@simplysf/simply-settings-core 0.2.0 → 0.3.0

package/README.md

@@ -21,22 +21,25 @@ Requires Node.js `>=22` and either `"type": "module"` or a dynamic `import()`. T
 
 Everything below is exported from the package root. Removing or renaming an export is a breaking change; see [`src/index.ts`](src/index.ts).
 
-| Export                                                                      | Description                                                                                                                                                            |
-| --------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `parseStateDefinitions(json)`                                               | Validates a `{ "US-CA": "California" }` object into `StateDefinition[]`, naming the first bad entry.                                                                   |
-| `filterStateDefinitions(definitions, countries?)`                           | Narrows definitions to ISO country codes. Fails on a malformed code or a country with no definitions.                                                                  |
-| `formatStateKey(definition)`                                                | `US-CA` for a definition.                                                                                                                                              |
-| `retrieveAddressSettingsXml(options)` / `deployAddressSettingsXml(options)` | Metadata API retrieve/deploy of the org's `Address` settings, as `Address.settings-meta.xml` text. A failed deploy is reported in the result, not thrown.              |
-| `parseAddressSettingsXml(xml)`                                              | The countries and states in a settings file, with ISO codes kept as strings (Andorra's `02` stays `02`).                                                               |
-| `planStateCreation(definitions, settings)`                                  | Splits definitions into `pending` (to submit) and `settled` (`exists`, `country-missing`) without any Setup traffic.                                                   |
-| `openSetupSession(options)` / `SetupSession`                                | A cookie-carrying session on the org's Setup pages, opened through a single-use frontdoor URL (the mechanism `sf org open` uses).                                      |
-| `createState(session, definition, options?)`                                | Submits one state through _Configure New State_ and classifies the result. Retries transport failures, and reports per-state problems as `failed` instead of throwing. |
-| `createStates(options)`                                                     | Runs `createState` over many states, `concurrency` at a time (default `DEFAULT_CREATE_CONCURRENCY`, 4).                                                                |
-| `parseNewStateForm(html)` / `fillNewStateForm(form, definition)`            | Finds the form by its fields' stable id suffixes, not Visualforce's generated ids, and builds the submission.                                                          |
-| `classifyNewStateResponse(response)`                                        | Maps a form POST response to `created`, `exists`, `rejected`, `country-missing`, or `failed`.                                                                          |
-| `planStateActivation(xml, definitions)`                                     | Sets `<active>`/`<visible>` on exactly the listed states. Every other state and country is untouched.                                                                  |
-| `activateStates(options)`                                                   | Retrieve, `planStateActivation`, then deploy. Supports `dryRun`.                                                                                                       |
-| `isLoginPage(response)`, `NEW_STATE_FORM_PATH`, `SetupTransportError`       | Supporting helpers and constants.                                                                                                                                      |
+| Export                                                                      | Description                                                                                                                                                                                                                                                       |
+| --------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `parseStateDefinitions(json)`                                               | Validates a `{ "US-CA": "California" }` object into `StateDefinition[]`, naming the first bad entry.                                                                                                                                                              |
+| `filterStateDefinitions(definitions, countries?)`                           | Narrows definitions to ISO country codes. Fails on a malformed code or a country with no definitions.                                                                                                                                                             |
+| `formatStateKey(definition)`                                                | `US-CA` for a definition.                                                                                                                                                                                                                                         |
+| `fetchIsoCodesStateDefinitions(options)`                                    | Downloads ISO 3166-2 data from a source at run time and returns it as definitions, with the version and URL used. `debian` ([Debian `iso-codes`](https://salsa.debian.org/iso-codes-team/iso-codes)) is the only source today. Top level only unless `allLevels`. |
+| `subdivisionsToStateDefinitions(subdivisions, options?)`                    | The shared conversion behind it: the nested-subdivision filter, then `parseStateDefinitions`.                                                                                                                                                                     |
