@salesforce/b2c-tooling-sdk 2.1.0 → 2.3.0

package/dist/esm/operations/mtls/index.js

@@ -0,0 +1,270 @@
+/*
+ * Copyright (c) 2025, Salesforce, Inc.
+ * SPDX-License-Identifier: Apache-2
+ * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
+ */
+/**
+ * mTLS code upload certificate operations for B2C Commerce.
+ *
+ * Two-factor (mTLS) code upload to staging via eCDN works with a private
+ * certificate authority (CA):
+ *
+ * 1. Generate a CA certificate and key ({@link generateCaCertificate}).
+ * 2. Upload the CA to eCDN ({@link createCodeUploadCertificate}). The response
+ *    includes the code upload hostname associated with the staging zone.
+ * 3. Issue one or more client certificates signed by the CA, bundled as PKCS12
+ *    (`.p12`) files ({@link issueClientCertificate}). Each user (named after their
+ *    Business Manager username) or CI pipeline (named after its API client ID)
+ *    gets its own client certificate for WebDAV uploads; the CA itself is never
+ *    used as a client certificate.
+ *
+ * The CA certificate may be valid for at most {@link MAX_CODE_UPLOAD_CA_VALIDITY_DAYS}
+ * days. To rotate, upload a new CA before the old one expires, re-issue client
+ * certificates from it, then delete the old CA.
+ *
+ * ## Usage
+ *
+ * ```typescript
+ * import {createCdnZonesClient} from '@salesforce/b2c-tooling-sdk/clients';
+ * import {
+ *   createCodeUploadCertificate,
+ *   generateCaCertificate,
+ *   issueClientCertificate,
+ * } from '@salesforce/b2c-tooling-sdk/operations/mtls';
+ *
+ * const ca = generateCaCertificate({commonName: 'My Code Upload CA'});
+ * const client = createCdnZonesClient({shortCode, tenantId}, auth, {readWrite: true});
+ * const uploaded = await createCodeUploadCertificate(client, organizationId, {
+ *   name: 'code-upload',
+ *   certificatePem: ca.certificatePem,
+ *   privateKeyPem: ca.privateKeyPem,
+ * });
+ *
+ * const clientCert = issueClientCertificate({ca, commonName: 'build-server'});
+ * await fs.writeFile('build-server.p12', clientCert.pkcs12);
+ * // clientCert.passphrase protects the .p12; uploaded.mtlsAssociatedCodeUploadHostname
+ * // is the WebDAV hostname to use with it.
+ * ```
+ *
+ * @module operations/mtls
+ */
+import { generateKeyPairSync, randomBytes, X509Certificate } from 'node:crypto';
+import forge from 'node-forge';
+import { getApiErrorMessage } from '../../clients/error-utils.js';
+import { getLogger } from '../../logging/logger.js';
+/**
+ * Maximum validity eCDN accepts for an uploaded code upload CA certificate.
+ * Also the default validity for {@link generateCaCertificate}.
+ */
+export const MAX_CODE_UPLOAD_CA_VALIDITY_DAYS = 365;
+/** Default validity for a generated CA certificate. */
+export const DEFAULT_CA_VALIDITY_DAYS = MAX_CODE_UPLOAD_CA_VALIDITY_DAYS;
+/** Default validity for an issued client certificate (1 year). */
+export const DEFAULT_CLIENT_VALIDITY_DAYS = 365;
+/** Default RSA key size in bits. */
+export const DEFAULT_KEY_SIZE = 2048;
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+/**
+ * Generates a random passphrase suitable for protecting a PKCS12 bundle.
+ *
+ * @returns A 32-character URL-safe random string
+ */
+export function generatePassphrase() {
+    return randomBytes(24).toString('base64url');
+}
+// Backdate the start of validity slightly to tolerate clock skew between machines.
+function backdatedNow() {
+    return new Date(Date.now() - 5 * 60 * 1000);
+}
+function assertPositiveInteger(value, name) {
+    if (!Number.isInteger(value) || value <= 0) {
+        throw new RangeError(`${name} must be a positive integer, got ${value}`);
+    }
+}
+// Node's native key generation is much faster than node-forge's pure JS implementation.
+function generateRsaKeyPair(keySize) {
+    assertPositiveInteger(keySize, 'keySize');
+    const { privateKey } = generateKeyPairSync('rsa', {
+        modulusLength: keySize,
+        privateKeyEncoding: { type: 'pkcs1', format: 'pem' },
+        publicKeyEncoding: { type: 'spki', format: 'pem' },
+    });
+    const forgeKey = forge.pki.privateKeyFromPem(privateKey);
+    return { privateKey: forgeKey, publicKey: forge.pki.setRsaPublicKey(forgeKey.n, forgeKey.e) };
+}
+// Positive 128-bit serial (RFC 5280 requires a positive integer of at most 20 octets).
+function randomSerialNumber() {
+    const bytes = randomBytes(16);
+    bytes[0] &= 0x7f;
+    bytes[0] |= 0x10;
+    return bytes.toString('hex');
+}
+function buildSubject(commonName, organization) {
+    const attrs = [{ name: 'commonName', value: commonName }];
+    if (organization) {
+        attrs.push({ name: 'organizationName', value: organization });
+    }
+    return attrs;
+}
+function formatSubject(cert) {
+    return cert.subject.attributes.map((a) => `${a.shortName ?? a.name}=${String(a.value)}`).join(', ');
+}
+function toGenerated(cert, privateKey) {
+    return {
+        certificatePem: forge.pki.certificateToPem(cert),
+        privateKeyPem: forge.pki.privateKeyToPem(privateKey),
+        serialNumber: cert.serialNumber,
+        subject: formatSubject(cert),
+        notBefore: cert.validity.notBefore,
+        notAfter: cert.validity.notAfter,
+    };
+}
+/**
+ * Generates a self-signed CA certificate for mTLS code upload.
+ *
+ * The CA is uploaded to eCDN with {@link createCodeUploadCertificate} and used
+ * to sign client certificates with {@link issueClientCertificate}. Keep the CA
+ * private key secret: anyone holding it can issue trusted client certificates.
+ *
+ * @param options - Subject, validity, and key size options
+ * @returns The CA certificate and private key as PEM strings
+ */
+export function generateCaCertificate(options = {}) {
+    const validityDays = options.validityDays ?? DEFAULT_CA_VALIDITY_DAYS;
+    assertPositiveInteger(validityDays, 'validityDays');
+    if (validityDays > MAX_CODE_UPLOAD_CA_VALIDITY_DAYS) {
+        throw new RangeError(`validityDays must be at most ${MAX_CODE_UPLOAD_CA_VALIDITY_DAYS}; eCDN allows a maximum CA expiry of 1 year`);
+    }
+    const keys = generateRsaKeyPair(options.keySize ?? DEFAULT_KEY_SIZE);
+    const cert = forge.pki.createCertificate();
+    cert.publicKey = keys.publicKey;
+    cert.serialNumber = randomSerialNumber();
+    cert.validity.notBefore = backdatedNow();
+    cert.validity.notAfter = new Date(cert.validity.notBefore.getTime() + validityDays * MS_PER_DAY);
+    const subject = buildSubject(options.commonName ?? 'B2C Commerce Code Upload CA', options.organization);
+    cert.setSubject(subject);
+    cert.setIssuer(subject);
