@salesforce/b2c-tooling-sdk 1.9.0 → 1.11.0

package/dist/cjs/cli/lifecycle.js

@@ -1,130 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-/**
- * B2C operation lifecycle types for CLI plugin extensibility.
- *
- * This module defines the interfaces for B2C-specific operation lifecycle hooks
- * that allow CLI plugins to observe and control operation execution for jobs,
- * deployments, and other B2C Commerce operations.
- *
- * ## Plugin Usage
- *
- * Plugins implement the `b2c:operation-lifecycle` hook to receive lifecycle events:
- *
- * ```typescript
- * import type { B2COperationLifecycleHook, B2COperationLifecycleProvider } from '@salesforce/b2c-tooling-sdk/cli';
- *
- * const auditProvider: B2COperationLifecycleProvider = {
- *   name: 'audit-logger',
- *   async beforeOperation(context) {
- *     console.log(`Starting ${context.operationType}: ${context.operationId}`);
- *     // Return { skip: true } to prevent execution
- *   },
- *   async afterOperation(context, result) {
- *     console.log(`Completed ${context.operationType}: ${result.success ? 'SUCCESS' : 'FAILED'}`);
- *   },
- * };
- *
- * const hook: B2COperationLifecycleHook = async function() {
- *   return { providers: [auditProvider] };
- * };
- *
- * export default hook;
- * ```
- *
- * @module cli/lifecycle
- */
-import { randomUUID } from 'node:crypto';
-/**
- * Creates a new B2C operation context for lifecycle hooks.
- *
- * @param operationType - Type of B2C operation
- * @param metadata - Operation-specific metadata
- * @param instance - B2C instance with configured clients
- * @returns New operation context
- */
-export function createB2COperationContext(operationType, metadata, instance) {
-    return {
-        operationType,
-        operationId: randomUUID(),
-        instance,
-        startTime: Date.now(),
-        metadata,
-    };
-}
-/**
- * Helper class for running B2C lifecycle hooks in CLI commands.
- *
- * This class is used internally by CLI commands to collect and invoke
- * lifecycle providers from plugins.
- */
-export class B2CLifecycleRunner {
-    providers = [];
-    logger;
-    constructor(logger) {
-        this.logger = logger;
-    }
-    /**
-     * Adds providers to this runner.
-     */
-    addProviders(providers) {
-        this.providers.push(...providers);
-    }
-    /**
-     * Runs beforeOperation hooks for all providers.
-     *
-     * @param context - Operation context
-     * @returns Aggregated result (skip if any provider requests skip)
-     */
-    async runBefore(context) {
-        const aggregatedResult = {};
-        for (const provider of this.providers) {
-            if (!provider.beforeOperation)
-                continue;
-            try {
-                const result = await provider.beforeOperation(context);
-                if (result?.skip) {
-                    this.logger?.debug(`Provider ${provider.name} requested skip: ${result.skipReason}`);
-                    return result; // First skip wins
-                }
-                if (result?.context) {
-                    Object.assign(context.metadata, result.context);
-                }
-            }
-            catch (error) {
-                // Don't fail the operation on hook errors
-                this.logger?.warn(`Lifecycle provider ${provider.name} beforeOperation failed: ${error}`);
-            }
-        }
-        return aggregatedResult;
-    }
-    /**
-     * Runs afterOperation hooks for all providers.
-     *
-     * @param context - Operation context
-     * @param result - Operation result
-     */
-    async runAfter(context, result) {
-        for (const provider of this.providers) {
-            if (!provider.afterOperation)
-                continue;
-            try {
-                await provider.afterOperation(context, result);
-            }
-            catch (error) {
-                // Don't fail on hook errors
-                this.logger?.warn(`Lifecycle provider ${provider.name} afterOperation failed: ${error}`);
-            }
-        }
-    }
-    /**
-     * Returns the number of registered providers.
-     */
-    get size() {
-        return this.providers.length;
-    }
-}
-//# sourceMappingURL=lifecycle.js.map

package/dist/cjs/cli/lifecycle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/cli/lifecycle.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AA0KvC;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,aAA+B,EAC/B,QAAiC,EACjC,QAAqB;IAErB,OAAO;QACL,aAAa;QACb,WAAW,EAAE,UAAU,EAAE;QACzB,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IACrB,SAAS,GAAoC,EAAE,CAAC;IAChD,MAAM,CAAU;IAExB,YAAY,MAAe;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAA0C;QACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,OAA4B;QAC1C,MAAM,gBAAgB,GAA6B,EAAE,CAAC;QAEtD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,eAAe;gBAAE,SAAS;YAExC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBACvD,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,QAAQ,CAAC,IAAI,oBAAoB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;oBACrF,OAAO,MAAM,CAAC,CAAC,kBAAkB;gBACnC,CAAC;gBACD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;oBACpB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,0CAA0C;gBAC1C,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,sBAAsB,QAAQ,CAAC,IAAI,4BAA4B,KAAK,EAAE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA4B,EAAE,MAA0B;QACrE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,cAAc;gBAAE,SAAS;YAEvC,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4BAA4B;gBAC5B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,sBAAsB,QAAQ,CAAC,IAAI,2BAA2B,KAAK,EAAE,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/B,CAAC;CACF"}

