@salesforce/lds-runtime-one-app 1.451.0 → 1.453.0

package/dist/oneAppLdsEngineCreator.js

@@ -41,8 +41,6 @@ import bypassAppRestrictionEnabled from '@salesforce/gate/ui.services.LightningC
 import csrfValidationEnabled from '@salesforce/gate/ui.services.LightningConnect.CsrfValidation.enabled';
 import sessionApiEnabled from '@salesforce/gate/ui.uisdk.session.api.enabled';
 import useHttpUiapiLex from '@salesforce/gate/lds.usehttpuiapilex';
-import useHttpUiapiOneRuntime from '@salesforce/gate/lds.useHttpUiapiOneRuntime';
-import useHttpUiapiAuraSites from '@salesforce/gate/lds.usehttpuiapiaurasites';
 import auraBasedRequestsEnabled from '@salesforce/gate/ui.services.auraBasedRequests.enabled';
 import disableCreateContentDocumentAndVersionHTTPLexRuntime from '@salesforce/gate/lds.lex.http.disableCreateContentDocumentAndVersion';
 import useHotspotLimit from '@salesforce/gate/lds.pdl.useHotspotLimit';
@@ -2590,7 +2588,7 @@ function buildServiceDescriptor$d(luvio) {
         },
     };
 }
-// version: 1.451.0-b776d3eb45
+// version: 1.453.0-725e09cf25
 
 class AuraGraphQLNormalizedCacheControlCommand extends AuraNormalizedCacheControlCommand {
   constructor(config, documentRootType, services) {
@@ -2929,7 +2927,7 @@ function buildServiceDescriptor$9(notifyRecordUpdateAvailable, getNormalizedLuvi
         },
     };
 }
-// version: 1.451.0-b776d3eb45
+// version: 1.453.0-725e09cf25
 
 class RetryService {
   constructor(defaultRetryPolicy) {
@@ -5843,7 +5841,7 @@ function getEnvironmentSetting(name) {
     }
     return undefined;
 }
-// version: 1.451.0-231643dd9a
+// version: 1.453.0-e6dc0c039a
 
 /**
  * Helpers for reaching the Aura framework from the LDS Aura runtime.
@@ -5880,26 +5878,6 @@ function dispatchGlobalEvent(...args) {
 function getAuraClientService() {
     return getAura()?.clientService;
 }
-/**
- * Returns `true` when the Aura runtime is hosted inside an Aura/Experience
- * site (Experience Builder / `communityApp`) rather than LEX (one.app).
- * `$A.get('$Site')` is present and truthy on Aura sites and absent/falsy in
- * LEX. A stable per-page signal, so it is safe to evaluate once at module
- * load. Defensive: never throws.
- *
- * Used to keep the OneStore GraphQL adapter — and the HTTP UIAPI fetch path —
- * on the Aura transport for sites, because the HTTP transport's CSRF handling
- * does not work in the Aura Sites runtime (W-23092947).
- */
-function isAuraSite() {
-    const aura = getAura();
-    try {
-        return !!aura?.get?.('$Site');
-    }
-    catch {
-        return false;
-    }
-}
 
 const auraClientService = getAuraClientService();
 const defaultConfig = {
@@ -7095,9 +7073,6 @@ function buildLuvioActionMarksSendInterceptor() {
     };
 }
 