+| `ISO_CODES_SOURCES`, `ISO_CODES_SOURCE_IDS`                                 | The supported sources (`IsoCodesSource` adapters), and their ids.                                                                                                                                                                                                 |
+| `retrieveAddressSettingsXml(options)` / `deployAddressSettingsXml(options)` | Metadata API retrieve/deploy of the org's `Address` settings, as `Address.settings-meta.xml` text. A failed deploy is reported in the result, not thrown.                                                                                                         |
+| `parseAddressSettingsXml(xml)`                                              | The countries and states in a settings file, with ISO codes kept as strings (Andorra's `02` stays `02`).                                                                                                                                                          |
+| `planStateCreation(definitions, settings)`                                  | Splits definitions into `pending` (to submit) and `settled` (`exists`, `country-missing`) without any Setup traffic.                                                                                                                                              |
+| `openSetupSession(options)` / `SetupSession`                                | A cookie-carrying session on the org's Setup pages, opened through a single-use frontdoor URL (the mechanism `sf org open` uses).                                                                                                                                 |
+| `createState(session, definition, options?)`                                | Submits one state through _Configure New State_ and classifies the result. Retries transport failures, and reports per-state problems as `failed` instead of throwing.                                                                                            |
+| `createStates(options)`                                                     | Runs `createState` over many states, `concurrency` at a time (default `DEFAULT_CREATE_CONCURRENCY`, 4).                                                                                                                                                           |
+| `parseNewStateForm(html)` / `fillNewStateForm(form, definition)`            | Finds the form by its fields' stable id suffixes, not Visualforce's generated ids, and builds the submission.                                                                                                                                                     |
+| `classifyNewStateResponse(response)`                                        | Maps a form POST response to `created`, `exists`, `rejected`, `country-missing`, or `failed`.                                                                                                                                                                     |
+| `planStateActivation(xml, definitions)`                                     | Sets `<active>`/`<visible>` on exactly the listed states. Every other state and country is untouched.                                                                                                                                                             |
+| `activateStates(options)`                                                   | Retrieve, `planStateActivation`, then deploy. Supports `dryRun`.                                                                                                                                                                                                  |
+| `isLoginPage(response)`, `NEW_STATE_FORM_PATH`, `SetupTransportError`       | Supporting helpers and constants.                                                                                                                                                                                                                                 |
 
 ```ts
 import {

package/lib/address/isoCodes/debian.d.ts

@@ -0,0 +1,10 @@
+import type { IsoCodesSource } from './types.js';
+/**
+ * The raw `iso_3166-2.json` for a tag or branch.
+ *
+ * @param version - A tag (`v4.20.1`) or branch (`main`).
+ * @returns The URL.
+ */
+export declare function debianIsoCodesDataUrl(version: string): string;
+/** Debian's `iso-codes` repository on salsa.debian.org: release tags, or any branch. */
+export declare const debianIsoCodesSource: IsoCodesSource;

package/lib/address/isoCodes/debian.js

@@ -0,0 +1,77 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { SfError } from '@salesforce/core';
+import { getJson } from './http.js';
+// Debian's iso-codes is LGPL-2.1+. It's downloaded at run time and used in memory, never
+// redistributed in this package — see docs/design/0043-settings-address-states-iso-codes.md.
+const LABEL = 'Debian iso-codes';
+const HOMEPAGE = 'https://salsa.debian.org/iso-codes-team/iso-codes';
+const TAGS_URL = 'https://salsa.debian.org/api/v4/projects/iso-codes-team%2Fiso-codes/repository/tags?order_by=version&sort=desc&per_page=20';
+const RELEASE_TAG_PATTERN = /^v\d+(\.\d+)*$/;
+/**
+ * The raw `iso_3166-2.json` for a tag or branch.
+ *
+ * @param version - A tag (`v4.20.1`) or branch (`main`).
+ * @returns The URL.
+ */
+export function debianIsoCodesDataUrl(version) {
+    const ref = version.split('/').map(encodeURIComponent).join('/');
+    return `${HOMEPAGE}/-/raw/${ref}/data/iso_3166-2.json`;
+}
+function isSubdivision(value) {
+    if (value === null || typeof value !== 'object')
+        return false;
+    const { code, name, parent } = value;
+    return typeof code === 'string' && typeof name === 'string' && (parent === undefined || typeof parent === 'string');
+}
+/** Debian's `iso-codes` repository on salsa.debian.org: release tags, or any branch. */
+export const debianIsoCodesSource = {
+    id: 'debian',
+    label: LABEL,
+    homepage: HOMEPAGE,
+    async resolveLatestVersion(options) {
+        // Tags, not `main`: tags are what distributions ship, while `main` can hold in-progress edits.
