@salesforce/platform-sdk 11.9.0 → 11.10.0

package/dist/core/data.d.ts

@@ -15,10 +15,25 @@ export interface GraphQLResponse<T> {
     data: T;
     errors?: GraphQLError[];
 }
+/**
+ * Extra HTTP headers to attach to a single GraphQL request, merged over the
+ * surface's canonical header set. Caller-supplied entries take precedence, so
+ * avoid overriding transport headers such as `Content-Type` unless intentional.
+ *
+ * Accepts any `HeadersInit` — a plain `Record<string, string>`, an array of
+ * `[name, value]` tuples, or a `Headers` instance — so multi-valued headers can
+ * be expressed via repeated tuples or a pre-built `Headers` object.
+ *
+ * Ignored by surfaces that do not issue the request over HTTP directly — the
+ * OpenAI surface delegates to an MCP tool that exposes no header channel.
+ */
+export type GraphQLRequestHeaders = HeadersInit;
 export interface GraphQLRequest<V = Record<string, unknown>> {
     query: string;
     variables?: V;
     operationName?: string;
+    /** @see {@link GraphQLRequestHeaders} */
+    headers?: GraphQLRequestHeaders;
 }
 /**
  * A GraphQL operation source string passed to {@link DataSDKGraphQL.query} or
@@ -107,6 +122,15 @@ export interface QueryOptions<V = Record<string, unknown>> {
     operationName?: string;
     /** Override the default cache behavior for this query. @see {@link CacheControl} */
     cacheControl?: CacheControl;
+    /**
+     * Extra HTTP headers for this request, merged over the surface's canonical
+     * header set. Part of the cache key: two calls that differ only in `headers`
+     * resolve to different cache entries. This prevents a response scoped by a
+     * header — e.g. `Authorization` — from being served to a later caller that
+     * passed a different value. Calls with equivalent headers still share an
+     * entry. @see {@link GraphQLRequestHeaders}
+     */
+    headers?: GraphQLRequestHeaders;
 }
 /**
  * Options bag for {@link DataSDKGraphQL.mutate}.
@@ -115,6 +139,11 @@ export interface MutateOptions<V = Record<string, unknown>> {
     mutation: GraphQLRawDocument;
     variables?: V;
     operationName?: string;
+    /**
+     * Extra HTTP headers for this request, merged over the surface's canonical
+     * header set. @see {@link GraphQLRequestHeaders}
+     */
+    headers?: GraphQLRequestHeaders;
 }
 /**
  * The `graphql` namespace on a {@link DataSDK}.

package/dist/core/data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../src/core/data.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAExC;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAErC;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC;IACvD,SAAS,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;IAC/C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,qBAAqB,GAAG,kBAAkB,CAAC;AAEtE;;GAEG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxD,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,YAAY,CAAC,EAAE,YAAY,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACzD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC9B;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzF;;;;OAIG;IACH,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;CAC9F;AAED,MAAM,WAAW,OAAO;IACvB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,cAAc,CAAC;IAEzB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACrB"}
+{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../src/core/data.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAEhD,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yCAAyC;IACzC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAExC;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAErC;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC;IACvD,SAAS,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;IAC/C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,qBAAqB,GAAG,kBAAkB,CAAC;AAEtE;;GAEG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxD,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACzD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC9B;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzF;;;;OAIG;IACH,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;CAC9F;AAED,MAAM,WAAW,OAAO;IACvB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,cAAc,CAAC;IAEzB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACrB"}

package/dist/core/index.d.ts

@@ -8,7 +8,7 @@ export type { InitializeOptions } from './surface';
 export type { SDKOptions } from './options';
 export type { HostContext, HostStyles, ChatMessage, ChatSDK, ContentBlock, DeviceCapabilities, DisplayMode, ResourceRequest, SafeAreaInsets, SetWidgetStateOptions, ToolCall, ToolState, } from './chat';
 export type { AlertOptions, MessageLevel, ModalOptions, ToastOptions, Theme, ThemeMode, UiState, UiStyles, ViewSDK, } from './view';
-export type { CacheControl, DataSDK, DataSDKGraphQL, GraphQLError, GraphQLRawDocument, GraphQLRequest, GraphQLResponse, MutateOptions, MutationResult, QueryOptions, QueryResult, QuerySubscriber, Unsubscribe, } from './data';
+export type { CacheControl, DataSDK, DataSDKGraphQL, GraphQLError, GraphQLRawDocument, GraphQLRequest, GraphQLRequestHeaders, GraphQLResponse, MutateOptions, MutationResult, QueryOptions, QueryResult, QuerySubscriber, Unsubscribe, } from './data';
 export type { LightningSDK, LMSMessage, LMSSubscription, MessageChannel } from './lightning';
 export type { OpenAISDK } from './platforms';
 export { McpAppsNotAvailableError, McpAppsSession } from './mcpapps-session';

package/dist/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACN,OAAO,EACP,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,YAAY,GACZ,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAGnD,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,YAAY,EACX,WAAW,EACX,UAAU,EACV,WAAW,EACX,OAAO,EACP,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,QAAQ,EACR,SAAS,GACT,MAAM,QAAQ,CAAC;AAGhB,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,SAAS,EACT,OAAO,EACP,QAAQ,EACR,OAAO,GACP,MAAM,QAAQ,CAAC;AAGhB,YAAY,EACX,YAAY,EACZ,OAAO,EACP,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,aAAa,EACb,cAAc,EACd,YAAY,EACZ,WAAW,EACX,eAAe,EACf,WAAW,GACX,MAAM,QAAQ,CAAC;AAGhB,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7F,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC7E,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAGnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACN,OAAO,EACP,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,YAAY,GACZ,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAGnD,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,YAAY,EACX,WAAW,EACX,UAAU,EACV,WAAW,EACX,OAAO,EACP,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,QAAQ,EACR,SAAS,GACT,MAAM,QAAQ,CAAC;AAGhB,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,SAAS,EACT,OAAO,EACP,QAAQ,EACR,OAAO,GACP,MAAM,QAAQ,CAAC;AAGhB,YAAY,EACX,YAAY,EACZ,OAAO,EACP,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,cAAc,EACd,YAAY,EACZ,WAAW,EACX,eAAe,EACf,WAAW,GACX,MAAM,QAAQ,CAAC;AAGhB,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7F,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC7E,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAGnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/data/index.d.ts

