        if (error.code === 'EEXIST')
+            throw new Error('SCAPI_SNIPPET_EXISTS: choose a new user/ name; existing snippets are not overwritten.');
+        throw error;
+    }
+    finally {
+        unlinkSync(temporary);
+    }
+}
+/** Build the runtime's search/describe/run resolver using the shared documentation ranking. */
+export function createScapiSnippetResolver(snippets) {
+    const byName = new Map(snippets.map((snippet) => [snippet.name, snippet]));
+    const index = createRankedIndex(snippets.map((s) => ({ id: s.name, title: s.name, summary: s.description })));
+    const validator = new Validator();
+    return (operation, name, input) => {
+        if (operation === 'search') {
+            const names = name.trim() ? index.search(name).map((result) => result.id) : [...byName.keys()];
+            return {
+                total: names.length,
+                results: names.slice(0, 10).map((id) => {
+                    const s = byName.get(id);
+                    return { kind: 'snippet', name: s.name, description: s.description, effect: s.effect };
+                }),
+            };
+        }
+        const snippet = byName.get(name);
+        if (!snippet)
+            throw new Error(`SCAPI_SNIPPET_NOT_FOUND: ${name}. Use codemode.search to find available snippets.`);
+        if (operation === 'describe')
+            return snippet;
+        if (operation !== 'run')
+            throw new Error('Unknown snippet operation.');
+        const result = validator.validate(input, snippet.inputSchema, {
+            required: Boolean(snippet.inputSchema.type || snippet.inputSchema.required),
+        });
+        if (!result.valid)
+            throw new Error(`SCAPI_SNIPPET_INPUT: ${name}: ${result.errors.map((e) => e.stack).join('; ')}`);
+        return snippet.code;
+    };
+}
+//# sourceMappingURL=snippets.js.map

package/dist/esm/scapi/snippets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snippets.js","sourceRoot":"","sources":["../../../src/scapi/snippets.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAC,MAAM,SAAS,CAAC;AAClG,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAC,IAAI,EAAE,OAAO,EAAC,MAAM,WAAW,CAAC;AACxC,OAAO,EAAC,SAAS,EAAc,MAAM,YAAY,CAAC;AAClD,OAAO,EAAC,mBAAmB,EAAC,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAC,iBAAiB,EAAC,MAAM,sBAAsB,CAAC;AAYvD,IAAI,eAAmC,CAAC;AAExC,kGAAkG;AAClG,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,eAAe,GAAG,OAAO,CAAC;AAC5B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,wBAAwB;IACtC,OAAO,IAAI,CAAC,eAAe,IAAI,mBAAmB,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,eAAe,CAAC,OAAqB;IAC5C,IACE,CAAC,OAAO;QACR,CAAC,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/D,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;QAC3B,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG;QAChC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QAC1D,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;QACpB,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM;QACxC,CAAC,OAAO,CAAC,WAAW;QACpB,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QAElC,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,sFAAsF;IACtF,IAAI,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,wBAAwB;IACtC,MAAM,IAAI,GAAG,IAAI,CACf,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,EAC3F,qBAAqB,CACtB,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAG5E,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,EAAE,GAAG,KAAK,EAAC,EAAE,EAAE;QAChD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,EAAC,GAAG,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAC,CAAC;QACzE,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5F,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,iBAAiB,CAAC,SAAS,GAAG,wBAAwB,EAAE;IACtE,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACxE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACjF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAC;YACpD,eAAe,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5G,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,OAAqB,EAAE,SAAS,GAAG,wBAAwB,EAAE;IAC5F,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAC,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAChG,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC3G,SAAS,CAAC,SAAS,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,CAAC;IACzD,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,EAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,2EAA2E;QAC3E,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YACpD,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAC3G,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,0BAA0B,CAAC,QAAwB;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAC,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,OAAO,CAAC,SAAiB,EAAE,IAAY,EAAE,KAAe,EAAW,EAAE;QACnE,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzG,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;oBACrC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;oBAC1B,OAAO,EAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAC,CAAC;gBACvF,CAAC,CAAC;aACH,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,mDAAmD,CAAC,CAAC;QACnH,IAAI,SAAS,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC;QAC7C,IAAI,SAAS,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE;YAC5D,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;SAC5E,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpH,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/scapi/worker-source.d.ts

