@salesforce/b2c-tooling-sdk 1.24.2 → 2.1.0

package/dist/esm/cli/job-command.js

@@ -5,62 +5,112 @@
  */
 import { Command } from '@oclif/core';
 import { InstanceCommand } from './instance-command.js';
-import { getJobLog, getJobErrorMessage } from '../operations/jobs/index.js';
+import { BackendDispatcher } from '../compat/dispatcher.js';
+import { createScapiJobsClient } from '../clients/scapi-jobs.js';
+import { mapOcapiExecution } from '../operations/jobs/index.js';
 import { t } from '../i18n/index.js';
 /**
  * Base command for job operations.
  *
- * Extends InstanceCommand with job-specific functionality like
- * displaying job logs on failure.
+ * Provides:
+ * - {@link createJobsDispatcher} for routing operations to SCAPI or OCAPI
+ * - {@link buildScapiJobsClient} for SCAPI-only commands (e.g. delete) that
+ *   don't need the dispatcher's auto-fallback
+ * - {@link showJobLog} for retrieving and printing canonical job logs on failure
  *
  * @example
+ * ```ts
+ * import {scapiExecuteJob, mapOcapiExecution, executeJob as ocapiExecuteJob} from
+ *   '@salesforce/b2c-tooling-sdk/operations/jobs';
+ *
  * export default class MyJobCommand extends JobCommand<typeof MyJobCommand> {
- *   async run(): Promise<void> {
- *     try {
- *       await executeJob(this.instance, 'my-job');
- *     } catch (error) {
- *       if (error instanceof JobExecutionError) {
- *         await this.showJobLog(error.execution);
- *       }
- *       throw error;
- *     }
+ *   async run() {
+ *     const dispatcher = this.createJobsDispatcher();
+ *     const exec = await dispatcher.run({
+ *       scapi: (client) => scapiExecuteJob(client, 'my-job', {tenantId: this.resolvedConfig.values.tenantId!}),
+ *       ocapi: async () => mapOcapiExecution(await ocapiExecuteJob(this.instance, 'my-job')),
+ *     });
  *   }
  * }
+ * ```
  */
 export class JobCommand extends InstanceCommand {
+    createJobsDispatcher() {
+        return this.createDispatcher('jobs', () => this.buildScapiJobsClient());
+    }
     /**
-     * Display a job's log file content and error message if available.
-     * Outputs to stderr since this is typically shown for failed jobs.
+     * Builds a SCAPI Jobs client, or `undefined` if SCAPI is not configured.
+     * Used both as the dispatcher's SCAPI factory and directly by SCAPI-only
+     * commands (e.g. `job execution delete`) that don't use the dispatcher.
      *
-     * @param execution - Failed job execution object with log file information
+     * The shortCode/tenantId and the scope-flexible auth strategy come from the
+     * instance ({@link B2CInstance.scapiClientConfig}), which already encodes the
+     * "only stateless OAuth qualifies for auto-SCAPI" gating.
+     */
+    buildScapiJobsClient() {
+        const scapi = this.instance.scapiClientConfig;
+        if (!scapi)
+            return undefined;
+        return createScapiJobsClient({ shortCode: scapi.shortCode, tenantId: scapi.tenantId }, scapi.auth);
+    }
+    /**
+     * Display a job execution's log file content and error message if available.
+     *
+     * Accepts either canonical {@link JobExecutionInfo} (preferred) or raw
+     * OCAPI {@link JobExecution} (from the legacy {@link JobExecutionError}).
+     * Raw OCAPI is mapped to canonical at the entry point so the rest of the
+     * function works on a single shape.