+    cert.setExtensions([
+        { name: 'basicConstraints', cA: true, critical: true },
+        { name: 'keyUsage', keyCertSign: true, cRLSign: true, critical: true },
+        { name: 'subjectKeyIdentifier' },
+    ]);
+    cert.sign(keys.privateKey, forge.md.sha256.create());
+    getLogger().debug({ subject: formatSubject(cert), notAfter: cert.validity.notAfter }, 'Generated mTLS CA certificate');
+    return toGenerated(cert, keys.privateKey);
+}
+/**
+ * Issues a client certificate signed by the given CA and bundles it as PKCS12.
+ *
+ * The resulting `.p12` is what the CLI, IDE extension, and other WebDAV clients
+ * use for two-factor code upload (`certificate` / `certificate-passphrase` in
+ * dw.json). This runs entirely locally; no API call is made.
+ *
+ * @param options - CA, subject, validity, and passphrase options
+ * @returns The client certificate, private key, and PKCS12 bundle
+ * @throws Error if the CA certificate/key are invalid, don't match, or the CA has expired
+ */
+export function issueClientCertificate(options) {
+    const caCert = forge.pki.certificateFromPem(options.ca.certificatePem);
+    const caKey = forge.pki.privateKeyFromPem(options.ca.privateKeyPem);
+    const caPublicKey = caCert.publicKey;
+    if (caPublicKey.n.compareTo(caKey.n) !== 0) {
+        throw new Error('CA private key does not match the CA certificate');
+    }
+    const now = new Date();
+    if (caCert.validity.notAfter <= now) {
+        throw new Error(`CA certificate expired on ${caCert.validity.notAfter.toISOString()}`);
+    }
+    const validityDays = options.validityDays ?? DEFAULT_CLIENT_VALIDITY_DAYS;
+    assertPositiveInteger(validityDays, 'validityDays');
+    const keys = generateRsaKeyPair(options.keySize ?? DEFAULT_KEY_SIZE);
+    const cert = forge.pki.createCertificate();
+    cert.publicKey = keys.publicKey;
+    cert.serialNumber = randomSerialNumber();
+    cert.validity.notBefore = backdatedNow();
+    const requestedNotAfter = new Date(cert.validity.notBefore.getTime() + validityDays * MS_PER_DAY);
+    cert.validity.notAfter = requestedNotAfter < caCert.validity.notAfter ? requestedNotAfter : caCert.validity.notAfter;
+    cert.setSubject(buildSubject(options.commonName, options.organization));
+    cert.setIssuer(caCert.subject.attributes);
+    cert.setExtensions([
+        { name: 'basicConstraints', cA: false, critical: true },
+        { name: 'keyUsage', digitalSignature: true, keyEncipherment: true, critical: true },
+        { name: 'extKeyUsage', clientAuth: true },
+        { name: 'subjectKeyIdentifier' },
+        { name: 'authorityKeyIdentifier', keyIdentifier: caCert.generateSubjectKeyIdentifier().getBytes() },
+    ]);
+    cert.sign(caKey, forge.md.sha256.create());
+    const passphrase = options.passphrase ?? generatePassphrase();
+    // 3DES matches `openssl pkcs12 -export -legacy`, which Salesforce recommends so the
+    // bundle can be imported into macOS Keychain and other tools that lack AES PBES2 support.
+    const p12Asn1 = forge.pkcs12.toPkcs12Asn1(keys.privateKey, [cert, caCert], passphrase, {
+        algorithm: '3des',
+        friendlyName: options.commonName,
+    });
+    const pkcs12 = Buffer.from(forge.asn1.toDer(p12Asn1).getBytes(), 'binary');
+    getLogger().debug({ subject: formatSubject(cert), notAfter: cert.validity.notAfter }, 'Issued mTLS client certificate');
+    return { ...toGenerated(cert, keys.privateKey), pkcs12, passphrase };
+}
+/**
+ * Validates that a PEM certificate can be uploaded as a code upload CA.
+ *
+ * The CA certificate bundle is allowed a maximum expiry of 1 year
+ * ({@link MAX_CODE_UPLOAD_CA_VALIDITY_DAYS} days); before it expires it must be
+ * renewed to avoid disruption with code uploads.
+ *
+ * @param certificatePem - PEM-encoded CA certificate
+ * @throws Error if the certificate can't be parsed, isn't a CA, is expired, or is valid for more than 1 year
+ */
+export function validateCodeUploadCaCertificate(certificatePem) {
+    let cert;
+    try {
+        cert = new X509Certificate(certificatePem);
+    }
+    catch (error) {
+        throw new Error(`Invalid CA certificate: ${error instanceof Error ? error.message : String(error)}`, {
+            cause: error,
+        });
+    }
+    if (!cert.ca) {
+        throw new Error('Certificate is not a CA certificate. Upload the CA that signs your client certificates, not a client certificate. ' +
+            'If you generated it with OpenSSL, add -addext "basicConstraints=critical,CA:TRUE" -addext "keyUsage=critical,keyCertSign,cRLSign" ' +
+            '(the macOS default OpenSSL configuration omits them).');
+    }
+    const notBefore = new Date(cert.validFrom);
+    const notAfter = new Date(cert.validTo);
+    if (notAfter.getTime() <= Date.now()) {
+        throw new Error(`CA certificate expired on ${notAfter.toISOString()}`);
+    }
+    const validityDays = (notAfter.getTime() - notBefore.getTime()) / MS_PER_DAY;
+    if (validityDays > MAX_CODE_UPLOAD_CA_VALIDITY_DAYS) {
+        throw new Error(`CA certificate is valid for ${Math.floor(validityDays)} days; eCDN allows a maximum CA expiry of 1 year (${MAX_CODE_UPLOAD_CA_VALIDITY_DAYS} days).`);
+    }
+}
+/**
+ * Uploads a CA certificate to eCDN for two-factor (mTLS) code upload.
+ *
+ * Requires a read-write CDN Zones client (`sfcc.cdn-zones.rw` scope) for a
+ * staging organization. The certificate is checked locally first with
+ * {@link validateCodeUploadCaCertificate}.
+ *
+ * @param client - Read-write CDN Zones client
+ * @param organizationId - Organization ID (`f_ecom_<tenant>`)
+ * @param options - Certificate name and PEM contents
+ * @returns The created certificate, including `mtlsAssociatedCodeUploadHostname`
+ * @throws Error if the certificate is invalid or the API request fails
+ */
+export async function createCodeUploadCertificate(client, organizationId, options) {
+    validateCodeUploadCaCertificate(options.certificatePem);
+    const { data, error, response } = await client.POST('/organizations/{organizationId}/mtls/code-upload-certificates', {
+        params: { path: { organizationId } },
+        body: { name: options.name, certificate: options.certificatePem, privateKey: options.privateKeyPem },
+    });
+    if (error) {
+        throw new Error(`Failed to create mTLS certificate: ${getApiErrorMessage(error, response)}`, { cause: error });
+    }
+    if (!data?.data) {
+        throw new Error('No certificate data returned from API');
+    }
+    return data.data;
+}
+//# sourceMappingURL=index.js.map