@@ -0,0 +1,2 @@
+/** Plain Node JavaScript, packaged with the SDK. This is local execution, not a security sandbox. */
+export declare const SCAPI_WORKER_SOURCE: string;

package/dist/esm/scapi/worker-source.js

@@ -0,0 +1,101 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+/** Plain Node JavaScript, packaged with the SDK. This is local execution, not a security sandbox. */
+export const SCAPI_WORKER_SOURCE = String.raw `
+const send = process.send.bind(process);
+const pending = new Map();
+let sequence = 0;
+function directNetwork() {
+  throw new Error('SCAPI_DIRECT_NETWORK_DISABLED: Use scapi.request() in code mode. For direct HTTP calls, export a token and use a client outside code mode; SDK safety does not govern those calls.');
+}
+// Prevent accidental use of ambient networking; this is not a hostile-code sandbox.
+for (const name of ['fetch', 'WebSocket']) {
+  Object.defineProperty(globalThis, name, {value: directNetwork, writable: false, configurable: false});
+}
+process.on('disconnect', () => process.exit(0));
+process.on('message', async message => {
+  if (message.type === 'reply') {
+    const waiter = pending.get(message.id);
+    if (!waiter) return;
+    pending.delete(message.id);
+    if (message.error) waiter.reject(new Error(message.error));
+    else waiter.resolve(message.value);
+    return;
+  }
+  if (message.type !== 'run') return;
+  const documents = message.documents || [];
+  const byId = new Map(documents.map(d => [d.entry.id, d.schema]));
+  function resolve(value, api, seen = new Set(), depth = 0) {
+    if (depth > 20) return value;
+    if (!value || typeof value !== 'object') return value;
+    if (Array.isArray(value)) return value.map(v => resolve(v, api, seen, depth + 1));
+    if (typeof value.$ref === 'string') {
+      if (!value.$ref.startsWith('#/') || seen.has(value.$ref)) return value;
+      const next = new Set(seen); next.add(value.$ref);
+      const target = value.$ref.slice(2).split('/').reduce((obj, key) => obj?.[key.replaceAll('~1','/').replaceAll('~0','~')], byId.get(api));
+      if (!target) throw new Error('Unresolved schema reference: ' + value.$ref);
+      return resolve(target, api, next, depth + 1);
+    }
+    return Object.fromEntries(Object.entries(value).map(([key, v]) => [key, resolve(v, api, seen, depth + 1)]));
+  }
+  const spec = {apis: documents.map(d => d.entry), paths: {}, resolve};
+  for (const {entry, schema} of documents) {
+    for (const [path, item] of Object.entries(schema.paths || {})) {
+      const methods = {};
+      for (const method of ['get','head','post','put','patch','delete','options']) {
+        if (item[method]) methods[method] = resolve({...item[method], api: entry.id,
+          parameters: [...(item.parameters || []), ...(item[method].parameters || [])],
+          security: item[method].security ?? schema.security ?? []}, entry.id);
+      }
+      spec.paths['/' + entry.id + path] = methods;
+    }
+  }
+  const scapi = {request: options => new Promise((resolve, reject) => {
+    const id = ++sequence;
+    pending.set(id, {resolve, reject});
+    send({type:'request', id, options});
+  })};
+  const authCall = (operation, options = {}) => new Promise((resolve, reject) => {
+    const id = ++sequence;
+    pending.set(id, {resolve, reject});
+    send({type:'auth', id, operation, options});
+  });
+  const auth = {accountManager: options => authCall('accountManager', options), slas: options => authCall('slas', options)};
+  const snippetCall = (operation, name, input) => new Promise((resolve, reject) => {
+    const id = ++sequence;
+    pending.set(id, {resolve, reject});
+    send({type:'snippet', id, operation, name, input});
+  });
+  let runningSnippets = 0;
+  const evaluate = (code, input) => new Function('spec', 'scapi', 'codemode', 'auth', 'organizationId', 'siteId', 'input',
+    'return (' + code + ')(input);')(spec, scapi, codemode, auth, message.organizationId, message.siteId, input);
+  const codemode = {
+    search: (query = '') => snippetCall('search', String(query)),
+    describe: name => snippetCall('describe', String(name)),
+    run: async (name, input) => {
+      if (runningSnippets >= 16) throw new Error('SCAPI_SNIPPET_LIMIT: at most 16 active snippet calls.');
+      runningSnippets++;
+      try {
+        const code = await snippetCall('run', String(name), input);
+        return await evaluate(code, input);
+      } finally { runningSnippets--; }
+    }
+  };
+  try {
+    const value = await evaluate(message.code, message.input);
+    if (pending.size || runningSnippets) throw new Error('Await every scapi.request, auth, and codemode call before returning. Requests may already have taken effect.');
+    const json = JSON.stringify(value === undefined ? null : value);
+    if (Buffer.byteLength(json) > message.maxOutputBytes) throw new Error('SCAPI_RESULT_TOO_LARGE: return fewer fields or a smaller page.');
+    send({type:'result', value: JSON.parse(json)});
+  } catch (error) {
+    const message = error.code === 'ERR_ACCESS_DENIED'
+      ? 'SCAPI_RUNTIME_RESTRICTED: Code mode supports API discovery, managed requests, and result processing. Use terminal or file tools outside code mode for filesystem access, subprocesses, or other local development work.'
+      : String(error.message || error);
+    send({type:'error', error: message.slice(0, 4000)});
+  }
+});
+`;
+//# sourceMappingURL=worker-source.js.map

