@salesforce/platform-sdk 11.69.1 → 11.69.3

package/dist/core/extension-attach.d.ts

@@ -23,11 +23,13 @@ import { ExtendedSDK, ExtensionsFor } from './extension-types';
  * Each `setup` receives the base SDK, and that is all the type promises it:
  * `setup(sdk)` is typed as `Base`, never the accumulating shape. Because every
  * namespace mounts onto one shared `ext` object (below) attached before the
- * loop, a later extension *can* reach an earlier extension's namespace at runtime via
+ * loop, a later extension *can* read an earlier extension's namespace at runtime via
  * `sdk.ext.<name>` — but that reachability is an untyped byproduct, not a WI-1
  * contract to build on. Typed cross-extension access (a extension declaring the
  * namespaces it needs and receiving them in `setup`) is WI-3, via the reserved
  * `Deps` seam on {@link Extension}; until then, author setups as independent.
+ * Writing through `sdk.ext` is always blocked, during `setup` and after — see the
+ * guard below.
  *
  * Atomic and non-mutating: namespaces mount onto a fresh `ext` object hung off
  * a fresh SDK view whose prototype is `base`, so the base's own and inherited
@@ -50,7 +52,10 @@ import { ExtendedSDK, ExtensionsFor } from './extension-types';
  * already claimed by another extension in this call, or a `setup` that throws or
  * rejects surfaces as an error (the extension cases name the extension and chain
  * the cause). The `ext` slot is locked, so a `setup` reassigning the container
- * wholesale throws rather than silently dropping every namespace.
+ * wholesale throws rather than silently dropping every namespace. `ext` itself is
+ * immutable to everyone but this loop: a `setup` that writes `sdk.ext.<name> = …`
+ * directly throws instead of pre-claiming a mount name, and the same holds for any
+ * caller after attach returns — `ext` never becomes writable.
  */
 export declare function attachExtensions<Base extends object, const Extensions extends ExtensionsFor<Base>>(base: Base, extensions: Extensions): Promise<ExtendedSDK<Base, Extensions>>;
 //# sourceMappingURL=extension-attach.d.ts.map

package/dist/core/extension-attach.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extension-attach.d.ts","sourceRoot":"","sources":["../../src/core/extension-attach.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAoB,WAAW,EAAa,aAAa,EAAE,MAAM,mBAAmB,CAAC;AA4CjG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,wBAAsB,gBAAgB,CACrC,IAAI,SAAS,MAAM,EACnB,KAAK,CAAC,UAAU,SAAS,aAAa,CAAC,IAAI,CAAC,EAC3C,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAoF5E"}
+{"version":3,"file":"extension-attach.d.ts","sourceRoot":"","sources":["../../src/core/extension-attach.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAoB,WAAW,EAAa,aAAa,EAAE,MAAM,mBAAmB,CAAC;AA4CjG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,wBAAsB,gBAAgB,CACrC,IAAI,SAAS,MAAM,EACnB,KAAK,CAAC,UAAU,SAAS,aAAa,CAAC,IAAI,CAAC,EAC3C,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAsH5E"}

package/dist/data/index.js

@@ -1,8 +1,8 @@
-import { g as U, S as y } from "../surface-Dd2tqrPi.js";
+import { g as U, S as m } from "../surface-Dd2tqrPi.js";
 import { w as Q } from "../sdk-promise-D0sy7OW1.js";
 import { c as V } from "../extension-factory-CJkfM4km.js";
-import { buildServiceDescriptor as R, setHeader as b } from "@conduit-client/service-fetch-network/v1";
-import { resolvedPromiseLike as u, ok as C, err as D, stableJSONStringify as K, DataNotFoundError as j, UserVisibleError as z, deepFreeze as w, isUserVisibleError as W } from "@conduit-client/utils";
