@simplysf/simply-settings-core 0.1.0 → 0.3.0

package/LICENSE.txt

@@ -1,206 +1,206 @@
-Apache License Version 2.0
-
-Copyright (c) 2026, SimplySF.
-All rights reserved.
-
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "{}"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright {yyyy} {name of copyright owner}
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
+Apache License Version 2.0
+
+Copyright (c) 2026, SimplySF.
+All rights reserved.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
    limitations under the License.

package/README.md

@@ -21,22 +21,25 @@ Requires Node.js `>=22` and either `"type": "module"` or a dynamic `import()`. T
 
 Everything below is exported from the package root. Removing or renaming an export is a breaking change; see [`src/index.ts`](src/index.ts).
 
-| Export                                                                      | Description                                                                                                                                                            |
-| --------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `parseStateDefinitions(json)`                                               | Validates a `{ "US-CA": "California" }` object into `StateDefinition[]`, naming the first bad entry.                                                                   |
-| `filterStateDefinitions(definitions, countries?)`                           | Narrows definitions to ISO country codes. Fails on a malformed code or a country with no definitions.                                                                  |
-| `formatStateKey(definition)`                                                | `US-CA` for a definition.                                                                                                                                              |
-| `retrieveAddressSettingsXml(options)` / `deployAddressSettingsXml(options)` | Metadata API retrieve/deploy of the org's `Address` settings, as `Address.settings-meta.xml` text. A failed deploy is reported in the result, not thrown.              |
-| `parseAddressSettingsXml(xml)`                                              | The countries and states in a settings file, with ISO codes kept as strings (Andorra's `02` stays `02`).                                                               |
-| `planStateCreation(definitions, settings)`                                  | Splits definitions into `pending` (to submit) and `settled` (`exists`, `country-missing`) without any Setup traffic.                                                   |
-| `openSetupSession(options)` / `SetupSession`                                | A cookie-carrying session on the org's Setup pages, opened through a single-use frontdoor URL (the mechanism `sf org open` uses).                                      |
-| `createState(session, definition, options?)`                                | Submits one state through _Configure New State_ and classifies the result. Retries transport failures, and reports per-state problems as `failed` instead of throwing. |
-| `createStates(options)`                                                     | Runs `createState` over many states, `concurrency` at a time (default `DEFAULT_CREATE_CONCURRENCY`, 4).                                                                |
-| `parseNewStateForm(html)` / `fillNewStateForm(form, definition)`            | Finds the form by its fields' stable id suffixes, not Visualforce's generated ids, and builds the submission.                                                          |
-| `classifyNewStateResponse(response)`                                        | Maps a form POST response to `created`, `exists`, `rejected`, `country-missing`, or `failed`.                                                                          |
-| `planStateActivation(xml, definitions)`                                     | Sets `<active>`/`<visible>` on exactly the listed states. Every other state and country is untouched.                                                                  |
-| `activateStates(options)`                                                   | Retrieve, `planStateActivation`, then deploy. Supports `dryRun`.                                                                                                       |
-| `isLoginPage(response)`, `NEW_STATE_FORM_PATH`, `SetupTransportError`       | Supporting helpers and constants.                                                                                                                                      |
+| Export                                                                      | Description                                                                                                                                                                                                                                                       |
+| --------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `parseStateDefinitions(json)`                                               | Validates a `{ "US-CA": "California" }` object into `StateDefinition[]`, naming the first bad entry.                                                                                                                                                              |
+| `filterStateDefinitions(definitions, countries?)`                           | Narrows definitions to ISO country codes. Fails on a malformed code or a country with no definitions.                                                                                                                                                             |
+| `formatStateKey(definition)`                                                | `US-CA` for a definition.                                                                                                                                                                                                                                         |
