@salesforce/lds-runtime-one-app 1.452.0 → 1.454.0

package/dist/oneAppLdsEngineCreator.js

@@ -41,8 +41,6 @@ import bypassAppRestrictionEnabled from '@salesforce/gate/ui.services.LightningC
 import csrfValidationEnabled from '@salesforce/gate/ui.services.LightningConnect.CsrfValidation.enabled';
 import sessionApiEnabled from '@salesforce/gate/ui.uisdk.session.api.enabled';
 import useHttpUiapiLex from '@salesforce/gate/lds.usehttpuiapilex';
-import useHttpUiapiOneRuntime from '@salesforce/gate/lds.useHttpUiapiOneRuntime';
-import useHttpUiapiAuraSites from '@salesforce/gate/lds.usehttpuiapiaurasites';
 import auraBasedRequestsEnabled from '@salesforce/gate/ui.services.auraBasedRequests.enabled';
 import disableCreateContentDocumentAndVersionHTTPLexRuntime from '@salesforce/gate/lds.lex.http.disableCreateContentDocumentAndVersion';
 import useHotspotLimit from '@salesforce/gate/lds.pdl.useHotspotLimit';
@@ -50,7 +48,7 @@ import { createStorage, clearStorages } from 'force/ldsDurableStorage';
 import { registerSubRequestNetworkAdapter } from 'force/ldsNetwork';
 
 const { create: create$1, freeze, keys: keys$2, entries: entries$1 } = Object;
-const { isArray: isArray$3 } = Array;
+const { isArray: isArray$4 } = Array;
 const { stringify: stringify$3, parse: parse$2 } = JSON;
 const WeakSetConstructor = WeakSet;
 const LogLevelMap = {
@@ -192,7 +190,7 @@ function stableJSONStringify$2(node) {
   }
   let i;
   let out;
-  if (isArray$3(node)) {
+  if (isArray$4(node)) {
     out = "[";
     for (i = 0; i < node.length; i++) {
       if (i) {
@@ -300,7 +298,7 @@ function deepFreeze(value) {
     return;
   }
   deeplyFrozen.add(value);
-  if (isArray$3(value)) {
+  if (isArray$4(value)) {
     for (let i = 0, len = value.length; i < len; i += 1) {
       deepFreeze(value[i]);
     }
@@ -527,7 +525,7 @@ function buildServiceDescriptor$p() {
   };
 }
 
-const { isArray: isArray$2 } = Array;
+const { isArray: isArray$3 } = Array;
 let Ok$1 = class Ok {
   constructor(value) {
     this.value = value;
@@ -607,8 +605,8 @@ function deepEquals$1(x, y) {
     return y === null;
   } else if (y === null) {
     return x === null;
-  } else if (isArray$2(x)) {
-    if (!isArray$2(y) || x.length !== y.length) {
+  } else if (isArray$3(x)) {
+    if (!isArray$3(y) || x.length !== y.length) {
       return false;
     }
     for (let i = 0; i < x.length; ++i) {
@@ -2590,7 +2588,7 @@ function buildServiceDescriptor$d(luvio) {
         },
     };
 }
-// version: 1.452.0-bcd113b7fd
+// version: 1.454.0-4223ab4365
 
 class AuraGraphQLNormalizedCacheControlCommand extends AuraNormalizedCacheControlCommand {
   constructor(config, documentRootType, services) {
@@ -2929,7 +2927,7 @@ function buildServiceDescriptor$9(notifyRecordUpdateAvailable, getNormalizedLuvi
         },
     };
 }
-// version: 1.452.0-bcd113b7fd
+// version: 1.454.0-4223ab4365
 
 class RetryService {
   constructor(defaultRetryPolicy) {
@@ -4642,9 +4640,10 @@ var TypeCheckShapes;
     TypeCheckShapes[TypeCheckShapes["Integer"] = 3] = "Integer";
     TypeCheckShapes[TypeCheckShapes["Unsupported"] = 4] = "Unsupported";
 })(TypeCheckShapes || (TypeCheckShapes = {}));
-// engine version: 0.161.0-fe06f180
+// engine version: 0.161.2-bd1bd38a
 
 const { keys: keys$1 } = Object;
+const { isArray: isArray$2 } = Array;
 
