@salesforce/platform-sdk 3.0.0

package/dist/data/webapp/csrf/retry.policy.d.ts

@@ -0,0 +1,31 @@
+import { RetryPolicy, RetryContext } from '@conduit-client/service-retry/v1';
+import { CsrfTokenManager } from './token-manager';
+/**
+ * Retry policy that handles CSRF token expiration errors.
+ *
+ * When a request fails with a CSRF token error this policy will:
+ * 1. Detect the error condition in shouldRetry
+ * 2. Refresh the CSRF token in prepareRetry hook
+ * 3. Retry the request once (maxRetries = 1)
+ *
+ */
+export declare class CsrfTokenRetryPolicy extends RetryPolicy<Response> {
+    private csrfTokenManager;
+    constructor(csrfTokenManager: CsrfTokenManager);
+    /**
+     * Determines if a failed request should be retried due to CSRF token issues.
+     */
+    shouldRetry(result: Response, context: RetryContext<Response>): Promise<boolean>;
+    /**
+     * CSRF token refresh should happen immediately with no delay.
+     */
+    calculateDelay(_result: Response, _context: RetryContext<Response>): Promise<number>;
+    /**
+     * Called by retry service before each retry attempt.
+     *
+     * @param _result - The failed response that triggered the retry (unused, already validated)
+     * @param _context - Current retry context (unused but part of interface)
+     */
+    prepareRetry(_result: Response, _context: RetryContext<Response>): Promise<void>;
+}
+//# sourceMappingURL=retry.policy.d.ts.map

package/dist/data/webapp/csrf/retry.policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.policy.d.ts","sourceRoot":"","sources":["../../../../src/data/webapp/csrf/retry.policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAIxD;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,WAAW,CAAC,QAAQ,CAAC;IAClD,OAAO,CAAC,gBAAgB;gBAAhB,gBAAgB,EAAE,gBAAgB;IAKtD;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAUtF;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAI1F;;;;;OAKG;IACY,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAI/F"}

package/dist/data/webapp/csrf/token-manager.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+/**
+ * Manages CSRF token fetching and caching for secure requests.
+ * Implements a singleton pattern to ensure consistent token management across the application.
+ */
+declare class CsrfTokenManager {
+    private endpoint;
+    private cacheName?;
+    private tokenPromise;
+    private refreshPromise;
+    constructor(endpoint: string, cacheName?: string | undefined);
+    /**
+     * Returns the current token value as a Promise.
+     * Lazy-loads the token on first call (from cache or by fetching).
+     */
+    getToken(): Promise<string>;
+    /**
+     * Obtains and returns a new token value as a promise.
+     * This will clear the cached token and fetch a fresh one.
+     * If a refresh is already in progress, all callers share the same in-flight promise.
+     */
+    refreshToken(): Promise<string | undefined>;
+    /**
+     * Obtains a CSRF token, using cache when available or fetching a new one.
+     *
+     * @returns Promise that resolves to the CSRF token string
+     */
+    private obtainToken;
+    /**
+     * Provides a safe way to interact with the Cache API with fallback for unsupported environments.
+     *
+     * @param callback - Function that receives the cache instance and returns a promise
+     * @returns The result of the callback, or undefined if caches API is not available
+     */
+    private withCache;
+}
+export { CsrfTokenManager };
+//# sourceMappingURL=token-manager.d.ts.map

package/dist/data/webapp/csrf/token-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-manager.d.ts","sourceRoot":"","sources":["../../../../src/data/webapp/csrf/token-manager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,cAAM,gBAAgB;IAKpB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,SAAS,CAAC;IALnB,OAAO,CAAC,YAAY,CAAkB;IACtC,OAAO,CAAC,cAAc,CAA8B;gBAG3C,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,YAAA;IAK3B;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAIjC;;;;OAIG;IACH,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAmB3C;;;;OAIG;YACW,WAAW;IAsBzB;;;;;OAKG;YACW,SAAS;CASvB;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/data/webapp/fetch.d.ts