package/dist/cjs/cli/mrt-command.d.ts

@@ -1,57 +0,0 @@
-import { Command } from '@oclif/core';
-import { BaseCommand } from './base-command.js';
-import type { ResolvedB2CConfig } from '../config/index.js';
-import type { AuthStrategy } from '../auth/types.js';
-/**
- * Base command for Managed Runtime (MRT) operations.
- * Uses API key authentication.
- *
- * API key resolution order:
- * 1. --api-key flag
- * 2. MRT_API_KEY environment variable (SFCC_MRT_API_KEY also supported)
- * 3. ~/.mobify config file (api_key field), or ~/.mobify--[hostname] if --cloud-origin is set
- *
- * Project/environment resolution order:
- * 1. --project / --environment flags
- * 2. MRT_PROJECT / MRT_ENVIRONMENT environment variables (SFCC_-prefixed and MRT_TARGET also supported)
- * 3. dw.json (mrtProject / mrtEnvironment fields)
- *
- * Cloud origin resolution:
- * 1. --cloud-origin flag
- * 2. MRT_CLOUD_ORIGIN environment variable (SFCC_MRT_CLOUD_ORIGIN also supported)
- * 3. dw.json (mrtOrigin field)
- * 4. Default: https://cloud.mobify.com
- */
-export declare abstract class MrtCommand<T extends typeof Command> extends BaseCommand<T> {
-    static baseFlags: {
-        'api-key': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        project: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        environment: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'cloud-origin': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'credentials-file': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'log-level': import("@oclif/core/interfaces").OptionFlag<"trace" | "debug" | "info" | "warn" | "error" | "silent" | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        debug: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        jsonl: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        lang: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        instance: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'project-directory': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'extra-query': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'extra-body': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'extra-headers': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-    };
-    protected loadConfiguration(): Promise<ResolvedB2CConfig>;
-    /**
-     * Gets an API key auth strategy for MRT.
-     */
-    protected getMrtAuth(): AuthStrategy;
-    /**
-     * Check if MRT credentials are available.
-     */
-    protected hasMrtCredentials(): boolean;
-    /**
-     * Validates that MRT credentials are configured, errors if not.
-     */
-    protected requireMrtCredentials(): void;
-}