-function isOneRuntime() {
-    return !!globalThis.LWR;
-}
 /**
  * Public UIAPI url paths verified for HTTP transport.
  *
@@ -7300,63 +7275,31 @@ const CONTENT_DOCUMENTS_VERSIONS_PATH = '/ui-api/records/content-documents/conte
  *   paths: ['/ui-api/some-endpoint/{id}'],
  * }
  */
-// Each runtime uses a SINGLE LDS gate that enables both the public and
-// private path lists. The public/private split is preserved as two separate
+// This fork package (lds-runtime-one-app) is provisioned only in one/one.app's
+// Aura services=, which means it always runs as classic Aura LEX — never LWR,
+// never on a site. The single LDS gate `useHttpUiapiLex` enables both the public
+// and private path lists. The public/private split is preserved as two separate
 // arrays because the PRIVATE paths carry an extra condition: the server-side
 // `auraBasedRequests` UiSdk gate. If UiSdk turns that gate off, private
 // (UiTier-restricted) Connect resources can no longer be served over HTTP and
 // must fall back to Aura, whereas public/allowlisted paths are unaffected.
-//
-// Runtimes are mutually exclusive: One Runtime (globalThis.LWR), Aura Sites
-// ($Site present), and LEX/one.app (everything else). Each has its own gate.
 const PREDICATE_PATH_SETS = [
-    // One Runtime — public UIAPI endpoints
-    {
-        predicate: () => isOneRuntime() && useHttpUiapiOneRuntime.isOpen({ fallback: false }),
-        paths: UIAPI_PUBLIC_PATHS,
-    },
-    // One Runtime — private UIAPI endpoints (also require the UiSdk gate)
-    {
-        predicate: () => isOneRuntime() &&
-            useHttpUiapiOneRuntime.isOpen({ fallback: false }) &&
-            auraBasedRequestsEnabled.isOpen({ fallback: false }),
-        paths: UIAPI_PRIVATE_PATHS,
-    },
-    // Aura Sites — public UIAPI endpoints.
-    // Gate defaults closed, which keeps HTTP UIAPI OFF on Aura/Experience sites:
-    // the HTTP transport's CSRF handling is broken there (W-23092947), so until
-    // that is fixed this gate must not be opened. Wiring it as a normal gated
-    // predicate (rather than a hard block) lets it be flipped on once CSRF works.
-    {
-        predicate: () => isAuraSite() && useHttpUiapiAuraSites.isOpen({ fallback: false }),
-        paths: UIAPI_PUBLIC_PATHS,
-    },
-    // Aura Sites — private UIAPI endpoints (also require the UiSdk gate)
-    {
-        predicate: () => isAuraSite() &&
-            useHttpUiapiAuraSites.isOpen({ fallback: false }) &&
-            auraBasedRequestsEnabled.isOpen({ fallback: false }),
-        paths: UIAPI_PRIVATE_PATHS,
-    },
     // LEX (one.app) — public UIAPI endpoints
     {
-        predicate: () => !isOneRuntime() && !isAuraSite() && useHttpUiapiLex.isOpen({ fallback: false }),
+        predicate: () => useHttpUiapiLex.isOpen({ fallback: false }),
         paths: UIAPI_PUBLIC_PATHS,
     },
     // LEX (one.app) — private UIAPI endpoints (also require the UiSdk gate)
     {
-        predicate: () => !isOneRuntime() &&
-            !isAuraSite() &&
-            useHttpUiapiLex.isOpen({ fallback: false }) &&
+        predicate: () => useHttpUiapiLex.isOpen({ fallback: false }) &&
             auraBasedRequestsEnabled.isOpen({ fallback: false }),
         paths: UIAPI_PRIVATE_PATHS,
     },
     // disableCreateContentDocumentAndVersionHTTPLexRuntime killswitch.
-    // Excluded on Aura Sites for the same broken-CSRF reason as the UIAPI paths
-    // (W-23092947); LEX / One Runtime are unaffected.
+    // This fork only runs in LEX (one.app), never on a site, so the killswitch
+    // alone controls the feature.
     {
-        predicate: () => !isAuraSite() &&
-            !disableCreateContentDocumentAndVersionHTTPLexRuntime.isOpen({ fallback: false }),
+        predicate: () => !disableCreateContentDocumentAndVersionHTTPLexRuntime.isOpen({ fallback: false }),
         paths: [CONTENT_DOCUMENTS_VERSIONS_PATH],
     },
 ];
@@ -11235,7 +11178,7 @@ register({
     instrument: ldsNetworkAdapterInstrument,
 });
 // Publish buildPredictorForContext on the force/ldsEngine registration bus so that
-// shared laf loaders can obtain it without a dynamic import("force/ldsEngineCreator"),
+// shared laf loaders can obtain it without a dynamic import of the aura ldsEngineCreator module,
 // which would evaluate this whole bootstrap a second time. See ADR
 // 2026-07-10-pdl-service-provisioner-decoupling. buildPredictorForContext is a hoisted
 // function declaration and internally no-ops (returns undefined) when the PDL gate is
@@ -11557,4 +11500,4 @@ function ldsEngineCreator() {
 }
 