package/dist/esm/operations/mtls/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/operations/mtls/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EAAC,mBAAmB,EAAE,WAAW,EAAE,eAAe,EAAC,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,MAAM,YAAY,CAAC;AAE/B,OAAO,EAAC,kBAAkB,EAAC,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAC,SAAS,EAAC,MAAM,yBAAyB,CAAC;AAKlD;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,uDAAuD;AACvD,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAEzE,kEAAkE;AAClE,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEhD,oCAAoC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AA2ErC,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY;IACnB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,IAAY;IACxD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,oCAAoC,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,SAAS,kBAAkB,CAAC,OAAe;IACzC,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,EAAC,UAAU,EAAC,GAAG,mBAAmB,CAAC,KAAK,EAAE;QAC9C,aAAa,EAAE,OAAO;QACtB,kBAAkB,EAAE,EAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAC;QAClD,iBAAiB,EAAE,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAC;KACjD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAA6B,CAAC;IACrF,OAAO,EAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAC,CAAC;AAC9F,CAAC;AAED,uFAAuF;AACvF,SAAS,kBAAkB;IACzB,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACjB,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACjB,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB,EAAE,YAAqB;IAC7D,MAAM,KAAK,GAAiC,CAAC,EAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAC,CAAC,CAAC;IACtF,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,IAA2B;IAChD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,WAAW,CAAC,IAA2B,EAAE,UAAgC;IAChF,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAChD,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC;QACpD,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC;QAC5B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;QAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAwC,EAAE;IAC9E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,wBAAwB,CAAC;IACtE,qBAAqB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACpD,IAAI,YAAY,GAAG,gCAAgC,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAClB,gCAAgC,gCAAgC,6CAA6C,CAC9G,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC;IAErE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;IAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAChC,IAAI,CAAC,YAAY,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,YAAY,GAAG,UAAU,CAAC,CAAC;IAEjG,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,IAAI,6BAA6B,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACxG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxB,IAAI,CAAC,aAAa,CAAC;QACjB,EAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAC;QACpD,EAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAC;QACpE,EAAC,IAAI,EAAE,sBAAsB,EAAC;KAC/B,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAErD,SAAS,EAAE,CAAC,KAAK,CAAC,EAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAC,EAAE,+BAA+B,CAAC,CAAC;IACrH,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAsC;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAA6B,CAAC;IAChG,MAAM,WAAW,GAAG,MAAM,CAAC,SAAoC,CAAC;IAChE,IAAI,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,4BAA4B,CAAC;IAC1E,qBAAqB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC;IAErE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;IAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAChC,IAAI,CAAC,YAAY,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;IACzC,MAAM,iBAAiB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,YAAY,GAAG,UAAU,CAAC,CAAC;IAClG,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAErH,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,aAAa,CAAC;QACjB,EAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAC;QACrD,EAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAC;QACjF,EAAC,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAC;QACvC,EAAC,IAAI,EAAE,sBAAsB,EAAC;QAC9B,EAAC,IAAI,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,CAAC,4BAA4B,EAAE,CAAC,QAAQ,EAAE,EAAC;KAClG,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,kBAAkB,EAAE,CAAC;IAC9D,oFAAoF;IACpF,0FAA0F;IAC1F,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE;QACrF,SAAS,EAAE,MAAM;QACjB,YAAY,EAAE,OAAO,CAAC,UAAU;KACjC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE3E,SAAS,EAAE,CAAC,KAAK,CAAC,EAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAC,EAAE,gCAAgC,CAAC,CAAC;IACtH,OAAO,EAAC,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAAC,cAAsB;IACpE,IAAI,IAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;YACnG,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oHAAoH;YAClH,oIAAoI;YACpI,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC;IAC7E,IAAI,YAAY,GAAG,gCAAgC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,qDAAqD,gCAAgC,SAAS,CACtJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAsB,EACtB,cAAsB,EACtB,OAA2C;IAE3C,+BAA+B,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,EAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,+DAA+D,EAAE;QACjH,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,cAAc,EAAC,EAAC;QAChC,IAAI,EAAE,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAC;KACnG,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sCAAsC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC"}

package/dist/esm/scapi/auth-primitives.js

@@ -50,6 +50,7 @@ export function createScapiAuth(config, cwd = process.cwd()) {
                             clientId: config.clientId,
                             clientSecret: config.clientSecret,
                             accountManagerHost: config.accountManagerHost,
+                            clientAuthMethod: config.clientAuthMethod,
                             scopes,
                         }).getTokenResponse(signal);
                     }