@@ -25,7 +25,7 @@ export interface DataSDKOptions extends SDKOptions {
  */
 export declare function createDataSDK(options?: DataSDKOptions): Promise<DataSDK>;
 export { gql } from './gql';
-export type { CacheControl, DataSDK, DataSDKGraphQL, GraphQLError, GraphQLRawDocument, GraphQLRequest, GraphQLResponse, MutateOptions, MutationResult, QueryOptions, QueryResult, QuerySubscriber, SDKOptions, Unsubscribe, } from '../core';
+export type { CacheControl, DataSDK, DataSDKGraphQL, GraphQLError, GraphQLRawDocument, GraphQLRequest, GraphQLRequestHeaders, GraphQLResponse, MutateOptions, MutationResult, QueryOptions, QueryResult, QuerySubscriber, SDKOptions, Unsubscribe, } from '../core';
 export type NodeOfConnection<T> = T extends {
     edges?: (infer E)[] | null;
 } | null ? E extends {

package/dist/data/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAIpE,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;CACnD;AAED,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAErC;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,UAAU;IACjD,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CA2BxE;AAED,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAC5B,YAAY,EACX,YAAY,EACZ,OAAO,EACP,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,aAAa,EACb,cAAc,EACd,YAAY,EACZ,WAAW,EACX,eAAe,EACf,UAAU,EACV,WAAW,GACX,MAAM,SAAS,CAAC;AAEjB,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI,CAAC,SAAS;IAC3C,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;CAC3B,GAAG,IAAI,GACL,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,GAClC,CAAC,GACD,KAAK,GACN,KAAK,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAIpE,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;CACnD;AAED,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAErC;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,UAAU;IACjD,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CA2BxE;AAED,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAC5B,YAAY,EACX,YAAY,EACZ,OAAO,EACP,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,cAAc,EACd,YAAY,EACZ,WAAW,EACX,eAAe,EACf,UAAU,EACV,WAAW,GACX,MAAM,SAAS,CAAC;AAEjB,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI,CAAC,SAAS;IAC3C,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;CAC3B,GAAG,IAAI,GACL,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,GAClC,CAAC,GACD,KAAK,GACN,KAAK,CAAC"}

