roboto-js 1.7.1 → 1.7.5

package/dist/esm/index.js

@@ -2,20 +2,22 @@ import RbtApi from './rbt_api.js';
 import RbtObject from './rbt_object.js';
 import RbtFile from './rbt_file.js';
 import RbtMetricsApi from './rbt_metrics_api.js';
-export { RbtApi, RbtObject, RbtFile
+import CookieStorageAdaptor from './cookie_storage_adaptor.js';
+export { RbtApi, RbtObject, RbtFile, CookieStorageAdaptor
 //User,
 //Site
 };
 export default class Roboto {
   getVersion() {
-    return '1.7.0';
+    return '1.7.3';
   }
   constructor({
     host,
     accessKey,
     localStorageAdaptor,
     disableWebSocket = false,
-    metricsHost
+    metricsHost,
+    useCookies = true
   }, proxyReq = null) {
     if (Roboto.instance && !proxyReq) {
       // if on client, there can only be one instance
@@ -24,12 +26,29 @@ export default class Roboto {
     }
     const isBrowser = typeof window !== "undefined";
     this.data = {};
+
+    // Auto-configure storage adaptor
+    let storageAdaptor = localStorageAdaptor;
+    if (!storageAdaptor && isBrowser && useCookies) {
+      // Use cookies by default in browser for better server-side compatibility
+      storageAdaptor = new CookieStorageAdaptor({
+        secure: window.location.protocol === 'https:',
+        sameSite: 'Lax',
+        maxAge: 24 * 60 * 60 // 24 hours
+      });
+      console.log('[Roboto] Using CookieStorageAdaptor for authentication tokens');
+
+      // Set accessKey for server-side authentication (handled automatically by adapter)
+      if (accessKey) {
+        storageAdaptor.setItem('accessKey', accessKey).catch(e => console.warn('[Roboto] Failed to set accessKey cookie:', e));
+      }
+    }
     this.config = {
       accessKey: accessKey,
       // Use passed accessKey
       baseUrl: `https://${host}`,
       // Use passed host
-      localStorageAdaptor: localStorageAdaptor
+      localStorageAdaptor: storageAdaptor
     };
 
     // DEVELOPMENT
@@ -54,6 +73,12 @@ export default class Roboto {
     this.api = new RbtApi(this.config);
     if (isBrowser) {
       this.api.initLocalDb();
+
+      // Add global debug method for cookie storage adapter
+      if (this.config.localStorageAdaptor && this.config.localStorageAdaptor.debugState) {
+        window.debugRobotoCookies = () => this.config.localStorageAdaptor.debugState();
+        console.log('[Roboto] Added global debug method: window.debugRobotoCookies()');
+      }
     }
 
     // METRICS API instance (separate host or same)
@@ -130,7 +155,14 @@ export default class Roboto {
     return this.api.loginWithOauth(params);
   }
   async logout() {
-    return this.api.logout();
+    const result = await this.api.logout();
+
+    // Clear accessKey and authtoken using standard localStorage interface
+    if (this.config.localStorageAdaptor) {
+      await this.config.localStorageAdaptor.removeItem('accessKey');
+      await this.config.localStorageAdaptor.removeItem('authtoken');
+    }
+    return result;
   }
   async refreshAuthToken() {
     return this.api.refreshAuthToken(this.config.authtoken);

