@lepsto/sdk-app 85.0.1 → 87.1.0

package/dist/index.js

@@ -1,4 +1,4 @@
-import { bindings } from './chunk-HRKHYP5B.js';
+import { bindings } from './chunk-EMK3O6JA.js';
 
 // src/runtime/errors.ts
 var ACCESS_DENIED_CODES = /* @__PURE__ */ new Set([
@@ -35,11 +35,15 @@ function isAccessDenied(err) {
 }
 
 // src/runtime/csrf.ts
-var CSRF_COOKIE = "lessly_csrf";
+var CSRF_COOKIES = ["lepsto_csrf", "lessly_csrf"];
 function readCsrfCookie() {
   if (typeof document === "undefined" || !document) return null;
-  const match = document.cookie.match(new RegExp(`(?:^|; )${CSRF_COOKIE}=([^;]*)`));
-  return match ? decodeURIComponent(match[1]) : null;
+  for (const name of CSRF_COOKIES) {
+    const match = document.cookie.match(new RegExp(`(?:^|; )${name}=([^;]*)`));
+    const value = match ? decodeURIComponent(match[1]) : "";
+    if (value) return value;
+  }
+  return null;
 }
 
 // src/runtime/request.ts
@@ -125,7 +129,7 @@ async function executeRequest(opts, binding, input) {
       throw new LesslyApiError(
         0,
         "csrf_cookie_missing",
-        `CSRF cookie "lessly_csrf" is missing; the session must be re-established before mutating requests (${binding.method} ${binding.path}).`,
+        `CSRF cookie "lepsto_csrf" (or the legacy "lessly_csrf") is missing; the session must be re-established before mutating requests (${binding.method} ${binding.path}).`,
         null
       );
     }
@@ -807,7 +811,7 @@ var operations = {
   "workflow_health_list": "read",
   "workflow_health_ping": "read",
   "workflow_killswitch_get": "read",
-  "workflow_killswitch_set": "write",
+  "workflow_killswitch_set": "admin",
   "workflow_run_cancel": "write",
   "workflow_run_get": "read",
   "workflow_run_list": "read",
@@ -822,7 +826,7 @@ var operations = {
   "workflow_version_list": "read",
   "workflow_wait_get": "read",
   "workflow_wait_list": "read",
-  "workflow_wait_list_all": "read",
+  "workflow_wait_list_all": "admin",
   "workflow_wait_resolve": "write"
 };
 var compositions = {