+import { buildServiceDescriptor as $, setHeader as b } from "@conduit-client/service-fetch-network/v1";
+import { resolvedPromiseLike as l, ok as C, err as D, stableJSONStringify as j, DataNotFoundError as K, UserVisibleError as z, deepFreeze as w, isUserVisibleError as W } from "@conduit-client/utils";
 import { print as q, parse as J } from "@conduit-client/onestore-graphql-parser/v1";
 import { RetryPolicy as B, buildServiceDescriptor as X } from "@conduit-client/service-retry/v1";
 import { buildServiceDescriptor as Y } from "@conduit-client/service-cache/v1";
@@ -15,17 +15,17 @@ function ne(t) {
     const [r, n] = e;
     if (typeof r == "string" && !r.startsWith("http")) {
       const s = r.startsWith("/") ? r : `/${r}`;
-      return u([`${t}${s}`, n]);
+      return l([`${t}${s}`, n]);
     }
-    return u(e);
+    return l(e);
   };
 }
 function se(t) {
-  return (e) => u(b("Authorization", `Bearer ${t}`, e));
+  return (e) => l(b("Authorization", `Bearer ${t}`, e));
 }
 function ae(t, e) {
   const r = [];
-  return t && r.push(ne(t)), e && r.push(se(e)), R({
+  return t && r.push(ne(t)), e && r.push(se(e)), $({
     request: r
   }).service;
 }
@@ -41,19 +41,19 @@ function ie(t) {
   }
   return Array.isArray(t) ? t.map(([e, r]) => [e, r]) : Object.entries(t);
 }
-function $(t, e) {
+function R(t, e) {
   if (e === void 0) return { ...t };
   const r = { ...t }, n = /* @__PURE__ */ new Map();
   for (const a of Object.keys(r)) n.set(a.toLowerCase(), a);
   const s = /* @__PURE__ */ new Set();
-  for (const [a, o] of ie(e)) {
-    const i = a.toLowerCase(), c = n.get(i);
-    c === void 0 ? (r[a] = o, n.set(i, a), s.add(i)) : s.has(i) ? r[c] = `${r[c]}, ${o}` : (r[c] = o, s.add(i));
+  for (const [a, c] of ie(e)) {
+    const o = a.toLowerCase(), i = n.get(o);
+    i === void 0 ? (r[a] = c, n.set(o, a), s.add(o)) : s.has(o) ? r[i] = `${r[i]}, ${c}` : (r[i] = c, s.add(o));
   }
   return r;
 }
 function L(t) {
-  return $(oe, t);
+  return R(oe, t);
 }
 function ce(t) {
   if (t === void 0) return;
@@ -66,7 +66,7 @@ const ue = 512;
 function he(t) {
   return t.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-class A extends Error {
+class P extends Error {
   status;
   url;
   constructor(e) {
@@ -82,10 +82,10 @@ async function M(t, e, r) {
   try {
     s = JSON.parse(n);
   } catch (a) {
-    throw new A({ surface: e, url: r, status: t.status, body: n, cause: a });
+    throw new P({ surface: e, url: r, status: t.status, body: n, cause: a });
   }
   if (s === null || typeof s != "object")
-    throw new A({
+    throw new P({
       surface: e,
       url: r,
       status: t.status,
@@ -97,20 +97,20 @@ async function M(t, e, r) {
 const S = () => {
 }, O = async () => {
 };
-function N(t) {
+function x(t) {
   try {
     return C(J(t));
   } catch (e) {
-    return D(p(e));
+    return D(y(e));
   }
 }
-function k(t, e) {
+function N(t, e) {
   const r = t.definitions.filter(
     (n) => n.kind === "OperationDefinition"
   );
   return r.length === 0 ? "unknown" : r.length === 1 ? e === void 0 || r[0].name?.value === e ? r[0].operation : "unknown" : e === void 0 ? "unknown" : r.find((n) => n.name?.value === e)?.operation ?? "unknown";
 }
-function p(t) {
+function y(t) {
   if (t && typeof t == "object" && "data" in t) {
     const e = t.data;
     if (e && typeof e == "object" && "errors" in e && Array.isArray(e.errors))
@@ -119,86 +119,86 @@ function p(t) {
   return t instanceof Error ? [{ message: t.message }] : typeof t == "string" ? [{ message: t }] : [{ message: "Unknown error" }];
