sf-plugin-cms 0.4.0 → 0.5.0

package/lib/transport/experimental-media.js

@@ -0,0 +1,224 @@
+import { createHash } from 'node:crypto';
+import { domainToASCII } from 'node:url';
+import { open, unlink } from 'node:fs/promises';
+import { Readable } from 'node:stream';
+import { redactSecrets } from './redact-secrets.js';
+const MEDIA_SUFFIX = 'file.force.com';
+const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+const IMAGE_SIGNATURES = new Map([
+    ['image/gif', [0x47, 0x49, 0x46, 0x38]],
+    ['image/jpeg', [255, 216, 255]],
+    ['image/png', [137, 80, 78, 71, 13, 10, 26, 10]],
+    ['image/webp', [0x52, 0x49, 0x46, 0x46]],
+]);
+const MIME_EXTENSIONS = {
+    'image/gif': ['gif'],
+    'image/jpeg': ['jpeg', 'jpg'],
+    'image/png': ['png'],
+    'image/webp': ['webp'],
+};
+export const EXPERIMENTAL_MEDIA_POLICY = {
+    approvedRedirectSuffix: MEDIA_SUFFIX,
+    maxRedirects: 3,
+    perImageBytes: 10 * 1024 * 1024,
+    totalBytes: 50 * 1024 * 1024,
+};
+function safeSecondaryDiagnostic(error) {
+    const message = redactSecrets(error instanceof Error ? error.message : String(error));
+    return message.slice(0, 256);
+}
+async function cleanupFailedDownload(handle, outputFile, primary, unlinkFile, closeAttempted) {
+    const secondary = [];
+    if (!closeAttempted) {
+        try {
+            await handle.close();
+        }
+        catch (error) {
+            secondary.push(`close: ${safeSecondaryDiagnostic(error)}`);
+        }
+    }
+    try {
+        await unlinkFile(outputFile);
+    }
+    catch (error) {
+        secondary.push(`unlink: ${safeSecondaryDiagnostic(error)}`);
+    }
+    if (primary instanceof Error && secondary.length > 0) {
+        Object.defineProperty(primary, 'cleanupDiagnostics', {
+            configurable: true,
+            enumerable: false,
+            value: secondary,
+        });
+    }
+    throw primary;
+}
+function normalizedHost(url) {
+    const host = domainToASCII(url.hostname.toLowerCase().replace(/\.$/u, ''));
+    if (host.length === 0)
+        throw new TypeError('Experimental media URL hostname is invalid');
+    return host;
+}
+function assertSafeHttps(url) {
+    if (url.protocol !== 'https:' || url.username !== '' || url.password !== '') {
+        throw new TypeError('Experimental media transport requires HTTPS without userinfo');
+    }
+    if (url.port !== '' && url.port !== '443') {
+        throw new TypeError('Experimental media transport permits only the default HTTPS port');
+    }
+    return normalizedHost(url);
+}
+export function isApprovedSalesforceMediaUrl(value) {
+    try {
+        const url = value instanceof URL ? value : new URL(value);
+        const host = assertSafeHttps(url);
+        return host.endsWith(`.${MEDIA_SUFFIX}`) && host.length > MEDIA_SUFFIX.length + 1;
+    }
+    catch {
+        return false;
+    }
+}
+function sameOrigin(left, right) {
+    return assertSafeHttps(left) === assertSafeHttps(right) && left.port === right.port;
+}
+function extension(fileName) {
+    const last = fileName.split('.').at(-1)?.toLowerCase();
+    if (last === undefined || last === fileName.toLowerCase())
+        return '';
+    return last;
+}
+function assertImageEvidence(bytes, mimeType, fileName) {
+    const allowed = MIME_EXTENSIONS[mimeType];
+    const signature = IMAGE_SIGNATURES.get(mimeType);
+    if (allowed === undefined || signature === undefined) {
+        throw new TypeError(`Experimental media MIME type is unsupported: ${mimeType}`);
+    }
+    const fileExtension = extension(fileName);
+    if (fileExtension.length > 0 && !allowed.includes(fileExtension)) {
+        throw new TypeError('Experimental media filename extension does not match MIME type');
+    }
+    if (!signature.every((byte, index) => bytes[index] === byte)) {
+        throw new TypeError('Experimental media signature does not match MIME type');
+    }
+    if (mimeType === 'image/webp' && bytes.subarray(8, 12).toString('ascii') !== 'WEBP') {
+        throw new TypeError('Experimental media WebP signature is invalid');
+    }
+}
+export async function downloadExperimentalCmsMedia(source, options) {
+    const instance = new URL(options.instanceUrl);
+    assertSafeHttps(instance);
+    if (!sameOrigin(source, instance)) {
+        throw new TypeError('Experimental media source must use the authenticated Salesforce instance');
+    }
+    if (!source.pathname.startsWith('/cms/media/')) {
+        throw new TypeError('Experimental media source path is unsupported');
+    }
+    const fetcher = options.fetch ?? fetch;
+    let current = source;
+    let response;
+    for (let redirects = 0; redirects <= EXPERIMENTAL_MEDIA_POLICY.maxRedirects; redirects += 1) {
+        const onInstance = sameOrigin(current, instance);
+        if (!onInstance && !isApprovedSalesforceMediaUrl(current)) {
+            throw new TypeError('Experimental media redirect target is outside the approved Salesforce class');
