@aistrike-dev/ui-shell-dev 1.1.0 → 2.0.1

package/README.md

@@ -45,12 +45,14 @@ Read from the Vite root when present (or from the plugin's `devFile` option).
 {
   "profile": "local",
   "overrides": { "other": "http://127.0.0.1:5102" },
-  "domains": [{ "id": "other", "route": "/other", "nav": { "label": "Other" }, "devPort": 5102 }],
+  "domains": [{ "id": "other", "nav": { "label": "Other" }, "devPort": 5102 }],
   "idleTimeoutMs": 0,
   "claims": { "permissions": ["hello:read"] }
 }
 ```
 
+A domain's route prefix is always `/<id>`, so a domain has no `route` key: a leftover one stops the dev server with a message to delete it. The ids `shell`, `preferences`, `commands`, `api`, `assets` and `ui` are reserved.
+
 `profile` defaults to `local`, `overrides` point other domains at their own dev servers (bare origins, no path; your
 own domain is overridden automatically), `idleTimeoutMs` defaults to `0` (idle timeout off), and `claims` is merged
 over the default dev claims. The plugin's `claims`, `ttlMs` and `noToken` options win over the file. `"lab": true`

package/dist/args.d.ts

@@ -1,5 +1,7 @@
 export declare const USAGE = "Usage: aistrike-shell token [options]\n\nMint a dev token for local back ends.\n  --claims <path>           JSON claims for the token\n  --ttl <30d|12h|45m|90s>   token lifetime (default 30d)\n  --out <path>              also write the token to a file (mode 0600)\n  --json                    print { token, session } instead of the bare token\n\nThe shell itself is served by shellDevHost() from @aistrike-dev/ui-shell-dev/vite:\nadd it to your MFE's vite.config.ts after mfe(), and \"vite\" serves the shell at /.\nShell settings (profile, overrides, domains, claims) live in shell.dev.json.\n";
 export declare const DOMAIN_ID: RegExp;
+export declare const RESERVED_DOMAIN_IDS: ReadonlySet<string>;
+export declare function isValidDomainId(id: string): boolean;
 export declare function parseTtl(text: string): number;
 /** `id=origin`. The origin must be a bare origin: scheme, host, optional port, nothing else (spec 4.5). */
 export declare function parseOverride(text: string): [string, string];

package/dist/args.js

@@ -14,6 +14,11 @@ const TTL = /^(\d+)([dhms])$/;
 const UNIT_MS = { d: 86_400_000, h: 3_600_000, m: 60_000, s: 1000 };
 // Mirrors the contract's DNS-label rule for domain ids. Duplicated (not imported) so the dev host has no runtime dependencies.
 export const DOMAIN_ID = /^[a-z](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+// Mirrors the SDK's RESERVED_DOMAIN_IDS, duplicated for the same reason as DOMAIN_ID.
+export const RESERVED_DOMAIN_IDS = new Set(['shell', 'preferences', 'commands', 'api', 'assets', 'ui']);
+export function isValidDomainId(id) {
+    return DOMAIN_ID.test(id) && !RESERVED_DOMAIN_IDS.has(id);
+}
 const SCHEME = /^[a-z][a-z0-9+.-]*:\/\//i;
 export function parseTtl(text) {
     const match = TTL.exec(text);
@@ -31,7 +36,7 @@ export function parseOverride(text) {
     }
     const id = text.slice(0, eq);
     const raw = text.slice(eq + 1).replace(/\/+$/, '');
-    if (!DOMAIN_ID.test(id)) {
+    if (!isValidDomainId(id)) {
         throw new Error(`invalid override id "${id}": must be a DNS label`);
     }
     if (!SCHEME.test(raw)) {

package/dist/devfile.js

@@ -1,9 +1,9 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import process from 'node:process';
-import { DOMAIN_ID, parseOverride } from './args.js';
+import { isValidDomainId, parseOverride } from './args.js';
 export const DEV_FILE = 'shell.dev.json';
-const CLAIM_STRINGS = ['sub', 'name', 'defaultTenant'];
