@lepsto/sdk-app 87.0.1 → 87.2.0

package/dist/index.js

@@ -35,11 +35,15 @@ function isAccessDenied(err) {
 }
 
 // src/runtime/csrf.ts
-var CSRF_COOKIE = "lessly_csrf";
+var CSRF_COOKIES = ["lepsto_csrf", "lessly_csrf"];
 function readCsrfCookie() {
   if (typeof document === "undefined" || !document) return null;
-  const match = document.cookie.match(new RegExp(`(?:^|; )${CSRF_COOKIE}=([^;]*)`));
-  return match ? decodeURIComponent(match[1]) : null;
+  for (const name of CSRF_COOKIES) {
+    const match = document.cookie.match(new RegExp(`(?:^|; )${name}=([^;]*)`));
+    const value = match ? decodeURIComponent(match[1]) : "";
+    if (value) return value;
+  }
+  return null;
 }
 
 // src/runtime/request.ts
@@ -125,7 +129,7 @@ async function executeRequest(opts, binding, input) {
       throw new LesslyApiError(
         0,
         "csrf_cookie_missing",
-        `CSRF cookie "lessly_csrf" is missing; the session must be re-established before mutating requests (${binding.method} ${binding.path}).`,
+        `CSRF cookie "lepsto_csrf" (or the legacy "lessly_csrf") is missing; the session must be re-established before mutating requests (${binding.method} ${binding.path}).`,
         null
       );
     }
@@ -1223,12 +1227,33 @@ function accessReason(op) {
   return "Not available for your role. Ask an admin of this product.";
 }
 
+// src/runtime/platform-base-url.ts
+var PLATFORM_DOMAINS = ["lessly.dev", "lessly.com", "lepsto.dev", "lepsto.com"];
+function registrableDomain(hostname) {
+  const host = hostname.toLowerCase().replace(/\.$/, "");
+  return PLATFORM_DOMAINS.find((domain) => host === domain || host.endsWith(`.${domain}`));
+}
+function currentHostname() {
+  const hostname = globalThis.location?.hostname;
+  return typeof hostname === "string" && hostname !== "" ? hostname : void 0;
+}
+function platformApiBaseUrl(fallback) {
+  const hostname = currentHostname();
+  const domain = hostname === void 0 ? void 0 : registrableDomain(hostname);
+  if (domain !== void 0) return `https://api.${domain}`;
+  if (fallback !== void 0) return fallback;
+  const found = hostname === void 0 ? "no globalThis.location.hostname is available (SSR, Node or a test environment)" : `host "${hostname}" is not a platform host`;
+  throw new Error(
+    `@lepsto/sdk-app: cannot derive the platform API base URL \u2014 ${found}. Accepted registrable domains (and any subdomain of them): ${PLATFORM_DOMAINS.join(", ")}. Pass a fallback to platformApiBaseUrl(), or an explicit baseUrl to createLesslyApp().`
+  );
+}
+
 // src/runtime/operations.ts
 var operations2 = operations;
 
 // src/runtime/compositions.ts
 var compositions2 = compositions;
 
-export { LesslyApiError, accessReason, compositions2 as compositions, connectStream, createLesslyApp, isAccessDenied, operations2 as operations };
+export { LesslyApiError, accessReason, compositions2 as compositions, connectStream, createLesslyApp, isAccessDenied, operations2 as operations, platformApiBaseUrl };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map