package/dist/data/index.js

@@ -1,61 +1,94 @@
-import { g as L, S as m } from "../surface-Dd2tqrPi.js";
-import { w as V } from "../sdk-promise-D0sy7OW1.js";
-import { buildServiceDescriptor as _, setHeader as y } from "@conduit-client/service-fetch-network/v1";
-import { resolvedPromiseLike as u, ok as w, err as C, stableJSONStringify as x, DataNotFoundError as Q, UserVisibleError as H, deepFreeze as b, isUserVisibleError as G } from "@conduit-client/utils";
-import { print as D, parse as K } from "@conduit-client/onestore-graphql-parser/v1";
-import { RetryPolicy as z, buildServiceDescriptor as W } from "@conduit-client/service-retry/v1";
-import { buildServiceDescriptor as j } from "@conduit-client/service-cache/v1";
-import { buildServiceDescriptor as B } from "@conduit-client/service-cache-control/v1";
-import { buildInMemoryCacheInclusionPolicyService as J } from "@conduit-client/service-cache-inclusion-policy/v1";
-import { buildServiceDescriptor as X } from "@conduit-client/service-pubsub/v1";
-import { HttpCacheControlCommand as Y } from "@conduit-client/command-http-cache-control/v1";
-function Z(t) {
+import { g as x, S as y } from "../surface-Dd2tqrPi.js";
+import { w as K } from "../sdk-promise-D0sy7OW1.js";
+import { buildServiceDescriptor as R, setHeader as b } from "@conduit-client/service-fetch-network/v1";
+import { resolvedPromiseLike as u, ok as C, err as E, stableJSONStringify as V, DataNotFoundError as Q, UserVisibleError as G, deepFreeze as v, isUserVisibleError as z } from "@conduit-client/utils";
+import { print as A, parse as j } from "@conduit-client/onestore-graphql-parser/v1";
+import { RetryPolicy as W, buildServiceDescriptor as B } from "@conduit-client/service-retry/v1";
+import { buildServiceDescriptor as J } from "@conduit-client/service-cache/v1";
+import { buildServiceDescriptor as X } from "@conduit-client/service-cache-control/v1";
+import { buildInMemoryCacheInclusionPolicyService as Y } from "@conduit-client/service-cache-inclusion-policy/v1";
+import { buildServiceDescriptor as Z } from "@conduit-client/service-pubsub/v1";
+import { HttpCacheControlCommand as ee } from "@conduit-client/command-http-cache-control/v1";
+function re(r) {
   return (e) => {
-    const [r, n] = e;
-    if (typeof r == "string" && !r.startsWith("http")) {
-      const s = r.startsWith("/") ? r : `/${r}`;
-      return u([`${t}${s}`, n]);
+    const [t, n] = e;
+    if (typeof t == "string" && !t.startsWith("http")) {
+      const s = t.startsWith("/") ? t : `/${t}`;
+      return u([`${r}${s}`, n]);
     }
     return u(e);
   };
 }
-function ee(t) {
-  return (e) => u(y("Authorization", `Bearer ${t}`, e));
+function te(r) {
+  return (e) => u(b("Authorization", `Bearer ${r}`, e));
 }
-function re(t, e) {
-  const r = [];
-  return t && r.push(Z(t)), e && r.push(ee(e)), _({
-    request: r
+function ne(r, e) {
+  const t = [];
+  return r && t.push(re(r)), e && t.push(te(e)), R({
+    request: t
   }).service;
 }
-const v = () => {
-}, E = async () => {
+const se = {
+  "Content-Type": "application/json",
+  Accept: "application/json",
+  "X-Chatter-Entity-Encoding": "false"
 };
-function q(t) {
+function ae(r) {
+  if (r instanceof Headers) {
+    const e = [];
+    return r.forEach((t, n) => e.push([n, t])), e;
+  }
+  return Array.isArray(r) ? r.map(([e, t]) => [e, t]) : Object.entries(r);
+}
+function M(r, e) {
+  if (e === void 0) return { ...r };
+  const t = { ...r }, n = /* @__PURE__ */ new Map();
+  for (const a of Object.keys(t)) n.set(a.toLowerCase(), a);
+  const s = /* @__PURE__ */ new Set();
+  for (const [a, i] of ae(e)) {
+    const o = a.toLowerCase(), c = n.get(o);
+    c === void 0 ? (t[a] = i, n.set(o, a), s.add(o)) : s.has(o) ? t[c] = `${t[c]}, ${i}` : (t[c] = i, s.add(o));
+  }
+  return t;
+}
+function I(r) {
+  return M(se, r);
+}
+function oe(r) {
+  if (r === void 0) return;
+  const e = {};
+  return new Headers(r).forEach((t, n) => {
+    e[n] = t;
+  }), Object.keys(e).length > 0 ? e : void 0;
+}
+const S = () => {
+}, D = async () => {
+};
+function k(r) {
   try {
-    return w(K(t));
+    return C(j(r));
   } catch (e) {
-    return C(l(e));
+    return E(d(e));
   }
 }
-function k(t, e) {
-  const r = t.definitions.filter(
+function q(r, e) {
+  const t = r.definitions.filter(
     (n) => n.kind === "OperationDefinition"
   );
-  return r.length === 0 ? "unknown" : r.length === 1 ? e === void 0 || r[0].name?.value === e ? r[0].operation : "unknown" : e === void 0 ? "unknown" : r.find((n) => n.name?.value === e)?.operation ?? "unknown";
+  return t.length === 0 ? "unknown" : t.length === 1 ? e === void 0 || t[0].name?.value === e ? t[0].operation : "unknown" : e === void 0 ? "unknown" : t.find((n) => n.name?.value === e)?.operation ?? "unknown";
 }
-function l(t) {
-  if (t && typeof t == "object" && "data" in t) {
-    const e = t.data;
+function d(r) {
+  if (r && typeof r == "object" && "data" in r) {
+    const e = r.data;
     if (e && typeof e == "object" && "errors" in e && Array.isArray(e.errors))
       return e.errors;
   }
-  return t instanceof Error ? [{ message: t.message }] : typeof t == "string" ? [{ message: t }] : [{ message: "Unknown error" }];
+  return r instanceof Error ? [{ message: r.message }] : typeof r == "string" ? [{ message: r }] : [{ message: "Unknown error" }];
 }
-async function R(t, { mutation: e, variables: r, operationName: n }) {
-  const s = q(e);
-  if (s.isErr()) return { data: void 0, errors: s.error };
-  const a = s.value, o = k(a, n);
+async function L(r, { mutation: e, variables: t, operationName: n, headers: s }) {
+  const a = k(e);
+  if (a.isErr()) return { data: void 0, errors: a.error };
+  const i = a.value, o = q(i, n);
   if (o !== "mutation")
     return {
       data: void 0,
@@ -66,182 +99,192 @@ async function R(t, { mutation: e, variables: r, operationName: n }) {
       ]
     };
   try {
-    const i = await t({
-      query: D(a),
-      variables: r,
-      operationName: n
+    const c = await r({
+      query: A(i),
+      variables: t,
+      operationName: n,
+      headers: s
     });
     return {
-      data: i.data ?? void 0,
-      errors: i.errors
+      data: c.data ?? void 0,
+      errors: c.errors
     };
-  } catch (i) {
-    return { data: void 0, errors: l(i) };
+  } catch (c) {
+    return { data: void 0, errors: d(c) };
   }
 }
-function M(t) {
-  function e(n, s, a) {
-    return t({
-      query: D(n),
+function $(r) {
+  function e(n, s, a, i) {
+    return r({
+      query: A(n),
       variables: s,
-      operationName: a
+      operationName: a,
+      headers: i
     }).then(
       (o) => ({
         data: o.data ?? void 0,
         errors: o.errors
       }),
-      (o) => ({ data: void 0, errors: l(o) })
+      (o) => ({ data: void 0, errors: d(o) })
     );
   }
-  async function r({
+  async function t({
     query: n,
     variables: s,
-    operationName: a
+    operationName: a,
+    headers: i
   }) {
-    const o = q(n);
+    const o = k(n);
     if (o.isErr())
       return {
         data: void 0,
         errors: o.error,
-        subscribe: () => v,
-        refresh: E
+        subscribe: () => S,
+        refresh: D
       };
-    const i = o.value, d = k(i, a);
-    if (d !== "query")
+    const c = o.value, f = q(c, a);
+    if (f !== "query")
       return {
         data: void 0,
         errors: [
           {
-            message: `DataSDK.graphql.query() requires a GraphQL query, received ${d}.`
+            message: `DataSDK.graphql.query() requires a GraphQL query, received ${f}.`
           }
         ],
-        subscribe: () => v,
-        refresh: E
+        subscribe: () => S,
+        refresh: D
       };
-    const c = /* @__PURE__ */ new Set(), p = s, f = await e(i, p, a);
+    const h = /* @__PURE__ */ new Set(), p = s, m = await e(c, p, a, i);
     return {
-      data: f.data,
-      errors: f.errors,
-      subscribe(h) {
-        return c.add(h), () => {
-          c.delete(h);
+      data: m.data,
+      errors: m.errors,
+      subscribe(l) {
+        return h.add(l), () => {
+          h.delete(l);
         };
       },
       async refresh() {
-        const h = await e(i, p, a);
-        for (const S of c) S(h);
+        const l = await e(c, p, a, i);
+        for (const w of h) w(l);
       }
     };
   }
   return {
-    query: r,
-    mutate: (n) => R(t, n)
+    query: t,
+    mutate: (n) => L(r, n)
   };
 }
-const te = typeof __SF_API_VERSION__ < "u" ? __SF_API_VERSION__ : "65.0";
-function $(t = te) {
-  return `/services/data/v${t}`;
+const ie = typeof __SF_API_VERSION__ < "u" ? __SF_API_VERSION__ : "65.0";
+function H(r = ie) {
+  return `/services/data/v${r}`;
 }
-class ne {
+const ce = {
+  "Content-Type": "application/json",
+  Accept: "application/json"
+};
+class ue {
   clientFetch;
   pathData;
   graphql;
   constructor(e) {
-    const r = se(), n = ae(e?.instanceUrl ?? r.instanceUrl), s = e?.accessToken ?? r.accessToken;