 export { LexRequestStrategy, PDL_ENGINE_REGISTRATION_ID, PdlPrefetcherEventType, PdlRequestPriority, buildPredictorForContext, configService, ldsEngineCreator as default, initializeLDS, initializeOneStore, notifyUpdateAvailableFactory, registerRequestStrategy, saveRequestAsPrediction, subscribeToPrefetcherEvents, unregisterRequestStrategy, whenPredictionsReady };
-// version: 1.451.0-b776d3eb45
+// version: 1.453.0-725e09cf25

package/dist/types/aura-utils.d.ts

@@ -42,16 +42,4 @@ export interface AuraClientService {
  * `undefined` otherwise. Defensive: never throws.
  */
 export declare function getAuraClientService(): AuraClientService | undefined;
-/**
- * Returns `true` when the Aura runtime is hosted inside an Aura/Experience
- * site (Experience Builder / `communityApp`) rather than LEX (one.app).
- * `$A.get('$Site')` is present and truthy on Aura sites and absent/falsy in
- * LEX. A stable per-page signal, so it is safe to evaluate once at module
- * load. Defensive: never throws.
- *
- * Used to keep the OneStore GraphQL adapter — and the HTTP UIAPI fetch path —
- * on the Aura transport for sites, because the HTTP transport's CSRF handling
- * does not work in the Aura Sites runtime (W-23092947).
- */
-export declare function isAuraSite(): boolean;
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@salesforce/lds-runtime-one-app",
-    "version": "1.451.0",
+    "version": "1.453.0",
     "license": "SEE LICENSE IN LICENSE.txt",
     "description": "LDS engine for the one.app (LEX) runtime.",
     "main": "dist/oneAppLdsEngineCreator.js",
@@ -34,53 +34,53 @@
         "release:corejar": "yarn build && ../core-build/scripts/core.js --name=lds-runtime-one-app"
     },
     "devDependencies": {
-        "@conduit-client/service-provisioner": "3.26.0",
-        "@conduit-client/tools-core": "3.26.0",
-        "@salesforce/lds-adapters-apex": "^1.451.0",
-        "@salesforce/lds-adapters-uiapi": "^1.451.0",
-        "@salesforce/lds-ads-bridge": "^1.451.0",
-        "@salesforce/lds-aura-storage": "^1.451.0",
-        "@salesforce/lds-bindings": "^1.451.0",
-        "@salesforce/lds-instrumentation": "^1.451.0",
-        "@salesforce/lds-network-adapter": "^1.451.0",
-        "@salesforce/lds-network-aura": "^1.451.0",
-        "@salesforce/lds-network-fetch": "^1.451.0",
+        "@conduit-client/service-provisioner": "3.26.1",
+        "@conduit-client/tools-core": "3.26.1",
+        "@salesforce/lds-adapters-apex": "^1.453.0",
+        "@salesforce/lds-adapters-uiapi": "^1.453.0",
+        "@salesforce/lds-ads-bridge": "^1.453.0",
+        "@salesforce/lds-aura-storage": "^1.453.0",
+        "@salesforce/lds-bindings": "^1.453.0",
+        "@salesforce/lds-instrumentation": "^1.453.0",
+        "@salesforce/lds-network-adapter": "^1.453.0",
+        "@salesforce/lds-network-aura": "^1.453.0",
+        "@salesforce/lds-network-fetch": "^1.453.0",
         "jwt-encode": "1.0.1"
     },
     "dependencies": {
-        "@conduit-client/command-aura-graphql-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-aura-network": "3.26.0",
-        "@conduit-client/command-aura-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-fetch-network": "3.26.0",
-        "@conduit-client/command-http-graphql-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-http-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-ndjson": "3.26.0",