+const CLAIM_STRINGS = ['sub', 'name', 'defaultTenant', 'orgId'];
 const CLAIM_LISTS = ['permissions', 'modules', 'tenants'];
 /** Dev claims must be a plain object of known keys; `iss`/`exp`/`iat` and friends cannot be smuggled into the token. */
 export function assertClaimsInput(value, source) {
@@ -42,9 +42,8 @@ function normalizeOverrides(overrides) {
     return result;
 }
 const FILE_KEYS = ['profile', 'overrides', 'domains', 'idleTimeoutMs', 'landing', 'lab', 'claims'];
-const DOMAIN_KEYS = ['id', 'route', 'nav', 'devPort'];
+const DOMAIN_KEYS = ['id', 'nav', 'devPort'];
 const NAV_KEYS = ['label', 'icon'];
-const ROUTE = /^\/[a-z0-9-]+$/;
 function isPlainObject(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
@@ -79,19 +78,19 @@ function validateDomain(value, path) {
     if (!isPlainObject(value)) {
         throw new Error(`${path} must be an object`);
     }
-    rejectUnknownKeys(value, DOMAIN_KEYS, path);
-    const { id, route, nav, devPort } = value;
-    if (typeof id !== 'string' || !DOMAIN_ID.test(id)) {
+    const { id, nav, devPort } = value;
+    if (typeof id !== 'string' || !isValidDomainId(id)) {
         throw new Error(`${path}.id must be a DNS label`);
     }
-    if (typeof route !== 'string' || !ROUTE.test(route)) {
-        throw new Error(`${path}.route must look like /name`);
+    if ('route' in value) {
+        throw new Error(`${path}.route is no longer read; delete it: a domain's prefix is its id (/${id})`);
     }
+    rejectUnknownKeys(value, DOMAIN_KEYS, path);
     const validNav = validateNav(nav, `${path}.nav`);
     if (!isPort(devPort)) {
         throw new Error(`${path}.devPort must be an integer from 1 to 65535`);
     }
-    return { id, route, nav: validNav, devPort };
+    return { id, nav: validNav, devPort };
 }
 function validateDomains(value) {
     if (!Array.isArray(value)) {

package/dist/token.d.ts

@@ -14,6 +14,7 @@ export interface DevClaimsInput {
     modules?: string[];
     tenants?: string[];
     defaultTenant?: string;
+    orgId?: string;
 }
 export declare const DEFAULT_CLAIMS: {
     sub: string;
@@ -22,6 +23,7 @@ export declare const DEFAULT_CLAIMS: {
     modules: string[];
     tenants: string[];
     defaultTenant: string;
+    orgId: string;
 };
 export declare function configDir(env?: NodeJS.ProcessEnv): string;
 /** One ES256 key per machine. No deployed environment trusts it; it exists so local back ends can verify if they want to. */

package/dist/token.js

@@ -14,6 +14,7 @@ export const DEFAULT_CLAIMS = {
     modules: ['settings'],
     tenants: ['acme', 'halcyon'],
     defaultTenant: 'acme',
+    orgId: 'org_dev',
 };
 export function configDir(env = process.env) {
     const base = env.XDG_CONFIG_HOME ?? join(env.HOME ?? homedir(), '.config');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aistrike-dev/ui-shell-dev",
-  "version": "1.1.0",
+  "version": "2.0.1",
   "description": "A Vite plugin that serves the AiStrike UI shell from your micro front-end's dev server, plus a dev-token CLI.",
   "license": "SEE LICENSE IN LICENSE",
   "repository": {
@@ -46,7 +46,7 @@
     "e2e": "node scripts/check-pack.mjs && playwright test"
   },
   "peerDependencies": {
-    "@aistrike-dev/ui": ">=6.0.0-alpha.11",
+    "@aistrike-dev/ui": ">=6.0.0-alpha.12",
     "vite": "^8.0.0"
   },
   "peerDependenciesMeta": {
@@ -58,7 +58,7 @@
     }
   },
   "devDependencies": {
-    "@aistrike-dev/ui": "6.0.0-alpha.11",
+    "@aistrike-dev/ui": "6.0.0-alpha.12",
     "@aistrike-dev/ui-shell-sdk": "workspace:*",
     "@playwright/test": "^1.63.0",
     "@types/node": "^24.0.0",