package/dist/esm/scapi/auth-primitives.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-primitives.js","sourceRoot":"","sources":["../../../src/scapi/auth-primitives.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,QAAQ,EAAC,MAAM,YAAY,CAAC;AACpC,OAAO,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAC,aAAa,EAAE,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAEnE,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,MAAwB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAC3E,OAAO,KAAK,EAAE,SAAiB,EAAE,OAAgB,EAAE,MAAmB,EAAoB,EAAE;QAC1F,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,EAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAC,CAAC;QAC9C,MAAM,UAAU,GACd,SAAS,KAAK,gBAAgB;YAC5B,CAAC,CAAC,EAAC,MAAM,EAAE,EAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAC,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAC,EAAC,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC,EAAC;YAC5F,CAAC,CAAC;gBACE,IAAI,EAAE,EAAC,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,EAAC;gBACrC,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,EAAC,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAC;gBACvC,YAAY,EAAE,MAAM;gBACpB,eAAe,EAAE,MAAM;aACxB,CAAC;QACR,IACE,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC/C,CAAC,QAAQ,CAAC,OAAO,EAAE;gBACjB,IAAI,EAAE,QAAQ;gBACd,UAAU;gBACV,oBAAoB,EAAE,KAAK;aAC5B,CAAC,CAAC,KAAK;YAER,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,IAAI,CAAC;YACH,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,OAA+C,CAAC;gBAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACjF,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC7F,MAAM,MAAM,GAAG;oBACb,GAAG,IAAI,GAAG,CAAC;wBACT,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;wBACxB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;wBACtB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5D,CAAC;iBACH,CAAC;gBACF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC;oBACzE,IAAI,MAAM,KAAK,oBAAoB,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;wBAC3D,OAAO,MAAM,IAAI,aAAa,CAAC;4BAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,YAAY,EAAE,MAAM,CAAC,YAAY;4BACjC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;4BAC7C,MAAM;yBACP,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBAC9B,CAAC;oBACD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;wBAChE,OAAO,MAAM,IAAI,gBAAgB,CAAC;4BAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC;4BAC1C,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;4BACxC,UAAU,EAAE,MAAM,CAAC,aAAa;4BAChC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,wBAAwB;4BACzE,MAAM;yBACP,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,OAMZ,CAAC;YACF,MAAM,EAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAC,GAAG,MAAM,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAC,CAAC;iBACxE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;iBAC7B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,MAAM;gBAChB,MAAM,IAAI,KAAK,CACb,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2FAA2F,CAC3H,CAAC;YACJ,MAAM,WAAW,GAAG;gBAClB,SAAS,EAAE,SAAU;gBACrB,cAAc,EAAE,gBAAgB,CAAC,QAAS,CAAC;gBAC3C,YAAY,EAAE,YAAa;gBAC3B,gBAAgB;gBAChB,MAAM,EAAE,MAAO;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,gCAAgC;gBACjE,MAAM;aACP,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,eAAe,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY;gBAC/B,CAAC,CAAC,MAAM,kBAAkB,CAAC;oBACvB,GAAG,WAAW;oBACd,YAAY,EAAE,IAAI,CAAC,YAAa;oBAChC,eAAe,EAAE,IAAI,CAAC,eAAgB;iBACvC,CAAC;gBACJ,CAAC,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"auth-primitives.js","sourceRoot":"","sources":["../../../src/scapi/auth-primitives.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,QAAQ,EAAC,MAAM,YAAY,CAAC;AACpC,OAAO,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAC,aAAa,EAAE,kBAAkB,EAAC,MAAM,kBAAkB,CAAC;AAEnE,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,MAAwB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAC3E,OAAO,KAAK,EAAE,SAAiB,EAAE,OAAgB,EAAE,MAAmB,EAAoB,EAAE;QAC1F,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,EAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAC,CAAC;QAC9C,MAAM,UAAU,GACd,SAAS,KAAK,gBAAgB;YAC5B,CAAC,CAAC,EAAC,MAAM,EAAE,EAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAC,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAC,EAAC,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC,EAAC;YAC5F,CAAC,CAAC;gBACE,IAAI,EAAE,EAAC,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,EAAC;gBACrC,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,EAAC,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAC;gBACvC,YAAY,EAAE,MAAM;gBACpB,eAAe,EAAE,MAAM;aACxB,CAAC;QACR,IACE,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC/C,CAAC,QAAQ,CAAC,OAAO,EAAE;gBACjB,IAAI,EAAE,QAAQ;gBACd,UAAU;gBACV,oBAAoB,EAAE,KAAK;aAC5B,CAAC,CAAC,KAAK;YAER,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,IAAI,CAAC;YACH,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,OAA+C,CAAC;gBAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACjF,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC7F,MAAM,MAAM,GAAG;oBACb,GAAG,IAAI,GAAG,CAAC;wBACT,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;wBACxB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;wBACtB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5D,CAAC;iBACH,CAAC;gBACF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC;oBACzE,IAAI,MAAM,KAAK,oBAAoB,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;wBAC3D,OAAO,MAAM,IAAI,aAAa,CAAC;4BAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,YAAY,EAAE,MAAM,CAAC,YAAY;4BACjC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;4BAC7C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;4BACzC,MAAM;yBACP,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBAC9B,CAAC;oBACD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;wBAChE,OAAO,MAAM,IAAI,gBAAgB,CAAC;4BAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC;4BAC1C,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;4BACxC,UAAU,EAAE,MAAM,CAAC,aAAa;4BAChC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,wBAAwB;4BACzE,MAAM;yBACP,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,OAMZ,CAAC;YACF,MAAM,EAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAC,GAAG,MAAM,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAC,CAAC;iBACxE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;iBAC7B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,MAAM;gBAChB,MAAM,IAAI,KAAK,CACb,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,2FAA2F,CAC3H,CAAC;YACJ,MAAM,WAAW,GAAG;gBAClB,SAAS,EAAE,SAAU;gBACrB,cAAc,EAAE,gBAAgB,CAAC,QAAS,CAAC;gBAC3C,YAAY,EAAE,YAAa;gBAC3B,gBAAgB;gBAChB,MAAM,EAAE,MAAO;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,gCAAgC;gBACjE,MAAM;aACP,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,eAAe,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY;gBAC/B,CAAC,CAAC,MAAM,kBAAkB,CAAC;oBACvB,GAAG,WAAW;oBACd,YAAY,EAAE,IAAI,CAAC,YAAa;oBAChC,eAAe,EAAE,IAAI,CAAC,eAAgB;iBACvC,CAAC;gBACJ,CAAC,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/scapi/authentication.d.ts

@@ -8,6 +8,16 @@ export interface ScapiAuthInfo {
 export declare function isScapiTextMediaType(mediaType: string): boolean;
 /** Shared discovery/execution limit: code mode transports JSON requests and text responses. */
 export declare function unsupportedScapiTransfer(document: ScapiSchemaDocument, operation: ApiDocument): string | undefined;
+export type ScapiRequestAuth = {
+    type: 'admin' | 'shopper';
+    scopes: string[];
+};
+/**
+ * Choose the executor's authentication from the operation's declared security,
+ * in declaration order: Account Manager (AmOAuth2) or a guest shopper token.
+ * Undefined when no declared requirement is supported.
+ */
+export declare function selectScapiAuth(document: ScapiSchemaDocument, operation: ApiDocument): ScapiRequestAuth | undefined;
 /** Identify supported authentication per operation, including mixed Admin/Shopper contracts. */
 export declare function getScapiAuthInfo(document: ScapiSchemaDocument, operation: ApiDocument): ScapiAuthInfo;
 /** Add discovery metadata and filter operations without modifying the bundled source documents. */
@@ -21,7 +31,16 @@ interface AuthContext {
     api: string;
     tenantScope: string;
     candidates: string[][];
+    /** Set for guest Shopper requests. */
+    shopper?: {
+        siteId: string;
+        tokenScopes?: string[];
+    };
 }
+/** Scopes granted to a SLAS access token (JWT `scp` claim), when readable. */
+export declare function shopperTokenScopes(token: string): string[] | undefined;
+/** Explain SLAS token failures; token requests carry no per-call scopes. */
+export declare function scapiShopperAuthError(error: unknown, context: AuthContext): Error;
 /** Enrich known OAuth failures; leave network and unrelated errors intact. */
 export declare function scapiAuthError(error: unknown, context: AuthContext): unknown;
 /** HTTP status alone cannot prove that a grant is missing. Keep the original status and body. */