+| `fetchIsoCodesStateDefinitions(options)`                                    | Downloads ISO 3166-2 data from a source at run time and returns it as definitions, with the version and URL used. `debian` ([Debian `iso-codes`](https://salsa.debian.org/iso-codes-team/iso-codes)) is the only source today. Top level only unless `allLevels`. |
+| `subdivisionsToStateDefinitions(subdivisions, options?)`                    | The shared conversion behind it: the nested-subdivision filter, then `parseStateDefinitions`.                                                                                                                                                                     |
+| `ISO_CODES_SOURCES`, `ISO_CODES_SOURCE_IDS`                                 | The supported sources (`IsoCodesSource` adapters), and their ids.                                                                                                                                                                                                 |
+| `retrieveAddressSettingsXml(options)` / `deployAddressSettingsXml(options)` | Metadata API retrieve/deploy of the org's `Address` settings, as `Address.settings-meta.xml` text. A failed deploy is reported in the result, not thrown.                                                                                                         |
+| `parseAddressSettingsXml(xml)`                                              | The countries and states in a settings file, with ISO codes kept as strings (Andorra's `02` stays `02`).                                                                                                                                                          |
+| `planStateCreation(definitions, settings)`                                  | Splits definitions into `pending` (to submit) and `settled` (`exists`, `country-missing`) without any Setup traffic.                                                                                                                                              |
+| `openSetupSession(options)` / `SetupSession`                                | A cookie-carrying session on the org's Setup pages, opened through a single-use frontdoor URL (the mechanism `sf org open` uses).                                                                                                                                 |
+| `createState(session, definition, options?)`                                | Submits one state through _Configure New State_ and classifies the result. Retries transport failures, and reports per-state problems as `failed` instead of throwing.                                                                                            |
+| `createStates(options)`                                                     | Runs `createState` over many states, `concurrency` at a time (default `DEFAULT_CREATE_CONCURRENCY`, 4).                                                                                                                                                           |
+| `parseNewStateForm(html)` / `fillNewStateForm(form, definition)`            | Finds the form by its fields' stable id suffixes, not Visualforce's generated ids, and builds the submission.                                                                                                                                                     |
+| `classifyNewStateResponse(response)`                                        | Maps a form POST response to `created`, `exists`, `rejected`, `country-missing`, or `failed`.                                                                                                                                                                     |
+| `planStateActivation(xml, definitions)`                                     | Sets `<active>`/`<visible>` on exactly the listed states. Every other state and country is untouched.                                                                                                                                                             |
+| `activateStates(options)`                                                   | Retrieve, `planStateActivation`, then deploy. Supports `dryRun`.                                                                                                                                                                                                  |
+| `isLoginPage(response)`, `NEW_STATE_FORM_PATH`, `SetupTransportError`       | Supporting helpers and constants.                                                                                                                                                                                                                                 |
 
 ```ts
 import {

package/lib/address/isoCodes/debian.d.ts

@@ -0,0 +1,10 @@
+import type { IsoCodesSource } from './types.js';
+/**
+ * The raw `iso_3166-2.json` for a tag or branch.
+ *
+ * @param version - A tag (`v4.20.1`) or branch (`main`).
+ * @returns The URL.
+ */
+export declare function debianIsoCodesDataUrl(version: string): string;
+/** Debian's `iso-codes` repository on salsa.debian.org: release tags, or any branch. */
+export declare const debianIsoCodesSource: IsoCodesSource;

package/lib/address/isoCodes/debian.js

@@ -0,0 +1,77 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { SfError } from '@salesforce/core';
+import { getJson } from './http.js';
+// Debian's iso-codes is LGPL-2.1+. It's downloaded at run time and used in memory, never
+// redistributed in this package — see docs/design/0043-settings-address-states-iso-codes.md.
+const LABEL = 'Debian iso-codes';
+const HOMEPAGE = 'https://salsa.debian.org/iso-codes-team/iso-codes';
+const TAGS_URL = 'https://salsa.debian.org/api/v4/projects/iso-codes-team%2Fiso-codes/repository/tags?order_by=version&sort=desc&per_page=20';
+const RELEASE_TAG_PATTERN = /^v\d+(\.\d+)*$/;
+/**
+ * The raw `iso_3166-2.json` for a tag or branch.
