@salesforce/lds-runtime-aura 1.450.0 → 1.451.0-dev10

package/dist/ldsEngineCreator.js

@@ -22,9 +22,9 @@ import { instrument, getRecordAvatarsAdapterFactory, getRecordAdapterFactory, co
 import { getInstrumentation } from 'o11y/client';
 import { findExecutableOperation, buildGraphQLInputExtension, addTypenameToDocument } from 'force/luvioGraphqlNormalization';
 import { print, resolveAndValidateGraphQLConfig, toGraphQLErrorResponse } from 'force/luvioOnestoreGraphqlParser';
-import getServices, { setServices } from 'force/luvioServiceProvisioner1';
-import { assertIsValid, JsonSchemaViolationError, MissingRequiredPropertyError } from 'force/luvioJsonschemaValidate5';
+import getServices, { buildStaticServiceResolver, setServiceResolver, setServices } from 'force/luvioServiceProvisioner1';
 import { dispatchGlobalEvent as dispatchGlobalEvent$1, executeGlobalControllerRawResponse } from 'aura';
+import { assertIsValid, JsonSchemaViolationError, MissingRequiredPropertyError } from 'force/luvioJsonschemaValidate5';
 import auraNetworkAdapter, { dispatchAuraAction, defaultActionConfig, instrument as instrument$1, forceRecordTransactionsDisabled as forceRecordTransactionsDisabled$1, ldsNetworkAdapterInstrument, CrudEventState, CrudEventType, UIAPI_RECORDS_PATH, UIAPI_RELATED_LIST_RECORDS_BATCH_PATH, UIAPI_RELATED_LIST_RECORDS_PATH } from 'force/ldsNetwork';
 import { ThirdPartyTracker } from 'instrumentation:thirdPartyTracker';
 import { markStart, markEnd, counter, registerCacheStats, perfStart, perfEnd, registerPeriodicLogger, interaction, timer, mark } from 'instrumentation/service';
@@ -50,7 +50,7 @@ import { createStorage, clearStorages } from 'force/ldsDurableStorage';
 import { registerSubRequestNetworkAdapter } from 'force/ldsNetwork';
 
 const { create: create$1, freeze, keys: keys$2, entries: entries$1 } = Object;
-const { isArray: isArray$3 } = Array;
+const { isArray: isArray$4 } = Array;
 const { stringify: stringify$3, parse: parse$2 } = JSON;
 const WeakSetConstructor = WeakSet;
 const LogLevelMap = {
@@ -192,7 +192,7 @@ function stableJSONStringify$2(node) {
   }
   let i;
   let out;
-  if (isArray$3(node)) {
+  if (isArray$4(node)) {
     out = "[";
     for (i = 0; i < node.length; i++) {
       if (i) {
@@ -300,7 +300,7 @@ function deepFreeze(value) {
     return;
   }
   deeplyFrozen.add(value);
-  if (isArray$3(value)) {
+  if (isArray$4(value)) {
     for (let i = 0, len = value.length; i < len; i += 1) {
       deepFreeze(value[i]);
     }
@@ -527,7 +527,7 @@ function buildServiceDescriptor$p() {
   };
 }
 
-const { isArray: isArray$2 } = Array;
+const { isArray: isArray$3 } = Array;
 let Ok$1 = class Ok {
   constructor(value) {
     this.value = value;
@@ -607,8 +607,8 @@ function deepEquals$1(x, y) {
     return y === null;
   } else if (y === null) {
     return x === null;
-  } else if (isArray$2(x)) {
-    if (!isArray$2(y) || x.length !== y.length) {
+  } else if (isArray$3(x)) {
+    if (!isArray$3(y) || x.length !== y.length) {
       return false;
     }
     for (let i = 0; i < x.length; ++i) {
@@ -2590,7 +2590,7 @@ function buildServiceDescriptor$d(luvio) {
         },
     };
 }
-// version: 1.450.0-163071957b
+// version: 1.451.0-dev10-f221dcc990
 
 class AuraGraphQLNormalizedCacheControlCommand extends AuraNormalizedCacheControlCommand {
   constructor(config, documentRootType, services) {
@@ -2929,7 +2929,7 @@ function buildServiceDescriptor$9(notifyRecordUpdateAvailable, getNormalizedLuvi
         },
     };
 }
-// version: 1.450.0-163071957b
+// version: 1.451.0-dev10-f221dcc990
 
 class RetryService {
   constructor(defaultRetryPolicy) {
@@ -3081,6 +3081,90 @@ function buildServiceDescriptor$8(defaultRetryPolicy) {
   };
 }
 