 }
 async function I(t, { mutation: e, variables: r, operationName: n, headers: s }) {
-  const a = N(e);
+  const a = x(e);
   if (a.isErr()) return { data: void 0, errors: a.error };
-  const o = a.value, i = k(o, n);
-  if (i !== "mutation")
+  const c = a.value, o = N(c, n);
+  if (o !== "mutation")
     return {
       data: void 0,
       errors: [
         {
-          message: `DataSDK.graphql.mutate() requires a GraphQL mutation, received ${i}.`
+          message: `DataSDK.graphql.mutate() requires a GraphQL mutation, received ${o}.`
         }
       ]
     };
   try {
-    const c = await t({
-      query: q(o),
+    const i = await t({
+      query: q(c),
       variables: r,
       operationName: n,
       headers: s
     });
     return {
-      data: c.data ?? void 0,
-      errors: c.errors
+      data: i.data ?? void 0,
+      errors: i.errors
     };
-  } catch (c) {
-    return { data: void 0, errors: p(c) };
+  } catch (i) {
+    return { data: void 0, errors: y(i) };
   }
 }
 function G(t) {
-  function e(n, s, a, o) {
+  function e(n, s, a, c) {
     return t({
       query: q(n),
       variables: s,
       operationName: a,
-      headers: o
+      headers: c
     }).then(
-      (i) => ({
-        data: i.data ?? void 0,
-        errors: i.errors
+      (o) => ({
+        data: o.data ?? void 0,
+        errors: o.errors
       }),
-      (i) => ({ data: void 0, errors: p(i) })
+      (o) => ({ data: void 0, errors: y(o) })
     );
   }
   async function r({
     query: n,
     variables: s,
     operationName: a,
-    headers: o
+    headers: c
   }) {
-    const i = N(n);
-    if (i.isErr())
+    const o = x(n);
+    if (o.isErr())
       return {
         data: void 0,
-        errors: i.error,
+        errors: o.error,
         subscribe: () => S,
         refresh: O
       };
-    const c = i.value, l = k(c, a);
-    if (l !== "query")
+    const i = o.value, h = N(i, a);
+    if (h !== "query")
       return {
         data: void 0,
         errors: [
           {
-            message: `DataSDK.graphql.query() requires a GraphQL query, received ${l}.`
+            message: `DataSDK.graphql.query() requires a GraphQL query, received ${h}.`
           }
         ],
         subscribe: () => S,
         refresh: O
       };
-    const h = /* @__PURE__ */ new Set(), f = s, m = await e(c, f, a, o);
+    const u = /* @__PURE__ */ new Set(), d = s, p = await e(i, d, a, c);
     return {
-      data: m.data,
-      errors: m.errors,
-      subscribe(d) {
-        return h.add(d), () => {
-          h.delete(d);
+      data: p.data,
+      errors: p.errors,
+      subscribe(f) {
+        return u.add(f), () => {
+          u.delete(f);
         };
       },
       async refresh() {
-        const d = await e(c, f, a, o);
-        for (const v of h) v(d);
+        const f = await e(i, d, a, c);
+        for (const g of u) g(f);
       }
     };
   }
@@ -220,7 +220,7 @@ class pe {
   pathData;
   graphql;
   constructor(e) {
-    const r = fe(), n = me(e?.instanceUrl ?? r.instanceUrl), s = e?.accessToken ?? r.accessToken;
+    const r = fe(), n = ye(e?.instanceUrl ?? r.instanceUrl), s = e?.accessToken ?? r.accessToken;
     this.pathData = H(e?.apiVersion ?? r.apiVersion), this.clientFetch = ae(n || void 0, s), this.graphql = G(this.executeRawGraphQL.bind(this));
   }
   async executeRawGraphQL({
@@ -229,12 +229,12 @@ class pe {
     operationName: n,
     headers: s
   }) {