+        const tags = await getJson(TAGS_URL, LABEL, options);
+        const latest = Array.isArray(tags)
+            ? tags
+                .map((tag) => tag?.name)
+                .find((name) => typeof name === 'string' && RELEASE_TAG_PATTERN.test(name))
+            : undefined;
+        if (!latest) {
+            throw new SfError(`Couldn't find a release of ${LABEL} at ${TAGS_URL}.`, 'IsoCodesDownloadError', [
+                `Specify a version explicitly, e.g. a tag from ${HOMEPAGE}/-/tags.`,
+            ]);
+        }
+        return latest;
+    },
+    async fetchSubdivisions(version, options) {
+        const url = debianIsoCodesDataUrl(version);
+        const data = await getJson(url, LABEL, options);
+        if (data === undefined) {
+            throw new SfError(`${LABEL} has no version "${version}".`, 'IsoCodesVersionNotFoundError', [
+                `See ${HOMEPAGE}/-/tags for the available versions.`,
+            ]);
+        }
+        const entries = data?.['3166-2'];
+        if (!Array.isArray(entries) || !entries.every(isSubdivision)) {
+            throw new SfError(`${url} isn't in the expected shape: { "3166-2": [{ code, name, parent? }] }.`, 'InvalidIsoCodesDataError');
+        }
+        // `type` (e.g. "Metropolitan department") is dropped: nothing selects on it yet.
+        const subdivisions = entries.map(({ code, name, parent }) => (parent ? { code, name, parent } : { code, name }));
+        return { url, subdivisions };
+    },
+};
+//# sourceMappingURL=debian.js.map

package/lib/address/isoCodes/debian.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debian.js","sourceRoot":"","sources":["../../../src/address/isoCodes/debian.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,yFAAyF;AACzF,6FAA6F;AAE7F,MAAM,KAAK,GAAG,kBAAkB,CAAC;AACjC,MAAM,QAAQ,GAAG,mDAAmD,CAAC;AACrE,MAAM,QAAQ,GACZ,4HAA4H,CAAC;AAC/H,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,GAAG,QAAQ,UAAU,GAAG,uBAAuB,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAgC,CAAC;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC;AACtH,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,KAAK;IACZ,QAAQ,EAAE,QAAQ;IAElB,KAAK,CAAC,oBAAoB,CAAC,OAAO;QAChC,+FAA+F;QAC/F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,CAAC,CAAE,IAAkC;iBAChC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC;iBACvB,IAAI,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/F,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,OAAO,CAAC,8BAA8B,KAAK,OAAO,QAAQ,GAAG,EAAE,uBAAuB,EAAE;gBAChG,iDAAiD,QAAQ,UAAU;aACpE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO;QACtC,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAEhD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,oBAAoB,OAAO,IAAI,EAAE,8BAA8B,EAAE;gBACzF,OAAO,QAAQ,qCAAqC;aACrD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAI,IAAuC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,OAAO,CACf,GAAG,GAAG,wEAAwE,EAC9E,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,iFAAiF;QACjF,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACjH,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;IAC/B,CAAC;CACF,CAAC"}

package/lib/address/isoCodes/http.d.ts

@@ -0,0 +1,12 @@
+import type { IsoCodesFetchOptions } from './types.js';
+/**
+ * GETs a JSON document, retrying transport failures.
+ *
+ * @param url - What to fetch.
+ * @param label - The source's label, for the error message.
+ * @param options - Timeout, retry, and dispatcher settings.
+ * @returns The parsed body for a 200, or `undefined` for a 404 — the caller knows what a missing
+ * document means.
+ * @throws SfError (`IsoCodesDownloadError`) for anything else, once retries are spent.
+ */
+export declare function getJson(url: string, label: string, options: IsoCodesFetchOptions): Promise<unknown>;

package/lib/address/isoCodes/http.js

@@ -0,0 +1,92 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { SfError } from '@salesforce/core';
+import { Duration } from '@salesforce/kit';
+import { retryWithBackoff } from '@simplysf/simply-core';
+import { fetch } from 'undici';
+/** A 5xx: worth retrying, unlike a response we can act on. */
+class ServerError extends Error {
+    status;
+    constructor(status) {
+        super(`HTTP ${status}`);
+        this.status = status;
+        this.name = 'ServerError';
+    }
+}
+function isTransportError(error) {
+    if (error instanceof ServerError)
+        return true;
+    if (!(error instanceof Error))
+        return false;
+    // undici's `fetch` rejects with `TypeError: fetch failed` for socket-level failures, and
+    // `AbortSignal.timeout` with a `TimeoutError` DOMException.
