@stackable-labs/embeddables 2.21.1 → 2.22.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -58,13 +58,29 @@ import '@stackable-labs/embeddables/styles';
58
58
 
59
59
  ## Dev Overrides
60
60
 
61
- For local development against a deployed host app, the SDK supports runtime `bundleUrl` overrides via query parameter. Append to your host app URL:
61
+ For local development against a deployed host app, the SDK supports runtime `bundleUrl` overrides via the `_stackable_dev` (and `_stackable_staging`) query parameter. Append to your host app URL:
62
+
63
+ **Blob format (default — emitted by the CLI when authenticated):** the value after the colon is a `base64url`-encoded JSON `{url, token}` blob; the token is short-lived and verified by the host.
64
+
65
+ ```
66
+ ?_stackable_dev=ext-123:eyJ1cmwiOiJodHRwczovL2FiYy50cnljbG91ZGZsYXJlLmNvbSIsInRva2VuIjoiZXlKaGJHY2lPaUpJVXp...
67
+ ```
68
+
69
+ **Legacy format (fallback — no token):**
70
+
71
+ ```
72
+ ?_stackable_dev=ext-123:https://abc.trycloudflare.com
73
+ ```
74
+
75
+ `_stackable_staging` uses the same blob format and **always requires the token** (no legacy fallback).
76
+
77
+ For multiple extensions, comma-join entries in a single param (mixed blob + legacy is fine — the parser tries each entry independently):
62
78
 
63
79
  ```
64
- ?_stackable_dev=ext-123%3Ahttps%3A%2F%2Fabc.trycloudflare.com
80
+ ?_stackable_dev=ext-123:eyJ1cmwi...,ext-456:eyJ1cmwi...
65
81
  ```
66
82
 
67
- `ExtensionSetup` automatically detects the `_stackable_dev` param, validates the URL against a domain allowlist (localhost, trycloudflare.com, ngrok-free.app), and swaps the `bundleUrl` for matching extensions. A floating "🔧 Dev Mode" badge appears when overrides are active, with a "Clear" button to remove them.
83
+ `ExtensionSetup` automatically detects both params, validates the URL against a domain allowlist (localhost, trycloudflare.com, ngrok-free.app), verifies the token when present, and swaps the `bundleUrl` for matching extensions. A floating "🔧 Dev Mode" badge appears when overrides are active, with a "Clear" button to remove them.
68
84
 
69
85
  No host app code changes required — this is built into `ExtensionSetup`.
70
86
 
package/dist/react.js CHANGED
@@ -5,7 +5,7 @@ import * as Mn from "react-dom";
5
5
  import Pi from "react-dom";
6
6
  const Sd = 8e3, Ed = () => {
7
7
  try {
8
- return "7c13e58a-2df2-4fea-8269-326037086835";
8
+ return "baaeeac7-ce75-4e3f-90d4-6d6c0b7d4138";
9
9
  } catch {
10
10
  return "dev";
11
11
  }