-    this.pathData = $(e?.apiVersion ?? r.apiVersion), this.clientFetch = re(n || void 0, s), this.graphql = M(this.executeRawGraphQL.bind(this));
+    const t = he(), n = le(e?.instanceUrl ?? t.instanceUrl), s = e?.accessToken ?? t.accessToken;
+    this.pathData = H(e?.apiVersion ?? t.apiVersion), this.clientFetch = ne(n || void 0, s), this.graphql = $(this.executeRawGraphQL.bind(this));
   }
   async executeRawGraphQL({
     query: e,
-    variables: r,
-    operationName: n
+    variables: t,
+    operationName: n,
+    headers: s
   }) {
     return (await this.clientFetch(`${this.pathData}/graphql`, {
       method: "POST",
-      body: JSON.stringify({ query: e, variables: r, operationName: n }),
-      headers: {
-        "Content-Type": "application/json",
-        Accept: "application/json"
-      }
+      body: JSON.stringify({ query: e, variables: t, operationName: n }),
+      headers: M(ce, s)
     })).json();
   }
 }
-function se() {
-  const t = globalThis.MOSAIC_ENV;
+function he() {
+  const r = globalThis.MOSAIC_ENV;
   return {
-    instanceUrl: t?.instanceUrl,
-    accessToken: t?.accessToken,
-    apiVersion: t?.apiVersion
+    instanceUrl: r?.instanceUrl,
+    accessToken: r?.accessToken,
+    apiVersion: r?.apiVersion
   };
 }
-function ae(t) {
-  if (!t || t === "/") return "";
-  let e = t;
+function le(r) {
+  if (!r || r === "/") return "";
+  let e = r;
   return !e.startsWith("/") && !e.startsWith("http") && (e = `/${e}`), e.endsWith("/") && (e = e.slice(0, -1)), e;
 }
-const oe = "graphqlQuery";
-class ie {
+const de = "graphqlQuery";
+class fe {
   graphql;
   constructor() {
-    this.graphql = M(this.executeRawGraphQL.bind(this));
+    this.graphql = $(this.executeRawGraphQL.bind(this));
   }
+  /**
+   * The `headers` request option is intentionally not forwarded: this surface
+   * delegates to the `graphqlQuery` MCP tool over the ChatGPT bridge, which
+   * issues the HTTP request host-side and exposes no header channel.
+   */
   async executeRawGraphQL({
     query: e,
-    variables: r,
+    variables: t,
     operationName: n
   }) {
-    return (await window.openai.callTool(oe, {
+    return (await window.openai.callTool(de, {
       query: e,
-      ...r != null ? { variables: r } : {},
+      ...t != null ? { variables: t } : {},
       ...n != null ? { operationName: n } : {}
     })).structuredContent;
   }
 }
-const ce = "X-SFDC-Client-Name", ue = "X-SFDC-Client-Version", he = "@salesforce/platform-sdk", le = "11.9.0", de = (t) => {
-  let e = y(ce, he, t);
-  return e = y(ue, le, e), u(e);
-}, pe = "X-CSRF-Token";
-function fe(t, e = {}) {
-  const { protectedUrls: r = [], alwaysProtectedUrls: n = [] } = e;
+const pe = "X-SFDC-Client-Name", me = "X-SFDC-Client-Version", ye = "@salesforce/platform-sdk", be = "11.10.0", ve = (r) => {
+  let e = b(pe, ye, r);
+  return e = b(me, be, e), u(e);
+}, Se = "X-CSRF-Token";
+function we(r, e = {}) {
+  const { protectedUrls: t = [], alwaysProtectedUrls: n = [] } = e;
   return async (s) => {
-    const [a, o] = s, i = new Request(a, o);
-    if (P(n, i.url) || me(i.method) && P(r, i.url)) {
-      const c = await t.getToken();
-      s = y(pe, c, s);
+    const [a, i] = s, o = new Request(a, i);
+    if (O(n, o.url) || ge(o.method) && O(t, o.url)) {
+      const f = await r.getToken();
+      s = b(Se, f, s);
     }
     return u(s);
   };
 }
-function me(t) {
-  const e = t.toLowerCase();
+function ge(r) {
+  const e = r.toLowerCase();
   return e === "post" || e === "put" || e === "patch" || e === "delete";
 }
-function P(t, e) {
-  const r = new URL(e);
-  return t.some((n) => r.pathname.includes(n));
+function O(r, e) {
+  const t = new URL(e);
+  return r.some((n) => t.pathname.includes(n));
 }
-function ye(t, e = {}) {
-  const r = fe(t, e);
+function Ce(r, e = {}) {
+  const t = we(r, e);
   async function n(s) {
-    const a = await r(s);
+    const a = await t(s);
     return fetch(a[0], a[1]);
   }
   return (s, a) => a ? a.applyRetry(async () => n(s)) : n(s);
 }
-const be = [400, 401, 403];
-class ve extends z {
+const Ee = [400, 401, 403];
+class De extends W {
   constructor(e) {
     super(e), this.csrfTokenManager = e;
   }
   /**
    * Determines if a failed request should be retried due to CSRF token issues.
    */
-  async shouldRetry(e, r) {
-    return r.attempt >= 1 ? !1 : be.includes(e.status);
+  async shouldRetry(e, t) {
+    return t.attempt >= 1 ? !1 : Ee.includes(e.status);
   }
   /**
    * CSRF token refresh should happen immediately with no delay.
    */
-  async calculateDelay(e, r) {
+  async calculateDelay(e, t) {
     return 0;
   }
   /**
@@ -250,13 +293,13 @@ class ve extends z {
    * @param _result - The failed response that triggered the retry (unused, already validated)
    * @param _context - Current retry context (unused but part of interface)
    */
-  async prepareRetry(e, r) {
+  async prepareRetry(e, t) {
     await this.csrfTokenManager.refreshToken();
   }
 }
-class Se {
-  constructor(e, r) {
-    this.endpoint = e, this.cacheName = r, this.tokenPromise = this.obtainToken();
+class Ae {
+  constructor(e, t) {
+    this.endpoint = e, this.cacheName = t, this.tokenPromise = this.obtainToken();
   }
   tokenPromise;
   refreshPromise;
@@ -283,10 +326,10 @@ class Se {
    * @returns Promise that resolves to the CSRF token string
    */
   async obtainToken() {
-    let e = await this.withCache((s) => s.match(this.endpoint)), r = !1;
-    e || (e = await fetch(this.endpoint, { method: "get" }), r = !0);
+    let e = await this.withCache((s) => s.match(this.endpoint)), t = !1;
+    e || (e = await fetch(this.endpoint, { method: "get" }), t = !0);
     const n = (await e.clone().json()).csrfToken;
-    return r && await this.withCache((s) => s.put(this.endpoint, e)), n;
+    return t && await this.withCache((s) => s.put(this.endpoint, e)), n;
   }
   /**
    * Provides a safe way to interact with the Cache API with fallback for unsupported environments.
@@ -296,87 +339,82 @@ class Se {
    */
   async withCache(e) {
     if (this.cacheName && caches) {
-      const r = await caches.open(this.cacheName);
-      return e(r);
+      const t = await caches.open(this.cacheName);
+      return e(t);
     } else
       return;
   }
 }
-const T = /* @__PURE__ */ new Map();
-function ge(t) {
-  const { endpoint: e, cacheName: r, ...n } = t.csrf;
-  let s = T.get(e);
-  return s || (s = new Se(e, r), T.set(e, s)), _(
+const P = /* @__PURE__ */ new Map();
+function ke(r) {
+  const { endpoint: e, cacheName: t, ...n } = r.csrf;
+  let s = P.get(e);
+  return s || (s = new Ae(e, t), P.set(e, s)), R(
     {
-      retry: ye(s, n),
-      request: [de]
+      retry: Ce(s, n),
+      request: [ve]
     },
-    W(new ve(s)).service
+    B(new De(s)).service
   ).service;
 }
-const A = /* @__PURE__ */ new Map();
-function we(t) {
-  let e = A.get(t);
+const _ = /* @__PURE__ */ new Map();
+function qe(r) {
+  let e = _.get(r);
   if (!e) {
-    const r = j().service, n = J(r).service, s = B(r, n).service, a = X().service;
-    e = { cache: r, cacheController: s, pubSub: a }, A.set(t, e);
+    const t = J().service, n = Y(t).service, s = X(t, n).service, a = Z().service;
+    e = { cache: t, cacheController: s, pubSub: a }, _.set(r, e);
   }
   return e;
 }
-function Ce(t, e) {
-  const r = we(t);
+function Oe(r, e) {
+  const t = qe(r);
   return {
-    shared: r,
+    shared: t,
     services: {
-      cacheController: r.cacheController,
-      pubSub: r.pubSub,
+      cacheController: t.cacheController,
+      pubSub: t.pubSub,
       fetch: e
     }
   };
 }
-function I() {
-  return {
-    "Content-Type": "application/json",
-    Accept: "application/json",
-    "X-Chatter-Entity-Encoding": "false"
-  };
-}
 const N = 300;
-function Ee(t, e) {
+function Pe(r, e) {
   try {
-    return JSON.parse(JSON.stringify(t));
-  } catch (r) {
+    return JSON.parse(JSON.stringify(r));
+  } catch (t) {
     const n = e || "(anonymous)", s = new TypeError(
-      `HttpGraphQLResourceCacheControlCommand: variables for operation "${n}" must be JSON-serializable. ${r.message}`
+      `HttpGraphQLResourceCacheControlCommand: variables for operation "${n}" must be JSON-serializable. ${t.message}`
     );
-    throw s.cause = r, s;
+    throw s.cause = t, s;
   }
 }
-function De(t) {
-  if (typeof t == "object" && t.type === "max-age") {
-    const e = t.maxAge;
+function _e(r) {
+  if (typeof r == "object" && r.type === "max-age") {
+    const e = r.maxAge;
     return Number.isFinite(e) && e >= 0 ? e : N;
   }
   return N;
 }
-class qe extends Y {
-  constructor(e, r, n) {
-    super(r), this.url = n, this.query = e.query, this.normalizedOperationName = e.operationName ?? "", this.normalizedVariables = Ee(
+class Ne extends ee {
+  constructor(e, t, n) {
+    super(t), this.url = n, this.query = e.query, this.normalizedOperationName = e.operationName ?? "", this.normalizedVariables = Pe(