-    const a = `${this.pathData}/graphql`, o = await this.clientFetch(a, {
+    const a = `${this.pathData}/graphql`, c = await this.clientFetch(a, {
       method: "POST",
       body: JSON.stringify({ query: e, variables: r, operationName: n }),
-      headers: $(de, s)
+      headers: R(de, s)
     });
-    return M(o, "Mosaic", a);
+    return M(c, "Mosaic", a);
   }
 }
 function fe() {
@@ -245,12 +245,12 @@ function fe() {
     apiVersion: t?.apiVersion
   };
 }
-function me(t) {
+function ye(t) {
   if (!t || t === "/") return "";
   let e = t;
   return !e.startsWith("/") && !e.startsWith("http") && (e = `/${e}`), e.endsWith("/") && (e = e.slice(0, -1)), e;
 }
-const ye = "graphqlQuery";
+const me = "graphqlQuery";
 class be {
   graphql;
   constructor() {
@@ -266,32 +266,32 @@ class be {
     variables: r,
     operationName: n
   }) {
-    return (await window.openai.callTool(ye, {
+    return (await window.openai.callTool(me, {
       query: e,
       ...r != null ? { variables: r } : {},
       ...n != null ? { operationName: n } : {}
     })).structuredContent;
   }
 }
-const E = "Accept-Language", we = (t) => {
+const v = "Accept-Language", we = (t) => {
   const e = globalThis.SFDC_ENV?.language;
   if (!e)
-    return u(t);
+    return l(t);
   const [r, n] = t;
-  return (r instanceof Request && !n?.headers ? r.headers.has(E) : new Headers(n?.headers).has(E)) ? u(t) : u(b(E, e, t));
-}, Se = "X-SFDC-Client-Name", ve = "X-SFDC-Client-Version", Ee = "@salesforce/platform-sdk", ge = "11.69.1", Ce = (t) => {
-  let e = b(Se, Ee, t);
-  return e = b(ve, ge, e), u(e);
+  return (r instanceof Request && !n?.headers ? r.headers.has(v) : new Headers(n?.headers).has(v)) ? l(t) : l(b(v, e, t));
+}, Se = "X-SFDC-Client-Name", ge = "X-SFDC-Client-Version", ve = "@salesforce/platform-sdk", Ee = "11.69.3", Ce = (t) => {
+  let e = b(Se, ve, t);
+  return e = b(ge, Ee, e), l(e);
 }, De = "X-CSRF-Token";
 function Oe(t, e = {}) {
   const { protectedUrls: r = [], alwaysProtectedUrls: n = [] } = e;
   return async (s) => {
-    const [a, o] = s, i = a instanceof Request ? a.url : a instanceof URL ? a.href : a, c = o?.method ?? (a instanceof Request ? a.method : void 0) ?? "GET";
-    if (_(n, i) || qe(c) && _(r, i)) {
-      const h = await t.getToken();
-      s = b(De, h, s);
+    const [a, c] = s, o = a instanceof Request ? a.url : a instanceof URL ? a.href : a, i = c?.method ?? (a instanceof Request ? a.method : void 0) ?? "GET";
+    if (_(n, o) || qe(i) && _(r, o)) {
+      const u = await t.getToken();
+      s = b(De, u, s);
     }
-    return u(s);
+    return l(s);
   };
 }
 function qe(t) {
@@ -302,7 +302,7 @@ function _(t, e) {
   const r = new URL(e, globalThis.location?.href ?? "http://localhost");
   return t.some((n) => r.pathname.includes(n));
 }
-function Ne(t, e = {}) {
+function xe(t, e = {}) {
   const r = Oe(t, e);
   async function n(s) {
     const a = await r(s);
@@ -310,8 +310,8 @@ function Ne(t, e = {}) {
   }
   return (s, a) => a ? a.applyRetry(async () => n(s)) : n(s);
 }
-const ke = [400, 401, 403];
-class Ae extends B {
+const Ne = [400, 401, 403];
+class Pe extends B {
   constructor(e) {
     super(e), this.csrfTokenManager = e;
   }
@@ -319,7 +319,7 @@ class Ae extends B {
    * Determines if a failed request should be retried due to CSRF token issues.
    */
   async shouldRetry(e, r) {
-    return r.attempt >= 1 ? !1 : ke.includes(e.status);
+    return r.attempt >= 1 ? !1 : Ne.includes(e.status);
   }
   /**
    * CSRF token refresh should happen immediately with no delay.