+ *
+ * @param version - A tag (`v4.20.1`) or branch (`main`).
+ * @returns The URL.
+ */
+export function debianIsoCodesDataUrl(version) {
+    const ref = version.split('/').map(encodeURIComponent).join('/');
+    return `${HOMEPAGE}/-/raw/${ref}/data/iso_3166-2.json`;
+}
+function isSubdivision(value) {
+    if (value === null || typeof value !== 'object')
+        return false;
+    const { code, name, parent } = value;
+    return typeof code === 'string' && typeof name === 'string' && (parent === undefined || typeof parent === 'string');
+}
+/** Debian's `iso-codes` repository on salsa.debian.org: release tags, or any branch. */
+export const debianIsoCodesSource = {
+    id: 'debian',
+    label: LABEL,
+    homepage: HOMEPAGE,
+    async resolveLatestVersion(options) {
+        // Tags, not `main`: tags are what distributions ship, while `main` can hold in-progress edits.
+        const tags = await getJson(TAGS_URL, LABEL, options);
+        const latest = Array.isArray(tags)
+            ? tags
+                .map((tag) => tag?.name)
+                .find((name) => typeof name === 'string' && RELEASE_TAG_PATTERN.test(name))
+            : undefined;
+        if (!latest) {
+            throw new SfError(`Couldn't find a release of ${LABEL} at ${TAGS_URL}.`, 'IsoCodesDownloadError', [
+                `Specify a version explicitly, e.g. a tag from ${HOMEPAGE}/-/tags.`,
+            ]);
+        }
+        return latest;
+    },
+    async fetchSubdivisions(version, options) {
+        const url = debianIsoCodesDataUrl(version);
+        const data = await getJson(url, LABEL, options);
+        if (data === undefined) {
+            throw new SfError(`${LABEL} has no version "${version}".`, 'IsoCodesVersionNotFoundError', [
+                `See ${HOMEPAGE}/-/tags for the available versions.`,
+            ]);
+        }
+        const entries = data?.['3166-2'];
+        if (!Array.isArray(entries) || !entries.every(isSubdivision)) {
+            throw new SfError(`${url} isn't in the expected shape: { "3166-2": [{ code, name, parent? }] }.`, 'InvalidIsoCodesDataError');
+        }
+        // `type` (e.g. "Metropolitan department") is dropped: nothing selects on it yet.
+        const subdivisions = entries.map(({ code, name, parent }) => (parent ? { code, name, parent } : { code, name }));
+        return { url, subdivisions };
+    },
+};
+//# sourceMappingURL=debian.js.map

package/lib/address/isoCodes/debian.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debian.js","sourceRoot":"","sources":["../../../src/address/isoCodes/debian.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,yFAAyF;AACzF,6FAA6F;AAE7F,MAAM,KAAK,GAAG,kBAAkB,CAAC;AACjC,MAAM,QAAQ,GAAG,mDAAmD,CAAC;AACrE,MAAM,QAAQ,GACZ,4HAA4H,CAAC;AAC/H,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,GAAG,QAAQ,UAAU,GAAG,uBAAuB,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAgC,CAAC;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC;AACtH,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,KAAK;IACZ,QAAQ,EAAE,QAAQ;IAElB,KAAK,CAAC,oBAAoB,CAAC,OAAO;QAChC,+FAA+F;QAC/F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,CAAC,CAAE,IAAkC;iBAChC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC;iBACvB,IAAI,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/F,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,OAAO,CAAC,8BAA8B,KAAK,OAAO,QAAQ,GAAG,EAAE,uBAAuB,EAAE;gBAChG,iDAAiD,QAAQ,UAAU;aACpE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO;QACtC,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAEhD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,oBAAoB,OAAO,IAAI,EAAE,8BAA8B,EAAE;gBACzF,OAAO,QAAQ,qCAAqC;aACrD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAI,IAAuC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,OAAO,CACf,GAAG,GAAG,wEAAwE,EAC9E,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,iFAAiF;QACjF,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACjH,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;IAC/B,CAAC;CACF,CAAC"}

package/lib/address/isoCodes/http.d.ts

@@ -0,0 +1,12 @@
+import type { IsoCodesFetchOptions } from './types.js';
+/**
+ * GETs a JSON document, retrying transport failures.