+    return (error instanceof TypeError && error.message === 'fetch failed') || error.name === 'TimeoutError';
+}
+function describeFailure(error) {
+    if (error instanceof Error && error.name === 'TimeoutError')
+        return 'the request timed out';
+    if (error instanceof TypeError && error.cause instanceof Error)
+        return error.cause.message;
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * GETs a JSON document, retrying transport failures.
+ *
+ * @param url - What to fetch.
+ * @param label - The source's label, for the error message.
+ * @param options - Timeout, retry, and dispatcher settings.
+ * @returns The parsed body for a 200, or `undefined` for a 404 — the caller knows what a missing
+ * document means.
+ * @throws SfError (`IsoCodesDownloadError`) for anything else, once retries are spent.
+ */
+export async function getJson(url, label, options) {
+    const downloadError = (reason) => new SfError(`Couldn't download ISO 3166-2 data from ${label} (${url}): ${reason}.`, 'IsoCodesDownloadError', [
+        'Check your network connection and proxy settings (HTTPS_PROXY), or provide the state definitions as a file instead.',
+    ]);
+    let response;
+    try {
+        response = await retryWithBackoff(async () => {
+            const res = await fetch(url, {
+                headers: { Accept: 'application/json' },
+                signal: AbortSignal.timeout(options.requestTimeoutMs ?? 30_000),
+                dispatcher: options.dispatcher,
+            });
+            const body = await res.text();
+            if (res.status >= 500)
+                throw new ServerError(res.status);
+            return { status: res.status, body };
+        }, {
+            retryAttempts: options.retryAttempts ?? 2,
+            backoffFactor: 2,
+            initialDelay: options.initialRetryDelay ?? Duration.seconds(2),
+            shouldRetry: isTransportError,
+        });
+    }
+    catch (error) {
+        throw downloadError(describeFailure(error));
+    }
+    if (response.status === 404)
+        return undefined;
+    if (response.status !== 200)
+        throw downloadError(`HTTP ${response.status}`);
+    try {
+        return JSON.parse(response.body);
+    }
+    catch {
+        throw downloadError('the response is not valid JSON');
+    }
+}
+//# sourceMappingURL=http.js.map

package/lib/address/isoCodes/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/address/isoCodes/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAG/B,8DAA8D;AAC9D,MAAM,WAAY,SAAQ,KAAK;IACM;IAAnC,YAAmC,MAAc;QAC/C,KAAK,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;QADS,WAAM,GAAN,MAAM,CAAQ;QAE/C,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,yFAAyF;IACzF,4DAA4D;IAC5D,OAAO,CAAC,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;AAC3G,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,uBAAuB,CAAC;IAC5F,IAAI,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;IAC3F,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,KAAa,EAAE,OAA6B;IACrF,MAAM,aAAa,GAAG,CAAC,MAAc,EAAW,EAAE,CAChD,IAAI,OAAO,CAAC,0CAA0C,KAAK,KAAK,GAAG,MAAM,MAAM,GAAG,EAAE,uBAAuB,EAAE;QAC3G,qHAAqH;KACtH,CAAC,CAAC;IAEL,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,gBAAgB,CAC/B,KAAK,IAAI,EAAE;YACT,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;gBAC/D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC,EACD;YACE,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,CAAC;YACzC,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9D,WAAW,EAAE,gBAAgB;SAC9B,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,aAAa,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5E,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAY,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/lib/address/isoCodes/index.d.ts

@@ -0,0 +1,46 @@
+import { type StateDefinition } from '../stateDefinitions.js';
+import type { IsoCodesFetchOptions, IsoCodesSource, IsoCodesSourceId, IsoCodesSubdivision } from './types.js';
+/** Every supported source, by id. Adding a source is an entry here plus its adapter. */
+export declare const ISO_CODES_SOURCES: Readonly<Record<IsoCodesSourceId, IsoCodesSource>>;
+/** The ids of {@link ISO_CODES_SOURCES}, e.g. for a CLI flag's allowed values. */
+export declare const ISO_CODES_SOURCE_IDS: IsoCodesSourceId[];
+/**
+ * Turns a source's subdivisions into state definitions.
+ *
+ * @param subdivisions - From a source.
+ * @param options - `allLevels` keeps subdivisions nested under another one (French departments
+ * under their regions); by default only the top level is kept.