 // we're going to intentionally bundle this small bit of luvio engine code into
 // this module to keep it runtime dependency-free
@@ -4717,7 +4716,14 @@ const fetchNetworkAdapter = async (resourceRequest, _resourceRequestContext) =>
 function generateQueryString(params) {
     const searchParams = new URLSearchParams();
     for (const key of keys$1(params)) {
-        searchParams.append(key, String(params[key]));
+        const value = params[key];
+        // omit undefined and empty-array values entirely: String(undefined) === 'undefined'
+        // and String([]) === '', both of which would otherwise serialize as a valueless
+        // `key=` or literal `key=undefined` query param that servers can reject.
+        if (value === undefined || (isArray$2(value) && value.length === 0)) {
+            continue;
+        }
+        searchParams.append(key, String(value));
     }
     const queryString = searchParams.toString();
     if (queryString.length > 0) {
@@ -5734,7 +5740,7 @@ class PrioritizedConfigService {
       get: (_, property) => {
         const propertyPath = [...path, property];
         const value = this.valueFor(propertyPath);
-        return typeof value === "object" && value !== null && !isArray$3(value) ? this.buildReadonlyObjectProxy(propertyPath) : value;
+        return typeof value === "object" && value !== null && !isArray$4(value) ? this.buildReadonlyObjectProxy(propertyPath) : value;
       },
       getOwnPropertyDescriptor: (target, property) => {
         const propertyPath = [...path, property];
@@ -5742,7 +5748,7 @@ class PrioritizedConfigService {
         return {
           value: (
             // TODO - need to wrap arrays in a Proxy as well
-            typeof value === "object" && value !== null && !isArray$3(value) ? this.buildReadonlyObjectProxy(propertyPath) : value
+            typeof value === "object" && value !== null && !isArray$4(value) ? this.buildReadonlyObjectProxy(propertyPath) : value
           ),
           writable: false,
           configurable: true,
@@ -5843,7 +5849,7 @@ function getEnvironmentSetting(name) {
     }
     return undefined;
 }
-// version: 1.452.0-1ecfe8af95
+// version: 1.454.0-761808c4e9
 
 /**
  * Helpers for reaching the Aura framework from the LDS Aura runtime.
@@ -5880,26 +5886,6 @@ function dispatchGlobalEvent(...args) {
 function getAuraClientService() {
     return getAura()?.clientService;
 }
-/**
- * Returns `true` when the Aura runtime is hosted inside an Aura/Experience
- * site (Experience Builder / `communityApp`) rather than LEX (one.app).
- * `$A.get('$Site')` is present and truthy on Aura sites and absent/falsy in
- * LEX. A stable per-page signal, so it is safe to evaluate once at module
- * load. Defensive: never throws.
- *
- * Used to keep the OneStore GraphQL adapter — and the HTTP UIAPI fetch path —
- * on the Aura transport for sites, because the HTTP transport's CSRF handling
- * does not work in the Aura Sites runtime (W-23092947).
- */
-function isAuraSite() {
-    const aura = getAura();
-    try {
-        return !!aura?.get?.('$Site');
-    }
-    catch {
-        return false;
-    }
-}
 
 const auraClientService = getAuraClientService();
 const defaultConfig = {
@@ -7095,9 +7081,6 @@ function buildLuvioActionMarksSendInterceptor() {
     };
 }
 