+ *
+ * @param url - What to fetch.
+ * @param label - The source's label, for the error message.
+ * @param options - Timeout, retry, and dispatcher settings.
+ * @returns The parsed body for a 200, or `undefined` for a 404 — the caller knows what a missing
+ * document means.
+ * @throws SfError (`IsoCodesDownloadError`) for anything else, once retries are spent.
+ */
+export declare function getJson(url: string, label: string, options: IsoCodesFetchOptions): Promise<unknown>;

package/lib/address/isoCodes/http.js

@@ -0,0 +1,92 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { SfError } from '@salesforce/core';
+import { Duration } from '@salesforce/kit';
+import { retryWithBackoff } from '@simplysf/simply-core';
+import { fetch } from 'undici';
+/** A 5xx: worth retrying, unlike a response we can act on. */
+class ServerError extends Error {
+    status;
+    constructor(status) {
+        super(`HTTP ${status}`);
+        this.status = status;
+        this.name = 'ServerError';
+    }
+}
+function isTransportError(error) {
+    if (error instanceof ServerError)
+        return true;
+    if (!(error instanceof Error))
+        return false;
+    // undici's `fetch` rejects with `TypeError: fetch failed` for socket-level failures, and
+    // `AbortSignal.timeout` with a `TimeoutError` DOMException.
+    return (error instanceof TypeError && error.message === 'fetch failed') || error.name === 'TimeoutError';
+}
+function describeFailure(error) {
+    if (error instanceof Error && error.name === 'TimeoutError')
+        return 'the request timed out';
+    if (error instanceof TypeError && error.cause instanceof Error)
+        return error.cause.message;
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * GETs a JSON document, retrying transport failures.
+ *
+ * @param url - What to fetch.
+ * @param label - The source's label, for the error message.
+ * @param options - Timeout, retry, and dispatcher settings.
+ * @returns The parsed body for a 200, or `undefined` for a 404 — the caller knows what a missing
+ * document means.
+ * @throws SfError (`IsoCodesDownloadError`) for anything else, once retries are spent.
+ */
+export async function getJson(url, label, options) {
+    const downloadError = (reason) => new SfError(`Couldn't download ISO 3166-2 data from ${label} (${url}): ${reason}.`, 'IsoCodesDownloadError', [
+        'Check your network connection and proxy settings (HTTPS_PROXY), or provide the state definitions as a file instead.',
+    ]);
+    let response;
+    try {
+        response = await retryWithBackoff(async () => {
+            const res = await fetch(url, {
+                headers: { Accept: 'application/json' },
+                signal: AbortSignal.timeout(options.requestTimeoutMs ?? 30_000),
+                dispatcher: options.dispatcher,
+            });
+            const body = await res.text();
+            if (res.status >= 500)
+                throw new ServerError(res.status);
+            return { status: res.status, body };
+        }, {
+            retryAttempts: options.retryAttempts ?? 2,
+            backoffFactor: 2,
+            initialDelay: options.initialRetryDelay ?? Duration.seconds(2),
+            shouldRetry: isTransportError,
+        });
+    }
+    catch (error) {
+        throw downloadError(describeFailure(error));
+    }
+    if (response.status === 404)
+        return undefined;
+    if (response.status !== 200)
+        throw downloadError(`HTTP ${response.status}`);
+    try {
+        return JSON.parse(response.body);
+    }
+    catch {
+        throw downloadError('the response is not valid JSON');
+    }
+}
+//# sourceMappingURL=http.js.map