@@ -385,29 +385,29 @@ class _e {
       return;
   }
 }
-const P = /* @__PURE__ */ new Map();
-function Pe(t) {
+const k = /* @__PURE__ */ new Map();
+function ke(t) {
   const { endpoint: e, cacheName: r, ...n } = t.csrf;
-  let s = P.get(e);
-  return s || (s = new _e(e, r), P.set(e, s)), R(
+  let s = k.get(e);
+  return s || (s = new _e(e, r), k.set(e, s)), $(
     {
-      retry: Ne(s, n),
+      retry: xe(s, n),
       request: [Ce, we]
     },
-    X(new Ae(s)).service
+    X(new Pe(s)).service
   ).service;
 }
-const T = /* @__PURE__ */ new Map();
-function Te(t) {
-  let e = T.get(t);
+const A = /* @__PURE__ */ new Map();
+function Ae(t) {
+  let e = A.get(t);
   if (!e) {
     const r = Y().service, n = ee(r).service, s = Z(r, n).service, a = te().service;
-    e = { cache: r, cacheController: s, pubSub: a }, T.set(t, e);
+    e = { cache: r, cacheController: s, pubSub: a }, A.set(t, e);
   }
   return e;
 }
-function xe(t, e) {
-  const r = Te(t);
+function Te(t, e) {
+  const r = Ae(t);
   return {
     shared: r,
     services: {
@@ -417,8 +417,8 @@ function xe(t, e) {
     }
   };
 }
-const x = 300;
-function Re(t, e) {
+const T = 300;
+function $e(t, e) {
   try {
     return JSON.parse(JSON.stringify(t));
   } catch (r) {
@@ -428,19 +428,19 @@ function Re(t, e) {
     throw s.cause = r, s;
   }
 }
-function $e(t) {
+function Re(t) {
   if (typeof t == "object" && t.type === "max-age") {
     const e = t.maxAge;
-    return Number.isFinite(e) && e >= 0 ? e : x;
+    return Number.isFinite(e) && e >= 0 ? e : T;
   }
-  return x;
+  return T;
 }
 class Le extends re {
   constructor(e, r, n) {
-    super(r), this.url = n, this.query = e.query, this.normalizedOperationName = e.operationName ?? "", this.normalizedVariables = Re(
+    super(r), this.url = n, this.query = e.query, this.normalizedOperationName = e.operationName ?? "", this.normalizedVariables = $e(
       e.variables ?? {},
       this.normalizedOperationName
-    ), this.cacheControl = e.cacheControl, this.resolvedMaxAge = $e(e.cacheControl), this.headers = e.headers, this.headersKey = ce(e.headers);
+    ), this.cacheControl = e.cacheControl, this.resolvedMaxAge = Re(e.cacheControl), this.headers = e.headers, this.headersKey = ce(e.headers);
   }
   query;
   normalizedVariables;
@@ -469,7 +469,7 @@ class Le extends re {
       variables: this.normalizedVariables,
       operationName: this.normalizedOperationName
     };
-    return this.headersKey !== void 0 && (e.headers = this.headersKey), K(e);
+    return this.headersKey !== void 0 && (e.headers = this.headersKey), j(e);
   }
   /**
    * Reads from the cache and returns the cache result or error
@@ -486,9 +486,9 @@ class Le extends re {
    */
   readFromCache(e) {
     const r = this.buildKey(), n = e.get(r)?.value;
-    return n === void 0 ? u(
-      D(new j("No cached entry found for this query."))
-    ) : u(C(n));
+    return n === void 0 ? l(
+      D(new K("No cached entry found for this query."))