+        }
+        response = await fetcher(current, {
+            headers: {
+                accept: 'image/*,application/octet-stream;q=0.8',
+                authorization: `Bearer ${options.accessToken}`,
+            },
+            redirect: 'manual',
+        });
+        if (!REDIRECT_STATUSES.has(response.status))
+            break;
+        if (redirects === EXPERIMENTAL_MEDIA_POLICY.maxRedirects) {
+            throw new TypeError('Experimental media redirect count exceeded');
+        }
+        const location = response.headers.get('location');
+        if (location === null)
+            throw new TypeError('Experimental media redirect has no location');
+        const target = new URL(location, current);
+        assertSafeHttps(target);
+        if (!isApprovedSalesforceMediaUrl(target) && !sameOrigin(target, instance)) {
+            throw new TypeError('Experimental media redirect target is outside the approved Salesforce class');
+        }
+        current = target;
+    }
+    if (response === undefined || !response.ok || response.body === null) {
+        throw new TypeError(`Experimental media request failed with status ${response?.status ?? 0}`);
+    }
+    const responseType = response.headers.get('content-type')?.split(';', 1)[0].trim().toLowerCase();
+    if (responseType === undefined || responseType === 'text/html' || responseType.includes('json')) {
+        throw new TypeError('Experimental media response is not binary image content');
+    }
+    if (responseType !== options.expectedMimeType) {
+        throw new TypeError('Experimental media response MIME type changed');
+    }
+    const declaredLengthText = response.headers.get('content-length');
+    const declaredLength = declaredLengthText === null ? undefined : Number(declaredLengthText);
+    const configuredLimit = options.maxBytes ?? EXPERIMENTAL_MEDIA_POLICY.perImageBytes;
+    if (!Number.isSafeInteger(configuredLimit) || configuredLimit <= 0) {
+        throw new TypeError('Experimental media byte cap must be a positive safe integer');
+    }
+    const limit = Math.min(configuredLimit, EXPERIMENTAL_MEDIA_POLICY.perImageBytes);
+    if (declaredLength !== undefined &&
+        (!Number.isSafeInteger(declaredLength) || declaredLength < 0 || declaredLength > limit)) {
+        throw new TypeError('Experimental media Content-Length is invalid or exceeds the cap');
+    }
+    const fileName = source.searchParams.get('fileName');
+    if (fileName === null ||
+        fileName.length === 0 ||
+        fileName.includes('/') ||
+        fileName.includes('\\')) {
+        throw new TypeError('Experimental media filename is invalid');
+    }
+    const md5 = createHash('md5');
+    const sha256 = createHash('sha256');
+    const prefix = [];
+    let prefixLength = 0;
+    let bytes = 0;
+    const handle = await (options.openFile ?? (async (file) => open(file, 'wx')))(options.outputFile);
+    const unlinkFile = options.unlinkFile ?? unlink;
+    let closeAttempted = false;
+    try {
+        for await (const chunkValue of Readable.fromWeb(response.body)) {
+            const chunk = Buffer.isBuffer(chunkValue)
+                ? chunkValue
+                : Buffer.from(chunkValue);
+            if (chunk.length > limit - bytes) {
+                throw new TypeError('Experimental media response exceeds the byte cap');
+            }
+            bytes += chunk.length;
+            if (prefixLength < 12) {
+                const selected = chunk.subarray(0, 12 - prefixLength);
+                prefix.push(selected);
+                prefixLength += selected.length;
+            }
+            md5.update(chunk);
+            sha256.update(chunk);
+            await handle.write(chunk);
+        }
+        if (declaredLength !== undefined && bytes !== declaredLength) {
+            throw new TypeError('Experimental media byte count differs from Content-Length');
+        }
+        if (bytes !== options.expectedSize) {
+            throw new TypeError('Experimental media byte count differs from authoring metadata');
+        }
+        const actualMd5 = md5.digest('hex');
+        if (actualMd5 !== options.expectedMd5.toLowerCase()) {
+            throw new TypeError('Experimental media MD5 differs from the authoring URL');
+        }
+        assertImageEvidence(Buffer.concat(prefix), options.expectedMimeType, fileName);
+        closeAttempted = true;
+        await handle.close();
+        return {
+            bytes,
+            ...(declaredLength === undefined ? {} : { contentLength: declaredLength }),
+            md5: actualMd5,
+            mimeType: options.expectedMimeType,
+            sha256: sha256.digest('hex'),
+        };
+    }
+    catch (error) {
+        return cleanupFailedDownload(handle, options.outputFile, error, unlinkFile, closeAttempted);
+    }
+}
+//# sourceMappingURL=experimental-media.js.map