package/lib/address/isoCodes/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/address/isoCodes/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAG/B,8DAA8D;AAC9D,MAAM,WAAY,SAAQ,KAAK;IACM;IAAnC,YAAmC,MAAc;QAC/C,KAAK,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;QADS,WAAM,GAAN,MAAM,CAAQ;QAE/C,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,yFAAyF;IACzF,4DAA4D;IAC5D,OAAO,CAAC,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;AAC3G,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,uBAAuB,CAAC;IAC5F,IAAI,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;IAC3F,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,KAAa,EAAE,OAA6B;IACrF,MAAM,aAAa,GAAG,CAAC,MAAc,EAAW,EAAE,CAChD,IAAI,OAAO,CAAC,0CAA0C,KAAK,KAAK,GAAG,MAAM,MAAM,GAAG,EAAE,uBAAuB,EAAE;QAC3G,qHAAqH;KACtH,CAAC,CAAC;IAEL,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,gBAAgB,CAC/B,KAAK,IAAI,EAAE;YACT,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;gBAC/D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC,EACD;YACE,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,CAAC;YACzC,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9D,WAAW,EAAE,gBAAgB;SAC9B,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,aAAa,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5E,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAY,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/lib/address/isoCodes/index.d.ts

@@ -0,0 +1,46 @@
+import { type StateDefinition } from '../stateDefinitions.js';
+import type { IsoCodesFetchOptions, IsoCodesSource, IsoCodesSourceId, IsoCodesSubdivision } from './types.js';
+/** Every supported source, by id. Adding a source is an entry here plus its adapter. */
+export declare const ISO_CODES_SOURCES: Readonly<Record<IsoCodesSourceId, IsoCodesSource>>;
+/** The ids of {@link ISO_CODES_SOURCES}, e.g. for a CLI flag's allowed values. */
+export declare const ISO_CODES_SOURCE_IDS: IsoCodesSourceId[];
+/**
+ * Turns a source's subdivisions into state definitions.
+ *
+ * @param subdivisions - From a source.
+ * @param options - `allLevels` keeps subdivisions nested under another one (French departments
+ * under their regions); by default only the top level is kept.
+ * @returns The definitions, in the source's order.
+ * @throws SfError (`InvalidStateDefinitionsError`) for an entry `parseStateDefinitions` rejects.
+ */
+export declare function subdivisionsToStateDefinitions(subdivisions: IsoCodesSubdivision[], options?: {
+    allLevels?: boolean;
+}): StateDefinition[];
+export type FetchIsoCodesStateDefinitionsOptions = IsoCodesFetchOptions & {
+    source: IsoCodesSourceId;
+    /** In the source's own terms; for `debian`, a tag or branch. Defaults to the source's latest release. */
+    version?: string;
+    /** See {@link subdivisionsToStateDefinitions}. */
+    allLevels?: boolean;
+};
+export type IsoCodesStateDefinitions = {
+    source: IsoCodesSourceId;
+    /** The source's label, e.g. `Debian iso-codes`. */
+    label: string;
+    /** The version used: as given, or the resolved latest release. */
+    version: string;
+    /** Where the data was downloaded from. */
+    url: string;
+    allLevels: boolean;
+    definitions: StateDefinition[];
+};
+/**
+ * Downloads ISO 3166-2 data from a source and converts it to state definitions. Nothing is
+ * cached or written to disk.
+ *
+ * @param options - The source, an optional version, `allLevels`, and HTTP settings.
+ * @returns The definitions, with the source, version, and URL they came from.
+ * @throws SfError (`UnsupportedIsoCodesSourceError`) for an unknown source; otherwise whatever the
+ * source's adapter throws, or (`InvalidIsoCodesDataError`) when its data fails validation.