-function isOneRuntime() {
-    return !!globalThis.LWR;
-}
 /**
  * Public UIAPI url paths verified for HTTP transport.
  *
@@ -7300,63 +7283,31 @@ const CONTENT_DOCUMENTS_VERSIONS_PATH = '/ui-api/records/content-documents/conte
  *   paths: ['/ui-api/some-endpoint/{id}'],
  * }
  */
-// Each runtime uses a SINGLE LDS gate that enables both the public and
-// private path lists. The public/private split is preserved as two separate
+// This fork package (lds-runtime-one-app) is provisioned only in one/one.app's
+// Aura services=, which means it always runs as classic Aura LEX — never LWR,
+// never on a site. The single LDS gate `useHttpUiapiLex` enables both the public
+// and private path lists. The public/private split is preserved as two separate
 // arrays because the PRIVATE paths carry an extra condition: the server-side
 // `auraBasedRequests` UiSdk gate. If UiSdk turns that gate off, private
 // (UiTier-restricted) Connect resources can no longer be served over HTTP and
 // must fall back to Aura, whereas public/allowlisted paths are unaffected.
-//
-// Runtimes are mutually exclusive: One Runtime (globalThis.LWR), Aura Sites
-// ($Site present), and LEX/one.app (everything else). Each has its own gate.
 const PREDICATE_PATH_SETS = [
-    // One Runtime — public UIAPI endpoints
-    {
-        predicate: () => isOneRuntime() && useHttpUiapiOneRuntime.isOpen({ fallback: false }),
-        paths: UIAPI_PUBLIC_PATHS,
-    },
-    // One Runtime — private UIAPI endpoints (also require the UiSdk gate)
-    {
-        predicate: () => isOneRuntime() &&
-            useHttpUiapiOneRuntime.isOpen({ fallback: false }) &&
-            auraBasedRequestsEnabled.isOpen({ fallback: false }),
-        paths: UIAPI_PRIVATE_PATHS,
-    },
-    // Aura Sites — public UIAPI endpoints.
-    // Gate defaults closed, which keeps HTTP UIAPI OFF on Aura/Experience sites:
-    // the HTTP transport's CSRF handling is broken there (W-23092947), so until
-    // that is fixed this gate must not be opened. Wiring it as a normal gated
-    // predicate (rather than a hard block) lets it be flipped on once CSRF works.
-    {
-        predicate: () => isAuraSite() && useHttpUiapiAuraSites.isOpen({ fallback: false }),
-        paths: UIAPI_PUBLIC_PATHS,
-    },
-    // Aura Sites — private UIAPI endpoints (also require the UiSdk gate)
-    {
-        predicate: () => isAuraSite() &&
-            useHttpUiapiAuraSites.isOpen({ fallback: false }) &&
-            auraBasedRequestsEnabled.isOpen({ fallback: false }),
-        paths: UIAPI_PRIVATE_PATHS,
-    },
     // LEX (one.app) — public UIAPI endpoints
     {
-        predicate: () => !isOneRuntime() && !isAuraSite() && useHttpUiapiLex.isOpen({ fallback: false }),
+        predicate: () => useHttpUiapiLex.isOpen({ fallback: false }),
         paths: UIAPI_PUBLIC_PATHS,
     },
     // LEX (one.app) — private UIAPI endpoints (also require the UiSdk gate)
     {
-        predicate: () => !isOneRuntime() &&
-            !isAuraSite() &&
-            useHttpUiapiLex.isOpen({ fallback: false }) &&
+        predicate: () => useHttpUiapiLex.isOpen({ fallback: false }) &&
             auraBasedRequestsEnabled.isOpen({ fallback: false }),
         paths: UIAPI_PRIVATE_PATHS,
     },
     // disableCreateContentDocumentAndVersionHTTPLexRuntime killswitch.
-    // Excluded on Aura Sites for the same broken-CSRF reason as the UIAPI paths
-    // (W-23092947); LEX / One Runtime are unaffected.
+    // This fork only runs in LEX (one.app), never on a site, so the killswitch
+    // alone controls the feature.
     {
-        predicate: () => !isAuraSite() &&
-            !disableCreateContentDocumentAndVersionHTTPLexRuntime.isOpen({ fallback: false }),
+        predicate: () => !disableCreateContentDocumentAndVersionHTTPLexRuntime.isOpen({ fallback: false }),
         paths: [CONTENT_DOCUMENTS_VERSIONS_PATH],
     },
 ];
@@ -11235,7 +11186,7 @@ register({
     instrument: ldsNetworkAdapterInstrument,
 });
 // Publish buildPredictorForContext on the force/ldsEngine registration bus so that
-// shared laf loaders can obtain it without a dynamic import("force/ldsEngineCreator"),
+// shared laf loaders can obtain it without a dynamic import of the aura ldsEngineCreator module,
 // which would evaluate this whole bootstrap a second time. See ADR
 // 2026-07-10-pdl-service-provisioner-decoupling. buildPredictorForContext is a hoisted
 // function declaration and internally no-ops (returns undefined) when the PDL gate is
@@ -11557,4 +11508,4 @@ function ldsEngineCreator() {
 }
 
