woodsportal-client-sdk 4.1.1 → 4.1.2-dev.1

package/CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to **woodsportal-client-sdk** are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.1.2] - 2026-08-14
+
+### Fixed
+
+- Block HTTP requests whose URL contains unresolved id segments (`undefined` / `null` / `NaN`).
+- When the embedding page CSP blocks API calls, log the violated directive and the fix to apply.
+
 ## [4.1.0] - 2026-08-06
 
 ### Added

package/dist/adapters/angular/index.js

@@ -1,7 +1,7 @@
 import { bindStoreWithActions } from '../../chunk-AYTO6ND7.js';
-import { createAdapterHooks } from '../../chunk-WJBWIUQM.js';
-import '../../chunk-F43GSZXK.js';
-import '../../chunk-ZZCYSW32.js';
+import { createAdapterHooks } from '../../chunk-3VH52USP.js';
+import '../../chunk-YKA26CVL.js';
+import '../../chunk-X6NNUGP7.js';
 import '../../chunk-JVJMM4SZ.js';
 import '../../chunk-32ERSTFY.js';
 import '../../chunk-DB6W3CJT.js';

package/dist/adapters/native/index.js

@@ -1,7 +1,7 @@
-export { useTable, useTableUi, useUser } from '../../chunk-XQAVHI2F.js';
-import '../../chunk-WJBWIUQM.js';
-import '../../chunk-F43GSZXK.js';
-import '../../chunk-ZZCYSW32.js';
+export { useTable, useTableUi, useUser } from '../../chunk-7XZSJGCX.js';
+import '../../chunk-3VH52USP.js';
+import '../../chunk-YKA26CVL.js';
+import '../../chunk-X6NNUGP7.js';
 import '../../chunk-JVJMM4SZ.js';
 import '../../chunk-32ERSTFY.js';
 import '../../chunk-DB6W3CJT.js';

package/dist/adapters/react/index.js

@@ -1,7 +1,7 @@
-export { useEmail, useFile, useMultiObjectActions, useNote, useSync, useTable, useTableUi, useUploader, useUser } from '../../chunk-XQAVHI2F.js';
-import '../../chunk-WJBWIUQM.js';
-import '../../chunk-F43GSZXK.js';
-import '../../chunk-ZZCYSW32.js';
+export { useEmail, useFile, useMultiObjectActions, useNote, useSync, useTable, useTableUi, useUploader, useUser } from '../../chunk-7XZSJGCX.js';
+import '../../chunk-3VH52USP.js';
+import '../../chunk-YKA26CVL.js';
+import '../../chunk-X6NNUGP7.js';
 import '../../chunk-JVJMM4SZ.js';
 import '../../chunk-32ERSTFY.js';
 import '../../chunk-DB6W3CJT.js';

package/dist/adapters/vue/index.js

@@ -1,7 +1,7 @@
 import { bindStoreWithActions } from '../../chunk-AYTO6ND7.js';
-import { createAdapterHooks } from '../../chunk-WJBWIUQM.js';
-import '../../chunk-F43GSZXK.js';
-import '../../chunk-ZZCYSW32.js';
+import { createAdapterHooks } from '../../chunk-3VH52USP.js';
+import '../../chunk-YKA26CVL.js';
+import '../../chunk-X6NNUGP7.js';
 import '../../chunk-JVJMM4SZ.js';
 import '../../chunk-32ERSTFY.js';
 import '../../chunk-DB6W3CJT.js';

package/dist/{chunk-WJBWIUQM.js → chunk-3VH52USP.js}

@@ -1,5 +1,5 @@
-import { multiObjectStore, actions } from './chunk-F43GSZXK.js';
-import { fileStore, actions7, uploaderStore, actions3, syncStore, actions8, userStore, actions6, emailStore, actions5, noteStore, actions4, tableUiStore, tableUiActions, tableStore, actions2 } from './chunk-ZZCYSW32.js';
+import { multiObjectStore, actions } from './chunk-YKA26CVL.js';
+import { fileStore, actions7, uploaderStore, actions3, syncStore, actions8, userStore, actions6, emailStore, actions5, noteStore, actions4, tableUiStore, tableUiActions, tableStore, actions2 } from './chunk-X6NNUGP7.js';
 