+ */
+export declare function fetchIsoCodesStateDefinitions(options: FetchIsoCodesStateDefinitionsOptions): Promise<IsoCodesStateDefinitions>;

package/lib/address/isoCodes/index.js

@@ -0,0 +1,72 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { SfError } from '@salesforce/core';
+import { EnvHttpProxyAgent } from 'undici';
+import { parseStateDefinitions } from '../stateDefinitions.js';
+import { debianIsoCodesSource } from './debian.js';
+/** Every supported source, by id. Adding a source is an entry here plus its adapter. */
+export const ISO_CODES_SOURCES = {
+    debian: debianIsoCodesSource,
+};
+/** The ids of {@link ISO_CODES_SOURCES}, e.g. for a CLI flag's allowed values. */
+export const ISO_CODES_SOURCE_IDS = Object.keys(ISO_CODES_SOURCES);
+/**
+ * Turns a source's subdivisions into state definitions.
+ *
+ * @param subdivisions - From a source.
+ * @param options - `allLevels` keeps subdivisions nested under another one (French departments
+ * under their regions); by default only the top level is kept.
+ * @returns The definitions, in the source's order.
+ * @throws SfError (`InvalidStateDefinitionsError`) for an entry `parseStateDefinitions` rejects.
+ */
+export function subdivisionsToStateDefinitions(subdivisions, options = {}) {
+    const kept = options.allLevels ? subdivisions : subdivisions.filter((subdivision) => !subdivision.parent);
+    return parseStateDefinitions(Object.fromEntries(kept.map((subdivision) => [subdivision.code, subdivision.name])));
+}
+/**
+ * Downloads ISO 3166-2 data from a source and converts it to state definitions. Nothing is
+ * cached or written to disk.
+ *
+ * @param options - The source, an optional version, `allLevels`, and HTTP settings.
+ * @returns The definitions, with the source, version, and URL they came from.
+ * @throws SfError (`UnsupportedIsoCodesSourceError`) for an unknown source; otherwise whatever the
+ * source's adapter throws, or (`InvalidIsoCodesDataError`) when its data fails validation.
+ */
+export async function fetchIsoCodesStateDefinitions(options) {
+    const source = Object.hasOwn(ISO_CODES_SOURCES, options.source) ? ISO_CODES_SOURCES[options.source] : undefined;
+    if (!source) {
+        throw new SfError(`Unsupported ISO 3166-2 source "${String(options.source)}". Supported: ${ISO_CODES_SOURCE_IDS.join(', ')}.`, 'UnsupportedIsoCodesSourceError');
+    }
+    const ownDispatcher = options.dispatcher ? undefined : new EnvHttpProxyAgent();
+    const fetchOptions = { ...options, dispatcher: options.dispatcher ?? ownDispatcher };
+    const allLevels = options.allLevels ?? false;
+    try {
+        const version = options.version ?? (await source.resolveLatestVersion(fetchOptions));
+        const { url, subdivisions } = await source.fetchSubdivisions(version, fetchOptions);
+        let definitions;
+        try {
+            definitions = subdivisionsToStateDefinitions(subdivisions, { allLevels });
+        }
+        catch (error) {
+            throw new SfError(`${url}: ${error instanceof Error ? error.message : String(error)}`, 'InvalidIsoCodesDataError');
+        }
+        return { source: source.id, label: source.label, version, url, allLevels, definitions };
+    }
+    finally {
+        await ownDispatcher?.close();
+    }
+}
+//# sourceMappingURL=index.js.map

package/lib/address/isoCodes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/address/isoCodes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAwB,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGnD,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAuD;IACnF,MAAM,EAAE,oBAAoB;CAC7B,CAAC;AAEF,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAuB,CAAC;AAEzF;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAC5C,YAAmC,EACnC,UAAmC,EAAE;IAErC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1G,OAAO,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpH,CAAC;AAsBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAA6C;IAE7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,OAAO,CACf,kCAAkC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC3G,gCAAgC,CACjC,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,iBAAiB,EAAE,CAAC;IAC/E,MAAM,YAAY,GAAyB,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,aAAa,EAAE,CAAC;IAC3G,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;QACrF,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEpF,IAAI,WAA8B,CAAC;QACnC,IAAI,CAAC;YACH,WAAW,GAAG,8BAA8B,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,OAAO,CACf,GAAG,GAAG,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACnE,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC1F,CAAC;YAAS,CAAC;QACT,MAAM,aAAa,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/lib/address/isoCodes/types.d.ts

@@ -0,0 +1,54 @@
+import type { Duration } from '@salesforce/kit';
+import type { Dispatcher } from 'undici';
+/** The ISO 3166-2 sources state definitions can be fetched from. */
+export type IsoCodesSourceId = 'debian';
+/** One ISO 3166-2 subdivision, as a source reports it. */
+export type IsoCodesSubdivision = {
+    /** The full ISO 3166-2 code, e.g. `FR-ARA`. */
+    code: string;
+    name: string;
+    /** The full code of the subdivision this one is nested under, e.g. `FR-ARA` for `FR-01`. */
+    parent?: string;
+};
+export type IsoCodesFetchOptions = {
+    /** Bounds each HTTP request. Defaults to 30 seconds. */
+    requestTimeoutMs?: number;
+    /** Retries after a transport failure (timeout, reset, 5xx). Defaults to 2. */
+    retryAttempts?: number;
+    /** Delay before the first retry, doubling after that. Defaults to 2 seconds. */
+    initialRetryDelay?: Duration;
+    /**
+     * The `undici` dispatcher for every request. Defaults to an `EnvHttpProxyAgent`, so
+     * `HTTPS_PROXY`/`NO_PROXY` are honored. For tests: a `MockAgent`.
+     */
+    dispatcher?: Dispatcher;
+};
+/**
+ * Where ISO 3166-2 data comes from. An adapter only finds a version and downloads that version's
+ * subdivisions; the level filter and validation every source shares live in
+ * `fetchIsoCodesStateDefinitions`.
+ */
+export type IsoCodesSource = {
+    id: IsoCodesSourceId;
+    /** For messages and attribution, e.g. `Debian iso-codes`. */
+    label: string;
+    /** The source's home page. */
+    homepage: string;
+    /**
+     * The version used when none is given.
+     *
+     * @throws SfError (`IsoCodesDownloadError`) when no version can be determined.
+     */
+    resolveLatestVersion(options: IsoCodesFetchOptions): Promise<string>;
+    /**
+     * Downloads one version's subdivisions.
+     *
+     * @throws SfError (`IsoCodesVersionNotFoundError`) for a version the source doesn't have,
+     * (`IsoCodesDownloadError`) when the download fails, or (`InvalidIsoCodesDataError`) when the
+     * data isn't in the expected shape.
+     */
+    fetchSubdivisions(version: string, options: IsoCodesFetchOptions): Promise<{
+        url: string;
+        subdivisions: IsoCodesSubdivision[];
+    }>;
+};

package/lib/address/isoCodes/types.js

@@ -0,0 +1,17 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/lib/address/isoCodes/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/address/isoCodes/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/lib/index.d.ts

@@ -3,5 +3,7 @@ export { deployAddressSettingsXml, retrieveAddressSettingsXml, type AddressSetti
 export { parseAddressSettingsXml, planStateActivation, type AddressSettings, type AddressSettingsCountry, type AddressSettingsState, type StateActivationPlan, } from './address/addressSettingsXml.js';
 export { createState, createStates, DEFAULT_CREATE_CONCURRENCY, planStateCreation, type CreateStateOptions, type CreateStatesOptions, type StateCreationOutcome, type StateCreationPlan, type StateCreationStatus, } from './address/createStates.js';
 export { classifyNewStateResponse, fillNewStateForm, parseNewStateForm, type NewStateForm, type NewStateResponseClassification, type NewStateResponseStatus, } from './address/newStateForm.js';
+export { fetchIsoCodesStateDefinitions, ISO_CODES_SOURCE_IDS, ISO_CODES_SOURCES, subdivisionsToStateDefinitions, type FetchIsoCodesStateDefinitionsOptions, type IsoCodesStateDefinitions, } from './address/isoCodes/index.js';
