@superleapai/flow-ui 2.5.13 → 2.5.15

package/core/bridge.js

@@ -27,7 +27,7 @@
   // Closure state (reset on each connect / disconnect cycle)
   // ---------------------------------------------------------------------------
 
-  var _instanceId = null;
+  var _bridgeId = null;
   var _nonce = null;
   var _port = null; // MessagePort (iframe transport, post-handshake)
   var _connected = false;
@@ -44,47 +44,6 @@
   // Helpers – crypto
   // ---------------------------------------------------------------------------
 
-  function generateUUID() {
-    // crypto.randomUUID where available (modern browsers)
-    if (
-      typeof crypto !== "undefined" &&
-      typeof crypto.randomUUID === "function"
-    ) {
-      return crypto.randomUUID();
-    }
-    // Fallback: manual v4 UUID via getRandomValues or Math.random
-    var bytes;
-    if (
-      typeof crypto !== "undefined" &&
-      typeof crypto.getRandomValues === "function"
-    ) {
-      bytes = new Uint8Array(16);
-      crypto.getRandomValues(bytes);
-    } else {
-      bytes = new Uint8Array(16);
-      for (var i = 0; i < 16; i++) {
-        bytes[i] = (Math.random() * 256) | 0;
-      }
-    }
-    bytes[6] = (bytes[6] & 0x0f) | 0x40; // version 4
-    bytes[8] = (bytes[8] & 0x3f) | 0x80; // variant 1
-    var hex = [];
-    for (var j = 0; j < 16; j++) {
-      hex.push(("0" + bytes[j].toString(16)).slice(-2));
-    }
-    return (
-      hex.slice(0, 4).join("") +
-      "-" +
-      hex.slice(4, 6).join("") +
-      "-" +
-      hex.slice(6, 8).join("") +
-      "-" +
-      hex.slice(8, 10).join("") +
-      "-" +
-      hex.slice(10).join("")
-    );
-  }
-
   function generateNonce() {
     var bytes;
     if (
@@ -135,7 +94,7 @@
   function createEnvelope(action, payload) {
     return {
       type: MESSAGE_TYPE,
-      instanceId: _instanceId,
+      bridgeId: _bridgeId,
       action: action,
       payload: payload || {},
     };
@@ -185,8 +144,8 @@
   function handleIncomingMessage(data, origin) {
     // Ignore messages that aren't ours
     if (!data || data.type !== MESSAGE_TYPE) return;
-    // Ignore messages for a different instance
-    if (data.instanceId && data.instanceId !== _instanceId) return;
+    // Ignore messages for a different bridge
+    if (data.bridgeId && data.bridgeId !== _bridgeId) return;
 
     var action = data.action;
 
@@ -319,7 +278,7 @@
     if (_transport === "react-native" && global.__superleapBridge) {
       delete global.__superleapBridge;
     }
-    _instanceId = null;
+    _bridgeId = null;
     _nonce = null;
     _connected = false;
     _transport = null;
@@ -337,10 +296,10 @@
    * Initiate a handshake with the host CRM.
    *
    * @param {Object} options
-   * @param {string} options.flowId     – identifies this flow to the CRM
-   * @param {string} [options.version]  – library version (informational)
+   * @param {string} [options.bridgeId]  – explicit bridgeId (auto-read from URL if omitted)
+   * @param {string} [options.version]   – library version (informational)
    * @param {string} [options.crmOrigin] – expected CRM origin for validation
-   * @param {number} [options.timeout]  – handshake timeout in ms (default 5000)
+   * @param {number} [options.timeout]   – handshake timeout in ms (default 5000)
    * @returns {Promise<Object>} resolves with the CRM's handshake-ack payload
    */
   function connect(options) {
@@ -362,7 +321,18 @@
         return;
       }
 
-      _instanceId = generateUUID();
+      // Read bridgeId from URL query param (set by CRM) or explicit option
+      var urlParams = new URLSearchParams(global.location.search);
+      _bridgeId = opts.bridgeId || urlParams.get("_bridgeId");
+      if (!_bridgeId) {
+        reject(
+          new Error(
+            "SuperleapBridge: No _bridgeId found in URL. Is this page embedded in the SuperLeap CRM?",
+          ),
+        );
+        return;
+      }
+
       _nonce = generateNonce();
       _crmOrigin = opts.crmOrigin || null;
       _pendingResolve = resolve;
@@ -409,9 +379,8 @@
 