       e.variables ?? {},
       this.normalizedOperationName
-    ), this.cacheControl = e.cacheControl, this.resolvedMaxAge = De(e.cacheControl);
+    ), this.cacheControl = e.cacheControl, this.resolvedMaxAge = _e(e.cacheControl), this.headers = e.headers, this.headersKey = oe(e.headers);
   }
   query;
   normalizedVariables;
   normalizedOperationName;
   cacheControl;
   resolvedMaxAge;
+  headers;
+  headersKey;
   get fetchParams() {
     return [
       this.url,
       {
         method: "POST",
-        headers: I(),
+        headers: I(this.headers),
         body: JSON.stringify({
           query: this.query,
           variables: this.normalizedVariables,
@@ -386,11 +424,12 @@ class qe extends Y {
     ];
   }
   buildKey() {
-    return x({
+    const e = {
       query: this.query,
       variables: this.normalizedVariables,
       operationName: this.normalizedOperationName
-    });
+    };
+    return this.headersKey !== void 0 && (e.headers = this.headersKey), V(e);
   }
   /**
    * Reads from the cache and returns the cache result or error
@@ -406,14 +445,14 @@ class qe extends Y {
    * @returns result or error from the cache
    */
   readFromCache(e) {
-    const r = this.buildKey(), n = e.get(r)?.value;
-    return n === void 0 ? u(C(new Q())) : u(w(n));
+    const t = this.buildKey(), n = e.get(t)?.value;
+    return n === void 0 ? u(E(new Q())) : u(C(n));
   }
-  writeToCache(e, r) {
-    if (r.isOk() && r.value.data != null && Object.keys(r.value.data).length > 0) {
+  writeToCache(e, t) {
+    if (t.isOk() && t.value.data != null && Object.keys(t.value.data).length > 0) {
       const n = Math.floor(Date.now() / 1e3);
       e.set(this.buildKey(), {
-        value: r.value.data,
+        value: t.value.data,
         metadata: {
           cacheControl: {
             type: "max-age",
@@ -437,122 +476,124 @@ class qe extends Y {
     return e.errors && e.errors.length > 0;
   }
   processFetchReturnValue(e) {
-    return this.responseHasErrors(e) ? C(new H(e)) : w(e);
+    return this.responseHasErrors(e) ? E(new G(e)) : C(e);
   }
 }
-function U(t) {
-  if (G(t) && t.data && typeof t.data == "object") {
-    const e = t.data;
+function F(r) {
+  if (z(r) && r.data && typeof r.data == "object") {
+    const e = r.data;
     if (e.data != null)
       return e.data;
   }
 }
-function ke(t) {
+function Te(r) {
   return (e) => {
     if (e.isOk()) {
-      const r = e.value;
-      b(r), t({ data: r, errors: void 0 });
+      const t = e.value;
+      v(t), r({ data: t, errors: void 0 });
     } else {
-      const r = U(e.error);
-      r && b(r), t({ data: r, errors: l(e.error) });
+      const t = F(e.error);
+      t && v(t), r({ data: t, errors: d(e.error) });
     }
   };
 }
-async function Pe(t) {
-  let e, r, n;
+async function Re(r) {
+  let e, t, n;
   try {
-    const s = await t.execute();
-    s.isOk() ? (e = s.value.data, b(e), n = (a) => s.value.subscribe(a)) : (e = U(s.error.failure), e && b(e), r = l(s.error.failure), n = (a) => s.error.subscribe(a));
+    const s = await r.execute();
+    s.isOk() ? (e = s.value.data, v(e), n = (a) => s.value.subscribe(a)) : (e = F(s.error.failure), e && v(e), t = d(s.error.failure), n = (a) => s.error.subscribe(a));
   } catch (s) {
-    r = l(s);
+    t = d(s);
   }
   return {
     data: e,
-    errors: r,
+    errors: t,
     subscribe(s) {
-      return n ? n(ke(s)) : v;
+      return n ? n(Te(s)) : S;
     },
     async refresh() {
-      await t.refresh();
+      await r.refresh();
     }
   };
 }
-function g(t) {
+function g(r) {
   return {
     data: void 0,
-    errors: t,
-    subscribe: () => v,
-    refresh: E
+    errors: r,
+    subscribe: () => S,
+    refresh: D
   };
 }
-function Te({
-  bundle: t,
+function Me({
+  bundle: r,
   url: e,
-  executeRaw: r
+  executeRaw: t
 }) {
-  const { services: n } = t;
+  const { services: n } = r;
   async function s({
     query: a,
-    variables: o,
-    operationName: i,
-    cacheControl: d
+    variables: i,
+    operationName: o,
+    cacheControl: c,
+    headers: f
   }) {
-    const c = q(a);
-    if (c.isErr()) return g(c.error);
-    const p = c.value, f = k(p, i);
-    if (f !== "query")
+    const h = k(a);
+    if (h.isErr()) return g(h.error);
+    const p = h.value, m = q(p, o);
+    if (m !== "query")
       return g([
         {
-          message: `DataSDK.graphql.query() requires a GraphQL query, received ${f}.`
+          message: `DataSDK.graphql.query() requires a GraphQL query, received ${m}.`
         }
       ]);
-    let h;
+    let l;
     try {
-      h = new qe(
+      l = new Ne(
         {
-          query: D(p),
-          variables: o,
-          operationName: i,
-          cacheControl: d
+          query: A(p),
+          variables: i,
+          operationName: o,
+          cacheControl: c,
+          headers: f
         },
         n,
         e
       );
-    } catch (S) {
-      return g(l(S));
+    } catch (w) {
+      return g(d(w));
     }
-    return Pe(h);
+    return Re(l);
   }
   return {
     query: s,
-    mutate: (a) => R(r, a)
+    mutate: (a) => L(t, a)
   };
 }
-const Ae = 1, Ne = `@salesforce/platform-sdk-data_v${Ae}`, F = $(), Oe = `${F}/ui-api`, O = `${F}/graphql`;
-class _e {
+const Ie = 1, Le = `@salesforce/platform-sdk-data_v${Ie}`, U = H(), $e = `${U}/ui-api`, T = `${U}/graphql`;
+class He {
   baseUrl;
   clientFetch;
   onStatus;
   graphql;
   constructor(e) {
-    const r = Re();
-    this.baseUrl = Me(e?.basePath ?? r.apiPath), this.onStatus = e?.onStatus ?? {}, this.clientFetch = ge({
+    const t = Fe();
+    this.baseUrl = Ue(e?.basePath ?? t.apiPath), this.onStatus = e?.onStatus ?? {}, this.clientFetch = ke({
       csrf: {
-        endpoint: `${this.baseUrl}${Oe}/session/csrf`,
-        cacheName: Ne,
+        endpoint: `${this.baseUrl}${$e}/session/csrf`,
+        cacheName: Le,
         protectedUrls: ["services/data/v", "services/apexrest"],
         alwaysProtectedUrls: ["services/apexrest"]
       }
     });
-    const n = (a, o) => this.fetch(a, o), s = Ce(this.baseUrl, n);
-    this.graphql = Te({
+    const n = (a, i) => this.fetch(a, i), s = Oe(this.baseUrl, n);
+    this.graphql = Me({
       bundle: s,
-      url: O,
+      url: T,
       executeRaw: this.executeRawGraphQL.bind(this)
     });
   }
-  async fetch(e, r) {
-    const n = this.applySalesforceBase(e), s = await this.clientFetch(n, r);
+  async fetch(e, t) {
+    const n = this.applySalesforceBase(e), s = await this.clientFetch(n, t);
     return await this.onStatus[s.status]?.(), s;
   }
   /**
@@ -563,13 +604,14 @@ class _e {
    */
   async executeRawGraphQL({
     query: e,
-    variables: r,
-    operationName: n
+    variables: t,
+    operationName: n,
+    headers: s
   }) {
-    return (await this.fetch(O, {
+    return (await this.fetch(T, {
       method: "POST",
-      body: JSON.stringify({ query: e, variables: r, operationName: n }),
-      headers: I()
+      body: JSON.stringify({ query: e, variables: t, operationName: n }),
+      headers: I(s)
     })).json();
   }
   /**
@@ -580,41 +622,41 @@ class _e {
     if (typeof e == "string") {
       if (e.startsWith("http"))
         return e;
-      const r = e.startsWith("/") ? e : `/${e}`;
-      return `${this.baseUrl}${r}`;
+      const t = e.startsWith("/") ? e : `/${e}`;
+      return `${this.baseUrl}${t}`;
     }
     return e;
   }
 }
-function Re() {
+function Fe() {
   return {
     apiPath: globalThis.SFDC_ENV?.apiPath
   };
 }
-function Me(t) {
-  if (!t || t === "/") return "";
-  let e = t;
+function Ue(r) {
+  if (!r || r === "/") return "";
+  let e = r;
   return e.startsWith("/") || (e = `/${e}`), e.endsWith("/") && (e = e.slice(0, -1)), e;
 }
-function ze(t, ...e) {
-  let r = t[0] ?? "";
+function Ye(r, ...e) {
+  let t = r[0] ?? "";
   for (let n = 0; n < e.length; n += 1)
-    r += String(e[n]) + (t[n + 1] ?? "");
-  return r;
+    t += String(e[n]) + (r[n + 1] ?? "");
+  return t;
 }
-function We(t) {
-  return V(
+function Ze(r) {
+  return K(
     (async () => {
       try {
-        switch (await L(t?.surface)) {
-          case m.OpenAI:
-            return new ie();
-          case m.WebApp:
-          case m.MicroFrontend:
-            return new _e(t?.webapp);
-          case m.Mosaic:
-            return new ne(t?.mosaic);
-          case m.MCPApps:
+        switch (await x(r?.surface)) {
+          case y.OpenAI:
+            return new fe();
+          case y.WebApp:
+          case y.MicroFrontend:
+            return new He(r?.webapp);
+          case y.Mosaic:
+            return new ue(r?.mosaic);
+          case y.MCPApps:
             return {};
           default:
             return {};
@@ -627,6 +669,6 @@ function We(t) {
   );
 }
 export {
-  We as createDataSDK,
-  ze as gql
+  Ze as createDataSDK,
+  Ye as gql
 };