      */
     async showJobLog(execution) {
-        // Extract error message from failed step executions
-        const errorMessage = getJobErrorMessage(execution);
-        if (!execution.is_log_file_existing) {
-            // No log file, but we may still have an error message
+        const canonical = isCanonical(execution) ? execution : mapOcapiExecution(execution);
+        const errorMessage = getCanonicalJobErrorMessage(canonical);
+        if (!canonical.isLogFileExisting) {
             if (errorMessage) {
                 this.logger.error({ errorMessage }, errorMessage);
             }
             return;
         }
         try {
-            const log = await getJobLog(this.instance, execution);
-            const logFileName = execution.log_file_path?.split('/').pop() ?? 'job.log';
+            const log = await this.fetchCanonicalLog(canonical);
+            const logFileName = canonical.logFilePath?.split('/').pop() ?? 'job.log';
             const header = t('cli.job.logHeader', 'Job log ({{logFileName}}):', { logFileName });
             this.logger.error({ log, errorMessage }, `${header}\n${log}`);
-            // Log the error message separately if available
             if (errorMessage) {
                 this.logger.error(t('cli.job.errorMessage', 'Error: {{message}}', { message: errorMessage }));
             }
         }
         catch {
             this.warn(t('cli.job.logFetchFailed', 'Could not retrieve job log'));
-            // Still try to show error message even if log fetch failed
             if (errorMessage) {
                 this.logger.error({ errorMessage }, errorMessage);
             }
         }
     }
+    async fetchCanonicalLog(execution) {
+        const logPath = execution.logFilePath;
+        if (!logPath) {
+            throw new Error('No log file path available');
+        }
+        // Both SCAPI and OCAPI return logFilePath under /Sites/LOGS/...; WebDAV
+        // base is /webdav/Sites, so the leading /Sites/ is stripped.
+        const webdavPath = logPath.replace(/^\/Sites\//, '');
+        const content = await this.instance.webdav.get(webdavPath);
+        return new TextDecoder().decode(content);
+    }
+}
+function isCanonical(execution) {
+    return 'executionStatus' in execution;
+}
+function getCanonicalJobErrorMessage(execution) {
+    if (!execution.stepExecutions || execution.stepExecutions.length === 0) {
+        return undefined;
+    }
+    for (let i = execution.stepExecutions.length - 1; i >= 0; i--) {
+        const step = execution.stepExecutions[i];
+        if (step.exitStatus?.status === 'error' && step.exitStatus?.message) {
+            return step.exitStatus.message;
+        }
+    }
+    return undefined;
 }
 //# sourceMappingURL=job-command.js.map

package/dist/esm/cli/job-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"job-command.js","sourceRoot":"","sources":["../../../src/cli/job-command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAC,OAAO,EAAC,MAAM,aAAa,CAAC;AACpC,OAAO,EAAC,eAAe,EAAC,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAC,SAAS,EAAE,kBAAkB,EAAoB,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAC,CAAC,EAAC,MAAM,kBAAkB,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAgB,UAAqC,SAAQ,eAAkB;IACnF;;;;;OAKG;IACO,KAAK,CAAC,UAAU,CAAC,SAAuB;QAChD,oDAAoD;QACpD,MAAM,YAAY,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAEnD,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC;YACpC,sDAAsD;YACtD,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,YAAY,EAAC,EAAE,YAAY,CAAC,CAAC;YAClD,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACtD,MAAM,WAAW,GAAG,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC;YAE3E,MAAM,MAAM,GAAG,CAAC,CAAC,mBAAmB,EAAE,4BAA4B,EAAE,EAAC,WAAW,EAAC,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,EAAE,YAAY,EAAC,EAAE,GAAG,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC;YAE5D,gDAAgD;YAChD,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,EAAC,OAAO,EAAE,YAAY,EAAC,CAAC,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,4BAA4B,CAAC,CAAC,CAAC;YACrE,2DAA2D;YAC3D,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,YAAY,EAAC,EAAE,YAAY,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"job-command.js","sourceRoot":"","sources":["../../../src/cli/job-command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAC,OAAO,EAAC,MAAM,aAAa,CAAC;AACpC,OAAO,EAAC,eAAe,EAAC,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAC,iBAAiB,EAAC,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAC,qBAAqB,EAAuB,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAC,iBAAiB,EAA2C,MAAM,6BAA6B,CAAC;AACxG,OAAO,EAAC,CAAC,EAAC,MAAM,kBAAkB,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAgB,UAAqC,SAAQ,eAAkB;IACzE,oBAAoB;QAC5B,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;OAQG;IACO,oBAAoB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO,qBAAqB,CAAC,EAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;;OAOG;IACO,KAAK,CAAC,UAAU,CAAC,SAA0C;QACnE,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAE5D,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;YACjC,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,YAAY,EAAC,EAAE,YAAY,CAAC,CAAC;YAClD,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC;YAEzE,MAAM,MAAM,GAAG,CAAC,CAAC,mBAAmB,EAAE,4BAA4B,EAAE,EAAC,WAAW,EAAC,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,EAAE,YAAY,EAAC,EAAE,GAAG,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC;YAE5D,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,EAAC,OAAO,EAAE,YAAY,EAAC,CAAC,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,4BAA4B,CAAC,CAAC,CAAC;YACrE,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,YAAY,EAAC,EAAE,YAAY,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,SAA2B;QACzD,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3D,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,SAAS,WAAW,CAAC,SAA0C;IAC7D,OAAO,iBAAiB,IAAI,SAAS,CAAC;AACxC,CAAC;AAED,SAAS,2BAA2B,CAAC,SAA2B;IAC9D,IAAI,CAAC,SAAS,CAAC,cAAc,IAAI,SAAS,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;YACpE,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/esm/cli/mrt-command.d.ts

@@ -1,19 +1,35 @@
 import { Command } from '@oclif/core';
-import { BaseCommand } from './base-command.js';
+import { OAuthCommand } from './oauth-command.js';
 import type { ResolvedB2CConfig } from '../config/index.js';
 import type { AuthStrategy } from '../auth/types.js';
+import type { ScapiClientConfig } from '../instance/index.js';
+import type { MrtBackendPreference, ScapiMrtConnection } from '../operations/mrt/mrt-backend.js';
 /**
  * Base command for Managed Runtime (MRT) operations.
- * Uses API key authentication.
  *
- * API key resolution order:
+ * MRT has two backends:
+ * - **legacy** — the MRT Cloud API (`cloud.mobify.com`), authenticated with a
+ *   per-user API key (`--api-key` / `~/.mobify`).
+ * - **scapi** — the SCAPI MRT backend, authenticated with a stateless OAuth flow
+ *   (client-credentials or JWT Bearer) via Account Manager, reusing the same
+ *   shortCode + tenant setup as other SCAPI commands. Each supported command maps
+ *   to its own SCAPI API (bundle history/deploy use Storefront Deployments today;
+ *   more MRT surfaces will be added over time).
+ *
+ * Because SCAPI MRT reuses the SCAPI auth stack, this base extends
+ * {@link OAuthCommand} to inherit `--client-id`/`--client-secret`/`--short-code`/
+ * `--tenant-id`/JWT flags plus `getOAuthStrategy()`, `requireTenantId()`, and
+ * `getOrganizationId()`. The legacy API-key path is preserved via
+ * {@link getMrtAuth}.
+ *
+ * API key resolution order (legacy):
  * 1. --api-key flag
  * 2. MRT_API_KEY environment variable (SFCC_MRT_API_KEY also supported)
  * 3. ~/.mobify config file (api_key field), or ~/.mobify--[hostname] if --cloud-origin is set
  *
  * Project/environment resolution order:
- * 1. --project / --environment flags
- * 2. MRT_PROJECT / MRT_ENVIRONMENT environment variables (SFCC_-prefixed and MRT_TARGET also supported)
+ * 1. --project (alias: --storefront) / --environment flags
+ * 2. MRT_PROJECT / MRT_ENVIRONMENT environment variables (SFCC_-prefixed, MRT_STOREFRONT / SFCC_MRT_STOREFRONT, and MRT_TARGET also supported)
  * 3. dw.json (mrtProject / mrtEnvironment fields)
  *
  * Cloud origin resolution:
@@ -21,14 +37,29 @@ import type { AuthStrategy } from '../auth/types.js';
  * 2. MRT_CLOUD_ORIGIN environment variable (SFCC_MRT_CLOUD_ORIGIN also supported)
  * 3. dw.json (mrtOrigin field)
  * 4. Default: https://cloud.mobify.com
+ *
+ * Backend selection:
+ * - `--mrt-backend` flag > `MRT_BACKEND` env (`SFCC_MRT_BACKEND` also supported) > `mrtBackend` dw.json > `auto`.