package/dist/cjs/cli/mrt-command.js

@@ -1,95 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-import { Flags } from '@oclif/core';
-import { BaseCommand } from './base-command.js';
-import { loadConfig, extractMrtFlags } from './config.js';
-import { t } from '../i18n/index.js';
-import { DEFAULT_MRT_ORIGIN } from '../clients/mrt.js';
-/**
- * Base command for Managed Runtime (MRT) operations.
- * Uses API key authentication.
- *
- * API key resolution order:
- * 1. --api-key flag
- * 2. MRT_API_KEY environment variable (SFCC_MRT_API_KEY also supported)
- * 3. ~/.mobify config file (api_key field), or ~/.mobify--[hostname] if --cloud-origin is set
- *
- * Project/environment resolution order:
- * 1. --project / --environment flags
- * 2. MRT_PROJECT / MRT_ENVIRONMENT environment variables (SFCC_-prefixed and MRT_TARGET also supported)
- * 3. dw.json (mrtProject / mrtEnvironment fields)
- *
- * Cloud origin resolution:
- * 1. --cloud-origin flag
- * 2. MRT_CLOUD_ORIGIN environment variable (SFCC_MRT_CLOUD_ORIGIN also supported)
- * 3. dw.json (mrtOrigin field)
- * 4. Default: https://cloud.mobify.com
- */
-export class MrtCommand extends BaseCommand {
-    static baseFlags = {
-        ...BaseCommand.baseFlags,
-        'api-key': Flags.string({
-            description: 'MRT API key',
-            env: 'MRT_API_KEY',
-            default: async () => process.env.SFCC_MRT_API_KEY || undefined,
-            helpGroup: 'AUTH',
-        }),
-        project: Flags.string({
-            char: 'p',
-            description: 'MRT project slug (or set mrtProject in dw.json)',
-            env: 'MRT_PROJECT',
-            default: async () => process.env.SFCC_MRT_PROJECT || undefined,
-        }),
-        environment: Flags.string({
-            char: 'e',
-            aliases: ['target'],
-            description: 'MRT environment (e.g., staging, production; or set mrtEnvironment in dw.json)',
-            env: 'MRT_ENVIRONMENT',
-            default: async () => process.env.SFCC_MRT_ENVIRONMENT || process.env.MRT_TARGET || undefined,
-        }),
-        'cloud-origin': Flags.string({
-            description: `MRT cloud origin URL (or set mrtOrigin in dw.json; default: ${DEFAULT_MRT_ORIGIN})`,
-            env: 'MRT_CLOUD_ORIGIN',
-            default: async () => process.env.SFCC_MRT_CLOUD_ORIGIN || undefined,
-        }),
-        'credentials-file': Flags.string({
-            description: 'Path to MRT credentials file (overrides default ~/.mobify)',
-            env: 'MRT_CREDENTIALS_FILE',
-        }),
-    };
-    async loadConfiguration() {
-        const mrt = extractMrtFlags(this.flags);
-        const options = {
-            ...this.getBaseConfigOptions(),
-            ...mrt.options,
-        };
-        return loadConfig(mrt.config, options);
-    }
-    /**
-     * Gets an API key auth strategy for MRT.
-     */
-    getMrtAuth() {
-        if (this.resolvedConfig.hasMrtConfig()) {
-            return this.resolvedConfig.createMrtAuth();
-        }
-        throw new Error(t('error.mrtApiKeyRequired', 'MRT API key required. Provide --api-key, set MRT_API_KEY, or configure ~/.mobify'));
-    }
-    /**
-     * Check if MRT credentials are available.
-     */
-    hasMrtCredentials() {
-        return this.resolvedConfig.hasMrtConfig();
-    }
-    /**
-     * Validates that MRT credentials are configured, errors if not.
-     */
-    requireMrtCredentials() {
-        if (!this.hasMrtCredentials()) {
-            this.error(t('error.mrtApiKeyRequired', 'MRT API key required. Provide --api-key, set MRT_API_KEY, or configure ~/.mobify'));
-        }
-    }
-}
-//# sourceMappingURL=mrt-command.js.map

package/dist/cjs/cli/mrt-command.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mrt-command.js","sourceRoot":"","sources":["../../../src/cli/mrt-command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAU,KAAK,EAAC,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAC,WAAW,EAAC,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAC,UAAU,EAAE,eAAe,EAAC,MAAM,aAAa,CAAC;AAIxD,OAAO,EAAC,CAAC,EAAC,MAAM,kBAAkB,CAAC;AACnC,OAAO,EAAC,kBAAkB,EAAC,MAAM,mBAAmB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAgB,UAAqC,SAAQ,WAAc;IAC/E,MAAM,CAAC,SAAS,GAAG;QACjB,GAAG,WAAW,CAAC,SAAS;QACxB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,aAAa;YAC1B,GAAG,EAAE,aAAa;YAClB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS;YAC9D,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,iDAAiD;YAC9D,GAAG,EAAE,aAAa;YAClB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS;SAC/D,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,CAAC,QAAQ,CAAC;YACnB,WAAW,EAAE,+EAA+E;YAC5F,GAAG,EAAE,iBAAiB;YACtB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS;SAC7F,CAAC;QACF,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;YAC3B,WAAW,EAAE,+DAA+D,kBAAkB,GAAG;YACjG,GAAG,EAAE,kBAAkB;YACvB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS;SACpE,CAAC;QACF,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC;YAC/B,WAAW,EAAE,4DAA4D;YACzE,GAAG,EAAE,sBAAsB;SAC5B,CAAC;KACH,CAAC;IAEiB,KAAK,CAAC,iBAAiB;QACxC,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC;QACnE,MAAM,OAAO,GAAsB;YACjC,GAAG,IAAI,CAAC,oBAAoB,EAAE;YAC9B,GAAG,GAAG,CAAC,OAAO;SACf,CAAC;QAEF,OAAO,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACO,UAAU;QAClB,IAAI,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,IAAI,KAAK,CACb,CAAC,CAAC,yBAAyB,EAAE,kFAAkF,CAAC,CACjH,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,iBAAiB;QACzB,OAAO,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACO,qBAAqB;QAC7B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CACR,CAAC,CACC,yBAAyB,EACzB,kFAAkF,CACnF,CACF,CAAC;QACJ,CAAC;IACH,CAAC"}

