@salesforce/lds-runtime-aura 1.450.0 → 1.451.0-dev1

package/dist/ldsEngineCreator.js

@@ -22,9 +22,9 @@ import { instrument, getRecordAvatarsAdapterFactory, getRecordAdapterFactory, co
 import { getInstrumentation } from 'o11y/client';
 import { findExecutableOperation, buildGraphQLInputExtension, addTypenameToDocument } from 'force/luvioGraphqlNormalization';
 import { print, resolveAndValidateGraphQLConfig, toGraphQLErrorResponse } from 'force/luvioOnestoreGraphqlParser';
-import getServices, { setServices } from 'force/luvioServiceProvisioner1';
-import { assertIsValid, JsonSchemaViolationError, MissingRequiredPropertyError } from 'force/luvioJsonschemaValidate5';
+import getServices, { buildStaticServiceResolver, setServiceResolver, setServices } from 'force/luvioServiceProvisioner1';
 import { dispatchGlobalEvent as dispatchGlobalEvent$1, executeGlobalControllerRawResponse } from 'aura';
+import { assertIsValid, JsonSchemaViolationError, MissingRequiredPropertyError } from 'force/luvioJsonschemaValidate5';
 import auraNetworkAdapter, { dispatchAuraAction, defaultActionConfig, instrument as instrument$1, forceRecordTransactionsDisabled as forceRecordTransactionsDisabled$1, ldsNetworkAdapterInstrument, CrudEventState, CrudEventType, UIAPI_RECORDS_PATH, UIAPI_RELATED_LIST_RECORDS_BATCH_PATH, UIAPI_RELATED_LIST_RECORDS_PATH } from 'force/ldsNetwork';
 import { ThirdPartyTracker } from 'instrumentation:thirdPartyTracker';
 import { markStart, markEnd, counter, registerCacheStats, perfStart, perfEnd, registerPeriodicLogger, interaction, timer, mark } from 'instrumentation/service';
@@ -2590,7 +2590,7 @@ function buildServiceDescriptor$d(luvio) {
         },
     };
 }
-// version: 1.450.0-163071957b
+// version: 1.451.0-dev1-a2c5e50338
 
 class AuraGraphQLNormalizedCacheControlCommand extends AuraNormalizedCacheControlCommand {
   constructor(config, documentRootType, services) {
@@ -2929,7 +2929,7 @@ function buildServiceDescriptor$9(notifyRecordUpdateAvailable, getNormalizedLuvi
         },
     };
 }
-// version: 1.450.0-163071957b
+// version: 1.451.0-dev1-a2c5e50338
 
 class RetryService {
   constructor(defaultRetryPolicy) {
@@ -3081,6 +3081,90 @@ function buildServiceDescriptor$8(defaultRetryPolicy) {
   };
 }
 