package/lib/transport/experimental-media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"experimental-media.js","sourceRoot":"","sources":["../../src/transport/experimental-media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC7D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAA4B;IAC1D,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;CACzC,CAAC,CAAC;AACH,MAAM,eAAe,GAAgD;IACnE,WAAW,EAAE,CAAC,KAAK,CAAC;IACpB,YAAY,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;IAC7B,WAAW,EAAE,CAAC,KAAK,CAAC;IACpB,YAAY,EAAE,CAAC,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,sBAAsB,EAAE,YAAY;IACpC,YAAY,EAAE,CAAC;IACf,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC/B,UAAU,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;CACpB,CAAC;AAyBX,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,MAAmC,EACnC,UAAkB,EAClB,OAAgB,EAChB,UAA2C,EAC3C,cAAuB;IAEvB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,UAAU,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,SAAS,CAAC,IAAI,CAAC,WAAW,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,YAAY,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,oBAAoB,EAAE;YACnD,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ;IAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,GAAQ;IAC/B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1C,MAAM,IAAI,SAAS,CAAC,kEAAkE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAmB;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAS,EAAE,KAAU;IACvC,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;AACtF,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACvD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,QAAgB,EAAE,QAAgB;IAC5E,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,gDAAgD,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;QACpF,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAW,EACX,OAAyC;IAEzC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,0EAA0E,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,IAAI,QAA8B,CAAC;IACnC,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,IAAI,yBAAyB,CAAC,YAAY,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QAC5F,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE;YAChC,OAAO,EAAE;gBACP,MAAM,EAAE,wCAAwC;gBAChD,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE;aAC/C;YACD,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM;QACnD,IAAI,SAAS,KAAK,yBAAyB,CAAC,YAAY,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,eAAe,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,iDAAiD,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjG,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,WAAW,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,YAAY,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5F,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,yBAAyB,CAAC,aAAa,CAAC;IACpF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,yBAAyB,CAAC,aAAa,CAAC,CAAC;IACjF,IACE,cAAc,KAAK,SAAS;QAC5B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,KAAK,CAAC,EACvF,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,IACE,QAAQ,KAAK,IAAI;QACjB,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EACvB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAa,CAAC,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACvC,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAwB,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC;gBACjC,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;YAC1E,CAAC;YACD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtB,YAAY,IAAI,QAAQ,CAAC,MAAM,CAAC;YAClC,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,cAAc,KAAK,SAAS,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7D,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,SAAS,KAAK,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;QAC/E,CAAC;QACD,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC/E,cAAc,GAAG,IAAI,CAAC;QACtB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO;YACL,KAAK;YACL,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;YAC1E,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,OAAO,CAAC,gBAAgB;YAClC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC"}

package/lib/transport/json-request.d.ts

@@ -16,10 +16,18 @@ export type JsonSuccess<T> = {
 };
 type RequestConnection = Pick<Connection, 'request'>;
 export declare class CmsRequestError extends Error {
+    readonly errorCode?: string;
+    readonly errorEntryCount: number;
     readonly operationKey: SelectedOperation['localKey'];
+    readonly responseMessage?: string;
     readonly status?: number;
-    constructor(operationKey: SelectedOperation['localKey'], message: string, status?: number);
+    constructor(operationKey: SelectedOperation['localKey'], message: string, status?: number, evidence?: ErrorEvidence | string);
 }
+type ErrorEvidence = {
+    errorCode?: string;
+    errorEntryCount?: number;
+    responseMessage?: string;
+};
 export declare function buildOperationUrl(operation: SelectedOperation, values?: JsonRequestValues): string;
 export declare function requestJson<T>(connection: RequestConnection, operation: SelectedOperation, values?: JsonRequestValues, options?: JsonRequestOptions): Promise<JsonSuccess<T>>;
 export declare function getSelectedOperation(operationKey: SelectedOperation['localKey']): SelectedOperation;