package/dist/data/mosaic/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/mosaic/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAmC,MAAM,YAAY,CAAC;AAI3F;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,qBAAa,aAAc,YAAW,OAAO;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;gBAErB,OAAO,CAAC,EAAE,oBAAoB;YAa5B,iBAAiB;CAgB/B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/mosaic/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAmC,MAAM,YAAY,CAAC;AAc3F;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,qBAAa,aAAc,YAAW,OAAO;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;gBAErB,OAAO,CAAC,EAAE,oBAAoB;YAa5B,iBAAiB;CAc/B"}

package/dist/data/openai/index.d.ts

@@ -6,6 +6,11 @@ import { DataSDK, DataSDKGraphQL } from '../../core';
 export declare class OpenAIDataSDK implements DataSDK {
     readonly graphql: DataSDKGraphQL;
     constructor();
+    /**
+     * The `headers` request option is intentionally not forwarded: this surface
+     * delegates to the `graphqlQuery` MCP tool over the ChatGPT bridge, which
+     * issues the HTTP request host-side and exposes no header channel.
+     */
     private executeRawGraphQL;
 }
 //# sourceMappingURL=index.d.ts.map

package/dist/data/openai/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/openai/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAmC,MAAM,YAAY,CAAC;AAK3F;;;GAGG;AACH,qBAAa,aAAc,YAAW,OAAO;IAC5C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;;YAMnB,iBAAiB;CAa/B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/openai/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAmC,MAAM,YAAY,CAAC;AAK3F;;;GAGG;AACH,qBAAa,aAAc,YAAW,OAAO;IAC5C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;;IAMjC;;;;OAIG;YACW,iBAAiB;CAa/B"}