       // --- Send handshake-request ---
       var envelope = createEnvelope("handshake-request", {
-        flowId: opts.flowId || "",
-        version: opts.version || "",
         nonce: _nonce,
+        version: opts.version || "",
       });
       sendRaw(envelope);
 
@@ -500,8 +469,8 @@
   /**
    * @returns {string|null}
    */
-  function getInstanceId() {
-    return _instanceId;
+  function getBridgeId() {
+    return _bridgeId;
   }
 
   // ---------------------------------------------------------------------------
@@ -515,7 +484,7 @@
     onMessage: onMessage,
     offMessage: offMessage,
     isConnected: isConnected,
-    getInstanceId: getInstanceId,
+    getBridgeId: getBridgeId,
   };
 
   if (global) {

package/core/crm.js

@@ -10,18 +10,9 @@
  *   - Context management (orgId, userId, etc.)
  *   - Custom event send / listen with namespacing
  *
- * Usage (inside an iframe that imports superleap-flow):
- *
- *   const { context, config } = await SuperLeap.connect({
- *     flowId: 'my-onboarding-form',
- *   });
- *   // SDK is now initialized, context has orgId/userId/etc.
- *
- *   SuperLeap.toast('Record saved!', 'success');
- *   SuperLeap.closeForm();
- *
- *   SuperLeap.on('prefill', (data) => { ... });
- *   SuperLeap.send('form-submitted', { values });
+ * The library auto-connects when loaded inside a CRM iframe (bridgeId is
+ * read from the URL).  User code should listen for the 'superleap-flow:ready'
+ * event — by the time it fires, the SDK is initialized and context is available.
  *
  * This extends the existing SuperLeap API from superleapClient.js which
  * already has: init(), getSdk(), isAvailable(), getDefaultConfig().
@@ -38,6 +29,7 @@
   var _config = null; // full config from CRM
   var _bridge = null; // resolved reference to SuperleapBridge
   var _connected = false;
+  var _connectPromise = null; // in-flight connect promise (deduplication)
 
   // Library version — sent during handshake so the CRM knows what it's talking to
   var LIB_VERSION = "2.1.0";
@@ -100,14 +92,27 @@
    * credentials and context, and (by default) auto-initializes the
    * SuperLeap SDK.
    *
-   * @param {Object}  options
-   * @param {string}  options.flowId      – identifies this flow to the CRM
-   * @param {string}  [options.crmOrigin] – expected CRM origin for validation
-   * @param {boolean} [options.autoInit]  – auto-call SuperLeap.init() (default true)
-   * @param {number}  [options.timeout]   – handshake timeout in ms (default 5000)
+   * If already connected, silently resolves with the existing context/config.
+   * If a connection is in flight (e.g. auto-connect), returns the same promise.
+   *
+   * @param {Object}  [options]
+   * @param {string}  [options.bridgeId]   – explicit bridgeId override (auto-read from URL)
+   * @param {string}  [options.crmOrigin]  – expected CRM origin for validation
+   * @param {boolean} [options.autoInit]   – auto-call SuperLeap.init() (default true)
+   * @param {number}  [options.timeout]    – handshake timeout in ms (default 5000)
    * @returns {Promise<{ context: Object, config: Object }>}
    */
   function connect(options) {
+    // Already connected — silently resolve
+    if (_connected) {
+      return Promise.resolve({ context: _context, config: _config });
+    }
+
+    // Connection in flight (e.g. auto-connect started) — return same promise
+    if (_connectPromise) {
+      return _connectPromise;
+    }
+
     var opts = options || {};
     var bridge = getBridge();
 
@@ -117,17 +122,9 @@
       );
     }
 
-    if (_connected) {
-      return Promise.reject(
-        new Error(
-          "SuperleapCRM: Already connected. Call disconnect() first.",
-        ),
-      );
-    }
-
-    return bridge
+    _connectPromise = bridge
       .connect({
-        flowId: opts.flowId || "",
+        bridgeId: opts.bridgeId,
         version: LIB_VERSION,
         crmOrigin: opts.crmOrigin,
         timeout: opts.timeout,
@@ -146,6 +143,7 @@
         }
 
         _connected = true;
+        _connectPromise = null;
 
         // Listen for context pushes from the CRM
         bridge.onMessage("data:context", function (newCtx) {
@@ -169,7 +167,13 @@
         }
 
         return { context: _context, config: _config };
+      })
+      .catch(function (err) {
+        _connectPromise = null;
+        throw err;
       });
+
+    return _connectPromise;
   }
 