+function tagsEqual(a, b) {
+    const keys = Object.keys(b);
+    return (a !== undefined && keys.length === Object.keys(a).length && keys.every((k) => a[k] === b[k]));
+}
+// W-23092947: on Aura sites HTTP-to-core is broken, so withhold every `fetch` service
+// except those whose request tags are in `allowedFetchTags` (the external hosts). A
+// withheld optional fetch resolves to `undefined`, making `AuraNetworkCommand` use Aura.
+function buildAuraSiteServiceResolver(services, allowedFetchTags) {
+    const staticResolver = buildStaticServiceResolver(services);
+    const isWithheld = (req) => req.type === 'fetch' && !allowedFetchTags.some((allowed) => tagsEqual(req.tags, allowed));
+    return (requested) => {
+        const passthrough = {};
+        const withheldUnresolved = [];
+        for (const [name, req] of Object.entries(requested)) {
+            if (!isWithheld(req)) {
+                passthrough[name] = req;
+            }
+            else if (!('optional' in req && req.optional)) {
+                withheldUnresolved.push(name);
+            }
+        }
+        return staticResolver(passthrough).then(([resolved, unresolved]) => [
+            resolved,
+            [...unresolved, ...withheldUnresolved],
+        ]);
+    };
+}
+
+/**
+ * Helpers for reaching the Aura framework from the LDS Aura runtime.
+ *
+ * `window.$A` is only present when the runtime is hosted inside Aura (LEX or
+ * an Aura site); in tests and non-Aura runtimes it is absent. `getAura()`
+ * centralizes the guarded lookup so the `$A` access lives in one place instead
+ * of being duplicated across modules.
+ */
+/**
+ * Returns the Aura framework global (`window.$A`) when running inside Aura
+ * (LEX or an Aura site), or `undefined` in tests and non-Aura runtimes.
+ * Centralizes the guarded `$A` lookup so callers reach for it once and read
+ * intent instead of repeating `typeof window` / `$A` guards.
+ */
+function getAura() {
+    if (typeof window === 'undefined') {
+        return undefined;
+    }
+    return window.$A;
+}
+/**
+ * Fires an Aura application-level event (e.g. `aura:invalidSession`). Thin
+ * pass-through to the `aura` framework module so callers depend on this util
+ * rather than importing `aura` directly.
+ */
+function dispatchGlobalEvent(...args) {
+    dispatchGlobalEvent$1(...args);
+}
+/**
+ * Returns `$A.clientService` when running inside an Aura environment, or
+ * `undefined` otherwise. Defensive: never throws.
+ */
+function getAuraClientService() {
+    return getAura()?.clientService;
+}
+/**
+ * Returns `true` when the Aura runtime is hosted inside an Aura/Experience
+ * site (Experience Builder / `communityApp`) rather than LEX (one.app).
+ * `$A.get('$Site')` is present and truthy on Aura sites and absent/falsy in
+ * LEX. A stable per-page signal, so it is safe to evaluate once at module
+ * load. Defensive: never throws.
+ *
+ * Used to keep the OneStore GraphQL adapter — and the HTTP UIAPI fetch path —
+ * on the Aura transport for sites, because the HTTP transport's CSRF handling
+ * does not work in the Aura Sites runtime (W-23092947).
+ */
+function isAuraSite() {
+    const aura = getAura();
+    try {
+        return !!aura?.get?.('$Site');
+    }
+    catch {
+        return false;
+    }
+}
+
 class BasicRenewableResourceManager {
   constructor(config) {
     this.config = config;
@@ -4642,9 +4726,10 @@ var TypeCheckShapes;
     TypeCheckShapes[TypeCheckShapes["Integer"] = 3] = "Integer";
     TypeCheckShapes[TypeCheckShapes["Unsupported"] = 4] = "Unsupported";
 })(TypeCheckShapes || (TypeCheckShapes = {}));
-// engine version: 0.161.0-fe06f180
+// engine version: 0.161.2-bd1bd38a
 
 const { keys: keys$1 } = Object;
+const { isArray: isArray$2 } = Array;
 