 // src/main/adapters/shared/createAdapterHooks.ts
 function createAdapterHooks(createComposable) {
@@ -17,5 +17,5 @@ function createAdapterHooks(createComposable) {
 }
 
 export { createAdapterHooks };
-//# sourceMappingURL=chunk-WJBWIUQM.js.map
-//# sourceMappingURL=chunk-WJBWIUQM.js.map
+//# sourceMappingURL=chunk-3VH52USP.js.map
+//# sourceMappingURL=chunk-3VH52USP.js.map

package/dist/{chunk-WJBWIUQM.js.map → chunk-3VH52USP.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/main/adapters/shared/createAdapterHooks.ts"],"names":["actions"],"mappings":";;;;AAmCO,SAAS,mBAAmB,gBAAA,EAAqC;AACpE,EAAA,OAAO;AAAA,IACH,QAAA,EAAU,gBAAA,CAAkD,UAAA,EAAYA,QAAY,CAAA;AAAA,IACpF,UAAA,EAAY,gBAAA,CAAsD,YAAA,EAAc,cAAc,CAAA;AAAA,IAC9F,qBAAA,EAAuB,gBAAA,CAAiB,gBAAA,EAAkBA,OAAkB,CAAA;AAAA,IAC5E,OAAA,EAAS,gBAAA,CAAgD,SAAA,EAAWA,QAAW,CAAA;AAAA,IAC/E,QAAA,EAAU,gBAAA,CAAkD,UAAA,EAAYA,QAAY,CAAA;AAAA,IACpF,OAAA,EAAS,gBAAA,CAAgD,SAAA,EAAWA,QAAW,CAAA;AAAA,IAC/E,OAAA,EAAS,gBAAA,CAAgD,SAAA,EAAWA,QAAW,CAAA;AAAA,IAC/E,WAAA,EAAa,gBAAA,CAAwD,aAAA,EAAeA,QAAe,CAAA;AAAA,IACnG,OAAA,EAAS,gBAAA,CAAgD,SAAA,EAAWA,QAAW;AAAA,GACnF;AACJ","file":"chunk-WJBWIUQM.js","sourcesContent":["import type { SubscribableStore } from './bindStoreWithActions'\nimport {\n    tableStore,\n    tableActions,\n    type TableState,\n    tableUiStore,\n    tableUiActions,\n    type TableUiState,\n    multiObjectStore,\n    multiObjectActions,\n    noteStore,\n    noteActions,\n    type NoteState,\n    emailStore,\n    emailActions,\n    type EmailState,\n    userStore,\n    userActions,\n    type UserState,\n    syncStore,\n    syncActions,\n    type SyncState,\n    uploaderStore,\n    uploaderActions,\n    type UploaderState,\n    fileStore,\n    fileActions,\n    type FileState\n} from './stores'\n\ntype ComposableFactory = <TState extends object, TActions extends object>(\n    store: SubscribableStore<TState>,\n    actions: TActions\n) => () => TState & TActions\n\nexport function createAdapterHooks(createComposable: ComposableFactory) {\n    return {\n        useTable: createComposable<TableState, typeof tableActions>(tableStore, tableActions),\n        useTableUi: createComposable<TableUiState, typeof tableUiActions>(tableUiStore, tableUiActions),\n        useMultiObjectActions: createComposable(multiObjectStore, multiObjectActions),\n        useNote: createComposable<NoteState, typeof noteActions>(noteStore, noteActions),\n        useEmail: createComposable<EmailState, typeof emailActions>(emailStore, emailActions),\n        useUser: createComposable<UserState, typeof userActions>(userStore, userActions),\n        useSync: createComposable<SyncState, typeof syncActions>(syncStore, syncActions),\n        useUploader: createComposable<UploaderState, typeof uploaderActions>(uploaderStore, uploaderActions),\n        useFile: createComposable<FileState, typeof fileActions>(fileStore, fileActions)\n    }\n}\n"]}