+ * @returns The definitions, in the source's order.
+ * @throws SfError (`InvalidStateDefinitionsError`) for an entry `parseStateDefinitions` rejects.
+ */
+export declare function subdivisionsToStateDefinitions(subdivisions: IsoCodesSubdivision[], options?: {
+    allLevels?: boolean;
+}): StateDefinition[];
+export type FetchIsoCodesStateDefinitionsOptions = IsoCodesFetchOptions & {
+    source: IsoCodesSourceId;
+    /** In the source's own terms; for `debian`, a tag or branch. Defaults to the source's latest release. */
+    version?: string;
+    /** See {@link subdivisionsToStateDefinitions}. */
+    allLevels?: boolean;
+};
+export type IsoCodesStateDefinitions = {
+    source: IsoCodesSourceId;
+    /** The source's label, e.g. `Debian iso-codes`. */
+    label: string;
+    /** The version used: as given, or the resolved latest release. */
+    version: string;
+    /** Where the data was downloaded from. */
+    url: string;
+    allLevels: boolean;
+    definitions: StateDefinition[];
+};
+/**
+ * Downloads ISO 3166-2 data from a source and converts it to state definitions. Nothing is
+ * cached or written to disk.
+ *
+ * @param options - The source, an optional version, `allLevels`, and HTTP settings.
+ * @returns The definitions, with the source, version, and URL they came from.
+ * @throws SfError (`UnsupportedIsoCodesSourceError`) for an unknown source; otherwise whatever the
+ * source's adapter throws, or (`InvalidIsoCodesDataError`) when its data fails validation.
+ */
+export declare function fetchIsoCodesStateDefinitions(options: FetchIsoCodesStateDefinitionsOptions): Promise<IsoCodesStateDefinitions>;

package/lib/address/isoCodes/index.js

@@ -0,0 +1,72 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { SfError } from '@salesforce/core';
+import { EnvHttpProxyAgent } from 'undici';
+import { parseStateDefinitions } from '../stateDefinitions.js';
+import { debianIsoCodesSource } from './debian.js';
+/** Every supported source, by id. Adding a source is an entry here plus its adapter. */
+export const ISO_CODES_SOURCES = {
+    debian: debianIsoCodesSource,
+};
+/** The ids of {@link ISO_CODES_SOURCES}, e.g. for a CLI flag's allowed values. */
+export const ISO_CODES_SOURCE_IDS = Object.keys(ISO_CODES_SOURCES);
+/**
+ * Turns a source's subdivisions into state definitions.
+ *
+ * @param subdivisions - From a source.
+ * @param options - `allLevels` keeps subdivisions nested under another one (French departments
+ * under their regions); by default only the top level is kept.
+ * @returns The definitions, in the source's order.
+ * @throws SfError (`InvalidStateDefinitionsError`) for an entry `parseStateDefinitions` rejects.
+ */
+export function subdivisionsToStateDefinitions(subdivisions, options = {}) {
+    const kept = options.allLevels ? subdivisions : subdivisions.filter((subdivision) => !subdivision.parent);
+    return parseStateDefinitions(Object.fromEntries(kept.map((subdivision) => [subdivision.code, subdivision.name])));
+}
+/**
+ * Downloads ISO 3166-2 data from a source and converts it to state definitions. Nothing is
+ * cached or written to disk.
+ *
+ * @param options - The source, an optional version, `allLevels`, and HTTP settings.
+ * @returns The definitions, with the source, version, and URL they came from.
+ * @throws SfError (`UnsupportedIsoCodesSourceError`) for an unknown source; otherwise whatever the
+ * source's adapter throws, or (`InvalidIsoCodesDataError`) when its data fails validation.