package/dist/esm/rbt_api.js

@@ -42,28 +42,9 @@ export default class RbtApi {
       };
     }
 
-    // Synchronous browser hydration: set auth header and in-memory user immediately
-    if (typeof localStorage !== 'undefined') {
-      try {
-        const token = localStorage.getItem('authtoken');
-        if (token) {
-          this.authtoken = token;
-          this.axios.defaults.headers.common['authtoken'] = token;
-        }
-      } catch {}
-      try {
-        const cachedUser = localStorage.getItem('rbtUser');
-        if (cachedUser) {
-          const parsed = JSON.parse(cachedUser);
-          if (parsed && parsed.id) {
-            this.currentUser = new RbtUser({
-              id: parsed.id
-            }, this.axios);
-            this.currentUser.setData(parsed);
-          }
-        }
-      } catch {}
-    }
+    // Asynchronous browser hydration: set auth header and in-memory user
+    // Use storage adaptor if available, otherwise fallback to localStorage
+    this._initializeFromStorage().catch(e => console.warn('[RbtApi] Storage initialization failed:', e));
     this.localDb = null;
     this.iac_session = null;
     this.appServiceHost = baseUrl;
@@ -75,6 +56,51 @@ export default class RbtApi {
     this.initAuthToken(authtoken);
     this.initApiKey(apikey);
   }
+
+  // Initialize authtoken and user from storage (cookies or localStorage)
+  async _initializeFromStorage() {
+    if (!this.localStorageAdaptor) return;
+    try {
+      // Try to get authtoken from storage adaptor (prefixed: rbt_authtoken)
+      let token = await this.localStorageAdaptor.getItem('authtoken');
+
+      // If not found in prefixed storage, try raw cookie (like accessKey)
+      if (!token && typeof document !== 'undefined') {
+        // Try to get from raw cookie
+        const cookies = document.cookie.split(';');
+        for (let cookie of cookies) {
+          const [name, value] = cookie.trim().split('=');
+          if (name === 'authtoken') {
+            token = decodeURIComponent(value);
+            break;
+          }
+        }
+      }
+      if (token) {
+        this.authtoken = token;
+        this.axios.defaults.headers.common['authtoken'] = token;
+        console.log('[RbtApi] Loaded authtoken from storage adaptor');
+      }
+    } catch (e) {
+      console.warn('[RbtApi] Failed to load authtoken from storage adaptor:', e);
+    }
+    try {
+      // Try to get user from storage adaptor
+      const cachedUser = await this.localStorageAdaptor.getItem('rbtUser');
+      if (cachedUser) {
+        const parsed = typeof cachedUser === 'string' ? JSON.parse(cachedUser) : cachedUser;
+        if (parsed && parsed.id) {
+          this.currentUser = new RbtUser({
+            id: parsed.id
+          }, this.axios);
+          this.currentUser.setData(parsed);
+          console.log('[RbtApi] Loaded user from storage adaptor');
+        }
+      }
+    } catch (e) {
+      console.warn('[RbtApi] Failed to load user from storage adaptor:', e);
+    }
+  }
   getWebSocketClient() {
     // Reuse existing WebSocket if it's OPEN or CONNECTING (to prevent race condition)
     if (this.websocketClient && (this.websocketClient.readyState === WebSocket.OPEN || this.websocketClient.readyState === WebSocket.CONNECTING)) {
@@ -242,6 +268,8 @@ export default class RbtApi {
         if (this.iac_session?.user) {
           await this.localStorageAdaptor.setItem('rbtUser', JSON.stringify(this.iac_session.user));
         }
+
+        // authtoken is automatically stored for server-side access by the adapter
       }
       return response.data;
     } catch (e) {
@@ -560,6 +588,10 @@ export default class RbtApi {
    * - limit: An object to control the pagination of results. It includes:
    *    - offset: The starting point from where to fetch the results.
    *    - results: The maximum number of results to return.
+   * - requestAttrs: An array of attribute paths to include in the response (e.g., ['id', 'configs.title', 'configs.description']).
+   *                 If not provided, all attributes are returned.
+   * - excludeAttrs: An array of attribute paths to exclude from the response (e.g., ['details.log', 'internalData']).
+   *                 Excludes the specified paths and all their subpaths.
    * - resolveReferences: An array of attribute names whose references should be resolved in the returned objects.
    * - timeout: A numerical value in milliseconds to set a maximum time limit for the query execution.
    *
@@ -568,6 +600,8 @@ export default class RbtApi {
    *     where: 'email="tom@pospa.com"',
    *     orderBy: { column: 'timeCreated', direction: 'DESC' },
    *     limit: { offset: 0, results: 50 },
+   *     requestAttrs: ['id', 'configs.title'],
+   *     excludeAttrs: ['details.log'],
    *     resolveReferences: ['translatableContent']
    *   });
    *
@@ -578,6 +612,18 @@ export default class RbtApi {
     let paramsKey;
     try {
       //console.log('RBTAPI.query INIT', type, params);
+
+      // Validate parameters - reject invalid parameter names
+      const validParams = ['type', 'where', 'orderBy', 'limit', 'resolveReferences', 'requestAttrs', 'excludeAttrs', 'timeout', 'enableRealtime'];
+      const invalidParams = Object.keys(params).filter(key => !validParams.includes(key));
+      if (invalidParams.length > 0) {
+        throw new Error(`Invalid query parameter(s): ${invalidParams.join(', ')}. Valid parameters are: ${validParams.join(', ')}`);
+      }
+
+      // Warn if enableRealtime is passed to query() - it should only be used by load()
+      if (params.enableRealtime) {
+        console.warn('[roboto-js] enableRealtime should not be passed to query(), only to load(). This parameter will be ignored.');
+      }
       params.type = type;
 