   /**
@@ -190,6 +194,7 @@
     _context = null;
     _config = null;
     _connected = false;
+    _connectPromise = null;
     _bridge = null;
   }
 

package/core/superleapClient.js

@@ -13,79 +13,15 @@
   var _config = null;
   var _sdkInstance = null;
 
-  /**
-   * Default config merged with user config when calling init().
-   * Matches SuperLeapSDK constructor defaults (sdk.js).
-   */
-  var DEFAULT_CONFIG = {
-    apiKey: "NWM2MGEZMDMTYME2YI0ZYZDHLTLKNWQTNDM3NDNIZDU3YTQ1",
-    baseUrl: "https://razorpay-sandbox.superleap.dev/api/v1",
-    clientId: "",
-    clientSecret: "",
-    cache: {
-      enabled: true,
-      maxSize: 1000,
-      defaultTTL: 5 * 60 * 1000,
-      ttl: {
-        schema: 30 * 60 * 1000,
-        records: 2 * 60 * 1000,
-        count: 60 * 1000,
-        user: 10 * 60 * 1000,
-      },
-    },
-  };
-
-  /**
-   * Deep-merge source into target (only own enumerable properties; arrays replaced, not merged).
-   */
-  function mergeConfig(target, source) {
-    if (!source || typeof source !== "object") return target;
-    var result = {};
-    var key;
-    for (key in target) {
-      if (Object.prototype.hasOwnProperty.call(target, key)) {
-        result[key] = target[key];
-      }
-    }
-    for (key in source) {
-      if (Object.prototype.hasOwnProperty.call(source, key)) {
-        var s = source[key];
-        var t = result[key];
-        if (
-          t &&
-          s &&
-          typeof t === "object" &&
-          typeof s === "object" &&
-          !Array.isArray(t) &&
-          !Array.isArray(s)
-        ) {
-          result[key] = mergeConfig(t, s);
-        } else {
-          result[key] = s;
-        }
-      }
-    }
-    return result;
-  }
-
   /**
    * Initialize the client with API config. Call this before using record-select or other SDK-dependent components.
-   * Config is merged with defaults; you can pass only baseUrl and apiKey.
    *
    * @param {Object} config - Options passed to createSuperLeapSDK (same as SuperLeapSDK constructor in sdk.js)
-   * @param {string} [config.apiKey] - Bearer token for authentication
-   * @param {string} [config.baseUrl] - Base URL for API (default: "https://app.superleap.dev/api/v1")
+   * @param {string} config.apiKey - Bearer token for authentication
+   * @param {string} config.baseUrl - Base URL for API
    * @param {string} [config.clientId] - Client ID (if using client credentials)
    * @param {string} [config.clientSecret] - Client secret (if using client credentials)
    * @param {Object} [config.cache] - Cache configuration
-   * @param {boolean} [config.cache.enabled] - Enable caching (default: true)
-   * @param {number} [config.cache.maxSize] - Max cache entries (default: 1000)
-   * @param {number} [config.cache.defaultTTL] - Default TTL in ms (default: 5 minutes)
-   * @param {Object} [config.cache.ttl] - TTL per operation
-   * @param {number} [config.cache.ttl.schema] - Schema cache TTL (default: 30 min)
-   * @param {number} [config.cache.ttl.records] - Record query cache TTL (default: 2 min)
-   * @param {number} [config.cache.ttl.count] - Count query cache TTL (default: 1 min)
-   * @param {number} [config.cache.ttl.user] - User/me cache TTL (default: 10 min)
    */
   function init(config) {
     if (config == null) {
@@ -94,7 +30,7 @@
       return;
     }
 
-    _config = mergeConfig(DEFAULT_CONFIG, config);
+    _config = config;
 
     // Create SDK instance using the SDK factory if available
     if (typeof global.createSuperLeapSDK === "function") {
@@ -128,15 +64,6 @@
     return _config != null && _sdkInstance != null;
   }
 
-  /**
-   * Return the default config object (for reference or to override specific keys).
-   *
-   * @returns {Object}
-   */
-  function getDefaultConfig() {
-    return mergeConfig({}, DEFAULT_CONFIG);
-  }
-
   /**
    * Return the current base URL (from merged config after init).
    * Used by file-input and other components that build API URLs.
@@ -152,7 +79,6 @@
     init: init,
     getSdk: getSdk,
     isAvailable: isAvailable,
-    getDefaultConfig: getDefaultConfig,
     getBaseUrl: getBaseUrl,
   };