@tacoreai/web-sdk 1.24.1-beta.1 → 1.24.1-beta.4

package/database/core/apps/AppServerRuntime.js

@@ -7,7 +7,11 @@ const DEFAULT_FILE_SIZE_LIMIT = 100 * 1024 * 1024;
 const DEFAULT_MAX_FILES = 20;
 
 const isPreviewMode = () => process.env.TACORE_APPSERVER_PREVIEW_MODE === "true";
-const isLocalDeploymentMode = () => process.env.TACORE_APPSERVER_LOCAL_DEPLOYMENT_MODE === "true";
+const isLocalDeploymentMode = (env = {}) =>
+  env.localDeployment === true ||
+  env.localAppServer === true ||
+  env.appServerDeploymentMode === "local" ||
+  process.env.TACORE_APPSERVER_LOCAL_DEPLOYMENT_MODE === "true";
 
 const isValidInternalToken = (incomingValue, expectedValue) => {
   return Boolean(expectedValue) && Boolean(incomingValue) && incomingValue === expectedValue;
@@ -310,7 +314,7 @@ export const createAppServerRuntime = async (options = {}) => {
 
     if (!isPlatformProxyRequest && !isSchedulerRequest) {
       if (!requestApiKey) {
-        if (isLocalDeploymentMode() && requestAccessToken) {
+        if (isLocalDeploymentMode(env) && requestAccessToken) {
           try {
             const isValidAccessToken = await validateLocalDeploymentAccessToken(env, requestAccessToken);
             if (!isValidAccessToken) {

package/database/core/apps/AppsClient.AppServer.js

@@ -121,6 +121,59 @@ const clearPreviewSessionToken = (appId) => {
   previewSessionPromiseCache.delete(appId);
 };
 
+const getBrowserWindowCandidates = () => {
+  if (typeof window === "undefined") {
+    return [];
+  }
+
+  const candidates = [window];
+  for (const candidate of [window.parent, window.top, window.opener]) {
+    if (candidate && !candidates.includes(candidate)) {
+      candidates.push(candidate);
+    }
+  }
+  return candidates;
+};
+
+const readBrowserPreviewBridgeValue = (key) => {
+  for (const candidate of getBrowserWindowCandidates()) {
+    try {
+      const value = String(candidate?.[key] || "").trim();
+      if (value) {
+        return value;
+      }
+    } catch (error) {
+      // Ignore cross-origin window access.
+    }
+  }
+  return "";
+};
+
+const getBrowserPreviewBridgeBaseUrl = () => {
+  return readBrowserPreviewBridgeValue("__TACORE_APPSERVER_PREVIEW_BRIDGE_BASE_URL__").replace(/\/$/, "");
+};
+
+const getBrowserPreviewBridgeInvokeUrl = () => {
+  const rawUrl = readBrowserPreviewBridgeValue("__TACORE_APPSERVER_PREVIEW_BRIDGE_URL__");
+  if (!rawUrl) {
+    return "";
+  }
+
+  try {
+    const url = new URL(rawUrl, typeof window !== "undefined" ? window.location.origin : "http://localhost");
+    return url.pathname.endsWith("/appserver-preview/invokeAppServerAPI") ? url.toString() : "";
+  } catch (error) {
+    return "";
+  }
+};
+
+const appendPreviewInvokeParams = (rawUrl, appId, apiName) => {
+  const url = new URL(rawUrl, typeof window !== "undefined" ? window.location.origin : "http://localhost");
+  url.searchParams.set("appId", appId);
+  url.searchParams.set("apiName", apiName);
+  return url.toString();
+};
+
 const getPreviewSessionToken = async function(options = {}) {
   const { forceRefresh = false } = options;
   const appServerOwnerAppId = getAppServerOwnerAppId.call(this);
@@ -139,7 +192,10 @@ const getPreviewSessionToken = async function(options = {}) {
   }
 
   const requestPromise = (async () => {
-    const endpoint = `/appserver-preview/session?appId=${encodeURIComponent(appServerOwnerAppId)}`;
+    const bridgeBaseUrl = getBrowserPreviewBridgeBaseUrl();
+    const endpoint = bridgeBaseUrl
+      ? `${bridgeBaseUrl}/appserver-preview/session?appId=${encodeURIComponent(appServerOwnerAppId)}`
+      : `/appserver-preview/session?appId=${encodeURIComponent(appServerOwnerAppId)}`;
     const response = await fetch(endpoint, {
       method: "GET",
       headers: {
@@ -404,7 +460,13 @@ const invokeByPlatformProxy = async function(appServerAPIName, payload, options
 
 const invokeByPreviewProxyOnce = async function(appServerAPIName, payload, options = {}, previewToken) {
   const appServerOwnerAppId = getAppServerOwnerAppId.call(this);
-  const endpoint = `/appserver-preview/invokeAppServerAPI?appId=${encodeURIComponent(appServerOwnerAppId)}&apiName=${encodeURIComponent(appServerAPIName)}`;
+  const bridgeInvokeUrl = getBrowserPreviewBridgeInvokeUrl();
+  const bridgeBaseUrl = getBrowserPreviewBridgeBaseUrl();
+  const endpoint = bridgeInvokeUrl
+    ? appendPreviewInvokeParams(bridgeInvokeUrl, appServerOwnerAppId, appServerAPIName)
+    : bridgeBaseUrl
+      ? `${bridgeBaseUrl}/appserver-preview/invokeAppServerAPI?appId=${encodeURIComponent(appServerOwnerAppId)}&apiName=${encodeURIComponent(appServerAPIName)}`
+      : `/appserver-preview/invokeAppServerAPI?appId=${encodeURIComponent(appServerOwnerAppId)}&apiName=${encodeURIComponent(appServerAPIName)}`;
   const response = await fetch(
     endpoint,
     buildRemoteRequestInit.call(this, payload, options, {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tacoreai/web-sdk",
   "description": "This file is for app server package, not the real npm package",
-  "version": "1.24.1-beta.1",
+  "version": "1.24.1-beta.4",
   "type": "module",
   "publishConfig": {
     "access": "public",