package/lib/transport/json-request.js

@@ -2,12 +2,22 @@ import { SELECTED_OPERATIONS } from '../generated/operations.js';
 import { redactSecrets } from './redact-secrets.js';
 const DEFAULT_TIMEOUT_MS = 30_000;
 export class CmsRequestError extends Error {
+    errorCode;
+    errorEntryCount;
     operationKey;
+    responseMessage;
     status;
-    constructor(operationKey, message, status) {
-        super(message);
+    constructor(operationKey, message, status, evidence = {}) {
+        const normalizedEvidence = typeof evidence === 'string' ? { errorCode: evidence } : evidence;
+        super(redactSecrets(message));
         this.name = 'CmsRequestError';
+        this.errorCode = normalizedEvidence.errorCode;
+        this.errorEntryCount = normalizedEvidence.errorEntryCount ?? 0;
         this.operationKey = operationKey;
+        this.responseMessage =
+            normalizedEvidence.responseMessage === undefined
+                ? undefined
+                : redactSecrets(normalizedEvidence.responseMessage);
         this.status = status;
     }
 }
@@ -28,6 +38,21 @@ function errorStatus(error) {
         return 404;
     return undefined;
 }
+function errorEvidence(error) {
+    if (!isRecord(error))
+        return { errorEntryCount: 0 };
+    const data = error.data;
+    const entries = Array.isArray(data) ? data : [data];
+    if (entries.length !== 1 || !isRecord(entries[0])) {
+        return { errorEntryCount: Array.isArray(data) ? data.length : 0 };
+    }
+    const entry = entries[0];
+    return {
+        ...(typeof entry.errorCode === 'string' ? { errorCode: entry.errorCode } : {}),
+        errorEntryCount: 1,
+        ...(typeof entry.message === 'string' ? { responseMessage: redactSecrets(entry.message) } : {}),
+    };
+}
 function safeErrorMessage(error) {
     const message = error instanceof Error ? error.message : String(error);
     return redactSecrets(message || 'CMS request failed');
@@ -119,8 +144,10 @@ export async function requestJson(connection, operation, values = {}, options =
         return { data, operationKey: operation.localKey, status: successStatus(operation) };
     }
     catch (error) {
+        if (error instanceof CmsRequestError)
+            throw error;
         const message = options.signal?.aborted ? 'CMS request cancelled' : safeErrorMessage(error);
-        throw new CmsRequestError(operation.localKey, message, errorStatus(error));
+        throw new CmsRequestError(operation.localKey, message, errorStatus(error), errorEvidence(error));
     }
     finally {
         options.signal?.removeEventListener('abort', cancel);