       // Default ordering and pagination
@@ -725,8 +771,14 @@ export default class RbtApi {
             });
             this._loggedCacheEvents.add(bulkMissLogKey);
           }
+
+          // Remove load-specific params that shouldn't be passed to query
+          const {
+            enableRealtime,
+            ...queryParams
+          } = params;
           mergedParams = {
-            ...params,
+            ...queryParams,
             where: `id IN ("${missingIds.join(`","`)}")`
           };
           loadedObjects = await this.query(type, mergedParams);
@@ -809,8 +861,13 @@ export default class RbtApi {
         // Create the loading promise and store it to prevent duplicate requests
         const loadPromise = (async () => {
           try {
+            // Remove load-specific params that shouldn't be passed to query
+            const {
+              enableRealtime,
+              ...queryParams
+            } = params;
             mergedParams = {
-              ...params,
+              ...queryParams,
               where: `id="${ids}"`
             };
             let res = await this.query(type, mergedParams);

package/dist/index.js

@@ -1,32 +1,3 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-Object.defineProperty(exports, "RbtApi", {
-  enumerable: true,
-  get: function get() {
-    return _rbt_api["default"];
-  }
-});
-Object.defineProperty(exports, "RbtFile", {
-  enumerable: true,
-  get: function get() {
-    return _rbt_file["default"];
-  }
-});
-Object.defineProperty(exports, "RbtObject", {
-  enumerable: true,
-  get: function get() {
-    return _rbt_object["default"];
-  }
-});
-exports["default"] = void 0;
-var _rbt_api = _interopRequireDefault(require("./rbt_api.js"));
-var _rbt_object = _interopRequireDefault(require("./rbt_object.js"));
-var _rbt_file = _interopRequireDefault(require("./rbt_file.js"));
-var _rbt_metrics_api = _interopRequireDefault(require("./rbt_metrics_api.js"));
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
 function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
 function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
 function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
@@ -37,14 +8,26 @@ function _defineProperties(e, r) { for (var t = 0; t < r.length; t++) { var o =
 function _createClass(e, r, t) { return r && _defineProperties(e.prototype, r), t && _defineProperties(e, t), Object.defineProperty(e, "prototype", { writable: !1 }), e; }
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
 function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
-var Roboto = exports["default"] = /*#__PURE__*/function () {
+import RbtApi from './rbt_api.js';
+import RbtObject from './rbt_object.js';
+import RbtFile from './rbt_file.js';
+import RbtMetricsApi from './rbt_metrics_api.js';
+import CookieStorageAdaptor from './cookie_storage_adaptor.js';
+export { RbtApi, RbtObject, RbtFile, CookieStorageAdaptor
+//User,
+//Site
+};
+var Roboto = /*#__PURE__*/function () {
   function Roboto(_ref) {
+    var _this = this;
     var host = _ref.host,
       accessKey = _ref.accessKey,
       localStorageAdaptor = _ref.localStorageAdaptor,
       _ref$disableWebSocket = _ref.disableWebSocket,
       disableWebSocket = _ref$disableWebSocket === void 0 ? false : _ref$disableWebSocket,
-      metricsHost = _ref.metricsHost;
+      metricsHost = _ref.metricsHost,
+      _ref$useCookies = _ref.useCookies,
+      useCookies = _ref$useCookies === void 0 ? true : _ref$useCookies;
     var proxyReq = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : null;
     _classCallCheck(this, Roboto);
     if (Roboto.instance && !proxyReq) {
@@ -54,12 +37,31 @@ var Roboto = exports["default"] = /*#__PURE__*/function () {
     }
     var isBrowser = typeof window !== "undefined";
     this.data = {};
+
+    // Auto-configure storage adaptor
+    var storageAdaptor = localStorageAdaptor;
+    if (!storageAdaptor && isBrowser && useCookies) {
+      // Use cookies by default in browser for better server-side compatibility
+      storageAdaptor = new CookieStorageAdaptor({
+        secure: window.location.protocol === 'https:',
+        sameSite: 'Lax',
+        maxAge: 24 * 60 * 60 // 24 hours
+      });
+      console.log('[Roboto] Using CookieStorageAdaptor for authentication tokens');
+
+      // Set accessKey for server-side authentication (handled automatically by adapter)
+      if (accessKey) {
+        storageAdaptor.setItem('accessKey', accessKey)["catch"](function (e) {
+          return console.warn('[Roboto] Failed to set accessKey cookie:', e);
+        });
+      }
+    }
     this.config = {
       accessKey: accessKey,
       // Use passed accessKey
       baseUrl: "https://".concat(host),
       // Use passed host
-      localStorageAdaptor: localStorageAdaptor
+      localStorageAdaptor: storageAdaptor
     };
 