package/dist/esm/scapi/authentication.js

@@ -5,6 +5,8 @@
  */
 import { ScapiUserAuthUnsupportedError } from '../clients/scapi-backend-utils.js';
 import { resolveScapiReference, SCAPI_METHODS } from './catalog.js';
+/** SLAS aggregate scope; tokens carry it verbatim, so it only satisfies operations that list it. */
+const SHOPPER_STANDARD_SCOPE = 'sfcc.shopper-standard';
 export function isScapiTextMediaType(mediaType) {
     const type = mediaType.split(';')[0].trim().toLowerCase();
     return type.startsWith('text/') || type === 'application/json' || type.endsWith('+json');
@@ -20,6 +22,26 @@ export function unsupportedScapiTransfer(document, operation) {
     if (mediaTypes.length && !mediaTypes.some(isScapiTextMediaType))
         return 'This operation returns a binary file. File downloads are not supported.';
 }
+/**
+ * Choose the executor's authentication from the operation's declared security,
+ * in declaration order: Account Manager (AmOAuth2) or a guest shopper token.
+ * Undefined when no declared requirement is supported.
+ */
+export function selectScapiAuth(document, operation) {
+    // SLAS itself exchanges credentials and tokens; auth.slas() exports shopper tokens instead.
+    if (['shopper/auth/v1', 'shopper/auth-admin/v1'].includes(document.entry.id))
+        return undefined;
+    const security = operation.security ?? document.schema.security ?? [];
+    for (const requirement of security) {
+        const [scheme, ...rest] = Object.keys(requirement);
+        if (rest.length || !Array.isArray(requirement[scheme]))
+            continue;
+        if (scheme === 'AmOAuth2')
+            return { type: 'admin', scopes: requirement[scheme] };
+        if (scheme === 'ShopperToken' || scheme === 'ShopperClientContextToken')
+            return { type: 'shopper', scopes: requirement[scheme] };
+    }
+}
 /** Identify supported authentication per operation, including mixed Admin/Shopper contracts. */
 export function getScapiAuthInfo(document, operation) {
     const security = operation.security ?? document.schema.security ?? [];
@@ -36,11 +58,10 @@ export function getScapiAuthInfo(document, operation) {
     // OAuth endpoints can declare credentials in grant parameters instead of security schemes.
     if (!types.size)
         types.add(document.entry.id === 'shopper/auth/v1' ? 'shopper' : 'unknown');
-    const admin = security.some((requirement) => Array.isArray(requirement.AmOAuth2) && Object.keys(requirement).length === 1);
     return {
         types: [...types].sort(),
         schemes,
-        executable: admin && !unsupportedScapiTransfer(document, operation),
+        executable: Boolean(selectScapiAuth(document, operation)) && !unsupportedScapiTransfer(document, operation),
     };
 }
 /** Add discovery metadata and filter operations without modifying the bundled source documents. */
@@ -78,7 +99,41 @@ export function describeScapiSchemas(documents, authType) {
             : [];
     });
 }
+/** Scopes granted to a SLAS access token (JWT `scp` claim), when readable. */
+export function shopperTokenScopes(token) {
+    try {
+        const claims = JSON.parse(Buffer.from(token.split('.')[1] ?? '', 'base64url').toString('utf8'));
+        return typeof claims?.scp === 'string' ? claims.scp.split(/\s+/).filter(Boolean) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Explain SLAS token failures; token requests carry no per-call scopes. */
+export function scapiShopperAuthError(error, context) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (/^SCAPI_/.test(message))
+        return error;
+    return new Error(`SCAPI_SHOPPER_AUTH_FAILED: SLAS guest login failed for ${context.operationId} (${context.api}), site ${context.shopper?.siteId}: ${message}. ` +
+        "Check slasClientId, slasClientSecret (private clients), the client's allowed channels, and, for public clients, that its redirect URIs allow http://localhost:3000/callback. Inspect configuration with config_inspect.", { cause: error });
+}
 function scopeAdvice(context) {
+    if (context.shopper) {
+        const accepted = context.candidates[0] ?? [];
+        const granted = context.shopper.tokenScopes;
+        const channel = `Check that site ${context.shopper.siteId} is an allowed channel for the client.`;
+        const advice = `SLAS scopes are configured on the client (slasClientId), not requested per call; the operation accepts any of: ${accepted.join(', ')}.`;
+        if (!granted)
+            return `${advice} ${channel}`;
+        const matched = granted.filter((scope) => accepted.includes(scope));
+        if (matched.length)
+            return `${advice} The shopper token grants ${matched.join(', ')}, so scopes are likely not the cause. ${channel}`;
+        // The gateway matches the token's scopes literally; the standard scope covers only operations that accept it.
+        const standard = granted.includes(SHOPPER_STANDARD_SCOPE)
+            ? `${SHOPPER_STANDARD_SCOPE} does not cover this operation; add one of the accepted scopes to the client alongside it.`
+            : `The shopper token grants: ${granted.join(' ')}; add one of the accepted scopes to the client.`;
+        return `${advice} ${standard} ${channel}`;
+    }
     const choices = context.candidates.map((candidate) => candidate.join(' + ')).join(' OR ');
     return (`Account Manager client grants: ${choices}; tenant scope: ${context.tenantScope}. ` +
         'Operation scopes are requested automatically; also check any extra configured scopes and instance access.');
@@ -115,7 +170,7 @@ export function scapiAuthResponse(status, context) {
     if (status === 401)
         return {
             code: 'SCAPI_UNAUTHORIZED',
-            message: `${context.operationId}: API rejected the Admin token. Check token validity and the resolved tenant. ${scopeAdvice(context)}`,
+            message: `${context.operationId}: API rejected the ${context.shopper ? 'Shopper' : 'Admin'} token. Check token validity and the resolved tenant. ${scopeAdvice(context)}`,
         };
     if (status === 403)
         return {
@@ -128,9 +183,13 @@ export function unsupportedScapiAuth(document, operation) {
     const target = `${operation.operationId} (${document.entry.id})`;
     const schemes = auth.schemes.join(' OR ') || 'OAuth grant parameters';
     if (document.entry.id === 'shopper/auth-admin/v1')
-        return new Error(`SCAPI_AUTH_UNSUPPORTED: ${target} requires SLAS administration authentication and its declared admin roles. This executor supports AmOAuth2 only; use the SLAS administration CLI/SDK. A SLAS Shopper client is not an admin credential.`);
+        return new Error(`SCAPI_AUTH_UNSUPPORTED: ${target} requires SLAS administration authentication and its declared admin roles. Use the SLAS administration CLI/SDK. A SLAS Shopper client is not an admin credential.`);
+    if (document.entry.id === 'shopper/auth/v1')
+        return new Error(`SCAPI_AUTH_UNSUPPORTED: ${target} is a SLAS login/token endpoint. Shopper APIs authenticate automatically as a guest; use auth.slas() to export a shopper token for an external client.`);
+    if (auth.schemes.includes('RegisteredShopperToken'))
+        return new Error(`SCAPI_REGISTERED_SHOPPER_UNSUPPORTED: ${target} requires a registered shopper (${schemes}). This executor authenticates Shopper APIs as a guest only; use auth.slas({flow: 'registered', ...}) with an external client.`);
     if (auth.types.includes('shopper'))
-        return new Error(`SCAPI_SHOPPER_AUTH_UNSUPPORTED: ${target} requires ${schemes}. Shopper execution is not supported by this executor yet. Use a Shopper client/SDK with SLAS authentication (slasClientId, siteId, and the required token flow; slasClientSecret for private clients). Follow the operation's security scopes. Adding SLAS settings will not enable this executor; do not substitute Account Manager credentials.`);
-    return new Error(`SCAPI_AUTH_UNSUPPORTED: ${target} declares ${schemes}; this executor supports AmOAuth2 only. Inspect the operation's security requirements before choosing a client.`);
+        return new Error(`SCAPI_SHOPPER_AUTH_UNSUPPORTED: ${target} requires ${schemes}. Trusted-system and trusted-agent on-behalf tokens are not supported by this executor; use a Shopper client/SDK with that flow.`);
+    return new Error(`SCAPI_AUTH_UNSUPPORTED: ${target} declares ${schemes}; this executor supports AmOAuth2 and guest Shopper tokens. Inspect the operation's security requirements before choosing a client.`);
 }
 //# sourceMappingURL=authentication.js.map