package/lib/transport/json-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"json-request.js","sourceRoot":"","sources":["../../src/transport/json-request.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAA0B,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAkCpD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxB,YAAY,CAAgC;IAC5C,MAAM,CAAU;IAEhC,YACE,YAA2C,EAC3C,OAAe,EACf,MAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,GAAG,CAAC;IAC9E,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,WAAW;QAAE,OAAO,GAAG,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,aAAa,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CACtB,SAA4B,EAC5B,IAAY,EACZ,IAAuD,EACvD,KAAc;IAEd,MAAM,KAAK,GACT,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;QAChD,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;QAClD,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC,IAAI,KAAK,cAAc;YACtB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACpB,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,IAAI,eAAe,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAA4B,EAC5B,QAA0B,EAC1B,MAAgC;IAEhC,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,SAAS,CAAC,UAAU;SACjB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;SACtD,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CACtC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,QAAQ,eAAe,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,SAA4B,EAC5B,SAA4B,EAAE;IAE9B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IACvC,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACvD,uBAAuB,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAEzD,MAAM,UAAU,GAAG,SAAS,CAAC,UAAyC,CAAC;IACvE,IAAI,WAAW,GAAW,SAAS,CAAC,IAAI,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;QACjF,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,QAAQ,EAClB,oCAAoC,SAAS,CAAC,IAAI,EAAE,CACrD,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,yBAAyB,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,eAAe,GAAG,UAAU;SAC/B,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,CAAC;SAC9C,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,QAAQ,EAClB,qCAAqC,SAAS,CAAC,IAAI,EAAE,CACtD,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACtC,KAAK,MAAM,IAAI,IAAI,KAA0B;gBAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;AACpE,CAAC;AAED,SAAS,aAAa,CAAC,SAA4B;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/F,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAA6B,EAC7B,SAA4B,EAC5B,SAA4B,EAAE,EAC9B,UAA8B,EAAE;IAEhC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,GAAG,GAAG,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAChC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,EACjC,EAAE,OAAO,EAAE,SAAS,EAAE,CACH,CAAC;IACtB,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5F,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,YAA2C;IAE3C,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC;IACxF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,YAAY,EAAE,sBAAsB,YAAY,EAAE,CAAC,CAAC;IAC9F,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"json-request.js","sourceRoot":"","sources":["../../src/transport/json-request.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAA0B,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAkCpD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxB,SAAS,CAAU;IACnB,eAAe,CAAS;IACxB,YAAY,CAAgC;IAC5C,eAAe,CAAU;IACzB,MAAM,CAAU;IAEhC,YACE,YAA2C,EAC3C,OAAe,EACf,MAAe,EACf,WAAmC,EAAE;QAErC,MAAM,kBAAkB,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7F,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,kBAAkB,CAAC,eAAe,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,eAAe;YAClB,kBAAkB,CAAC,eAAe,KAAK,SAAS;gBAC9C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,aAAa,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,GAAG,CAAC;IAC9E,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,WAAW;QAAE,OAAO,GAAG,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAQD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO;QACL,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,eAAe,EAAE,CAAC;QAClB,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChG,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,aAAa,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CACtB,SAA4B,EAC5B,IAAY,EACZ,IAAuD,EACvD,KAAc;IAEd,MAAM,KAAK,GACT,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;QAChD,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;QAClD,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC,IAAI,KAAK,cAAc;YACtB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACpB,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,IAAI,eAAe,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAA4B,EAC5B,QAA0B,EAC1B,MAAgC;IAEhC,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,SAAS,CAAC,UAAU;SACjB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;SACtD,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CACtC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,QAAQ,eAAe,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,SAA4B,EAC5B,SAA4B,EAAE;IAE9B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IACvC,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACvD,uBAAuB,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAEzD,MAAM,UAAU,GAAG,SAAS,CAAC,UAAyC,CAAC;IACvE,IAAI,WAAW,GAAW,SAAS,CAAC,IAAI,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;QACjF,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,QAAQ,EAClB,oCAAoC,SAAS,CAAC,IAAI,EAAE,CACrD,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,yBAAyB,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,eAAe,GAAG,UAAU;SAC/B,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,CAAC;SAC9C,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,QAAQ,EAClB,qCAAqC,SAAS,CAAC,IAAI,EAAE,CACtD,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACtC,KAAK,MAAM,IAAI,IAAI,KAA0B;gBAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;AACpE,CAAC;AAED,SAAS,aAAa,CAAC,SAA4B;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/F,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAA6B,EAC7B,SAA4B,EAC5B,SAA4B,EAAE,EAC9B,UAA8B,EAAE;IAEhC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,GAAG,GAAG,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAChC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,EACjC,EAAE,OAAO,EAAE,SAAS,EAAE,CACH,CAAC;IACtB,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe;YAAE,MAAM,KAAK,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5F,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,QAAQ,EAClB,OAAO,EACP,WAAW,CAAC,KAAK,CAAC,EAClB,aAAa,CAAC,KAAK,CAAC,CACrB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,YAA2C;IAE3C,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC;IACxF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,YAAY,EAAE,sBAAsB,YAAY,EAAE,CAAC,CAAC;IAC9F,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/lib/transport/multipart-image-create.d.ts

@@ -0,0 +1,28 @@
+import type { Connection } from '@salesforce/core';
+import { type JsonRequestOptions } from './json-request.js';
+export declare const MAX_IMAGE_BYTES: number;
+export type ImageCreateInput = {
+    apiName?: string;
+    contentKey?: string;
+    contentSpaceOrFolderId: string;
+    title: string;
+    urlName?: string;
+};
+export type ManagedContentDocumentBinding = {
+    contentKey: string;
+    managedContentId: string;
+    managedContentVariantId: string;
+};
+export type MultipartImageCreateOptions = JsonRequestOptions & {
+    boundaryFactory?: () => string;
+    maxBoundaryAttempts?: number;
+};
+type RequestConnection = Pick<Connection, 'request'> & Partial<Pick<Connection, 'accessToken' | 'instanceUrl' | 'version'>>;
+type MultipartParts = {
+    body: Buffer;
+    boundary: string;
+    input: Readonly<Record<string, unknown>>;
+};
+export declare function buildImageCreateMultipart(input: ImageCreateInput, filename: string, image: Uint8Array, options?: Pick<MultipartImageCreateOptions, 'boundaryFactory' | 'maxBoundaryAttempts'>): MultipartParts;
+export declare function createImageContent(connection: RequestConnection, input: ImageCreateInput, filename: string, image: Uint8Array, options?: MultipartImageCreateOptions): Promise<ManagedContentDocumentBinding>;
+export {};