-        "@conduit-client/command-network": "3.26.0",
-        "@conduit-client/command-sse": "3.26.0",
-        "@conduit-client/command-streaming": "3.26.0",
-        "@conduit-client/jwt-manager": "3.26.0",
-        "@conduit-client/service-aura-network": "3.26.0",
-        "@conduit-client/service-bindings-imperative": "3.26.0",
-        "@conduit-client/service-bindings-lwc": "3.26.0",
-        "@conduit-client/service-cache": "3.26.0",
-        "@conduit-client/service-cache-control": "3.26.0",
-        "@conduit-client/service-cache-inclusion-policy": "3.26.0",
-        "@conduit-client/service-config": "3.26.0",
-        "@conduit-client/service-feature-flags": "3.26.0",
-        "@conduit-client/service-fetch-network": "3.26.0",
-        "@conduit-client/service-instrument-command": "3.26.0",
-        "@conduit-client/service-pubsub": "3.26.0",
-        "@conduit-client/service-renewable-resource-manager": "3.26.0",
-        "@conduit-client/service-store": "3.26.0",
-        "@conduit-client/utils": "3.26.0",
+        "@conduit-client/command-aura-graphql-normalized-cache-control": "3.26.1",
+        "@conduit-client/command-aura-network": "3.26.1",
+        "@conduit-client/command-aura-normalized-cache-control": "3.26.1",
+        "@conduit-client/command-fetch-network": "3.26.1",
+        "@conduit-client/command-http-graphql-normalized-cache-control": "3.26.1",
+        "@conduit-client/command-http-normalized-cache-control": "3.26.1",
+        "@conduit-client/command-ndjson": "3.26.1",
+        "@conduit-client/command-network": "3.26.1",
+        "@conduit-client/command-sse": "3.26.1",
+        "@conduit-client/command-streaming": "3.26.1",
+        "@conduit-client/jwt-manager": "3.26.1",
+        "@conduit-client/service-aura-network": "3.26.1",
+        "@conduit-client/service-bindings-imperative": "3.26.1",
+        "@conduit-client/service-bindings-lwc": "3.26.1",
+        "@conduit-client/service-cache": "3.26.1",
+        "@conduit-client/service-cache-control": "3.26.1",
+        "@conduit-client/service-cache-inclusion-policy": "3.26.1",
+        "@conduit-client/service-config": "3.26.1",
+        "@conduit-client/service-feature-flags": "3.26.1",
+        "@conduit-client/service-fetch-network": "3.26.1",
+        "@conduit-client/service-instrument-command": "3.26.1",
+        "@conduit-client/service-pubsub": "3.26.1",
+        "@conduit-client/service-renewable-resource-manager": "3.26.1",
+        "@conduit-client/service-store": "3.26.1",
+        "@conduit-client/utils": "3.26.1",
         "@luvio/network-adapter-composable": "0.161.0",
         "@luvio/network-adapter-fetch": "0.161.0",
         "@lwc/state": "^0.29.0",
-        "@salesforce/lds-adapters-onestore-graphql": "^1.451.0",
+        "@salesforce/lds-adapters-onestore-graphql": "^1.453.0",
         "@salesforce/lds-adapters-uiapi-lex": "^1.415.0",
-        "@salesforce/lds-durable-storage": "^1.451.0",
-        "@salesforce/lds-luvio-service": "^1.451.0",
-        "@salesforce/lds-luvio-uiapi-records-service": "^1.451.0"
+        "@salesforce/lds-durable-storage": "^1.453.0",
+        "@salesforce/lds-luvio-service": "^1.453.0",
+        "@salesforce/lds-luvio-uiapi-records-service": "^1.453.0"
     },
     "luvioBundlesize": [
         {