+{"version":3,"sources":["../src/main/adapters/shared/createAdapterHooks.ts"],"names":["actions"],"mappings":";;;;AAmCO,SAAS,mBAAmB,gBAAA,EAAqC;AACpE,EAAA,OAAO;AAAA,IACH,QAAA,EAAU,gBAAA,CAAkD,UAAA,EAAYA,QAAY,CAAA;AAAA,IACpF,UAAA,EAAY,gBAAA,CAAsD,YAAA,EAAc,cAAc,CAAA;AAAA,IAC9F,qBAAA,EAAuB,gBAAA,CAAiB,gBAAA,EAAkBA,OAAkB,CAAA;AAAA,IAC5E,OAAA,EAAS,gBAAA,CAAgD,SAAA,EAAWA,QAAW,CAAA;AAAA,IAC/E,QAAA,EAAU,gBAAA,CAAkD,UAAA,EAAYA,QAAY,CAAA;AAAA,IACpF,OAAA,EAAS,gBAAA,CAAgD,SAAA,EAAWA,QAAW,CAAA;AAAA,IAC/E,OAAA,EAAS,gBAAA,CAAgD,SAAA,EAAWA,QAAW,CAAA;AAAA,IAC/E,WAAA,EAAa,gBAAA,CAAwD,aAAA,EAAeA,QAAe,CAAA;AAAA,IACnG,OAAA,EAAS,gBAAA,CAAgD,SAAA,EAAWA,QAAW;AAAA,GACnF;AACJ","file":"chunk-3VH52USP.js","sourcesContent":["import type { SubscribableStore } from './bindStoreWithActions'\nimport {\n    tableStore,\n    tableActions,\n    type TableState,\n    tableUiStore,\n    tableUiActions,\n    type TableUiState,\n    multiObjectStore,\n    multiObjectActions,\n    noteStore,\n    noteActions,\n    type NoteState,\n    emailStore,\n    emailActions,\n    type EmailState,\n    userStore,\n    userActions,\n    type UserState,\n    syncStore,\n    syncActions,\n    type SyncState,\n    uploaderStore,\n    uploaderActions,\n    type UploaderState,\n    fileStore,\n    fileActions,\n    type FileState\n} from './stores'\n\ntype ComposableFactory = <TState extends object, TActions extends object>(\n    store: SubscribableStore<TState>,\n    actions: TActions\n) => () => TState & TActions\n\nexport function createAdapterHooks(createComposable: ComposableFactory) {\n    return {\n        useTable: createComposable<TableState, typeof tableActions>(tableStore, tableActions),\n        useTableUi: createComposable<TableUiState, typeof tableUiActions>(tableUiStore, tableUiActions),\n        useMultiObjectActions: createComposable(multiObjectStore, multiObjectActions),\n        useNote: createComposable<NoteState, typeof noteActions>(noteStore, noteActions),\n        useEmail: createComposable<EmailState, typeof emailActions>(emailStore, emailActions),\n        useUser: createComposable<UserState, typeof userActions>(userStore, userActions),\n        useSync: createComposable<SyncState, typeof syncActions>(syncStore, syncActions),\n        useUploader: createComposable<UploaderState, typeof uploaderActions>(uploaderStore, uploaderActions),\n        useFile: createComposable<FileState, typeof fileActions>(fileStore, fileActions)\n    }\n}\n"]}