+export type { IsoCodesFetchOptions, IsoCodesSource, IsoCodesSourceId, IsoCodesSubdivision, } from './address/isoCodes/types.js';
 export { isLoginPage, NEW_STATE_FORM_PATH, openSetupSession, SetupSession, SetupTransportError, type OpenSetupSessionOptions, type SetupResponse, } from './address/setupSession.js';
 export { filterStateDefinitions, formatStateKey, parseStateDefinitions, type StateDefinition, } from './address/stateDefinitions.js';

package/lib/index.js

@@ -23,6 +23,7 @@ export { deployAddressSettingsXml, retrieveAddressSettingsXml, } from './address
 export { parseAddressSettingsXml, planStateActivation, } from './address/addressSettingsXml.js';
 export { createState, createStates, DEFAULT_CREATE_CONCURRENCY, planStateCreation, } from './address/createStates.js';
 export { classifyNewStateResponse, fillNewStateForm, parseNewStateForm, } from './address/newStateForm.js';
+export { fetchIsoCodesStateDefinitions, ISO_CODES_SOURCE_IDS, ISO_CODES_SOURCES, subdivisionsToStateDefinitions, } from './address/isoCodes/index.js';
 export { isLoginPage, NEW_STATE_FORM_PATH, openSetupSession, SetupSession, SetupTransportError, } from './address/setupSession.js';
 export { filterStateDefinitions, formatStateKey, parseStateDefinitions, } from './address/stateDefinitions.js';
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,mGAAmG;AACnG,iGAAiG;AACjG,qGAAqG;AACrG,kGAAkG;AAClG,qFAAqF;AAErF,OAAO,EAAE,cAAc,EAAyD,MAAM,6BAA6B,CAAC;AACpH,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAI3B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,mBAAmB,GAKpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,0BAA0B,EAC1B,iBAAiB,GAMlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,GAIlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,GAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,qBAAqB,GAEtB,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,mGAAmG;AACnG,iGAAiG;AACjG,qGAAqG;AACrG,kGAAkG;AAClG,qFAAqF;AAErF,OAAO,EAAE,cAAc,EAAyD,MAAM,6BAA6B,CAAC;AACpH,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAI3B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,mBAAmB,GAKpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,0BAA0B,EAC1B,iBAAiB,GAMlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,GAIlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,iBAAiB,EACjB,8BAA8B,GAG/B,MAAM,6BAA6B,CAAC;AAOrC,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,GAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,qBAAqB,GAEtB,MAAM,+BAA+B,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@simplysf/simply-settings-core",
   "description": "State and Country/Territory picklist automation (create states via the Setup form, activate them via AddressSettings) — the library layer behind @simplysf/simply-settings, published separately for direct consumption (e.g. editor tooling, CI scripts) without the CLI framework",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "author": "@ClayChipps",
   "homepage": "https://github.com/SimplySF/simply-plugins-core",
   "bugs": "https://github.com/SimplySF/simply-plugins-core/issues",
@@ -52,6 +52,17 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "build": "wireit",
+    "compile": "wireit",
+    "fix-license": "eslint src test --fix --rule \"header/header: [2]\"",
+    "format": "wireit",
+    "lint": "wireit",
+    "test": "wireit",
+    "test:coverage": "vitest run --coverage --project simply-settings-core",
+    "test:only": "wireit",
+    "test:watch": "vitest watch --project simply-settings-core"
+  },
   "wireit": {
     "build": {
       "dependencies": [
@@ -124,15 +135,5 @@
       "output": []
     }
   },
-  "scripts": {
-    "build": "wireit",
-    "compile": "wireit",
-    "fix-license": "eslint src test --fix --rule \"header/header: [2]\"",
-    "format": "wireit",
-    "lint": "wireit",
-    "test": "wireit",
-    "test:coverage": "vitest run --coverage --project simply-settings-core",
-    "test:only": "wireit",
-    "test:watch": "vitest watch --project simply-settings-core"
-  }
-}
+  "gitHead": "8ce681b40ae8e7adb25f792c279ceb20f5cdfbdd"
+}