+function tagsEqual(a, b) {
+    const keys = Object.keys(b);
+    return (a !== undefined && keys.length === Object.keys(a).length && keys.every((k) => a[k] === b[k]));
+}
+// W-23092947: on Aura sites HTTP-to-core is broken, so withhold every `fetch` service
+// except those whose request tags are in `allowedFetchTags` (the external hosts). A
+// withheld optional fetch resolves to `undefined`, making `AuraNetworkCommand` use Aura.
+function buildAuraSiteServiceResolver(services, allowedFetchTags) {
+    const staticResolver = buildStaticServiceResolver(services);
+    const isWithheld = (req) => req.type === 'fetch' && !allowedFetchTags.some((allowed) => tagsEqual(req.tags, allowed));
+    return (requested) => {
+        const passthrough = {};
+        const withheldUnresolved = [];
+        for (const [name, req] of Object.entries(requested)) {
+            if (!isWithheld(req)) {
+                passthrough[name] = req;
+            }
+            else if (!('optional' in req && req.optional)) {
+                withheldUnresolved.push(name);
+            }
+        }
+        return staticResolver(passthrough).then(([resolved, unresolved]) => [
+            resolved,
+            [...unresolved, ...withheldUnresolved],
+        ]);
+    };
+}
+
+/**
+ * Helpers for reaching the Aura framework from the LDS Aura runtime.
+ *
+ * `window.$A` is only present when the runtime is hosted inside Aura (LEX or
+ * an Aura site); in tests and non-Aura runtimes it is absent. `getAura()`
+ * centralizes the guarded lookup so the `$A` access lives in one place instead
+ * of being duplicated across modules.
+ */
+/**
+ * Returns the Aura framework global (`window.$A`) when running inside Aura
+ * (LEX or an Aura site), or `undefined` in tests and non-Aura runtimes.
+ * Centralizes the guarded `$A` lookup so callers reach for it once and read
+ * intent instead of repeating `typeof window` / `$A` guards.
+ */
+function getAura() {
+    if (typeof window === 'undefined') {
+        return undefined;
+    }
+    return window.$A;
+}
+/**
+ * Fires an Aura application-level event (e.g. `aura:invalidSession`). Thin
+ * pass-through to the `aura` framework module so callers depend on this util
+ * rather than importing `aura` directly.
+ */
+function dispatchGlobalEvent(...args) {
+    dispatchGlobalEvent$1(...args);
+}
+/**
+ * Returns `$A.clientService` when running inside an Aura environment, or
+ * `undefined` otherwise. Defensive: never throws.
+ */
+function getAuraClientService() {
+    return getAura()?.clientService;
+}
+/**
+ * Returns `true` when the Aura runtime is hosted inside an Aura/Experience
+ * site (Experience Builder / `communityApp`) rather than LEX (one.app).
+ * `$A.get('$Site')` is present and truthy on Aura sites and absent/falsy in
+ * LEX. A stable per-page signal, so it is safe to evaluate once at module
+ * load. Defensive: never throws.
+ *
+ * Used to keep the OneStore GraphQL adapter — and the HTTP UIAPI fetch path —
+ * on the Aura transport for sites, because the HTTP transport's CSRF handling
+ * does not work in the Aura Sites runtime (W-23092947).
+ */
+function isAuraSite() {
+    const aura = getAura();
+    try {
+        return !!aura?.get?.('$Site');
+    }
+    catch {
+        return false;
+    }
+}
+
 class BasicRenewableResourceManager {
   constructor(config) {
     this.config = config;
@@ -5843,63 +5927,7 @@ function getEnvironmentSetting(name) {
     }
     return undefined;
 }
-// version: 1.450.0-b7557fd74b
-
-/**
- * Helpers for reaching the Aura framework from the LDS Aura runtime.
- *
- * `window.$A` is only present when the runtime is hosted inside Aura (LEX or
- * an Aura site); in tests and non-Aura runtimes it is absent. `getAura()`
- * centralizes the guarded lookup so the `$A` access lives in one place instead
- * of being duplicated across modules.
- */
-/**
- * Returns the Aura framework global (`window.$A`) when running inside Aura
- * (LEX or an Aura site), or `undefined` in tests and non-Aura runtimes.
- * Centralizes the guarded `$A` lookup so callers reach for it once and read
- * intent instead of repeating `typeof window` / `$A` guards.
- */
-function getAura() {
-    if (typeof window === 'undefined') {
-        return undefined;
-    }
-    return window.$A;
-}
-/**
- * Fires an Aura application-level event (e.g. `aura:invalidSession`). Thin
- * pass-through to the `aura` framework module so callers depend on this util
- * rather than importing `aura` directly.
- */
-function dispatchGlobalEvent(...args) {
-    dispatchGlobalEvent$1(...args);
-}
-/**
- * Returns `$A.clientService` when running inside an Aura environment, or
- * `undefined` otherwise. Defensive: never throws.
- */
-function getAuraClientService() {
-    return getAura()?.clientService;
-}
-/**
- * Returns `true` when the Aura runtime is hosted inside an Aura/Experience
- * site (Experience Builder / `communityApp`) rather than LEX (one.app).
- * `$A.get('$Site')` is present and truthy on Aura sites and absent/falsy in
- * LEX. A stable per-page signal, so it is safe to evaluate once at module
- * load. Defensive: never throws.
- *
- * Used to keep the OneStore GraphQL adapter — and the HTTP UIAPI fetch path —
- * on the Aura transport for sites, because the HTTP transport's CSRF handling
- * does not work in the Aura Sites runtime (W-23092947).
- */
-function isAuraSite() {
-    const aura = getAura();
-    try {
-        return !!aura?.get?.('$Site');
-    }
-    catch {
-        return false;
-    }
-}
+// version: 1.451.0-dev1-70d3966695
 
 const auraClientService = getAuraClientService();
 const defaultConfig = {
@@ -11434,6 +11462,13 @@ function initializeLDS() {
     }
     return luvio; // Return the luvio instance so that we can inject it for OneStore
 }
+// W-23092947: fetch request tags allowed to stay on HTTP on Aura sites (external hosts).
+// Everything else (core UIAPI/GraphQL) is withheld so it falls back to Aura transport.
+const AURA_SITE_ALLOWED_FETCH_TAGS = [
+    { authenticationScopes: 'sfap_api' },
+    { authenticationScopes: 'data_360_cdp_url_rewrite' },
+    { specialHacksFor: 'copilot' }, // copilot
+];
 // Initializes OneStore in LEX
 function initializeOneStore(luvio) {
     const loggerService = new ConsoleLogger('ERROR');
@@ -11528,7 +11563,13 @@ function initializeOneStore(luvio) {
         prefetchSfapJwtServiceDescriptor,
         csrfTokenManagerServiceDescriptor,
     ];
-    setServices(services);
+    // W-23092947: Aura sites route core-bound commands over Aura (see the resolver).
+    if (isAuraSite()) {
+        setServiceResolver(buildAuraSiteServiceResolver(services, AURA_SITE_ALLOWED_FETCH_TAGS));
+    }
+    else {
+        setServices(services);
+    }
 }
 function buildAuraNetworkService() {
     return {
@@ -11546,4 +11587,4 @@ function ldsEngineCreator() {
 }
 