     // DEVELOPMENT
@@ -81,16 +83,24 @@ var Roboto = exports["default"] = /*#__PURE__*/function () {
         this.config.accesskey = accesskey; // Set the accesskey in the config
       }
     }
-    this.api = new _rbt_api["default"](this.config);
+    this.api = new RbtApi(this.config);
     if (isBrowser) {
       this.api.initLocalDb();
+
+      // Add global debug method for cookie storage adapter
+      if (this.config.localStorageAdaptor && this.config.localStorageAdaptor.debugState) {
+        window.debugRobotoCookies = function () {
+          return _this.config.localStorageAdaptor.debugState();
+        };
+        console.log('[Roboto] Added global debug method: window.debugRobotoCookies()');
+      }
     }
 
     // METRICS API instance (separate host or same)
     if (metricsHost && metricsHost !== host) {
       var metricsUrl = metricsHost.startsWith('http') ? metricsHost : "https://".concat(metricsHost);
       // You can customize headers if needed
-      this.metrics = new _rbt_metrics_api["default"]({
+      this.metrics = new RbtMetricsApi({
         config: {
           baseURL: this._stripHttpsForDomains(metricsUrl, ['localhost']),
           headers: {
@@ -100,7 +110,7 @@ var Roboto = exports["default"] = /*#__PURE__*/function () {
       });
     } else {
       // Use the same axios instance as main API
-      this.metrics = new _rbt_metrics_api["default"]({
+      this.metrics = new RbtMetricsApi({
         axiosInstance: this.api.axios
       });
     }
@@ -109,7 +119,7 @@ var Roboto = exports["default"] = /*#__PURE__*/function () {
   return _createClass(Roboto, [{
     key: "getVersion",
     value: function getVersion() {
-      return '1.6.17';
+      return '1.7.3';
     }
   }, {
     key: "setSiteEnv",
@@ -144,7 +154,7 @@ var Roboto = exports["default"] = /*#__PURE__*/function () {
     value: function setMetricsHost(host) {
       this.metricsHost = host;
       var metricsUrl = host.startsWith('http') ? host : "https://".concat(host);
-      this.metrics = new _rbt_metrics_api["default"]({
+      this.metrics = new RbtMetricsApi({
         config: {
           baseURL: this._stripHttpsForDomains(metricsUrl, ['localhost']),
           headers: {
@@ -168,7 +178,7 @@ var Roboto = exports["default"] = /*#__PURE__*/function () {
   }, {
     key: "recordToInstance",
     value: function recordToInstance(recordHash) {
-      return new _rbt_object["default"](recordHash, this.api.axios);
+      return new RbtObject(recordHash, this.api.axios);
     }
   }, {
     key: "_stripHttpsForDomains",
@@ -217,10 +227,25 @@ var Roboto = exports["default"] = /*#__PURE__*/function () {
     key: "logout",
     value: function () {
       var _logout = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee3() {
+        var result;
         return _regenerator().w(function (_context3) {
           while (1) switch (_context3.n) {
             case 0:
-              return _context3.a(2, this.api.logout());
+              _context3.n = 1;
+              return this.api.logout();
+            case 1:
+              result = _context3.v;
+              if (!this.config.localStorageAdaptor) {
+                _context3.n = 3;
+                break;
+              }
+              _context3.n = 2;
+              return this.config.localStorageAdaptor.removeItem('accessKey');
+            case 2:
+              _context3.n = 3;
+              return this.config.localStorageAdaptor.removeItem('authtoken');
+            case 3:
+              return _context3.a(2, result);
           }
         }, _callee3, this);
       }));
@@ -544,4 +569,5 @@ var Roboto = exports["default"] = /*#__PURE__*/function () {
       return post;
     }()
   }]);
-}();
+}();
+export { Roboto as default };