  */
-export declare abstract class MrtCommand<T extends typeof Command> extends BaseCommand<T> {
+export declare abstract class MrtCommand<T extends typeof Command> extends OAuthCommand<T> {
     static baseFlags: {
         'api-key': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         project: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         'cloud-origin': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         'credentials-file': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'mrt-backend': import("@oclif/core/interfaces").OptionFlag<"scapi" | "auto" | "legacy", import("@oclif/core/interfaces").CustomOptions>;
+        'client-id': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'client-secret': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'auth-scope': import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'short-code': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'tenant-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'auth-methods': import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'user-auth': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'account-manager-host': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'jwt-cert': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'jwt-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'jwt-passphrase': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'log-level': import("@oclif/core/interfaces").OptionFlag<"trace" | "debug" | "info" | "warn" | "error" | "silent" | undefined, import("@oclif/core/interfaces").CustomOptions>;
         debug: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
@@ -41,18 +72,132 @@ export declare abstract class MrtCommand<T extends typeof Command> extends BaseC
         'extra-body': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'extra-headers': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
+    /** Ensures the read-only warning prints at most once per command run. */
+    private mrtReadOnlyWarned;
+    /** Warn once if any read is served while Managed Runtime is in read-only mode. */
+    _run<R>(): Promise<R>;
+    /**
+     * Suppress human-readable logging in `--json` mode.
+     *
+     * MRT commands emit progress/status lines via {@link BaseCommand.log}, which
+     * routes to the structured logger on stderr. When `--json` is set the caller
+     * wants machine-readable output only, so these lines are swallowed centrally
+     * here instead of guarding every call site with `if (!this.jsonEnabled())`.
+     *
+     * This only affects `this.log()` (stderr diagnostics). Structured stdout
+     * output — tables and detail views written via `ux.stdout` — is untouched and
+     * must still be guarded by `jsonEnabled()` at its call site so it never
+     * corrupts the JSON payload on stdout.
+     */
+    log(message?: string, ...args: unknown[]): void;
     protected loadConfiguration(): Promise<ResolvedB2CConfig>;
+    /** Resolved `--mrt-backend` preference (default `'auto'`). */
+    protected get mrtBackendPreference(): 'auto' | 'legacy' | 'scapi';
     /**
-     * Gets an API key auth strategy for MRT.
+     * Gets an API key auth strategy for MRT (legacy MRT Cloud API).
      */
     protected getMrtAuth(): AuthStrategy;
     /**
-     * Check if MRT credentials are available.
+     * Check if legacy MRT credentials (API key) are available.
      */
     protected hasMrtCredentials(): boolean;
     /**
-     * Validates that MRT credentials are configured, errors if not.
+     * Validates that legacy MRT credentials are configured, errors if not.
      * @throws {Error} If MRT API key is not configured
      */
     protected requireMrtCredentials(): void;
+    /**
+     * Resolve the target MRT project slug for a command that accepts it either as
+     * a positional argument or via the `--project` / `--storefront` flag.
+     *
+     * An explicit positional wins; otherwise the resolved `--project` /
+     * `--storefront` flag value is used (which also covers `MRT_PROJECT`,
+     * `SFCC_MRT_PROJECT`, `MRT_STOREFRONT` / `SFCC_MRT_STOREFRONT`, and the
+     * `mrtProject` field in dw.json). Errors when neither yields a value.
+     */
+    protected resolveProjectSlug(positional?: string): string;
+    /**
+     * Resolve the target MRT environment slug for a command that accepts it either
+     * as a positional argument or via the `--environment` / `--target` (`-e`) flag.
+     *
+     * An explicit positional wins; otherwise the resolved `--environment` /
+     * `--target` flag value is used (which also covers `MRT_ENVIRONMENT`,
+     * `SFCC_MRT_ENVIRONMENT`, `MRT_TARGET`, and the `mrtEnvironment` field in
+     * dw.json). Errors when neither yields a value.
+     */
+    protected resolveEnvironmentSlug(positional?: string): string;
+    /**
+     * SCAPI MRT connection bundle (shortCode + tenantId + a SCAPI-capable OAuth
+     * strategy), or `undefined` when this command cannot reach the SCAPI
+     * Storefront APIs.