package/dist/cjs/cli/oauth-command.d.ts

@@ -1,122 +0,0 @@
-import { Command } from '@oclif/core';
-import { BaseCommand } from './base-command.js';
-import type { AuthMethod } from './config.js';
-import type { ResolvedB2CConfig } from '../config/index.js';
-import { OAuthStrategy } from '../auth/oauth.js';
-import { ImplicitOAuthStrategy } from '../auth/oauth-implicit.js';
-import { StatefulOAuthStrategy } from '../auth/stateful-oauth-strategy.js';
-import { JwtOAuthStrategy } from '../auth/oauth-jwt.js';
-/**
- * Base command for operations requiring OAuth authentication.
- * Use this for platform-level operations like ODS, APIs.
- *
- * Environment variables:
- * - SFCC_CLIENT_ID: OAuth client ID
- * - SFCC_CLIENT_SECRET: OAuth client secret
- *
- * For B2C instance specific operations, use InstanceCommand instead.
- */
-export declare abstract class OAuthCommand<T extends typeof Command> extends BaseCommand<T> {
-    private readonly _rawArgv;
-    constructor(argv: string[], config: ConstructorParameters<typeof Command>[1]);
-    static baseFlags: {
-        'client-id': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'client-secret': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'auth-scope': import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'short-code': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'tenant-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'auth-methods': import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'user-auth': import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        'account-manager-host': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'jwt-cert': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'jwt-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'jwt-passphrase': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'log-level': import("@oclif/core/interfaces").OptionFlag<"trace" | "debug" | "info" | "warn" | "error" | "silent" | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        debug: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        jsonl: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        lang: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        instance: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'project-directory': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        'extra-query': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'extra-body': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'extra-headers': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-    };
-    protected loadConfiguration(): Promise<ResolvedB2CConfig>;
-    /**
-     * Gets the configured Account Manager host.
-     */
-    protected get accountManagerHost(): string;
-    /**
-     * Gets the default authentication methods in priority order.
-     * This method is used by getOAuthStrategy() when no auth methods are specified in config.
-     * Subclasses can override this to change the default priority — for example,
-     * commands that talk to endpoints requiring a real user identity should
-     * return `['implicit']` so that user-auth is preferred when the user has
-     * not explicitly chosen an auth method.
-     *
-     * Explicit user input via `--auth-methods`, `--client-secret`, `--jwt-cert`,
-     * etc. always wins over the default; this method only changes what happens
-     * when the user has not specified anything.
-     *
-     * @returns Array of auth methods in priority order (first is highest priority)
-     */
-    protected getDefaultAuthMethods(): AuthMethod[];
-    /**
-     * Returns a default client ID for implicit OAuth flows when no client ID is configured.
-     * Returns undefined by default. Subclasses (AmCommand, OdsCommand, etc.) override this
-     * to return DEFAULT_PUBLIC_CLIENT_ID for platform-level commands that support public client tokens.
-     */
-    protected getDefaultClientId(): string | undefined;
-    /**
-     * Gets an OAuth auth strategy based on allowed auth methods and available credentials.
-     *
-     * Iterates through allowed methods (in priority order) and returns the first
-     * strategy for which the required credentials are available.
-     *
-     * For the implicit flow, falls back to getDefaultClientId() when no client ID
-     * is explicitly configured.
-     *
-     * @throws Error if no allowed method has the required credentials configured
-     */
-    protected getOAuthStrategy(): OAuthStrategy | JwtOAuthStrategy | ImplicitOAuthStrategy | StatefulOAuthStrategy;
-    /**
-     * Detects explicit CLI flags that indicate intent to use stateless auth.
-     * Only flags that mandate a specific auth flow are considered:
-     * - --client-secret: indicates client-credentials flow
-     * - --jwt-cert / --jwt-key: indicates JWT Bearer flow
-     * - --user-auth: indicates browser-based implicit flow
-     * - --auth-methods: explicit auth method selection
-     *
-     * Contextual flags (--client-id, --auth-scope, --short-code, --tenant-id,
-     * --account-manager-host) are NOT included because they are handled by
-     * isStatefulTokenValid (clientId/scope matching) or don't affect auth flow.
-     */
-    private detectExplicitAuthFlags;
-    /**
-     * Check if OAuth credentials are available.
-     * Returns true if clientId is configured (with or without clientSecret),
-     * or if a default client ID is available for implicit flows.
-     */
-    protected hasOAuthCredentials(): boolean;
-    /**
-     * Check if full OAuth credentials (client credentials flow) are available.
-     * Returns true only if both clientId and clientSecret are configured.
-     */
-    protected hasFullOAuthCredentials(): boolean;
-    /**
-     * Validates that OAuth credentials are configured, errors if not.
-     * Only clientId is required (implicit flow can be used without clientSecret).
-     */
-    protected requireOAuthCredentials(): void;
-    /**
-     * Get the tenant ID from resolved config, throwing if not available.
-     * @throws Error if tenant ID is not provided through any source
-     */
-    protected requireTenantId(): string;
-    /**
-     * Organization ID (`f_ecom_*`) for API path parameters from the resolved tenant.
-     */
-    protected getOrganizationId(): string;
-}