 export { LexRequestStrategy, PDL_ENGINE_REGISTRATION_ID, PdlPrefetcherEventType, PdlRequestPriority, buildPredictorForContext, configService, ldsEngineCreator as default, initializeLDS, initializeOneStore, notifyUpdateAvailableFactory, registerRequestStrategy, saveRequestAsPrediction, subscribeToPrefetcherEvents, unregisterRequestStrategy, whenPredictionsReady };
-// version: 1.452.0-bcd113b7fd
+// version: 1.454.0-4223ab4365

package/dist/types/aura-utils.d.ts

@@ -42,16 +42,4 @@ export interface AuraClientService {
  * `undefined` otherwise. Defensive: never throws.
  */
 export declare function getAuraClientService(): AuraClientService | undefined;
-/**
- * Returns `true` when the Aura runtime is hosted inside an Aura/Experience
- * site (Experience Builder / `communityApp`) rather than LEX (one.app).
- * `$A.get('$Site')` is present and truthy on Aura sites and absent/falsy in
- * LEX. A stable per-page signal, so it is safe to evaluate once at module
- * load. Defensive: never throws.
- *
- * Used to keep the OneStore GraphQL adapter — and the HTTP UIAPI fetch path —
- * on the Aura transport for sites, because the HTTP transport's CSRF handling
- * does not work in the Aura Sites runtime (W-23092947).
- */
-export declare function isAuraSite(): boolean;
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@salesforce/lds-runtime-one-app",
-    "version": "1.452.0",
+    "version": "1.454.0",
     "license": "SEE LICENSE IN LICENSE.txt",
     "description": "LDS engine for the one.app (LEX) runtime.",
     "main": "dist/oneAppLdsEngineCreator.js",
@@ -34,53 +34,53 @@
         "release:corejar": "yarn build && ../core-build/scripts/core.js --name=lds-runtime-one-app"
     },
     "devDependencies": {
-        "@conduit-client/service-provisioner": "3.26.0",
-        "@conduit-client/tools-core": "3.26.0",
-        "@salesforce/lds-adapters-apex": "^1.452.0",
-        "@salesforce/lds-adapters-uiapi": "^1.452.0",
-        "@salesforce/lds-ads-bridge": "^1.452.0",
-        "@salesforce/lds-aura-storage": "^1.452.0",
-        "@salesforce/lds-bindings": "^1.452.0",
-        "@salesforce/lds-instrumentation": "^1.452.0",
-        "@salesforce/lds-network-adapter": "^1.452.0",
-        "@salesforce/lds-network-aura": "^1.452.0",
-        "@salesforce/lds-network-fetch": "^1.452.0",
+        "@conduit-client/service-provisioner": "3.26.3",
+        "@conduit-client/tools-core": "3.26.3",
+        "@salesforce/lds-adapters-apex": "^1.454.0",
+        "@salesforce/lds-adapters-uiapi": "^1.454.0",
+        "@salesforce/lds-ads-bridge": "^1.454.0",
+        "@salesforce/lds-aura-storage": "^1.454.0",
+        "@salesforce/lds-bindings": "^1.454.0",
+        "@salesforce/lds-instrumentation": "^1.454.0",
+        "@salesforce/lds-network-adapter": "^1.454.0",
+        "@salesforce/lds-network-aura": "^1.454.0",
+        "@salesforce/lds-network-fetch": "^1.454.0",
         "jwt-encode": "1.0.1"
     },
     "dependencies": {
-        "@conduit-client/command-aura-graphql-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-aura-network": "3.26.0",
-        "@conduit-client/command-aura-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-fetch-network": "3.26.0",
-        "@conduit-client/command-http-graphql-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-http-normalized-cache-control": "3.26.0",
-        "@conduit-client/command-ndjson": "3.26.0",
