@grupolapa/desarrollos-sdk 0.3.0 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +32 -4
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -34,15 +34,43 @@ OpenAPI metadata is available at:
|
|
|
34
34
|
https://grupolapa.com/api/public/v1/desarrollos/openapi.json
|
|
35
35
|
```
|
|
36
36
|
|
|
37
|
-
|
|
38
|
-
|
|
37
|
+
Building a partner website that hosts the configurable cotizador? Read this
|
|
38
|
+
single self-contained guide; it needs no other document:
|
|
39
|
+
|
|
40
|
+
```txt
|
|
41
|
+
https://grupolapa.com/api/public/v1/desarrollos/partner-agent.json
|
|
42
|
+
```
|
|
43
|
+
|
|
44
|
+
It covers environment setup, the journey call order, every error code, the
|
|
45
|
+
frozen UONDR embed protocol `1.0` contract, and the host page requirements.
|
|
46
|
+
|
|
47
|
+
Maintaining UONDR itself uses the cross-project contract reference:
|
|
39
48
|
|
|
40
49
|
```txt
|
|
41
50
|
https://grupolapa.com/api/public/v1/desarrollos/uondr-agent.json
|
|
42
51
|
```
|
|
43
52
|
|
|
44
|
-
|
|
45
|
-
|
|
53
|
+
## Embed Protocol
|
|
54
|
+
|
|
55
|
+
`@grupolapa/desarrollos-sdk/embed` carries the iframe contract shared with
|
|
56
|
+
UONDR. `UONDR_EMBED_PROTOCOL_CONTRACT` is a frozen literal mirrored
|
|
57
|
+
byte-for-byte in the UONDR repository and verified by contract tests in both;
|
|
58
|
+
`UONDR_EMBED_PROTOCOL_CONTRACT_DIGEST` lets a consumer confirm it matches the
|
|
59
|
+
deployed guide.
|
|
60
|
+
|
|
61
|
+
```ts
|
|
62
|
+
import {
|
|
63
|
+
createUondrCommand,
|
|
64
|
+
postUondrCommand,
|
|
65
|
+
UondrEventGuard,
|
|
66
|
+
UONDR_EMBED_PROTOCOL_CONTRACT,
|
|
67
|
+
UONDR_EMBED_PROTOCOL_CONTRACT_DIGEST,
|
|
68
|
+
} from "@grupolapa/desarrollos-sdk/embed";
|
|
69
|
+
```
|
|
70
|
+
|
|
71
|
+
Never post to a wildcard target origin. Derive it from the `embedUrl` Lapa
|
|
72
|
+
returns, and note that the configurator resolves its parent origin from
|
|
73
|
+
`document.referrer`, so the host page must not send a strict `Referrer-Policy`.
|
|
46
74
|
|
|
47
75
|
## Browser Reads and Quotes
|
|
48
76
|
|