 export { LexRequestStrategy, PDL_ENGINE_REGISTRATION_ID, PdlPrefetcherEventType, PdlRequestPriority, buildPredictorForContext, configService, ldsEngineCreator as default, initializeLDS, initializeOneStore, notifyUpdateAvailableFactory, registerRequestStrategy, saveRequestAsPrediction, subscribeToPrefetcherEvents, unregisterRequestStrategy, whenPredictionsReady };
-// version: 1.450.0-163071957b
+// version: 1.451.0-dev1-a2c5e50338

package/dist/types/aura-site-service-resolver.d.ts

@@ -0,0 +1,5 @@
+import { type PublishedService, type ServiceResolver, type ServicesRequest } from '@conduit-client/service-provisioner/v1';
+import { type ServiceDescriptor } from '@conduit-client/utils';
+type Tags = Record<string, string>;
+export declare function buildAuraSiteServiceResolver<R extends ServicesRequest<ServiceDescriptor<unknown>>>(services: PublishedService[], allowedFetchTags: ReadonlyArray<Tags>): ServiceResolver<R>;
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@salesforce/lds-runtime-aura",
-    "version": "1.450.0",
+    "version": "1.451.0-dev1",
     "license": "SEE LICENSE IN LICENSE.txt",
     "description": "LDS engine for Aura runtime.",
     "main": "dist/ldsEngineCreator.js",
@@ -36,15 +36,15 @@
     "devDependencies": {
         "@conduit-client/service-provisioner": "3.26.0",
         "@conduit-client/tools-core": "3.26.0",
-        "@salesforce/lds-adapters-apex": "^1.450.0",
-        "@salesforce/lds-adapters-uiapi": "^1.450.0",
-        "@salesforce/lds-ads-bridge": "^1.450.0",
-        "@salesforce/lds-aura-storage": "^1.450.0",
-        "@salesforce/lds-bindings": "^1.450.0",
-        "@salesforce/lds-instrumentation": "^1.450.0",
-        "@salesforce/lds-network-adapter": "^1.450.0",
-        "@salesforce/lds-network-aura": "^1.450.0",
-        "@salesforce/lds-network-fetch": "^1.450.0",
+        "@salesforce/lds-adapters-apex": "^1.451.0-dev1",
+        "@salesforce/lds-adapters-uiapi": "^1.451.0-dev1",
+        "@salesforce/lds-ads-bridge": "^1.451.0-dev1",
+        "@salesforce/lds-aura-storage": "^1.451.0-dev1",
+        "@salesforce/lds-bindings": "^1.451.0-dev1",
+        "@salesforce/lds-instrumentation": "^1.451.0-dev1",
+        "@salesforce/lds-network-adapter": "^1.451.0-dev1",
+        "@salesforce/lds-network-aura": "^1.451.0-dev1",
+        "@salesforce/lds-network-fetch": "^1.451.0-dev1",
         "jwt-encode": "1.0.1"
     },
     "dependencies": {
@@ -76,17 +76,17 @@
         "@luvio/network-adapter-composable": "0.161.0",
         "@luvio/network-adapter-fetch": "0.161.0",
         "@lwc/state": "^0.29.0",
-        "@salesforce/lds-adapters-onestore-graphql": "^1.450.0",
+        "@salesforce/lds-adapters-onestore-graphql": "^1.451.0-dev1",
         "@salesforce/lds-adapters-uiapi-lex": "^1.415.0",
-        "@salesforce/lds-durable-storage": "^1.450.0",
-        "@salesforce/lds-luvio-service": "^1.450.0",
-        "@salesforce/lds-luvio-uiapi-records-service": "^1.450.0"
+        "@salesforce/lds-durable-storage": "^1.451.0-dev1",
+        "@salesforce/lds-luvio-service": "^1.451.0-dev1",
+        "@salesforce/lds-luvio-uiapi-records-service": "^1.451.0-dev1"
     },
     "luvioBundlesize": [
         {
             "path": "./dist/ldsEngineCreator.js",
             "maxSize": {
-                "none": "415 kB",
+                "none": "418 kB",
                 "min": "190 kB",
                 "compressed": "73 kB"
             }