package/dist/{chunk-XQAVHI2F.js → chunk-7XZSJGCX.js}

@@ -1,4 +1,4 @@
-import { createAdapterHooks } from './chunk-WJBWIUQM.js';
+import { createAdapterHooks } from './chunk-3VH52USP.js';
 import { useSyncExternalStore } from 'react';
 
 function createReactStoreComposable(store, actions) {
@@ -12,5 +12,5 @@ function createReactStoreComposable(store, actions) {
 var { useTable, useTableUi, useMultiObjectActions, useNote, useEmail, useUser, useSync, useUploader, useFile } = createAdapterHooks(createReactStoreComposable);
 
 export { useEmail, useFile, useMultiObjectActions, useNote, useSync, useTable, useTableUi, useUploader, useUser };
-//# sourceMappingURL=chunk-XQAVHI2F.js.map
-//# sourceMappingURL=chunk-XQAVHI2F.js.map
+//# sourceMappingURL=chunk-7XZSJGCX.js.map
+//# sourceMappingURL=chunk-7XZSJGCX.js.map

package/dist/{chunk-XQAVHI2F.js.map → chunk-7XZSJGCX.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/main/adapters/shared/createReactComposable.ts","../src/main/adapters/react/index.ts"],"names":[],"mappings":";;;AAGO,SAAS,0BAAA,CAA2E,OAAkC,OAAA,EAAmB;AAC5I,EAAA,OAAO,SAAS,QAAA,GAA8B;AAC1C,IAAA,MAAM,QAAQ,oBAAA,CAAqB,KAAA,CAAM,WAAW,KAAA,CAAM,QAAA,EAAU,MAAM,QAAQ,CAAA;AAClF,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,GAAG,OAAA,EAAQ;AAAA,EAClC,CAAA;AACJ;;;ACLO,IAAM,EAAE,QAAA,EAAU,UAAA,EAAY,qBAAA,EAAuB,OAAA,EAAS,QAAA,EAAU,OAAA,EAAS,OAAA,EAAS,WAAA,EAAa,OAAA,EAAQ,GAClH,kBAAA,CAAmB,0BAA0B","file":"chunk-XQAVHI2F.js","sourcesContent":["import { useSyncExternalStore } from 'react'\nimport type { SubscribableStore } from './bindStoreWithActions'\n\nexport function createReactStoreComposable<TState extends object, TActions extends object>(store: SubscribableStore<TState>, actions: TActions) {\n    return function useStore(): TState & TActions {\n        const state = useSyncExternalStore(store.subscribe, store.getState, store.getState)\n        return { ...state, ...actions }\n    }\n}\n","import { createAdapterHooks } from '../shared/createAdapterHooks'\nimport { createReactStoreComposable } from '../shared/createReactComposable'\n\nexport const { useTable, useTableUi, useMultiObjectActions, useNote, useEmail, useUser, useSync, useUploader, useFile } =\n    createAdapterHooks(createReactStoreComposable)\n"]}
+{"version":3,"sources":["../src/main/adapters/shared/createReactComposable.ts","../src/main/adapters/react/index.ts"],"names":[],"mappings":";;;AAGO,SAAS,0BAAA,CAA2E,OAAkC,OAAA,EAAmB;AAC5I,EAAA,OAAO,SAAS,QAAA,GAA8B;AAC1C,IAAA,MAAM,QAAQ,oBAAA,CAAqB,KAAA,CAAM,WAAW,KAAA,CAAM,QAAA,EAAU,MAAM,QAAQ,CAAA;AAClF,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,GAAG,OAAA,EAAQ;AAAA,EAClC,CAAA;AACJ;;;ACLO,IAAM,EAAE,QAAA,EAAU,UAAA,EAAY,qBAAA,EAAuB,OAAA,EAAS,QAAA,EAAU,OAAA,EAAS,OAAA,EAAS,WAAA,EAAa,OAAA,EAAQ,GAClH,kBAAA,CAAmB,0BAA0B","file":"chunk-7XZSJGCX.js","sourcesContent":["import { useSyncExternalStore } from 'react'\nimport type { SubscribableStore } from './bindStoreWithActions'\n\nexport function createReactStoreComposable<TState extends object, TActions extends object>(store: SubscribableStore<TState>, actions: TActions) {\n    return function useStore(): TState & TActions {\n        const state = useSyncExternalStore(store.subscribe, store.getState, store.getState)\n        return { ...state, ...actions }\n    }\n}\n","import { createAdapterHooks } from '../shared/createAdapterHooks'\nimport { createReactStoreComposable } from '../shared/createReactComposable'\n\nexport const { useTable, useTableUi, useMultiObjectActions, useNote, useEmail, useUser, useSync, useUploader, useFile } =\n    createAdapterHooks(createReactStoreComposable)\n"]}