+ */
+export async function fetchIsoCodesStateDefinitions(options) {
+    const source = Object.hasOwn(ISO_CODES_SOURCES, options.source) ? ISO_CODES_SOURCES[options.source] : undefined;
+    if (!source) {
+        throw new SfError(`Unsupported ISO 3166-2 source "${String(options.source)}". Supported: ${ISO_CODES_SOURCE_IDS.join(', ')}.`, 'UnsupportedIsoCodesSourceError');
+    }
+    const ownDispatcher = options.dispatcher ? undefined : new EnvHttpProxyAgent();
+    const fetchOptions = { ...options, dispatcher: options.dispatcher ?? ownDispatcher };
+    const allLevels = options.allLevels ?? false;
+    try {
+        const version = options.version ?? (await source.resolveLatestVersion(fetchOptions));
+        const { url, subdivisions } = await source.fetchSubdivisions(version, fetchOptions);
+        let definitions;
+        try {
+            definitions = subdivisionsToStateDefinitions(subdivisions, { allLevels });
+        }
+        catch (error) {
+            throw new SfError(`${url}: ${error instanceof Error ? error.message : String(error)}`, 'InvalidIsoCodesDataError');
+        }
+        return { source: source.id, label: source.label, version, url, allLevels, definitions };
+    }
+    finally {
+        await ownDispatcher?.close();
+    }
+}
+//# sourceMappingURL=index.js.map

package/lib/address/isoCodes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/address/isoCodes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAwB,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGnD,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAuD;IACnF,MAAM,EAAE,oBAAoB;CAC7B,CAAC;AAEF,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAuB,CAAC;AAEzF;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAC5C,YAAmC,EACnC,UAAmC,EAAE;IAErC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1G,OAAO,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpH,CAAC;AAsBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAA6C;IAE7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,OAAO,CACf,kCAAkC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC3G,gCAAgC,CACjC,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,iBAAiB,EAAE,CAAC;IAC/E,MAAM,YAAY,GAAyB,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,aAAa,EAAE,CAAC;IAC3G,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;QACrF,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEpF,IAAI,WAA8B,CAAC;QACnC,IAAI,CAAC;YACH,WAAW,GAAG,8BAA8B,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,OAAO,CACf,GAAG,GAAG,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACnE,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC1F,CAAC;YAAS,CAAC;QACT,MAAM,aAAa,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/lib/address/isoCodes/types.d.ts

@@ -0,0 +1,54 @@
+import type { Duration } from '@salesforce/kit';
+import type { Dispatcher } from 'undici';
+/** The ISO 3166-2 sources state definitions can be fetched from. */
+export type IsoCodesSourceId = 'debian';
+/** One ISO 3166-2 subdivision, as a source reports it. */
+export type IsoCodesSubdivision = {
+    /** The full ISO 3166-2 code, e.g. `FR-ARA`. */
+    code: string;
+    name: string;
+    /** The full code of the subdivision this one is nested under, e.g. `FR-ARA` for `FR-01`. */
+    parent?: string;
+};
+export type IsoCodesFetchOptions = {
+    /** Bounds each HTTP request. Defaults to 30 seconds. */
+    requestTimeoutMs?: number;
+    /** Retries after a transport failure (timeout, reset, 5xx). Defaults to 2. */
+    retryAttempts?: number;
+    /** Delay before the first retry, doubling after that. Defaults to 2 seconds. */
+    initialRetryDelay?: Duration;
+    /**
+     * The `undici` dispatcher for every request. Defaults to an `EnvHttpProxyAgent`, so
+     * `HTTPS_PROXY`/`NO_PROXY` are honored. For tests: a `MockAgent`.
+     */
+    dispatcher?: Dispatcher;
+};
+/**
+ * Where ISO 3166-2 data comes from. An adapter only finds a version and downloads that version's
+ * subdivisions; the level filter and validation every source shares live in
+ * `fetchIsoCodesStateDefinitions`.
+ */
+export type IsoCodesSource = {
+    id: IsoCodesSourceId;
+    /** For messages and attribution, e.g. `Debian iso-codes`. */
+    label: string;
+    /** The source's home page. */
+    homepage: string;
+    /**
+     * The version used when none is given.
+     *
+     * @throws SfError (`IsoCodesDownloadError`) when no version can be determined.
+     */
+    resolveLatestVersion(options: IsoCodesFetchOptions): Promise<string>;
+    /**
+     * Downloads one version's subdivisions.
+     *
+     * @throws SfError (`IsoCodesVersionNotFoundError`) for a version the source doesn't have,
+     * (`IsoCodesDownloadError`) when the download fails, or (`InvalidIsoCodesDataError`) when the
+     * data isn't in the expected shape.