 // we're going to intentionally bundle this small bit of luvio engine code into
 // this module to keep it runtime dependency-free
@@ -4717,7 +4802,14 @@ const fetchNetworkAdapter = async (resourceRequest, _resourceRequestContext) =>
 function generateQueryString(params) {
     const searchParams = new URLSearchParams();
     for (const key of keys$1(params)) {
-        searchParams.append(key, String(params[key]));
+        const value = params[key];
+        // omit undefined and empty-array values entirely: String(undefined) === 'undefined'
+        // and String([]) === '', both of which would otherwise serialize as a valueless
+        // `key=` or literal `key=undefined` query param that servers can reject.
+        if (value === undefined || (isArray$2(value) && value.length === 0)) {
+            continue;
+        }
+        searchParams.append(key, String(value));
     }
     const queryString = searchParams.toString();
     if (queryString.length > 0) {
@@ -5734,7 +5826,7 @@ class PrioritizedConfigService {
       get: (_, property) => {
         const propertyPath = [...path, property];
         const value = this.valueFor(propertyPath);
-        return typeof value === "object" && value !== null && !isArray$3(value) ? this.buildReadonlyObjectProxy(propertyPath) : value;
+        return typeof value === "object" && value !== null && !isArray$4(value) ? this.buildReadonlyObjectProxy(propertyPath) : value;
       },
       getOwnPropertyDescriptor: (target, property) => {
         const propertyPath = [...path, property];
@@ -5742,7 +5834,7 @@ class PrioritizedConfigService {
         return {
           value: (
             // TODO - need to wrap arrays in a Proxy as well
-            typeof value === "object" && value !== null && !isArray$3(value) ? this.buildReadonlyObjectProxy(propertyPath) : value
+            typeof value === "object" && value !== null && !isArray$4(value) ? this.buildReadonlyObjectProxy(propertyPath) : value
           ),
           writable: false,
           configurable: true,
@@ -5843,63 +5935,7 @@ function getEnvironmentSetting(name) {
     }
     return undefined;
 }
-// version: 1.450.0-b7557fd74b
-
-/**
- * Helpers for reaching the Aura framework from the LDS Aura runtime.
- *
- * `window.$A` is only present when the runtime is hosted inside Aura (LEX or
- * an Aura site); in tests and non-Aura runtimes it is absent. `getAura()`
- * centralizes the guarded lookup so the `$A` access lives in one place instead
- * of being duplicated across modules.
- */
-/**
- * Returns the Aura framework global (`window.$A`) when running inside Aura
- * (LEX or an Aura site), or `undefined` in tests and non-Aura runtimes.
- * Centralizes the guarded `$A` lookup so callers reach for it once and read
- * intent instead of repeating `typeof window` / `$A` guards.
- */
-function getAura() {
-    if (typeof window === 'undefined') {
-        return undefined;
-    }
-    return window.$A;
-}
-/**
- * Fires an Aura application-level event (e.g. `aura:invalidSession`). Thin
- * pass-through to the `aura` framework module so callers depend on this util
- * rather than importing `aura` directly.
- */
-function dispatchGlobalEvent(...args) {
-    dispatchGlobalEvent$1(...args);
-}
-/**
- * Returns `$A.clientService` when running inside an Aura environment, or
- * `undefined` otherwise. Defensive: never throws.
- */
-function getAuraClientService() {
-    return getAura()?.clientService;
-}
-/**
- * Returns `true` when the Aura runtime is hosted inside an Aura/Experience
- * site (Experience Builder / `communityApp`) rather than LEX (one.app).
- * `$A.get('$Site')` is present and truthy on Aura sites and absent/falsy in
- * LEX. A stable per-page signal, so it is safe to evaluate once at module
- * load. Defensive: never throws.
- *
- * Used to keep the OneStore GraphQL adapter — and the HTTP UIAPI fetch path —
- * on the Aura transport for sites, because the HTTP transport's CSRF handling
- * does not work in the Aura Sites runtime (W-23092947).
- */
-function isAuraSite() {
-    const aura = getAura();
-    try {
-        return !!aura?.get?.('$Site');
-    }
-    catch {
-        return false;
-    }
-}
+// version: 1.451.0-dev10-1dd3380fb3
 