package/dist/{chunk-IOBRI7OT.js → chunk-JCYGLNF4.js}

@@ -1,5 +1,5 @@
-import { getParamDetails, getRouteDetails, updateLink, getParam, decodeToBase64, generatePath, getPath, getRouteMenu, tableUiActions, ticketHubspotObjectTypeId, makePreviewParams, tableStore, actions2, userStore, isPipelineBoardObjectTypeId, tableUiStore, fileStore, actions7, emailStore, actions5, noteStore, actions4, resetAllStore, breadcrumbStage, isMessingParentLastItem, isMessingParent, generateUrl } from './chunk-ZZCYSW32.js';
-import { getRuntimeHttpClientApiDate, config, configureLogger, setIframeStorageMode, setRefreshBufferSeconds, setRefreshCallback, hydrateSessionRefreshState, isHttpTracingEnabled, logger, getAccessToken, sanitizeAxiosErrorData, classifyRefreshHttpError, shouldLogoutAfterRefreshFailure, setRefreshToken, storAccessToken, classifyRefreshResponseWithoutToken, storage, HUBSPOT_DATA, setRuntimeHttpClientHubContext, isServiceUnavailableError, refreshSession, ensureValidRefresh, HUB_ID, DEV_PORTAL_ID, PORTAL_ID, DEV_API_URL, isAccessTokenExpired } from './chunk-JVJMM4SZ.js';
+import { getParamDetails, getRouteDetails, updateLink, getParam, decodeToBase64, generatePath, getPath, getRouteMenu, tableUiActions, ticketHubspotObjectTypeId, makePreviewParams, tableStore, actions2, userStore, isPipelineBoardObjectTypeId, tableUiStore, fileStore, actions7, emailStore, actions5, noteStore, actions4, resetAllStore, breadcrumbStage, isMessingParentLastItem, isMessingParent, generateUrl } from './chunk-X6NNUGP7.js';
+import { getRuntimeHttpClientApiDate, config, configureLogger, setIframeStorageMode, setRefreshBufferSeconds, setRefreshCallback, hydrateSessionRefreshState, logger, isHttpTracingEnabled, getAccessToken, sanitizeAxiosErrorData, classifyRefreshHttpError, shouldLogoutAfterRefreshFailure, setRefreshToken, storAccessToken, classifyRefreshResponseWithoutToken, storage, HUBSPOT_DATA, setRuntimeHttpClientHubContext, isServiceUnavailableError, refreshSession, ensureValidRefresh, HUB_ID, DEV_PORTAL_ID, PORTAL_ID, DEV_API_URL, isAccessTokenExpired } from './chunk-JVJMM4SZ.js';
 import { getClientType, configureStorageKeys } from './chunk-32ERSTFY.js';
 import { AuthErrorCode } from './chunk-COHBSTHF.js';
 import axios from 'axios';
@@ -300,7 +300,46 @@ function getHttpUrl(config4) {
   return sanitizeHttpUrl(config4.url);
 }
 