package/dist/esm/scapi/authentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../../src/scapi/authentication.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,6BAA6B,EAAC,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAC,qBAAqB,EAAE,aAAa,EAA6C,MAAM,cAAc,CAAC;AAS9G,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,wBAAwB,CAAC,QAA6B,EAAE,SAAsB;IAC5F,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,IAAI,qBAAqB,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpG,IAAI,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC;QACvD,OAAO,kFAAkF,CAAC;IAC5F,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAc,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;SACtE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACpD,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1G,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC;QAC7D,OAAO,yEAAyE,CAAC;AACrF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,QAA6B,EAAE,SAAsB;IACpF,MAAM,QAAQ,GAAkB,SAAS,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,KAAK,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,uBAAuB,CAAC;YACtG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;aAChB,IAAI,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;;YACtE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,2FAA2F;IAC3F,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CACzB,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,CAC9F,CAAC;IACF,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;QACxB,OAAO;QACP,UAAU,EAAE,KAAK,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAClC,SAAgC,EAChC,QAAwB;IAExB,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAA4B,EAAE,CAAC;YAC5F,MAAM,QAAQ,GAAgB,EAAC,GAAG,IAAI,EAAC,CAAC;YACxC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtD,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC/C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAC,CAAC;gBAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;oBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnD,KAAK,EAAE,CAAC;YACV,CAAC;YACD,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;YAC9B,CAAC,CAAC;gBACE;oBACE,GAAG,QAAQ;oBACX,KAAK,EAAE,EAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAC;oBAC5D,MAAM,EAAE,EAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAC;iBACpC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC;AAcD,SAAS,WAAW,CAAC,OAAoB;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO,CACL,kCAAkC,OAAO,mBAAmB,OAAO,CAAC,WAAW,IAAI;QACnF,2GAA2G,CAC5G,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAoB;IACjE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC;IACzD,IAAI,UAA2C,CAAC;IAChD,IAAI,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3D,UAAU,GAAG;YACX,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,4CAA4C,MAAM,KAAK,WAAW,CAAC,OAAO,CAAC,EAAE;SACvF,CAAC;SACC,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,UAAU,GAAG;YACX,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,GAAG,MAAM,wMAAwM;SAC3N,CAAC;SACC,IAAI,KAAK,YAAY,6BAA6B;QACrD,UAAU,GAAG;YACX,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,GAAG,MAAM,wKAAwK;SAC3L,CAAC;SACC,IACH,uGAAuG,CAAC,IAAI,CAC1G,OAAO,CACR;QAED,UAAU,GAAG;YACX,IAAI,EAAE,kCAAkC;YACxC,OAAO,EAAE,4CAA4C,MAAM,6IAA6I;SACzM,CAAC;IACJ,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACrG,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAoB;IACpE,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,iFAAiF,WAAW,CAAC,OAAO,CAAC,EAAE;SACvI,CAAC;IACJ,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,0EAA0E,WAAW,CAAC,OAAO,CAAC,EAAE;SAChI,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA6B,EAAE,SAAsB;IACxF,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC;IACtE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,uBAAuB;QAC/C,OAAO,IAAI,KAAK,CACd,2BAA2B,MAAM,yMAAyM,CAC3O,CAAC;IACJ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChC,OAAO,IAAI,KAAK,CACd,mCAAmC,MAAM,aAAa,OAAO,oVAAoV,CAClZ,CAAC;IACJ,OAAO,IAAI,KAAK,CACd,2BAA2B,MAAM,aAAa,OAAO,iHAAiH,CACvK,CAAC;AACJ,CAAC"}
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../../src/scapi/authentication.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,6BAA6B,EAAC,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAC,qBAAqB,EAAE,aAAa,EAA6C,MAAM,cAAc,CAAC;AAE9G,oGAAoG;AACpG,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AASvD,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,wBAAwB,CAAC,QAA6B,EAAE,SAAsB;IAC5F,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,IAAI,qBAAqB,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpG,IAAI,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC;QACvD,OAAO,kFAAkF,CAAC;IAC5F,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAc,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;SACtE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACpD,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1G,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC;QAC7D,OAAO,yEAAyE,CAAC;AACrF,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAA6B,EAAE,SAAsB;IACnF,4FAA4F;IAC5F,IAAI,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/F,MAAM,QAAQ,GAAkB,SAAS,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrF,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QACjE,IAAI,MAAM,KAAK,UAAU;YAAE,OAAO,EAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAC,CAAC;QAC/E,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,2BAA2B;YACrE,OAAO,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,QAA6B,EAAE,SAAsB;IACpF,MAAM,QAAQ,GAAkB,SAAS,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,KAAK,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,uBAAuB,CAAC;YACtG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;aAChB,IAAI,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;;YACtE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IACD,2FAA2F;IAC3F,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;QACxB,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC;KAC5G,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAClC,SAAgC,EAChC,QAAwB;IAExB,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAA4B,EAAE,CAAC;YAC5F,MAAM,QAAQ,GAAgB,EAAC,GAAG,IAAI,EAAC,CAAC;YACxC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtD,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC/C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAC,CAAC;gBAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;oBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnD,KAAK,EAAE,CAAC;YACV,CAAC;YACD,IAAI,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;YAC9B,CAAC,CAAC;gBACE;oBACE,GAAG,QAAQ;oBACX,KAAK,EAAE,EAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAC;oBAC5D,MAAM,EAAE,EAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAC;iBACpC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC;AAgBD,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAChG,OAAO,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,OAAoB;IACxE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAc,CAAC;IACnD,OAAO,IAAI,KAAK,CACd,0DAA0D,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,GAAG,WAAW,OAAO,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,IAAI;QAC7I,yNAAyN,EAC3N,EAAC,KAAK,EAAE,KAAK,EAAC,CACf,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAoB;IACvC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5C,MAAM,OAAO,GAAG,mBAAmB,OAAO,CAAC,OAAO,CAAC,MAAM,wCAAwC,CAAC;QAClG,MAAM,MAAM,GAAG,kHAAkH,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACxJ,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,MAAM;YAChB,OAAO,GAAG,MAAM,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC,OAAO,EAAE,CAAC;QACpH,8GAA8G;QAC9G,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YACvD,CAAC,CAAC,GAAG,sBAAsB,4FAA4F;YACvH,CAAC,CAAC,6BAA6B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,iDAAiD,CAAC;QACpG,OAAO,GAAG,MAAM,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO,CACL,kCAAkC,OAAO,mBAAmB,OAAO,CAAC,WAAW,IAAI;QACnF,2GAA2G,CAC5G,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAoB;IACjE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC;IACzD,IAAI,UAA2C,CAAC;IAChD,IAAI,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3D,UAAU,GAAG;YACX,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,4CAA4C,MAAM,KAAK,WAAW,CAAC,OAAO,CAAC,EAAE;SACvF,CAAC;SACC,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,UAAU,GAAG;YACX,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,GAAG,MAAM,wMAAwM;SAC3N,CAAC;SACC,IAAI,KAAK,YAAY,6BAA6B;QACrD,UAAU,GAAG;YACX,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,GAAG,MAAM,wKAAwK;SAC3L,CAAC;SACC,IACH,uGAAuG,CAAC,IAAI,CAC1G,OAAO,CACR;QAED,UAAU,GAAG;YACX,IAAI,EAAE,kCAAkC;YACxC,OAAO,EAAE,4CAA4C,MAAM,6IAA6I;SACzM,CAAC;IACJ,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACrG,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAoB;IACpE,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,sBAAsB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,yDAAyD,WAAW,CAAC,OAAO,CAAC,EAAE;SAC1K,CAAC;IACJ,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,0EAA0E,WAAW,CAAC,OAAO,CAAC,EAAE;SAChI,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA6B,EAAE,SAAsB;IACxF,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC;IACtE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,uBAAuB;QAC/C,OAAO,IAAI,KAAK,CACd,2BAA2B,MAAM,mKAAmK,CACrM,CAAC;IACJ,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,iBAAiB;QACzC,OAAO,IAAI,KAAK,CACd,2BAA2B,MAAM,wJAAwJ,CAC1L,CAAC;IACJ,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACjD,OAAO,IAAI,KAAK,CACd,yCAAyC,MAAM,mCAAmC,OAAO,gIAAgI,CAC1N,CAAC;IACJ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChC,OAAO,IAAI,KAAK,CACd,mCAAmC,MAAM,aAAa,OAAO,kIAAkI,CAChM,CAAC;IACJ,OAAO,IAAI,KAAK,CACd,2BAA2B,MAAM,aAAa,OAAO,qIAAqI,CAC3L,CAAC;AACJ,CAAC"}