package/lib/transport/multipart-image-create.js

@@ -0,0 +1,189 @@
+import { Connection as JsforceConnection } from '@jsforce/jsforce-node';
+import { randomBytes } from 'node:crypto';
+import { CmsRequestError } from './json-request.js';
+import { redactSecrets } from './redact-secrets.js';
+export const MAX_IMAGE_BYTES = 10 * 1024 * 1024;
+const OPERATION_KEY = 'content.create';
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_BOUNDARY_ATTEMPTS = 8;
+const ALLOWED_INPUT_KEYS = new Set([
+    'apiName',
+    'contentKey',
+    'contentSpaceOrFolderId',
+    'title',
+    'urlName',
+]);
+const REQUIRED_RESPONSE_KEYS = [
+    'contentKey',
+    'managedContentId',
+    'managedContentVariantId',
+];
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function errorStatus(error) {
+    if (!isRecord(error))
+        return undefined;
+    for (const key of ['statusCode', 'status']) {
+        const value = error[key];
+        if (typeof value === 'number' && Number.isInteger(value))
+            return value;
+    }
+    return undefined;
+}
+function safeErrorMessage(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return redactSecrets(message || 'CMS image create failed').slice(0, 1024);
+}
+function withoutRefreshReplay(connection) {
+    return connection.accessToken && connection.instanceUrl
+        ? new JsforceConnection({
+            accessToken: connection.accessToken,
+            instanceUrl: connection.instanceUrl,
+            version: connection.version,
+        })
+        : connection;
+}
+function hasControlCharacter(value) {
+    return [...value].some((character) => {
+        const codePoint = character.codePointAt(0) ?? 0;
+        return codePoint <= 31 || codePoint === 127;
+    });
+}
+function assertPlainNonemptyString(value, name) {
+    if (typeof value !== 'string' || value.length === 0 || hasControlCharacter(value)) {
+        throw new CmsRequestError(OPERATION_KEY, `Invalid image create field: ${name}`);
+    }
+}
+function validateInput(input) {
+    if (!isRecord(input)) {
+        throw new CmsRequestError(OPERATION_KEY, 'Image create input must be an object');
+    }
+    for (const key of Object.keys(input)) {
+        if (!ALLOWED_INPUT_KEYS.has(key)) {
+            throw new CmsRequestError(OPERATION_KEY, `Unsupported image create field: ${key}`);
+        }
+    }
+    assertPlainNonemptyString(input.contentSpaceOrFolderId, 'contentSpaceOrFolderId');
+    assertPlainNonemptyString(input.title, 'title');
+    for (const key of ['apiName', 'contentKey', 'urlName']) {
+        if (input[key] !== undefined)
+            assertPlainNonemptyString(input[key], key);
+    }
+}
+function validateFilename(filename) {
+    if (filename.length === 0 ||
+        filename === '.' ||
+        filename === '..' ||
+        filename.includes('/') ||
+        filename.includes('\\') ||
+        filename.includes('"') ||
+        hasControlCharacter(filename)) {
+        throw new CmsRequestError(OPERATION_KEY, 'Invalid image filename');
+    }
+}
+function defaultBoundaryFactory() {
+    return `sf-plugin-cms-${randomBytes(24).toString('hex')}`;
+}
+function validateBoundary(boundary) {
+    if (!/^[A-Za-z0-9'()+_,./:=?-]{1,70}$/u.test(boundary)) {
+        throw new CmsRequestError(OPERATION_KEY, 'Invalid multipart boundary');
+    }
+}
+function containsBoundary(buffer, boundary) {
+    return buffer.includes(Buffer.from(boundary, 'ascii'));
+}
+function selectBoundary(json, image, factory, maxAttempts) {
+    if (!Number.isInteger(maxAttempts) || maxAttempts <= 0) {
+        throw new CmsRequestError(OPERATION_KEY, 'Boundary attempt limit must be a positive integer');
+    }
+    for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
+        const boundary = factory();
+        validateBoundary(boundary);
+        if (!containsBoundary(json, boundary) && !containsBoundary(image, boundary))
+            return boundary;
+    }
+    throw new CmsRequestError(OPERATION_KEY, 'Unable to generate collision-free multipart boundary');
+}
+export function buildImageCreateMultipart(input, filename, image, options = {}) {
+    validateInput(input);
+    validateFilename(filename);
+    if (!(image instanceof Uint8Array)) {
+        throw new CmsRequestError(OPERATION_KEY, 'Image data must be binary');
+    }
+    if (image.byteLength === 0) {
+        throw new CmsRequestError(OPERATION_KEY, 'Image data must not be empty');
+    }
+    if (image.byteLength > MAX_IMAGE_BYTES) {
+        throw new CmsRequestError(OPERATION_KEY, `Image exceeds ${MAX_IMAGE_BYTES} byte limit`);
+    }
+    const managedContentInput = {
+        ...input,
+        contentType: 'sfdc_cms__image',
+        contentBody: { 'sfdc_cms:media': { source: { type: 'file' } } },
+    };
+    const json = Buffer.from(JSON.stringify(managedContentInput), 'utf8');
+    const binary = Buffer.from(image.buffer, image.byteOffset, image.byteLength);
+    const boundary = selectBoundary(json, binary, options.boundaryFactory ?? defaultBoundaryFactory, options.maxBoundaryAttempts ?? DEFAULT_BOUNDARY_ATTEMPTS);
+    const firstHeader = Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="ManagedContentInputParam"\r\nContent-Type: application/json; charset=UTF-8\r\n\r\n`, 'ascii');
+    const secondHeader = Buffer.from(`\r\n--${boundary}\r\nContent-Disposition: form-data; name="contentData"; filename="${filename}"\r\nContent-Type: application/octet-stream; charset=ISO-8859-1\r\n\r\n`, 'ascii');
+    const closing = Buffer.from(`\r\n--${boundary}--\r\n`, 'ascii');
+    return {
+        body: Buffer.concat([firstHeader, json, secondHeader, binary, closing]),
+        boundary,
+        input: managedContentInput,
+    };
+}
+function parseManagedContentDocument(value) {
+    if (!isRecord(value)) {
+        throw new CmsRequestError(OPERATION_KEY, 'Malformed CMS image create response');
+    }
+    for (const key of REQUIRED_RESPONSE_KEYS) {
+        if (typeof value[key] !== 'string' || value[key].length === 0) {
+            throw new CmsRequestError(OPERATION_KEY, 'Malformed CMS image create response');
+        }
+    }
+    return {
+        contentKey: value.contentKey,
+        managedContentId: value.managedContentId,
+        managedContentVariantId: value.managedContentVariantId,
+    };
+}
+export async function createImageContent(connection, input, filename, image, options = {}) {
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+        throw new CmsRequestError(OPERATION_KEY, 'Request timeout must be a positive number');
+    }
+    if (options.signal?.aborted) {
+        throw new CmsRequestError(OPERATION_KEY, 'CMS image create cancelled');
+    }
+    const multipart = buildImageCreateMultipart(input, filename, image, options);
+    const request = withoutRefreshReplay(connection).request({
+        body: multipart.body,
+        headers: {
+            'content-length': String(multipart.body.byteLength),
+            'content-type': `multipart/form-data; boundary=${multipart.boundary}`,
+        },
+        method: 'POST',
+        url: '/connect/cms/contents',
+    }, { retry: { maxRetries: 0 }, timeout: timeoutMs });
+    const cancel = () => {
+        request.stream().destroy(new Error('CMS image create cancelled'));
+    };
+    options.signal?.addEventListener('abort', cancel, { once: true });
+    try {
+        return parseManagedContentDocument(await request);
+    }
+    catch (error) {
+        if (error instanceof CmsRequestError)
+            throw error;
+        const message = options.signal?.aborted
+            ? 'CMS image create cancelled'
+            : safeErrorMessage(error);
+        throw new CmsRequestError(OPERATION_KEY, message, errorStatus(error));
+    }
+    finally {
+        options.signal?.removeEventListener('abort', cancel);
+    }
+}
+//# sourceMappingURL=multipart-image-create.js.map