+// src/main/core/http/csp-violation-monitor.ts
+var VIOLATION_TTL_MS = 3e4;
+var MAX_RECORDED = 20;
+var violations = [];
+var installed = false;
+function installCspViolationMonitor() {
+  if (installed || typeof document === "undefined" || typeof document.addEventListener !== "function") {
+    return;
+  }
+  installed = true;
+  document.addEventListener("securitypolicyviolation", (event) => {
+    violations.push({
+      blockedUri: event.blockedURI ?? "",
+      effectiveDirective: event.effectiveDirective ?? event.violatedDirective ?? "",
+      at: Date.now()
+    });
+    if (violations.length > MAX_RECORDED) {
+      violations = violations.slice(-MAX_RECORDED);
+    }
+  });
+}
+function findCspViolationFor(requestUrl) {
+  if (!requestUrl) {
+    return void 0;
+  }
+  const now = Date.now();
+  violations = violations.filter((violation) => now - violation.at <= VIOLATION_TTL_MS);
+  let origin;
+  try {
+    origin = new URL(requestUrl, typeof location !== "undefined" ? location.href : void 0).origin;
+  } catch {
+    return void 0;
+  }
+  return violations.find(
+    (violation) => violation.blockedUri === origin || violation.blockedUri.startsWith(`${origin}/`)
+  );
+}
+
 // src/main/core/http/http-client.ts
+var INVALID_PATH_SEGMENT_PATTERN = /\/(undefined|null|NaN)([/?#]|$)/;
 var axiosInstance = null;
 var config3 = {};
 function hasBrowserLocation() {
@@ -478,7 +517,7 @@ function initializeHttpClient(clientConfig) {
     migrateLegacyStorageKeys();
   }).catch(() => {
   });
-  void import('./cross-tab-session-VAOXHEZL.js').then(({ installCrossTabSessionListener }) => {
+  void import('./cross-tab-session-VJBW7BK6.js').then(({ installCrossTabSessionListener }) => {
     installCrossTabSessionListener();
   }).catch(() => {
   });
@@ -502,9 +541,17 @@ function initializeHttpClient(clientConfig) {
       ...config3.headers
     }
   });
+  installCspViolationMonitor();
   setRefreshCallback(getAuthRefreshToken);
   hydrateSessionRefreshState();
   axiosInstance.interceptors.request.use(async (requestConfig) => {
+    const requestUrl = getHttpUrl(requestConfig);
+    if (requestUrl && INVALID_PATH_SEGMENT_PATTERN.test(requestUrl)) {
+      logger.error("http", "blocked request with unresolved id in path", { url: requestUrl });
+      throw new Error(
+        `[woodsportal-sdk] Blocked request: URL contains an unresolved id segment: ${requestUrl}`
+      );
+    }
     const previewMock = await resolveEditorPreviewMock(requestConfig);
     if (previewMock) {
       requestConfig.adapter = () => Promise.resolve({
@@ -545,6 +592,17 @@ function initializeHttpClient(clientConfig) {
     (error) => {
       if (axios.isAxiosError(error) && error.config) {
         const status = error.response?.status;
+        if (status == null) {
+          const violation = findCspViolationFor(getHttpUrl(error.config));
+          if (violation) {
+            logger.error("http", "request blocked by the embedding page CSP", {
+              url: sanitizeHttpUrl(error.config.url),
+              violatedDirective: violation.effectiveDirective,
+              blockedUri: violation.blockedUri,
+              fix: `the embedding page's Content-Security-Policy must include "${violation.effectiveDirective} ${violation.blockedUri}"`
+            });
+          }
+        }
         if (isHttpTracingEnabled()) {
           logger.debug("http", "request failed", {
             method: getHttpMethod(error.config),
@@ -2605,5 +2663,5 @@ function createMutation(mutationFn, options) {
 }
 
 export { API_ENDPOINTS, Client, HttpClient, applyContractApiDate, buildCachePurgeRequest, buildCrmListPurgeTarget, buildCrmSinglePurgeTarget, buildEngagementPurgeTarget, buildPortalConfigPurgeTarget, buildUserSessionPurgeTarget, createCachePurgeJob, createMutation, extractEngagementItemIdFromWriteResponse, extractHubspotRecordIdFromWriteResponse, generateApiUrl, getAuthRefreshToken, getConfiguredContractApiDate, getFieldErrors, getFormErrors, initializeHttpClient, mergePurgeTargets, navigationApi, purgeCrmCombined, purgeCrmDetailAndListAfterCrmWrite, purgeCrmListCache, purgeCrmListCacheAfterCrmWrite, purgeCrmObjectDataCache, purgeCrmRecordCache, purgeEngagementCaches, purgeEngagementCachesAfterCrmWrite, resolveCrmListPurgeQuery, resolveListTableParams, setEditorPreviewMockHandler, startVisibilityRefreshScheduler, stopVisibilityRefreshScheduler, toCachePurgeListQuery };
-//# sourceMappingURL=chunk-IOBRI7OT.js.map
-//# sourceMappingURL=chunk-IOBRI7OT.js.map
+//# sourceMappingURL=chunk-JCYGLNF4.js.map
+//# sourceMappingURL=chunk-JCYGLNF4.js.map