package/dist/data/shared/graphql/cache/command.d.ts

@@ -5,12 +5,21 @@ import { CacheControlStrategyConfig, NamedCacheControllerService } from '@condui
 import { FetchService, NamedFetchService } from '@conduit-client/service-fetch-network/v1';
 import { NamedPubSubService } from '@conduit-client/service-pubsub/v1';
 import { Result, SyncOrAsync } from '@conduit-client/utils';
-import { CacheControl } from '../../../../core/data';
+import { CacheControl, GraphQLRequestHeaders } from '../../../../core/data';
 export interface GraphQLResourceRequestParams {
     query: string;
     variables?: Record<string, unknown>;
     operationName?: string;
     cacheControl?: CacheControl;
+    /**
+     * Extra HTTP headers merged over the canonical GraphQL header set on the
+     * outgoing request. Included in {@link
+     * HttpGraphQLResourceCacheControlCommand.buildKey} (normalized) because they
+     * can scope the response — e.g. two identical queries carrying different
+     * `Authorization` must not share a cache entry, or a later caller could read
+     * an earlier caller's data without the server re-authorizing.
+     */
+    headers?: GraphQLRequestHeaders;
 }
 type Services = NamedCacheControllerService & Partial<NamedPubSubService> & NamedFetchService;
 /**
@@ -64,6 +73,8 @@ export declare class HttpGraphQLResourceCacheControlCommand<TData extends Record
     private readonly normalizedOperationName;
     private readonly cacheControl;
     private readonly resolvedMaxAge;
+    private readonly headers;
+    private readonly headersKey;
     constructor(config: GraphQLResourceRequestParams, services: Services, url: string);
     protected get fetchParams(): Parameters<FetchService>;
     buildKey(): string;

package/dist/data/shared/graphql/cache/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../../src/data/shared/graphql/cache/command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,KAAK,EACX,0BAA0B,EAC1B,2BAA2B,EAC3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAON,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAuB1D,MAAM,WAAW,4BAA4B;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC5B;AAED,KAAK,QAAQ,GAAG,2BAA2B,GAAG,OAAO,CAAC,kBAAkB,CAAC,GAAG,iBAAiB,CAAC;AAa9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,qBAAa,sCAAsC,CAClD,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAC9D,SAAQ,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;IAUtE,OAAO,CAAC,QAAQ,CAAC,GAAG;IATrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA0B;IAC9D,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;gBAGvC,MAAM,EAAE,4BAA4B,EACpC,QAAQ,EAAE,QAAQ,EACD,GAAG,EAAE,MAAM;IAa7B,SAAS,KAAK,WAAW,IAAI,UAAU,CAAC,YAAY,CAAC,CAapD;IAED,QAAQ,IAAI,MAAM;IAQlB;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAStE,YAAY,CACX,KAAK,EAAE,KAAK,EACZ,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,GAClD,WAAW,CAAC,IAAI,CAAC;IAqBpB,SAAS,KAAK,0BAA0B,IAAI,0BAA0B,CAarE;IAED,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC;cAIrC,uBAAuB,CACzC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,GAC1B,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CAMxC"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../../src/data/shared/graphql/cache/command.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,KAAK,EACX,0BAA0B,EAC1B,2BAA2B,EAC3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAON,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAuBjF,MAAM,WAAW,4BAA4B;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED,KAAK,QAAQ,GAAG,2BAA2B,GAAG,OAAO,CAAC,kBAAkB,CAAC,GAAG,iBAAiB,CAAC;AAa9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,qBAAa,sCAAsC,CAClD,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAC9D,SAAQ,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;IAYtE,OAAO,CAAC,QAAQ,CAAC,GAAG;IAXrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA0B;IAC9D,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqC;gBAG/D,MAAM,EAAE,4BAA4B,EACpC,QAAQ,EAAE,QAAQ,EACD,GAAG,EAAE,MAAM;IAe7B,SAAS,KAAK,WAAW,IAAI,UAAU,CAAC,YAAY,CAAC,CAapD;IAED,QAAQ,IAAI,MAAM;IAelB;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAStE,YAAY,CACX,KAAK,EAAE,KAAK,EACZ,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,GAClD,WAAW,CAAC,IAAI,CAAC;IAqBpB,SAAS,KAAK,0BAA0B,IAAI,0BAA0B,CAarE;IAED,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC;cAIrC,uBAAuB,CACzC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,GAC1B,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CAMxC"}

package/dist/data/shared/graphql/cached-graphql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cached-graphql.d.ts","sourceRoot":"","sources":["../../../../src/data/shared/graphql/cached-graphql.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAON,KAAK,kBAAkB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,cAAc,EAA2C,MAAM,eAAe,CAAC;AAE7F,UAAU,yBAAyB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,kBAAkB,CAAC;CAC/B;AAWD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,EAClC,MAAM,EACN,GAAG,EACH,UAAU,GACV,EAAE,yBAAyB,GAAG,cAAc,CA4C5C"}
+{"version":3,"file":"cached-graphql.d.ts","sourceRoot":"","sources":["../../../../src/data/shared/graphql/cached-graphql.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAON,KAAK,kBAAkB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,cAAc,EAA2C,MAAM,eAAe,CAAC;AAE7F,UAAU,yBAAyB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,kBAAkB,CAAC;CAC/B;AAWD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,EAClC,MAAM,EACN,GAAG,EACH,UAAU,GACV,EAAE,yBAAyB,GAAG,cAAc,CA8C5C"}

package/dist/data/shared/graphql/graphql-parse.d.ts

@@ -12,5 +12,5 @@ export declare function parseToDocument(op: GraphQLRawDocument): Result<Document
 export declare function getOperationKind(document: DocumentNode, operationName?: string): "query" | "mutation" | "subscription" | "unknown";
 export declare function toErrors(reason: unknown): GraphQLError[];
 export type RawGraphQLExecutor = <T, V = Record<string, unknown>>(request: GraphQLRequest<V>) => Promise<GraphQLResponse<T>>;
-export declare function executeMutate<T, V = Record<string, unknown>>(executeRaw: RawGraphQLExecutor, { mutation: op, variables, operationName: explicitName }: MutateOptions<V>): Promise<MutationResult<T>>;
+export declare function executeMutate<T, V = Record<string, unknown>>(executeRaw: RawGraphQLExecutor, { mutation: op, variables, operationName: explicitName, headers }: MutateOptions<V>): Promise<MutationResult<T>>;
 //# sourceMappingURL=graphql-parse.d.ts.map