@@ -0,0 +1,27 @@
+import { FetchService } from '@conduit-client/service-fetch-network/v1';
+import { RetryInterceptorConfig } from './csrf/retry.interceptor';
+import { CsrfTokenManager } from './csrf/token-manager';
+interface CsrfConfig extends RetryInterceptorConfig {
+    endpoint: string;
+    cacheName: string;
+}
+export interface FetchConfig {
+    csrf: CsrfConfig;
+}
+/**
+ * Module-level registry so all SDK instances sharing the same CSRF endpoint
+ * share one CsrfTokenManager — one tokenPromise, one network fetch per lifecycle.
+ * Exported for test isolation only; not part of the public API.
+ */
+export declare const tokenManagerRegistry: Map<string, CsrfTokenManager>;
+/**
+ * Creates an enhanced fetch function with automatic CSRF token handling.
+ * The returned function automatically adds CSRF tokens to protected requests
+ * and handles token refresh when tokens become invalid.
+ *
+ * @param config - Optional configuration for CSRF handling
+ * @returns An enhanced fetch function that handles CSRF protection
+ */
+export declare function createFetchService(config: FetchConfig): FetchService;
+export {};
+//# sourceMappingURL=fetch.d.ts.map

package/dist/data/webapp/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/data/webapp/fetch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEN,KAAK,YAAY,EACjB,MAAM,0CAA0C,CAAC;AAGlD,OAAO,EAEN,KAAK,sBAAsB,EAC3B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,UAAU,UAAW,SAAQ,sBAAsB;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,UAAU,CAAC;CACjB;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,+BAAsC,CAAC;AAExE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,CAgBpE"}

package/dist/data/webapp/index.d.ts

@@ -0,0 +1,19 @@
+import { DataSDK, GraphQLRequest, GraphQLResponse } from '../../core';
+import { WebAppDataSDKOptions } from '../index';
+/**
+ * Data SDK implementation for web apps, which is based on making `fetch` calls to REST endpoints
+ */
+export declare class WebAppDataSDK implements DataSDK {
+    private readonly baseUrl;
+    private readonly clientFetch;
+    private readonly onStatus;
+    constructor(options?: WebAppDataSDKOptions);
+    graphql<T, V>({ query, variables, operationName, }: GraphQLRequest<V>): Promise<GraphQLResponse<T>>;
+    fetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
+    /**
+     * If the url is relative, convert to it to an absolute Salesforce URL.  This is due to the way Code
+     * Builder deployments structure the url for Salesforce
+     */
+    private applySalesforceBase;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/data/webapp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/webapp/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAWrD;;GAEG;AACH,qBAAa,aAAc,YAAW,OAAO;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyD;gBAEtE,OAAO,CAAC,EAAE,oBAAoB;IAiBpC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,EACnB,KAAK,EACL,SAAS,EACT,aAAa,GACb,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAU5C,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAUjF;;;OAGG;IACH,OAAO,CAAC,mBAAmB;CAa3B"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+export * from './core';
+export { createChatSDK, type ChatSDKOptions, MCPAppsChatSDK, getChatSDK, getChatSDKSync, resetChatSDK, } from './chat';
+export { createViewSDK, type ViewSDKOptions, MCPAppsViewSDK, getViewSDK, getViewSDKSync, resetViewSDK, } from './view';
+export { createDataSDK, type DataSDKOptions, type WebAppDataSDKOptions, type MosaicDataSDKOptions, type StatusCallback, type NodeOfConnection, gql, } from './data';
+export { createLightningSDK, type LightningSDKOptions } from './lightning';
+export { createTelemetryTransport, registerTelemetryUploader, TelemetryUploader, type TelemetryTransport, type TelemetryTransportOptions, type TelemetryPayload, type EnvelopeEntry, type EnvelopeMetadata, type TelemetryUploaderOptions, type OnEnvelopeCallback, type FlushReason, type TelemetryUploadContext, type TelemetryUploaderErrorContext, type InstrumentedAppLike, type DisposeOptions, } from './telemetry';
+export { createAnalytics, type Analytics, type AnalyticsOptions } from './analytics';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,QAAQ,CAAC;AAGvB,OAAO,EACN,aAAa,EACb,KAAK,cAAc,EACnB,cAAc,EACd,UAAU,EACV,cAAc,EACd,YAAY,GACZ,MAAM,QAAQ,CAAC;AAGhB,OAAO,EACN,aAAa,EACb,KAAK,cAAc,EACnB,cAAc,EACd,UAAU,EACV,cAAc,EACd,YAAY,GACZ,MAAM,QAAQ,CAAC;AAGhB,OAAO,EACN,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,GAAG,GACH,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAG3E,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,cAAc,GACnB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC"}