+    ) : l(C(n));
   }
   writeToCache(e, r) {
     if (r.isOk() && r.value.data != null && Object.keys(r.value.data).length > 0) {
@@ -504,7 +504,7 @@ class Le extends re {
         }
       });
     }
-    return u(void 0);
+    return l(void 0);
   }
   get cacheControlStrategyConfig() {
     const e = Math.floor(Date.now() / 1e3);
@@ -544,7 +544,7 @@ function Ge(t) {
       w(r), t({ data: r, errors: void 0 });
     } else {
       const r = F(e.error);
-      r && w(r), t({ data: r, errors: p(e.error) });
+      r && w(r), t({ data: r, errors: y(e.error) });
     }
   };
 }
@@ -552,9 +552,9 @@ async function He(t, e = !1) {
   let r, n, s;
   try {
     const a = await t.execute();
-    a.isOk() ? (r = a.value.data, w(r), s = (o) => a.value.subscribe(o)) : (r = F(a.error.failure), r && w(r), n = e && r === void 0 ? Ie() : p(a.error.failure), s = (o) => a.error.subscribe(o));
+    a.isOk() ? (r = a.value.data, w(r), s = (c) => a.value.subscribe(c)) : (r = F(a.error.failure), r && w(r), n = e && r === void 0 ? Ie() : y(a.error.failure), s = (c) => a.error.subscribe(c));
   } catch (a) {
-    n = p(a);
+    n = y(a);
   }
   return {
     data: r,
@@ -567,7 +567,7 @@ async function He(t, e = !1) {
     }
   };
 }
-function g(t) {
+function E(t) {
   return {
     data: void 0,
     errors: t,
@@ -583,37 +583,37 @@ function Fe({
   const { services: n } = t;
   async function s({
     query: a,
-    variables: o,
-    operationName: i,
-    cacheControl: c,
-    headers: l
+    variables: c,
+    operationName: o,
+    cacheControl: i,
+    headers: h
   }) {
-    const h = N(a);
-    if (h.isErr()) return g(h.error);
-    const f = h.value, m = k(f, i);
-    if (m !== "query")
-      return g([
+    const u = x(a);
+    if (u.isErr()) return E(u.error);
+    const d = u.value, p = N(d, o);
+    if (p !== "query")
+      return E([
         {
-          message: `DataSDK.graphql.query() requires a GraphQL query, received ${m}.`
+          message: `DataSDK.graphql.query() requires a GraphQL query, received ${p}.`
         }
       ]);
-    let d;
+    let f;
     try {
-      d = new Le(
+      f = new Le(
         {
-          query: q(f),
-          variables: o,
-          operationName: i,
-          cacheControl: c,
-          headers: l
+          query: q(d),
+          variables: c,
+          operationName: o,
+          cacheControl: i,
+          headers: h
         },
         n,
         e
       );
-    } catch (v) {
-      return g(p(v));
+    } catch (g) {
+      return E(y(g));
     }
-    return He(d, c === "only-if-cached");
+    return He(f, i === "only-if-cached");
   }
   return {
     query: s,
@@ -628,10 +628,10 @@ class Ve {
   onStatus;
   graphql;
   constructor(e) {
-    const r = Ke();
-    this.baseUrl = je(e?.basePath ?? r.apiPath), this.pathData = H(e?.apiVersion);
+    const r = je();
+    this.baseUrl = Ke(e?.basePath ?? r.apiPath), this.pathData = H(e?.apiVersion);
     const n = `${this.pathData}/ui-api`, s = `${this.pathData}/graphql`;
-    this.onStatus = e?.onStatus ?? {}, this.clientFetch = Pe({
+    this.onStatus = e?.onStatus ?? {}, this.clientFetch = ke({
       csrf: {
         endpoint: `${this.baseUrl}${n}/session/csrf`,
         cacheName: Qe,
@@ -639,9 +639,9 @@ class Ve {
         alwaysProtectedUrls: ["services/apexrest"]
       }
     });
-    const a = (i, c) => this.fetch(i, c), o = xe(`${this.baseUrl}${this.pathData}`, a);
+    const a = (o, i) => this.fetch(o, i), c = Te(`${this.baseUrl}${this.pathData}`, a);
     this.graphql = Fe({
-      bundle: o,
+      bundle: c,
       url: s,
       executeRaw: this.executeRawGraphQL.bind(this)
     });
@@ -662,12 +662,12 @@ class Ve {
     operationName: n,
     headers: s
   }) {
-    const a = `${this.pathData}/graphql`, o = await this.fetch(a, {
+    const a = `${this.pathData}/graphql`, c = await this.fetch(a, {
       method: "POST",
       body: JSON.stringify({ query: e, variables: r, operationName: n }),
       headers: L(s)
     });
-    return M(o, "WebApp", a);
+    return M(c, "WebApp", a);
   }
   /**
    * If the url is relative, convert to it to an absolute Salesforce URL.  This is due to the way Code
@@ -683,12 +683,12 @@ class Ve {
     return e;
   }
 }
-function Ke() {
+function je() {
   return {
     apiPath: globalThis.SFDC_ENV?.apiPath
   };
 }
-function je(t) {
+function Ke(t) {
   if (!t || t === "/") return "";
   let e = t;
   return e.startsWith("/") || (e = `/${e}`), e.endsWith("/") && (e = e.slice(0, -1)), e;
@@ -710,33 +710,57 @@ async function We(t, e) {
     throw new Error(
       'Cannot attach extensions: the base SDK already declares an "ext" member, which the extension container reserves.'