 const auraClientService = getAuraClientService();
 const defaultConfig = {
@@ -11434,6 +11470,13 @@ function initializeLDS() {
     }
     return luvio; // Return the luvio instance so that we can inject it for OneStore
 }
+// W-23092947: fetch request tags allowed to stay on HTTP on Aura sites (external hosts).
+// Everything else (core UIAPI/GraphQL) is withheld so it falls back to Aura transport.
+const AURA_SITE_ALLOWED_FETCH_TAGS = [
+    { authenticationScopes: 'sfap_api' },
+    { authenticationScopes: 'data_360_cdp_url_rewrite' },
+    { specialHacksFor: 'copilot' }, // copilot
+];
 // Initializes OneStore in LEX
 function initializeOneStore(luvio) {
     const loggerService = new ConsoleLogger('ERROR');
@@ -11528,7 +11571,13 @@ function initializeOneStore(luvio) {
         prefetchSfapJwtServiceDescriptor,
         csrfTokenManagerServiceDescriptor,
     ];
-    setServices(services);
+    // W-23092947: Aura sites route core-bound commands over Aura (see the resolver).
+    if (isAuraSite()) {
+        setServiceResolver(buildAuraSiteServiceResolver(services, AURA_SITE_ALLOWED_FETCH_TAGS));
+    }
+    else {
+        setServices(services);
+    }
 }
 function buildAuraNetworkService() {
     return {
@@ -11546,4 +11595,4 @@ function ldsEngineCreator() {
 }
 
 export { LexRequestStrategy, PDL_ENGINE_REGISTRATION_ID, PdlPrefetcherEventType, PdlRequestPriority, buildPredictorForContext, configService, ldsEngineCreator as default, initializeLDS, initializeOneStore, notifyUpdateAvailableFactory, registerRequestStrategy, saveRequestAsPrediction, subscribeToPrefetcherEvents, unregisterRequestStrategy, whenPredictionsReady };
-// version: 1.450.0-163071957b
+// version: 1.451.0-dev10-f221dcc990

