@lepsto/sdk-app 87.0.1 → 87.2.0

package/dist/_types/index.d.ts

@@ -3,6 +3,7 @@ export type { LesslyClientBase } from './runtime/createLesslyApp.js';
 export { connectStream } from './runtime/connectStream.js';
 export { LesslyApiError, isAccessDenied } from './runtime/errors.js';
 export { accessReason } from './runtime/access-reason.js';
+export { platformApiBaseUrl } from './runtime/platform-base-url.js';
 export { operations } from './runtime/operations.js';
 export { compositions } from './runtime/compositions.js';
 export type { LesslyAppOptions, HttpMethod, Binding, BindingsMap, ParamSpec, ParamIn, ToolLevel, ToolComposition, Operation, } from './runtime/types.js';

package/dist/_types/runtime/platform-base-url.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The platform API origin for the host this document is served on — `https://api.<registrable
+ * domain>` — so an App built ONCE keeps pointing at the right API after the platform moves from
+ * `lessly` to `lepsto`, with no rebuild on the cutover night. On a `lessly` host the result is
+ * byte-identical to the value Apps hardcode today, so adopting it is inert until the move.
+ *
+ * Additive and entirely opt-in: `LesslyAppOptions.baseUrl` stays REQUIRED and this SDK never
+ * calls this helper on a caller's behalf. It is something an App may pass in
+ * (`createLesslyApp({ baseUrl: platformApiBaseUrl(), ... })`), not a default.
+ *
+ * @param fallback returned instead of throwing when the host is not a recognised platform host,
+ *   or when there is no `location` at all (SSR, Node, tests).
+ * @throws when the host is unrecognised (or absent) and no `fallback` was passed. The message
+ *   names what was found and what is accepted.
+ */
+export declare function platformApiBaseUrl(fallback?: string): string;

package/dist/index.cjs

@@ -35,11 +35,15 @@ function isAccessDenied(err) {
 }
 
 // src/runtime/csrf.ts
-var CSRF_COOKIE = "lessly_csrf";
+var CSRF_COOKIES = ["lepsto_csrf", "lessly_csrf"];
 function readCsrfCookie() {
   if (typeof document === "undefined" || !document) return null;
-  const match = document.cookie.match(new RegExp(`(?:^|; )${CSRF_COOKIE}=([^;]*)`));
-  return match ? decodeURIComponent(match[1]) : null;
+  for (const name of CSRF_COOKIES) {
+    const match = document.cookie.match(new RegExp(`(?:^|; )${name}=([^;]*)`));
+    const value = match ? decodeURIComponent(match[1]) : "";
+    if (value) return value;
+  }
+  return null;
 }
 
 // src/runtime/request.ts
@@ -125,7 +129,7 @@ async function executeRequest(opts, binding, input) {
       throw new LesslyApiError(
         0,
         "csrf_cookie_missing",
-        `CSRF cookie "lessly_csrf" is missing; the session must be re-established before mutating requests (${binding.method} ${binding.path}).`,
+        `CSRF cookie "lepsto_csrf" (or the legacy "lessly_csrf") is missing; the session must be re-established before mutating requests (${binding.method} ${binding.path}).`,
         null
       );
     }
@@ -12608,6 +12612,27 @@ function accessReason(op) {
   return "Not available for your role. Ask an admin of this product.";
 }
 
+// src/runtime/platform-base-url.ts
+var PLATFORM_DOMAINS = ["lessly.dev", "lessly.com", "lepsto.dev", "lepsto.com"];
+function registrableDomain(hostname) {
+  const host = hostname.toLowerCase().replace(/\.$/, "");
+  return PLATFORM_DOMAINS.find((domain) => host === domain || host.endsWith(`.${domain}`));
+}
+function currentHostname() {
+  const hostname = globalThis.location?.hostname;
+  return typeof hostname === "string" && hostname !== "" ? hostname : void 0;
+}
+function platformApiBaseUrl(fallback) {
+  const hostname = currentHostname();
+  const domain = hostname === void 0 ? void 0 : registrableDomain(hostname);
+  if (domain !== void 0) return `https://api.${domain}`;
+  if (fallback !== void 0) return fallback;
+  const found = hostname === void 0 ? "no globalThis.location.hostname is available (SSR, Node or a test environment)" : `host "${hostname}" is not a platform host`;
+  throw new Error(
+    `@lepsto/sdk-app: cannot derive the platform API base URL \u2014 ${found}. Accepted registrable domains (and any subdomain of them): ${PLATFORM_DOMAINS.join(", ")}. Pass a fallback to platformApiBaseUrl(), or an explicit baseUrl to createLesslyApp().`
+  );
+}
+
 // src/runtime/operations.ts
 var operations2 = operations;
 
@@ -12621,5 +12646,6 @@ exports.connectStream = connectStream;
 exports.createLesslyApp = createLesslyApp;
 exports.isAccessDenied = isAccessDenied;
 exports.operations = operations2;
+exports.platformApiBaseUrl = platformApiBaseUrl;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map