     );
-  const r = Object.create(t), n = {};
+  const r = Object.create(t), n = /* @__PURE__ */ Object.create(null), s = (o) => {
+    throw new Error(`Cannot write "ext.${String(o)}" — ext is immutable once attached.`);
+  }, a = (o) => {
+    throw new Error(`Cannot ${o} "ext" — ext is immutable once attached.`);
+  }, c = new Proxy(n, {
+    set(o, i) {
+      return s(i);
+    },
+    defineProperty(o, i) {
+      return s(i);
+    },
+    deleteProperty(o, i) {
+      return s(i);
+    },
+    // Without these two, `preventExtensions`/`setPrototypeOf` fall through to the
+    // real `store` (no per-property trap catches them) — the first would silently
+    // block later extensions from mounting, the second could inject a readable
+    // property via the prototype chain that no extension ever returned.
+    preventExtensions() {
+      return a("prevent extensions on");
+    },
+    setPrototypeOf() {
+      return a("change the prototype of");
+    }
+  });
   Object.defineProperty(r, "ext", {
-    value: n,
+    value: c,
     enumerable: !0,
     writable: !1,
     configurable: !1
   });
-  for (const s of e) {
-    const { extension: a, mountName: o } = ze(s), i = o === a.name ? `"${a.name}"` : `"${a.name}" (aliased as "${o}")`;
-    if (Object.hasOwn(n, o))
+  for (const o of e) {
+    const { extension: i, mountName: h } = ze(o), u = h === i.name ? `"${i.name}"` : `"${i.name}" (aliased as "${h}")`;
+    if (Object.hasOwn(n, h))
       throw new Error(
-        `Extension ${i} cannot attach: "${o}" is already defined by another extension.`
+        `Extension ${u} cannot attach: "${h}" is already defined by another extension.`
       );
-    let c;
+    let d;
     try {
-      c = await a.setup(r);
-    } catch (l) {
-      throw new Error(`Extension ${i} failed during setup.`, { cause: l });
+      d = await i.setup(r);
+    } catch (p) {
+      throw new Error(`Extension ${u} failed during setup.`, { cause: p });
     }
-    Object.defineProperty(n, o, {
-      value: c,
+    Object.defineProperty(n, h, {
+      value: d,
       enumerable: !0,
-      writable: !0,
-      configurable: !0
+      writable: !1,
+      configurable: !1
     });
   }
-  return r;
+  return Object.freeze(n), r;
 }
 function ct(t, ...e) {
   let r = t[0] ?? "";
@@ -748,14 +772,14 @@ const ut = V();
 async function Je(t) {
   try {
     switch (await U(t?.surface)) {
-      case y.OpenAI:
+      case m.OpenAI:
         return new be();
-      case y.WebApp:
-      case y.MicroFrontend:
+      case m.WebApp:
+      case m.MicroFrontend:
         return new Ve(t?.webapp);
-      case y.Mosaic:
+      case m.Mosaic:
         return new pe(t?.mosaic);
-      case y.MCPApps:
+      case m.MCPApps:
         return {};
       default:
         return {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/platform-sdk",
-  "version": "11.69.1",
+  "version": "11.69.3",
   "license": "SEE LICENSE IN LICENSE.txt",
   "type": "module",
   "main": "./dist/index.js",
@@ -134,7 +134,7 @@
     "@conduit-client/service-pubsub": "3.19.6",
     "@conduit-client/service-retry": "3.19.6",
     "@conduit-client/utils": "3.19.6",
-    "@salesforce/jsonrpc": "^11.69.1",
+    "@salesforce/jsonrpc": "^11.69.3",
     "@salesforce/sf-embedding-bridge": "2.2.5-rc.2"
   },
   "peerDependencies": {