package/lib/transport/multipart-image-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart-image-create.js","sourceRoot":"","sources":["../../src/transport/multipart-image-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,eAAe,EAA2B,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAkChD,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,SAAS;IACT,YAAY;IACZ,wBAAwB;IACxB,OAAO;IACP,SAAS;CACV,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG;IAC7B,YAAY;IACZ,kBAAkB;IAClB,yBAAyB;CACjB,CAAC;AAEX,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,aAAa,CAAC,OAAO,IAAI,yBAAyB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,oBAAoB,CAAC,UAA6B;IACzD,OAAO,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW;QACrD,CAAC,CAAC,IAAI,iBAAiB,CAAC;YACpB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,OAAO,EAAE,UAAU,CAAC,OAAO;SAC5B,CAAC;QACJ,CAAC,CAAC,UAAU,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACnC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,SAAS,IAAI,EAAE,IAAI,SAAS,KAAK,GAAG,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,IAAY;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,+BAA+B,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAuB;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mCAAmC,GAAG,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,yBAAyB,CAAC,KAAK,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IAClF,yBAAyB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAU,EAAE,CAAC;QAChE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,QAAQ,KAAK,GAAG;QAChB,QAAQ,KAAK,IAAI;QACjB,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvB,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,mBAAmB,CAAC,QAAQ,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO,iBAAiB,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,QAAgB;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CACrB,IAAY,EACZ,KAAa,EACb,OAAqB,EACrB,WAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,mDAAmD,CAAC,CAAC;IAChG,CAAC;IACD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;QAC3B,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,sDAAsD,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAuB,EACvB,QAAgB,EAChB,KAAiB,EACjB,UAAwF,EAAE;IAE1F,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,eAAe,EAAE,CAAC;QACvC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,iBAAiB,eAAe,aAAa,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,mBAAmB,GAAG;QAC1B,GAAG,KAAK;QACR,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;KACvD,CAAC;IACX,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,cAAc,CAC7B,IAAI,EACJ,MAAM,EACN,OAAO,CAAC,eAAe,IAAI,sBAAsB,EACjD,OAAO,CAAC,mBAAmB,IAAI,yBAAyB,CACzD,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAC7B,KAAK,QAAQ,8HAA8H,EAC3I,OAAO,CACR,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAC9B,SAAS,QAAQ,qEAAqE,QAAQ,yEAAyE,EACvK,OAAO,CACR,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,QAAQ,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEhE,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACvE,QAAQ;QACR,KAAK,EAAE,mBAAmB;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;IAClF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAoB;QACtC,gBAAgB,EAAE,KAAK,CAAC,gBAA0B;QAClD,uBAAuB,EAAE,KAAK,CAAC,uBAAiC;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA6B,EAC7B,KAAuB,EACvB,QAAgB,EAChB,KAAiB,EACjB,UAAuC,EAAE;IAEzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,2CAA2C,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC,OAAO,CACtD;QACE,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,OAAO,EAAE;YACP,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;YACnD,cAAc,EAAE,iCAAiC,SAAS,CAAC,QAAQ,EAAE;SACtE;QACD,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,uBAAuB;KAC7B,EACD,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CACvB,CAAC;IAC5B,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,CAAC;QACH,OAAO,2BAA2B,CAAC,MAAM,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe;YAAE,MAAM,KAAK,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO;YACrC,CAAC,CAAC,4BAA4B;YAC9B,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}