package/dist/esm/scapi/worker-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-source.js","sourceRoot":"","sources":["../../../src/scapi/worker-source.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,qGAAqG;AACrG,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6F5C,CAAC"}

package/dist/esm/search/ranking.d.ts

@@ -0,0 +1,12 @@
+import MiniSearch from 'minisearch';
+/** Shared ranking fields; each corpus owns its index and query-time filters. */
+export interface RankedDocument {
+    id: string;
+    title: string;
+    category?: string;
+    headings?: string;
+    summary?: string;
+    keywords?: string[];
+}
+/** Build an independent index using the established documentation ranking. */
+export declare function createRankedIndex(entries: readonly RankedDocument[]): MiniSearch;

package/dist/esm/search/ranking.js

@@ -0,0 +1,28 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+import MiniSearch from 'minisearch';
+/** Build an independent index using the established documentation ranking. */
+export function createRankedIndex(entries) {
+    const index = new MiniSearch({
+        idField: 'id',
+        fields: ['title', 'id', 'headings', 'keywords', 'summary'],
+        storeFields: ['category'],
+        searchOptions: {
+            boost: { title: 3, id: 2.5, keywords: 2, headings: 2, summary: 1.5 },
+            fuzzy: 0.2,
+            prefix: true,
+        },
+    });
+    index.addAll(entries.map((entry) => ({
+        ...entry,
+        category: entry.category ?? '',
+        headings: entry.headings ?? '',
+        summary: entry.summary ?? '',
+        keywords: entry.keywords?.join(' ') ?? '',
+    })));
+    return index;
+}
+//# sourceMappingURL=ranking.js.map

package/dist/esm/search/ranking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ranking.js","sourceRoot":"","sources":["../../../src/search/ranking.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,UAAU,MAAM,YAAY,CAAC;AAYpC,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,OAAkC;IAClE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC;QAC3B,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC;QAC1D,WAAW,EAAE,CAAC,UAAU,CAAC;QACzB,aAAa,EAAE;YACb,KAAK,EAAE,EAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAC;YAClE,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,IAAI;SACb;KACF,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,CACV,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,GAAG,KAAK;QACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;KAC1C,CAAC,CAAC,CACJ,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/esm/skills/sources.d.ts

@@ -2,7 +2,7 @@ import type { SkillSet, SkillSourceConfig } from './types.js';
 /**
  * Registry mapping skill sets to their source configurations.
  *
- * Each skill set (b2c, b2c-cli, storefront-next, storefront-next-figma, cap-dev)
+ * Each registered skill set
  * maps to its respective GitHub repository and download configuration for
  * artifact retrieval.
  */
@@ -10,7 +10,7 @@ export declare const SKILL_SOURCES: Record<SkillSet, SkillSourceConfig>;
 /**
  * Get the source configuration for a specific skill set.
  *
- * @param skillSet - The skill set identifier ('b2c', 'b2c-cli', 'storefront-next', 'storefront-next-figma', or 'cap-dev')
+ * @param skillSet - A registered skill set identifier
  * @returns The source configuration for the skill set
  * @throws Error if the skill set is not recognized
  */