package/dist/esm/scapi/catalog.d.ts

@@ -9,6 +9,8 @@ export interface ScapiSchemaEntry {
     status: string;
     file: string;
     source: string;
+    /** Present on contracts fetched from the tenant's Schemas API; absent for the bundled corpus. */
+    origin?: 'live';
 }
 export interface ScapiSchemaDocument {
     entry: ScapiSchemaEntry;

package/dist/esm/scapi/catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/scapi/catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,YAAY,EAAC,MAAM,SAAS,CAAC;AACrC,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAC,MAAM,WAAW,CAAC;AAmBhD,IAAI,OAA0C,CAAC;AAE/C,oFAAoF;AACpF,MAAM,UAAU,gBAAgB;IAC9B,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAG7D,CAAC;IACF,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxF,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClF,OAAO,EAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,EAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEnG,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,SAAgC,EAAE,MAAc,EAAE,IAAY;IAC/F,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAA4B,EAAE,CAAC;YACtG,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,aAAa,GACjB,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClG,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAAE,SAAS;YAChD,MAAM,UAAU,GAA2B,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAClE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,IAAI,KAAK;gBACP,OAAO;oBACL,QAAQ;oBACR,SAAS,EAAE,SAAwB;oBACnC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI,GAAG,aAAa;oBAC9B,UAAU;iBACX,CAAC;QACN,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,IAAI,IAAI,qCAAqC,CAAC,CAAC;AACrG,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,KAAkB,EAAE,MAAmB;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAc,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QACvG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,KAAK,GAAG,GAAG;aACR,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CAAC,CAAC,MAAmB,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/scapi/catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,YAAY,EAAC,MAAM,SAAS,CAAC;AACrC,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAC,MAAM,WAAW,CAAC;AAqBhD,IAAI,OAA0C,CAAC;AAE/C,oFAAoF;AACpF,MAAM,UAAU,gBAAgB;IAC9B,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAG7D,CAAC;IACF,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxF,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClF,OAAO,EAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,EAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEnG,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,SAAgC,EAAE,MAAc,EAAE,IAAY;IAC/F,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAA4B,EAAE,CAAC;YACtG,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,aAAa,GACjB,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClG,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAAE,SAAS;YAChD,MAAM,UAAU,GAA2B,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAClE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,IAAI,KAAK;gBACP,OAAO;oBACL,QAAQ;oBACR,SAAS,EAAE,SAAwB;oBACnC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI,GAAG,aAAa;oBAC9B,UAAU;iBACX,CAAC;QACN,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,IAAI,IAAI,qCAAqC,CAAC,CAAC;AACrG,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,KAAkB,EAAE,MAAmB;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAc,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QACvG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,KAAK,GAAG,GAAG;aACR,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CAAC,CAAC,MAAmB,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/esm/scapi/index.d.ts