+     */
+    fetchSubdivisions(version: string, options: IsoCodesFetchOptions): Promise<{
+        url: string;
+        subdivisions: IsoCodesSubdivision[];
+    }>;
+};

package/lib/address/isoCodes/types.js

@@ -0,0 +1,17 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/lib/address/isoCodes/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/address/isoCodes/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/lib/index.d.ts

@@ -3,5 +3,7 @@ export { deployAddressSettingsXml, retrieveAddressSettingsXml, type AddressSetti
 export { parseAddressSettingsXml, planStateActivation, type AddressSettings, type AddressSettingsCountry, type AddressSettingsState, type StateActivationPlan, } from './address/addressSettingsXml.js';
 export { createState, createStates, DEFAULT_CREATE_CONCURRENCY, planStateCreation, type CreateStateOptions, type CreateStatesOptions, type StateCreationOutcome, type StateCreationPlan, type StateCreationStatus, } from './address/createStates.js';
 export { classifyNewStateResponse, fillNewStateForm, parseNewStateForm, type NewStateForm, type NewStateResponseClassification, type NewStateResponseStatus, } from './address/newStateForm.js';
+export { fetchIsoCodesStateDefinitions, ISO_CODES_SOURCE_IDS, ISO_CODES_SOURCES, subdivisionsToStateDefinitions, type FetchIsoCodesStateDefinitionsOptions, type IsoCodesStateDefinitions, } from './address/isoCodes/index.js';
+export type { IsoCodesFetchOptions, IsoCodesSource, IsoCodesSourceId, IsoCodesSubdivision, } from './address/isoCodes/types.js';
 export { isLoginPage, NEW_STATE_FORM_PATH, openSetupSession, SetupSession, SetupTransportError, type OpenSetupSessionOptions, type SetupResponse, } from './address/setupSession.js';
 export { filterStateDefinitions, formatStateKey, parseStateDefinitions, type StateDefinition, } from './address/stateDefinitions.js';

package/lib/index.js

@@ -23,6 +23,7 @@ export { deployAddressSettingsXml, retrieveAddressSettingsXml, } from './address
 export { parseAddressSettingsXml, planStateActivation, } from './address/addressSettingsXml.js';
 export { createState, createStates, DEFAULT_CREATE_CONCURRENCY, planStateCreation, } from './address/createStates.js';
 export { classifyNewStateResponse, fillNewStateForm, parseNewStateForm, } from './address/newStateForm.js';
+export { fetchIsoCodesStateDefinitions, ISO_CODES_SOURCE_IDS, ISO_CODES_SOURCES, subdivisionsToStateDefinitions, } from './address/isoCodes/index.js';
 export { isLoginPage, NEW_STATE_FORM_PATH, openSetupSession, SetupSession, SetupTransportError, } from './address/setupSession.js';
 export { filterStateDefinitions, formatStateKey, parseStateDefinitions, } from './address/stateDefinitions.js';
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,mGAAmG;AACnG,iGAAiG;AACjG,qGAAqG;AACrG,kGAAkG;AAClG,qFAAqF;AAErF,OAAO,EAAE,cAAc,EAAyD,MAAM,6BAA6B,CAAC;AACpH,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAI3B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,mBAAmB,GAKpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,0BAA0B,EAC1B,iBAAiB,GAMlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,GAIlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,GAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,qBAAqB,GAEtB,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,mGAAmG;AACnG,iGAAiG;AACjG,qGAAqG;AACrG,kGAAkG;AAClG,qFAAqF;AAErF,OAAO,EAAE,cAAc,EAAyD,MAAM,6BAA6B,CAAC;AACpH,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAI3B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,mBAAmB,GAKpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,0BAA0B,EAC1B,iBAAiB,GAMlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,GAIlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,iBAAiB,EACjB,8BAA8B,GAG/B,MAAM,6BAA6B,CAAC;AAOrC,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,GAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,qBAAqB,GAEtB,MAAM,+BAA+B,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@simplysf/simply-settings-core",
   "description": "State and Country/Territory picklist automation (create states via the Setup form, activate them via AddressSettings) — the library layer behind @simplysf/simply-settings, published separately for direct consumption (e.g. editor tooling, CI scripts) without the CLI framework",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "author": "@ClayChipps",
   "homepage": "https://github.com/SimplySF/simply-plugins-core",
   "bugs": "https://github.com/SimplySF/simply-plugins-core/issues",
@@ -135,5 +135,5 @@
       "output": []
     }
   },
-  "gitHead": "ed7d52c5f36bfad3ee2ec413b60c64c7fff8745d"
+  "gitHead": "8ce681b40ae8e7adb25f792c279ceb20f5cdfbdd"
 }