@tacoreai/web-sdk 1.3.0 → 1.5.0

package/database/core/apps/AppsAuthManager.js

@@ -33,8 +33,9 @@ class AppsTokenManager {
 export class AppsAuthManager extends BaseAppsClient {
   constructor(appId, config = {}) {
     super(appId, config);
+    const isPreviewMode = isBackend && process.env.TACORE_APPSERVER_PREVIEW_MODE === "true";
 
-    if (isBackend && !this.config.tacoreServerInteropAppServerApiKey) {
+    if (isBackend && !isPreviewMode && !this.config.tacoreServerInteropAppServerApiKey) {
       throw new Error("tacoreServerInteropAppServerApiKey is required for backend environment. Provide it in config or via TACORE_SERVER_INTEROP_APP_SERVER_API_KEY env var.");
     }
     
@@ -333,4 +334,4 @@ export class AppsAuthManager extends BaseAppsClient {
   clearAccessToken() {
     AppsTokenManager.clearAccessToken();
   }
-}
+}

package/database/core/apps/AppsClient.AppServer.js

@@ -2,6 +2,20 @@ import { env, isDevelopmentBrowser, isProductionBrowser, isBackend } from "../..
 
 const appServerAPIMap = new Map();
 
+const isBrowserPreviewRuntime = () => {
+  if (typeof window === "undefined") {
+    return false;
+  }
+
+  const explicitFlag = window.__TACORE_PREVIEW_MODE__;
+  if (explicitFlag === true || explicitFlag === "true") {
+    return true;
+  }
+
+  const pathname = typeof window.location?.pathname === "string" ? window.location.pathname : "";
+  return pathname.startsWith("/app-run/");
+};
+
 /**
  * 注册一个 App Server API。
  * - 在开发态浏览器中：有效，用于本地调用。
@@ -17,9 +31,51 @@ const registerAppServerAPI = (appServerAPIName, appServerAPIHandler) => {
   // 在生产态浏览器中，这是一个空操作。
 };
 
+const invokeByPlatformProxy = async function(appServerAPIName, payload) {
+  const endpoint = `/apps/invokeAppServerAPI?appId=${encodeURIComponent(this.appId)}&apiName=${encodeURIComponent(appServerAPIName)}`;
+  const res = await this._post(endpoint, payload);
+  if (res.success) {
+    return res.data;
+  }
+  throw new Error(res.error || res.message || `AppServer invocation failed: ${res.code || "UNKNOWN_ERROR"}`);
+};
+
+const invokeByPreviewProxy = async function(appServerAPIName, payload) {
+  const endpoint = `/appserver-preview/invokeAppServerAPI?appId=${encodeURIComponent(this.appId)}&apiName=${encodeURIComponent(appServerAPIName)}`;
+
+  const response = await fetch(endpoint, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+    },
+    body: JSON.stringify(payload || {}),
+  });
+
+  const contentType = response.headers.get("content-type") || "";
+  const responseData = contentType.includes("application/json")
+    ? await response.json()
+    : await response.text();
+
+  if (!response.ok) {
+    const errorMessage = typeof responseData === "object"
+      ? (responseData?.error || responseData?.message || JSON.stringify(responseData))
+      : String(responseData || "");
+    throw new Error(`[AppServer-DevBridge] status: ${response.status}, message: ${errorMessage}`);
+  }
+
+  if (responseData && typeof responseData === "object" && Object.prototype.hasOwnProperty.call(responseData, "success")) {
+    if (responseData.success) {
+      return responseData.data;
+    }
+    throw new Error(responseData.error || "AppServer invocation failed in dev bridge");
+  }
+
+  return responseData;
+};
+
 /**
  * 调用一个 App Server API。
- * - 在开发态浏览器中：本地执行。
+ * - 在开发态浏览器中：预览页（/app-run/*）走本地预览代理，其余开发页直接走平台转发。
  * - 在生产态浏览器中：统一走平台转发（/apps/invokeAppServerAPI）。
  * - 在后端云函数中：本地执行 (由云函数入口调用)。
  * - 跨应用调用：仅后端场景可直连目标 AppServer（需 appServerBaseUrl + appServerApiKey）。
@@ -61,24 +117,25 @@ const invokeAppServerAPI = async function(appServerAPIName, payload) {
     }
   }
 
-  // 场景一：生产环境的浏览器，必须发起网络请求
-  if (isProductionBrowser) {
-    // 浏览器端统一走平台转发，由平台负责组织/应用上下文与内部鉴权链路
-    const endpoint = `/apps/invokeAppServerAPI?appId=${encodeURIComponent(this.appId)}&apiName=${encodeURIComponent(appServerAPIName)}`;
+  // 场景一：开发环境浏览器
+  if (isDevelopmentBrowser) {
+    if (isBrowserPreviewRuntime()) {
+      return await invokeByPreviewProxy.call(this, appServerAPIName, payload);
+    }
+    return await invokeByPlatformProxy.call(this, appServerAPIName, payload);
+  }
 
+  // 场景二：生产环境的浏览器，统一走平台转发
+  if (isProductionBrowser) {
     try {
-      const res = await this._post(endpoint, payload);
-      if (res.success) {
-        return res.data;
-      }
-      throw new Error(res.error || res.message || `AppServer invocation failed: ${res.code || "UNKNOWN_ERROR"}`);
+      return await invokeByPlatformProxy.call(this, appServerAPIName, payload);
     } catch (error) {
       console.error(`[AppServer-Prod] Failed to invoke "${appServerAPIName}" via appsClient:`, error);
       throw error;
     }
   }
 
-  // 场景二：开发环境的浏览器 或 后端云函数环境，都从本地 Map 执行
+  // 场景三：后端云函数环境，从本地 Map 执行
   const appServerAPIHandler = appServerAPIMap.get(appServerAPIName);
   if (!appServerAPIHandler) {
     throw new Error(`[AppServer-${env}] AppServer "${appServerAPIName}" not found or not registered.`);

package/database/core/apps/AppsClient.js

@@ -38,8 +38,9 @@ class AppsClient extends BaseAppsClient {
 
   constructor(appId, config = {}) {
     super(appId, config);
+    const isPreviewMode = isBackend && process.env.TACORE_APPSERVER_PREVIEW_MODE === "true";
 
-    if (isBackend && !this.config.tacoreServerInteropAppServerApiKey) {
+    if (isBackend && !isPreviewMode && !this.config.tacoreServerInteropAppServerApiKey) {
       throw new Error(
         "tacoreServerInteropAppServerApiKey is required for backend environment. Provide it in config or via TACORE_SERVER_INTEROP_APP_SERVER_API_KEY env var."
       );

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tacoreai/web-sdk",
   "description": "This file is for app server package, not the real npm package",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "type": "module",
   "publishConfig": {
     "access": "public",