package/dist/types/aura-site-service-resolver.d.ts

@@ -0,0 +1,5 @@
+import { type PublishedService, type ServiceResolver, type ServicesRequest } from '@conduit-client/service-provisioner/v1';
+import { type ServiceDescriptor } from '@conduit-client/utils';
+type Tags = Record<string, string>;
+export declare function buildAuraSiteServiceResolver<R extends ServicesRequest<ServiceDescriptor<unknown>>>(services: PublishedService[], allowedFetchTags: ReadonlyArray<Tags>): ServiceResolver<R>;
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@salesforce/lds-runtime-aura",
-    "version": "1.450.0",
+    "version": "1.451.0-dev10",
     "license": "SEE LICENSE IN LICENSE.txt",
     "description": "LDS engine for Aura runtime.",
     "main": "dist/ldsEngineCreator.js",
@@ -34,61 +34,61 @@
         "release:corejar": "yarn build && ../core-build/scripts/core.js --name=lds-runtime-aura"
     },
     "devDependencies": {
-        "@conduit-client/service-provisioner": "3.26.0",
-        "@conduit-client/tools-core": "3.26.0",
-        "@salesforce/lds-adapters-apex": "^1.450.0",
-        "@salesforce/lds-adapters-uiapi": "^1.450.0",
-        "@salesforce/lds-ads-bridge": "^1.450.0",
-        "@salesforce/lds-aura-storage": "^1.450.0",
-        "@salesforce/lds-bindings": "^1.450.0",
-        "@salesforce/lds-instrumentation": "^1.450.0",
-        "@salesforce/lds-network-adapter": "^1.450.0",
-        "@salesforce/lds-network-aura": "^1.450.0",
-        "@salesforce/lds-network-fetch": "^1.450.0",
+        "@conduit-client/service-provisioner": "3.26.1-dev3",
+        "@conduit-client/tools-core": "3.26.1-dev3",
+        "@salesforce/lds-adapters-apex": "^1.451.0-dev10",
+        "@salesforce/lds-adapters-uiapi": "^1.451.0-dev10",
+        "@salesforce/lds-ads-bridge": "^1.451.0-dev10",
+        "@salesforce/lds-aura-storage": "^1.451.0-dev10",
+        "@salesforce/lds-bindings": "^1.451.0-dev10",
+        "@salesforce/lds-instrumentation": "^1.451.0-dev10",
+        "@salesforce/lds-network-adapter": "^1.451.0-dev10",
+        "@salesforce/lds-network-aura": "^1.451.0-dev10",
+        "@salesforce/lds-network-fetch": "^1.451.0-dev10",
         "jwt-encode": "1.0.1"
     },
     "dependencies": {
-        "@conduit-client/command-aura-graphql-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-aura-network": "3.26.0",
-        "@conduit-client/command-aura-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-fetch-network": "3.26.0",
-        "@conduit-client/command-http-graphql-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-http-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-ndjson": "3.26.0",
-        "@conduit-client/command-network": "3.26.0",
-        "@conduit-client/command-sse": "3.26.0",
-        "@conduit-client/command-streaming": "3.26.0",
-        "@conduit-client/jwt-manager": "3.26.0",
-        "@conduit-client/service-aura-network": "3.26.0",
-        "@conduit-client/service-bindings-imperative": "3.26.0",
-        "@conduit-client/service-bindings-lwc": "3.26.0",
-        "@conduit-client/service-cache": "3.26.0",
-        "@conduit-client/service-cache-control": "3.26.0",
-        "@conduit-client/service-cache-inclusion-policy": "3.26.0",
-        "@conduit-client/service-config": "3.26.0",
-        "@conduit-client/service-feature-flags": "3.26.0",
-        "@conduit-client/service-fetch-network": "3.26.0",
-        "@conduit-client/service-instrument-command": "3.26.0",
-        "@conduit-client/service-pubsub": "3.26.0",
-        "@conduit-client/service-renewable-resource-manager": "3.26.0",
-        "@conduit-client/service-store": "3.26.0",
-        "@conduit-client/utils": "3.26.0",
-        "@luvio/network-adapter-composable": "0.161.0",
-        "@luvio/network-adapter-fetch": "0.161.0",
+        "@conduit-client/command-aura-graphql-normalized-cache-control": "3.26.1-dev3",
+        "@conduit-client/command-aura-network": "3.26.1-dev3",
+        "@conduit-client/command-aura-normalized-cache-control": "3.26.1-dev3",
+        "@conduit-client/command-fetch-network": "3.26.1-dev3",
+        "@conduit-client/command-http-graphql-normalized-cache-control": "3.26.1-dev3",
+        "@conduit-client/command-http-normalized-cache-control": "3.26.1-dev3",
+        "@conduit-client/command-ndjson": "3.26.1-dev3",
+        "@conduit-client/command-network": "3.26.1-dev3",
+        "@conduit-client/command-sse": "3.26.1-dev3",
+        "@conduit-client/command-streaming": "3.26.1-dev3",
+        "@conduit-client/jwt-manager": "3.26.1-dev3",
+        "@conduit-client/service-aura-network": "3.26.1-dev3",
+        "@conduit-client/service-bindings-imperative": "3.26.1-dev3",
+        "@conduit-client/service-bindings-lwc": "3.26.1-dev3",
+        "@conduit-client/service-cache": "3.26.1-dev3",
+        "@conduit-client/service-cache-control": "3.26.1-dev3",
+        "@conduit-client/service-cache-inclusion-policy": "3.26.1-dev3",
+        "@conduit-client/service-config": "3.26.1-dev3",
+        "@conduit-client/service-feature-flags": "3.26.1-dev3",
+        "@conduit-client/service-fetch-network": "3.26.1-dev3",
+        "@conduit-client/service-instrument-command": "3.26.1-dev3",
+        "@conduit-client/service-pubsub": "3.26.1-dev3",
+        "@conduit-client/service-renewable-resource-manager": "3.26.1-dev3",
+        "@conduit-client/service-store": "3.26.1-dev3",
+        "@conduit-client/utils": "3.26.1-dev3",
+        "@luvio/network-adapter-composable": "0.161.2",
+        "@luvio/network-adapter-fetch": "0.161.2",
         "@lwc/state": "^0.29.0",
-        "@salesforce/lds-adapters-onestore-graphql": "^1.450.0",
+        "@salesforce/lds-adapters-onestore-graphql": "^1.451.0-dev10",
         "@salesforce/lds-adapters-uiapi-lex": "^1.415.0",
-        "@salesforce/lds-durable-storage": "^1.450.0",
-        "@salesforce/lds-luvio-service": "^1.450.0",
-        "@salesforce/lds-luvio-uiapi-records-service": "^1.450.0"
+        "@salesforce/lds-durable-storage": "^1.451.0-dev10",
+        "@salesforce/lds-luvio-service": "^1.451.0-dev10",
+        "@salesforce/lds-luvio-uiapi-records-service": "^1.451.0-dev10"
     },
     "luvioBundlesize": [
         {
             "path": "./dist/ldsEngineCreator.js",
             "maxSize": {
-                "none": "415 kB",
+                "none": "418 kB",
                 "min": "190 kB",
-                "compressed": "73 kB"
+                "compressed": "74 kB"
             }
         }
     ],