package/dist/esm/skills/sources.js

@@ -10,7 +10,7 @@ function pluginsTag(version) {
 /**
  * Registry mapping skill sets to their source configurations.
  *
- * Each skill set (b2c, b2c-cli, storefront-next, storefront-next-figma, cap-dev)
+ * Each registered skill set
  * maps to its respective GitHub repository and download configuration for
  * artifact retrieval.
  */
@@ -31,6 +31,22 @@ export const SKILL_SOURCES = {
         assetName: 'b2c-cli-skills.zip',
         tagPattern: pluginsTag,
     },
+    'b2c-ops': {
+        id: 'b2c-ops',
+        displayName: 'B2C Commerce operator and administrator runbooks',
+        type: 'release-artifact',
+        repo: 'SalesforceCommerceCloud/b2c-developer-tooling',
+        assetName: 'b2c-ops-skills.zip',
+        tagPattern: pluginsTag,
+    },
+    'b2c-python-sdk': {
+        id: 'b2c-python-sdk',
+        displayName: 'B2C Python tooling SDK usage (salesforce-b2c-tooling-sdk)',
+        type: 'release-artifact',
+        repo: 'SalesforceCommerceCloud/b2c-developer-tooling',
+        assetName: 'b2c-python-sdk-skills.zip',
+        tagPattern: pluginsTag,
+    },
     'storefront-next': {
         id: 'storefront-next',
         displayName: 'Storefront Next development skills',
@@ -59,7 +75,7 @@ export const SKILL_SOURCES = {
 /**
  * Get the source configuration for a specific skill set.
  *
- * @param skillSet - The skill set identifier ('b2c', 'b2c-cli', 'storefront-next', 'storefront-next-figma', or 'cap-dev')
+ * @param skillSet - A registered skill set identifier
  * @returns The source configuration for the skill set
  * @throws Error if the skill set is not recognized
  */

package/dist/esm/skills/sources.js.map

@@ -1 +1 @@
-{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../../src/skills/sources.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO,qBAAqB,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwC;IAChE,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,gBAAgB;QAC3B,UAAU,EAAE,UAAU;KACvB;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,oBAAoB;QAC/B,UAAU,EAAE,UAAU;KACvB;IACD,iBAAiB,EAAE;QACjB,EAAE,EAAE,iBAAiB;QACrB,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,4BAA4B;QACvC,UAAU,EAAE,UAAU;KACvB;IACD,uBAAuB,EAAE;QACvB,EAAE,EAAE,uBAAuB;QAC3B,WAAW,EAAE,yEAAyE;QACtF,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,kCAAkC;QAC7C,UAAU,EAAE,UAAU;KACvB;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,kCAAkC;QAC/C,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,uCAAuC;QAC7C,GAAG,EAAE,MAAM;QACX,UAAU,EAAE,gBAAgB;KAC7B;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAe,MAAM,CAAC,IAAI,CAAC,aAAa,CAAe,CAAC"}
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../../src/skills/sources.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO,qBAAqB,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwC;IAChE,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,gBAAgB;QAC3B,UAAU,EAAE,UAAU;KACvB;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,oBAAoB;QAC/B,UAAU,EAAE,UAAU;KACvB;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,kDAAkD;QAC/D,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,oBAAoB;QAC/B,UAAU,EAAE,UAAU;KACvB;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,2DAA2D;QACxE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,2BAA2B;QACtC,UAAU,EAAE,UAAU;KACvB;IACD,iBAAiB,EAAE;QACjB,EAAE,EAAE,iBAAiB;QACrB,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,4BAA4B;QACvC,UAAU,EAAE,UAAU;KACvB;IACD,uBAAuB,EAAE;QACvB,EAAE,EAAE,uBAAuB;QAC3B,WAAW,EAAE,yEAAyE;QACtF,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,+CAA+C;QACrD,SAAS,EAAE,kCAAkC;QAC7C,UAAU,EAAE,UAAU;KACvB;IACD,SAAS,EAAE;QACT,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,kCAAkC;QAC/C,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,uCAAuC;QAC7C,GAAG,EAAE,MAAM;QACX,UAAU,EAAE,gBAAgB;KAC7B;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAe,MAAM,CAAC,IAAI,CAAC,aAAa,CAAe,CAAC"}

package/dist/esm/skills/types.d.ts

@@ -5,7 +5,7 @@ export type IdeType = 'claude-code' | 'cursor' | 'windsurf' | 'vscode' | 'codex'
 /**
  * Skill set categories matching the plugins directory structure.
  */
-export type SkillSet = 'b2c' | 'b2c-cli' | 'cap-dev' | 'storefront-next' | 'storefront-next-figma';
+export type SkillSet = 'b2c' | 'b2c-cli' | 'b2c-ops' | 'b2c-python-sdk' | 'cap-dev' | 'storefront-next' | 'storefront-next-figma';
 /**
  * Configuration for a skill source — defines how to fetch skills from a particular repository.
  */