-        "@conduit-client/command-network": "3.26.0",
-        "@conduit-client/command-sse": "3.26.0",
-        "@conduit-client/command-streaming": "3.26.0",
-        "@conduit-client/jwt-manager": "3.26.0",
-        "@conduit-client/service-aura-network": "3.26.0",
-        "@conduit-client/service-bindings-imperative": "3.26.0",
-        "@conduit-client/service-bindings-lwc": "3.26.0",
-        "@conduit-client/service-cache": "3.26.0",
-        "@conduit-client/service-cache-control": "3.26.0",
-        "@conduit-client/service-cache-inclusion-policy": "3.26.0",
-        "@conduit-client/service-config": "3.26.0",
-        "@conduit-client/service-feature-flags": "3.26.0",
-        "@conduit-client/service-fetch-network": "3.26.0",
-        "@conduit-client/service-instrument-command": "3.26.0",
-        "@conduit-client/service-pubsub": "3.26.0",
-        "@conduit-client/service-renewable-resource-manager": "3.26.0",
-        "@conduit-client/service-store": "3.26.0",
-        "@conduit-client/utils": "3.26.0",
-        "@luvio/network-adapter-composable": "0.161.0",
-        "@luvio/network-adapter-fetch": "0.161.0",
+        "@conduit-client/command-aura-graphql-normalized-cache-control": "3.26.3",
+        "@conduit-client/command-aura-network": "3.26.3",
+        "@conduit-client/command-aura-normalized-cache-control": "3.26.3",
+        "@conduit-client/command-fetch-network": "3.26.3",
+        "@conduit-client/command-http-graphql-normalized-cache-control": "3.26.3",
+        "@conduit-client/command-http-normalized-cache-control": "3.26.3",
+        "@conduit-client/command-ndjson": "3.26.3",
+        "@conduit-client/command-network": "3.26.3",
+        "@conduit-client/command-sse": "3.26.3",
+        "@conduit-client/command-streaming": "3.26.3",
+        "@conduit-client/jwt-manager": "3.26.3",
+        "@conduit-client/service-aura-network": "3.26.3",
+        "@conduit-client/service-bindings-imperative": "3.26.3",
+        "@conduit-client/service-bindings-lwc": "3.26.3",
+        "@conduit-client/service-cache": "3.26.3",
+        "@conduit-client/service-cache-control": "3.26.3",
+        "@conduit-client/service-cache-inclusion-policy": "3.26.3",
+        "@conduit-client/service-config": "3.26.3",
+        "@conduit-client/service-feature-flags": "3.26.3",
+        "@conduit-client/service-fetch-network": "3.26.3",
+        "@conduit-client/service-instrument-command": "3.26.3",
+        "@conduit-client/service-pubsub": "3.26.3",
+        "@conduit-client/service-renewable-resource-manager": "3.26.3",
+        "@conduit-client/service-store": "3.26.3",
+        "@conduit-client/utils": "3.26.3",
+        "@luvio/network-adapter-composable": "0.161.2",
+        "@luvio/network-adapter-fetch": "0.161.2",
         "@lwc/state": "^0.29.0",
-        "@salesforce/lds-adapters-onestore-graphql": "^1.452.0",
+        "@salesforce/lds-adapters-onestore-graphql": "^1.454.0",
         "@salesforce/lds-adapters-uiapi-lex": "^1.415.0",
-        "@salesforce/lds-durable-storage": "^1.452.0",
-        "@salesforce/lds-luvio-service": "^1.452.0",
-        "@salesforce/lds-luvio-uiapi-records-service": "^1.452.0"
+        "@salesforce/lds-durable-storage": "^1.454.0",
+        "@salesforce/lds-luvio-service": "^1.454.0",
+        "@salesforce/lds-luvio-uiapi-records-service": "^1.454.0"
     },
     "luvioBundlesize": [
         {