package/dist/data/shared/graphql/graphql-parse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graphql-parse.d.ts","sourceRoot":"","sources":["../../../../src/data/shared/graphql/graphql-parse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAGN,KAAK,YAAY,EAEjB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EACX,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,aAAa,EACb,cAAc,EACd,WAAW,EACX,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,UAAU,EAAE,WAExB,CAAC;AAEF,eAAO,MAAM,YAAY,QAAa,OAAO,CAAC,IAAI,CAEjD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,CAM5F;AAED,wBAAgB,gBAAgB,CAC/B,QAAQ,EAAE,YAAY,EACtB,aAAa,CAAC,EAAE,MAAM,GACpB,OAAO,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,CAanD;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,YAAY,EAAE,CAexD;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,KACtB,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjC,wBAAsB,aAAa,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,UAAU,EAAE,kBAAkB,EAC9B,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,GACxE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CA6B5B"}
+{"version":3,"file":"graphql-parse.d.ts","sourceRoot":"","sources":["../../../../src/data/shared/graphql/graphql-parse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAGN,KAAK,YAAY,EAEjB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EACX,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,aAAa,EACb,cAAc,EACd,WAAW,EACX,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,UAAU,EAAE,WAExB,CAAC;AAEF,eAAO,MAAM,YAAY,QAAa,OAAO,CAAC,IAAI,CAEjD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,kBAAkB,GAAG,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,CAM5F;AAED,wBAAgB,gBAAgB,CAC/B,QAAQ,EAAE,YAAY,EACtB,aAAa,CAAC,EAAE,MAAM,GACpB,OAAO,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,CAanD;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,YAAY,EAAE,CAexD;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,KACtB,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjC,wBAAsB,aAAa,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,UAAU,EAAE,kBAAkB,EAC9B,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,GACjF,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CA8B5B"}

package/dist/data/shared/graphql/headers.d.ts

@@ -4,10 +4,44 @@
  * For full license text, see the LICENSE.txt file
  */
 /**
- * Builds the canonical request header set for Salesforce GraphQL calls.
- * Used by both the WebApp DataSDK transport path and the cache control
- * command, so the wire format stays identical regardless of which path
- * a consumer's request takes.
+ * Merge caller-supplied `overrides` over a `base` header set — caller wins on
+ * collision — and return a plain header record suitable for `RequestInit`.
+ *
+ * `overrides` accepts any `HeadersInit` form: a plain record, an array of
+ * `[name, value]` tuples, or a `Headers` instance. Multi-valued headers are
+ * expressible via repeated tuple names (folded here into one comma-separated
+ * value) or a pre-built `Headers`.
+ *
+ * With no overrides the `base` record is returned by value, unchanged. Header
+ * names are matched case-insensitively (they are case-insensitive per RFC 7230
+ * §3.2), so a caller-supplied `content-type` overrides the canonical
+ * `Content-Type` in place rather than emitting a duplicate. The winning name's
+ * original casing is preserved — the base key on collision, otherwise the
+ * caller's.
  */
-export declare function buildGraphQLRequestHeaders(): Record<string, string>;
+export declare function mergeRequestHeaders(base: Record<string, string>, overrides?: HeadersInit): Record<string, string>;
+/**
+ * Builds the canonical Salesforce GraphQL request headers for the core/webapp
+ * surface, with optional per-request `overrides` merged on top. Used by both
+ * the WebApp DataSDK transport path and the cache control command so the wire
+ * format stays identical regardless of which path a consumer's request takes.
+ */
+export declare function buildGraphQLRequestHeaders(overrides?: HeadersInit): Record<string, string>;
+/**
+ * Reduce a per-request `HeadersInit` into a stable, canonical record for use as
+ * part of a cache key. Any `HeadersInit` form collapses to the same result:
+ * names are lowercased and repeated names folded (via `Headers`), so callers
+ * passing equivalent headers in different shapes, casing, or order key
+ * identically. Returns `undefined` when there are no headers, so the no-header
+ * path keeps a cache key byte-identical to one built with no headers at all.
+ *
+ * Headers participate in cache identity because they can scope the response —
+ * most importantly `Authorization`. Two otherwise-identical queries carrying
+ * different auth must resolve to different cache entries; sharing one would let
+ * a later caller read an earlier caller's response without the server ever
+ * re-authorizing (a silent cross-auth data leak). See {@link
+ * mergeRequestHeaders} for the outgoing-request merge, which is separate from
+ * this keying concern.
+ */
+export declare function normalizeHeadersForKey(headers?: HeadersInit): Record<string, string> | undefined;
 //# sourceMappingURL=headers.d.ts.map

package/dist/data/shared/graphql/headers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../../../src/data/shared/graphql/headers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMnE"}
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../../../src/data/shared/graphql/headers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6BH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,SAAS,CAAC,EAAE,WAAW,GACrB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA+BxB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE1F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAOhG"}

package/dist/data/shared/graphql/uncached-graphql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uncached-graphql.d.ts","sourceRoot":"","sources":["../../../../src/data/shared/graphql/uncached-graphql.ts"],"names":[],"mappings":"AAMA,OAAO,EAON,KAAK,kBAAkB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EACX,cAAc,EAKd,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,kBAAkB,GAAG,cAAc,CAyEnF"}
+{"version":3,"file":"uncached-graphql.d.ts","sourceRoot":"","sources":["../../../../src/data/shared/graphql/uncached-graphql.ts"],"names":[],"mappings":"AAMA,OAAO,EAON,KAAK,kBAAkB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EACX,cAAc,EAMd,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,kBAAkB,GAAG,cAAc,CA4EnF"}

package/dist/data/webapp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/webapp/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAmC,MAAM,YAAY,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAcrD;;GAEG;AACH,qBAAa,aAAc,YAAW,OAAO;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyD;IAClF,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;gBAErB,OAAO,CAAC,EAAE,oBAAoB;IA2BpC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAUjF;;;;;OAKG;YACW,iBAAiB;IAc/B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;CAa3B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/webapp/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAmC,MAAM,YAAY,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAcrD;;GAEG;AACH,qBAAa,aAAc,YAAW,OAAO;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyD;IAClF,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;gBAErB,OAAO,CAAC,EAAE,oBAAoB;IA2BpC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAUjF;;;;;OAKG;YACW,iBAAiB;IAe/B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;CAa3B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/platform-sdk",
-  "version": "11.9.0",
+  "version": "11.10.0",
   "license": "SEE LICENSE IN LICENSE.txt",
   "type": "module",
   "main": "./dist/index.js",
@@ -115,7 +115,7 @@
     "@conduit-client/service-pubsub": "3.19.6",
     "@conduit-client/service-retry": "3.19.6",
     "@conduit-client/utils": "3.19.6",
-    "@salesforce/jsonrpc": "^11.9.0",
+    "@salesforce/jsonrpc": "^11.10.0",
     "@salesforce/sf-embedding-bridge": "2.2.4-rc.1"
   },
   "peerDependencies": {