package/messages/cms.import.workspace.md

@@ -28,6 +28,8 @@ Validates the complete source workspace export locally before any org request, s
 
 `--editable-dir` requires `--native-copy-map`. `--source-dir` must remain the unchanged integrity baseline; the companion may change only declared literal HTML files and is not itself an export package. The complete baseline, including unselected items, is integrity-validated. Structured/package reference and non-HTML metadata guards remain active, but native-copy and edited `rawHtml` are treated as opaque literal content through Phase 7. Embedded dependencies, media, references, dynamic syntax, and URLs are not discovered, resolved, rewritten, sanitized, or scanned. Dry-run success is not apply readiness or dependency/safety proof.
 
+`--email-fragment-map` rows contain exact `source` and `target` objects. `source` must be `{ "family": "cms", "type": "emailFragment", "apiName": "..." }` and resolve exactly once to `sfdc_cms__emailFragment`; missing, ambiguous, wrong-type, and duplicate selections are rejected. `target` contains fresh `contentKey` and `apiName`. Source content keys remain provenance rather than selectors.
+
 JSON uses `sf-cms-workspace-import@1`. Package integrity and the independently declared manifest major are validated before org access. Exit 0 means success, 2 means partial with a usable result, and 1 means failed or blocked.
 
 # flags.target-org.summary
@@ -58,6 +60,10 @@ Unchanged source workspace export containing manifest.json and items/. The edita
 
 JSON array selecting eligible native raw-HTML email/template variants by sourceContentKey and language, with fresh apiName and urlName values. CREATE uses server-generated keys; destination name availability is not prevalidated.
 
+# flags.email-fragment-map.summary
+
+JSON array selecting exact typed cms/emailFragment API names with fresh target contentKey and apiName values. Source content keys remain provenance.
+
 # flags.editable-dir.summary
 
 Verified HTML-only companion for --native-copy-map. Requires the unchanged --source-dir baseline; opaque rawHtml is not dependency-resolved, sanitized, or scanned through Phase 7.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sf-plugin-cms",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Salesforce CLI plugin for Marketing Cloud CMS workspace export and create-only import",
   "author": {
     "name": "Jörn Berkefeld",