@@ -1,6 +1,10 @@
-/** Bundled SCAPI contracts and local JavaScript execution with SDK-authenticated requests. @module scapi */
+/** Bundled and live SCAPI contracts and local JavaScript execution with SDK-authenticated requests. @module scapi */
 export { loadScapiSchemas, findScapiOperation, resolveScapiReference } from './catalog.js';
 export type { ApiDocument, ScapiSchemaEntry, ScapiSchemaDocument } from './catalog.js';
+export { ScapiLiveSchemaCache, createLiveScapiDocument, mergeScapiSchemas, scapiTenantKey } from './live.js';
+export type { ScapiLiveSchemaCacheOptions, ScapiLiveSchemaLoadOptions, ScapiLiveSchemaLoadResult } from './live.js';
+export { ScapiShopperSessions } from './shopper.js';
+export type { ScapiShopperAuth, ScapiShopperConfig } from './shopper.js';
 export { runScapiCode } from './runtime.js';
 export { createScapiAuth } from './auth-primitives.js';
 export type { ScapiCodeOptions, ScapiRuntimeControl } from './runtime.js';
@@ -8,5 +12,5 @@ export { loadBuiltinScapiSnippets, loadScapiSnippets, saveScapiSnippet, getScapi
 export type { ScapiSnippet } from './snippets.js';
 export { createScapiRequest } from './request.js';
 export type { ScapiRequestOptions, ScapiConfirmation } from './request.js';
-export { getScapiAuthInfo } from './authentication.js';
-export type { ScapiAuthType, ScapiAuthInfo, ScapiAuthDiagnostic } from './authentication.js';
+export { getScapiAuthInfo, selectScapiAuth } from './authentication.js';
+export type { ScapiAuthType, ScapiAuthInfo, ScapiAuthDiagnostic, ScapiRequestAuth } from './authentication.js';

package/dist/esm/scapi/index.js

@@ -3,11 +3,13 @@
  * SPDX-License-Identifier: Apache-2
  * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
  */
-/** Bundled SCAPI contracts and local JavaScript execution with SDK-authenticated requests. @module scapi */
+/** Bundled and live SCAPI contracts and local JavaScript execution with SDK-authenticated requests. @module scapi */
 export { loadScapiSchemas, findScapiOperation, resolveScapiReference } from './catalog.js';
+export { ScapiLiveSchemaCache, createLiveScapiDocument, mergeScapiSchemas, scapiTenantKey } from './live.js';
+export { ScapiShopperSessions } from './shopper.js';
 export { runScapiCode } from './runtime.js';
 export { createScapiAuth } from './auth-primitives.js';
 export { loadBuiltinScapiSnippets, loadScapiSnippets, saveScapiSnippet, getScapiSnippetDirectory, initializeScapiSnippetStore, } from './snippets.js';
 export { createScapiRequest } from './request.js';
-export { getScapiAuthInfo } from './authentication.js';
+export { getScapiAuthInfo, selectScapiAuth } from './authentication.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/scapi/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scapi/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,4GAA4G;AAC5G,OAAO,EAAC,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAC,MAAM,cAAc,CAAC;AAEzF,OAAO,EAAC,YAAY,EAAC,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAErD,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAC,kBAAkB,EAAC,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAC,gBAAgB,EAAC,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scapi/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,qHAAqH;AACrH,OAAO,EAAC,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAC,MAAM,cAAc,CAAC;AAEzF,OAAO,EAAC,oBAAoB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,cAAc,EAAC,MAAM,WAAW,CAAC;AAE3G,OAAO,EAAC,oBAAoB,EAAC,MAAM,cAAc,CAAC;AAElD,OAAO,EAAC,YAAY,EAAC,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAErD,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAC,kBAAkB,EAAC,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAC,gBAAgB,EAAE,eAAe,EAAC,MAAM,qBAAqB,CAAC"}

package/dist/esm/scapi/live.d.ts

@@ -0,0 +1,52 @@
+import type { ScapiSchemasClient } from '../clients/scapi-schemas.js';
+import type { ScapiSchemaDocument } from './catalog.js';
+export interface ScapiLiveSchemaCacheOptions {
+    /** Age after which discovery refetches a contract; cached contracts never expire. Defaults to 30 minutes. */
+    ttlMs?: number;
+    /** Concurrent schema fetches per load. Defaults to 4. */
+    concurrency?: number;
+}
+export interface ScapiLiveSchemaLoadOptions {
+    /** Limit to one API id (family/name/version). */
+    api?: string;
+    /** Ignore cached listing and contracts. */
+    refresh?: boolean;
+    signal?: AbortSignal;
+}
+export interface ScapiLiveSchemaLoadResult {
+    documents: ScapiSchemaDocument[];
+    /** APIs listed by the tenant whose contract could not be fetched. */
+    failures: Array<{
+        api: string;
+        error: string;
+    }>;
+}
+/** Identify a tenant's live contracts; schemas differ by custom attributes and custom APIs. */
+export declare function scapiTenantKey(shortCode: string, organizationId: string): string;
+/** Validate a Schemas API response and describe it as a catalog document. */
+export declare function createLiveScapiDocument(identity: {
+    apiFamily: string;
+    apiName: string;
+    apiVersion: string;
+    status?: string;
+}, schema: unknown): ScapiSchemaDocument;
+/** Bundled contracts with live contracts replacing any with the same id. */
+export declare function mergeScapiSchemas(bundled: ScapiSchemaDocument[], live: ScapiSchemaDocument[]): ScapiSchemaDocument[];
+/**
+ * Per-tenant cache of contracts from the SCAPI Schemas API, including tenant custom
+ * properties and custom APIs. Discovery loads it; execution reuses whatever it holds.
+ */
+export declare class ScapiLiveSchemaCache {
+    private readonly concurrency;
+    private readonly documents;
+    private readonly listings;
+    private readonly ttlMs;
+    constructor(options?: ScapiLiveSchemaCacheOptions);
+    /** All cached live contracts for a tenant, regardless of age. Never fetches. */
+    get(tenant: string): ScapiSchemaDocument[];
+    /** Fetch the tenant's listing and missing or expired contracts, then return the selected set. */
+    load(tenant: string, client: ScapiSchemasClient, organizationId: string, options?: ScapiLiveSchemaLoadOptions): Promise<ScapiLiveSchemaLoadResult>;
+    /** Record a contract fetched elsewhere (for example by scapi_schemas_list or inside an execution). */
+    put(tenant: string, document: ScapiSchemaDocument): void;
+    private list;
+}