zitejs 0.9.14 → 0.9.15

package/dist/cjs/caller/index.js

@@ -11,19 +11,36 @@ function getRunnerUrl() {
     const env = (0, env_js_1.getEnv)('ZITE_ENV', 'VITE_ZITE_ENV') ?? 'production';
     return (0, env_js_1.getEnv)('ZITE_RUNNER_URL', 'VITE_ZITE_RUNNER_URL') ?? ENVIRONMENTS[env] ?? ENVIRONMENTS.production;
 }
-function getToken() {
-    return (0, env_js_1.getEnv)('ZITE_DB_TOKEN', 'VITE_ZITE_DB_TOKEN') ?? '';
+/**
+ * Get the user's usage token for endpoint auth.
+ * In internal mode: injected by app-runtime as window._ziteUsageToken
+ * In external mode: stored in localStorage by the auth flow
+ */
+function getUsageToken() {
+    if (typeof window !== 'undefined') {
+        const win = window;
+        if (typeof win._ziteUsageToken === 'string')
+            return win._ziteUsageToken;
+    }
+    // Fallback to stored auth token (external mode)
+    if (typeof localStorage !== 'undefined') {
+        const stored = localStorage.getItem('zite.auth.token');
+        if (stored)
+            return stored;
+    }
+    return '';
 }
 function createCaller(endpoint, name, flowId) {
     return async (input) => {
         const appId = flowId ?? (0, env_js_1.getEnv)('ZITE_FLOW_ID', 'VITE_ZITE_FLOW_ID') ?? '';
+        const token = getUsageToken();
         const res = await fetch(getRunnerUrl() + '/public/' + appId + '/api/' + name, {
             method: 'POST',
             headers: {
-                Authorization: `Bearer ${getToken()}`,
+                ...(token ? { Authorization: `Bearer ${token}` } : {}),
                 'Content-Type': 'application/json',
             },
-            body: JSON.stringify({ ...input, mode: 'preview', usageToken: getToken() }),
+            body: JSON.stringify({ ...input, mode: 'preview', usageToken: token }),
         });
         if (!res.ok) {
             const text = await res.text().catch(() => '');

package/dist/esm/caller/index.js

@@ -8,19 +8,36 @@ function getRunnerUrl() {
     const env = getEnv('ZITE_ENV', 'VITE_ZITE_ENV') ?? 'production';
     return getEnv('ZITE_RUNNER_URL', 'VITE_ZITE_RUNNER_URL') ?? ENVIRONMENTS[env] ?? ENVIRONMENTS.production;
 }
-function getToken() {
-    return getEnv('ZITE_DB_TOKEN', 'VITE_ZITE_DB_TOKEN') ?? '';
+/**
+ * Get the user's usage token for endpoint auth.
+ * In internal mode: injected by app-runtime as window._ziteUsageToken
+ * In external mode: stored in localStorage by the auth flow
+ */
+function getUsageToken() {
+    if (typeof window !== 'undefined') {
+        const win = window;
+        if (typeof win._ziteUsageToken === 'string')
+            return win._ziteUsageToken;
+    }
+    // Fallback to stored auth token (external mode)
+    if (typeof localStorage !== 'undefined') {
+        const stored = localStorage.getItem('zite.auth.token');
+        if (stored)
+            return stored;
+    }
+    return '';
 }
 export function createCaller(endpoint, name, flowId) {
     return async (input) => {
         const appId = flowId ?? getEnv('ZITE_FLOW_ID', 'VITE_ZITE_FLOW_ID') ?? '';
+        const token = getUsageToken();
         const res = await fetch(getRunnerUrl() + '/public/' + appId + '/api/' + name, {
             method: 'POST',
             headers: {
-                Authorization: `Bearer ${getToken()}`,
+                ...(token ? { Authorization: `Bearer ${token}` } : {}),
                 'Content-Type': 'application/json',
             },
-            body: JSON.stringify({ ...input, mode: 'preview', usageToken: getToken() }),
+            body: JSON.stringify({ ...input, mode: 'preview', usageToken: token }),
         });
         if (!res.ok) {
             const text = await res.text().catch(() => '');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zitejs",
-  "version": "0.9.14",
+  "version": "0.9.15",
   "description": "The Zite framework — build apps on Zite Database",
   "type": "module",
   "main": "./dist/cjs/runtime/index.js",