+     *
+     * Requires:
+     *   1. `shortCode` and `tenantId` are configured, and
+     *   2. an OAuth strategy that SCAPI Admin accepts.
+     *
+     * Auth is resolved via {@link OAuthCommand.getOAuthStrategy} — the same path
+     * sibling SCAPI-only commands (e.g. eCDN) use — so a stored client-credentials
+     * session (from `b2c auth client`) is reused just like live client-credentials
+     * or JWT Bearer config. Browser user auth (Authorization Code + PKCE or the
+     * deprecated implicit flow) is the only flow SCAPI Admin rejects, so
+     * {@link assertScapiAdminAuthSupported} — the SCAPI client factory's own guard —
+     * filters it out here too: under `auto` that lets MRT fall back to legacy, and
+     * under explicit `--mrt-backend scapi` it surfaces as
+     * {@link mrtScapiUnavailableMessage}.
+     *
+     * This runs eagerly during backend resolution, so it must never throw or start
+     * browser auth. `getOAuthStrategy()` throws when no credentials are configured
+     * and `assertScapiAdminAuthSupported()` throws for browser user auth; both mean
+     * "SCAPI not available" and yield `undefined`. Built directly rather than via
+     * `createB2CInstance`, which requires a hostname MRT commands never set.
+     */
+    protected getScapiMrtConfig(): ScapiClientConfig | undefined;
+    /**
+     * Whether this command implements the SCAPI MRT backend. Defaults to `false`;
+     * the supported commands (`mrt bundle history`, `mrt bundle list`,
+     * `mrt bundle deploy` — both the local-build push and `<bundleId>` deploy —
+     * and the `mrt env var` family: `list`, `set`, `delete`, `push`) override it
+     * to `true`. Used by {@link init} to reject an explicit `--mrt-backend scapi`
+     * on commands that would otherwise silently fall back to legacy — an explicit
+     * SCAPI request must never be quietly downgraded.
+     */
+    protected supportsScapiMrt(): boolean;
+    init(): Promise<void>;
+    /**
+     * Resolves the MRT backend context for a supported command: the resolved
+     * `--mrt-backend` preference, a SCAPI connection when the SCAPI prerequisites
+     * are met, and the legacy API-key auth when configured. Emits per-prerequisite
+     * `-D` debug and validates that at least one usable backend exists for the
+     * resolved preference, erroring early with an actionable message otherwise.
+     */
+    protected getMrtBackendContext(): {
+        preference: MrtBackendPreference;
+        scapiConnection?: ScapiMrtConnection;
+        legacyAuth?: AuthStrategy;
+    };
+    /**
+     * Guardrail for MRT operations the SCAPI backend does not implement yet (e.g.
+     * pushing a local build). Explicit `--mrt-backend scapi` errors; `auto` warns
+     * only when SCAPI is actually configured (a meaningful notice, not noise for
+     * legacy-only users). Callers proceed on the legacy path afterward.
+     */
+    protected guardUnsupportedByScapiMrt(operationDescription: string): void;
+    /** Logs each MRT backend prerequisite as satisfied/missing under `-D`/`--debug`. */
+    private debugMrtBackendPrereqs;
+    /**
+     * Legacy-only flags that configure the MRT Cloud API and have no effect on the
+     * SCAPI MRT backend. Detected from the raw argv (like
+     * {@link OAuthCommand.detectExplicitAuthFlags}) so only flags the user actually
+     * typed are reported — env vars and dw.json are intentionally not covered. Each
+     * entry pairs the canonical long flag with any short char alias to match.
+     *
+     * @returns the long-flag names that were supplied, for a single grouped warning.
+     */
+    private detectIgnoredLegacyFlags;
+    /** Warn once (to stderr) that reads are served from a read-only Managed Runtime. */
+    protected warnReadOnlyOnce(): void;
+    /** Replace a read-only write rejection with actionable guidance; other errors pass through. */
+    protected catch(err: Error & {
+        exitCode?: number;
+    }): Promise<never>;
 }