@almadar/ui 6.9.0 → 6.10.0

package/dist/{EntityBindingContext-Bn3ePJQC.d.cts → EntityBindingContext-Y4zXyNJZ.d.cts}

@@ -175,6 +175,12 @@ interface ServerBridgeTransport {
      */
     sendEvent: (orbitalName: string, event: string, payload?: EventPayload, clientId?: string, tick?: string, sourceTrait?: string) => Promise<OrbitalEventResponse>;
 }
+/**
+ * Supplies the bearer token the hosting server authenticates with. Resolved
+ * per request (tokens expire); `undefined` sends the request unauthenticated
+ * (dev servers with an auth bypass, standalone playground).
+ */
+type AccessTokenProvider = () => Promise<string | undefined>;
 /**
  * Access the server bridge. Returns a no-op stub when outside the provider.
  */
@@ -189,9 +195,15 @@ interface ServerBridgeProviderProps {
      * directly). Mutually exclusive with `serverUrl`.
      */
     transport?: ServerBridgeTransport;
+    /**
+     * Bearer token for the HTTP transport (`Authorization` on every fetch;
+     * `access_token` on the SSE URL, since EventSource cannot set headers).
+     * Ignored with a custom `transport`.
+     */
+    getAccessToken?: AccessTokenProvider;
     children: ReactNode;
 }
-declare function ServerBridgeProvider({ schema, serverUrl, transport: customTransport, children, }: ServerBridgeProviderProps): React.JSX.Element;
+declare function ServerBridgeProvider({ schema, serverUrl, transport: customTransport, getAccessToken, children, }: ServerBridgeProviderProps): React.JSX.Element;
 
 /**
  * TraitProvider Component
@@ -272,4 +284,4 @@ declare function useEntityBindingSnapshot(traitName: string | undefined): {
     state: string;
 };
 
-export { EntityBindingContext as E, type SendEventResult as S, TraitContext as T, type EntityBindingSource as a, type EntitySchemaContextValue as b, EntitySchemaProvider as c, type EntitySchemaProviderProps as d, type ServerBridgeContextValue as e, ServerBridgeProvider as f, type ServerBridgeProviderProps as g, type ServerBridgeTransport as h, type ServerClientEffect as i, type ServerResponseMeta as j, type TraitContextValue as k, type TraitInstance as l, TraitProvider as m, type TraitProviderProps as n, useEntitySchema as o, useEntitySchemaOptional as p, useServerBridge as q, useTrait as r, useTraitContext as s, useEntityBindingSnapshot as u };
+export { type AccessTokenProvider as A, EntityBindingContext as E, type SendEventResult as S, TraitContext as T, type EntityBindingSource as a, type EntitySchemaContextValue as b, EntitySchemaProvider as c, type EntitySchemaProviderProps as d, type ServerBridgeContextValue as e, ServerBridgeProvider as f, type ServerBridgeProviderProps as g, type ServerBridgeTransport as h, type ServerClientEffect as i, type ServerResponseMeta as j, type TraitContextValue as k, type TraitInstance as l, TraitProvider as m, type TraitProviderProps as n, useEntitySchema as o, useEntitySchemaOptional as p, useServerBridge as q, useTrait as r, useTraitContext as s, useEntityBindingSnapshot as u };

package/dist/{EntityBindingContext-Bn3ePJQC.d.ts → EntityBindingContext-Y4zXyNJZ.d.ts}

@@ -175,6 +175,12 @@ interface ServerBridgeTransport {
      */
     sendEvent: (orbitalName: string, event: string, payload?: EventPayload, clientId?: string, tick?: string, sourceTrait?: string) => Promise<OrbitalEventResponse>;
 }
+/**
+ * Supplies the bearer token the hosting server authenticates with. Resolved
+ * per request (tokens expire); `undefined` sends the request unauthenticated
+ * (dev servers with an auth bypass, standalone playground).
+ */
+type AccessTokenProvider = () => Promise<string | undefined>;
 /**
  * Access the server bridge. Returns a no-op stub when outside the provider.
  */
@@ -189,9 +195,15 @@ interface ServerBridgeProviderProps {
      * directly). Mutually exclusive with `serverUrl`.
      */
     transport?: ServerBridgeTransport;
+    /**
+     * Bearer token for the HTTP transport (`Authorization` on every fetch;
+     * `access_token` on the SSE URL, since EventSource cannot set headers).
+     * Ignored with a custom `transport`.
+     */
+    getAccessToken?: AccessTokenProvider;
     children: ReactNode;
 }
-declare function ServerBridgeProvider({ schema, serverUrl, transport: customTransport, children, }: ServerBridgeProviderProps): React.JSX.Element;
+declare function ServerBridgeProvider({ schema, serverUrl, transport: customTransport, getAccessToken, children, }: ServerBridgeProviderProps): React.JSX.Element;
 
 /**
  * TraitProvider Component
@@ -272,4 +284,4 @@ declare function useEntityBindingSnapshot(traitName: string | undefined): {
     state: string;
 };
 
-export { EntityBindingContext as E, type SendEventResult as S, TraitContext as T, type EntityBindingSource as a, type EntitySchemaContextValue as b, EntitySchemaProvider as c, type EntitySchemaProviderProps as d, type ServerBridgeContextValue as e, ServerBridgeProvider as f, type ServerBridgeProviderProps as g, type ServerBridgeTransport as h, type ServerClientEffect as i, type ServerResponseMeta as j, type TraitContextValue as k, type TraitInstance as l, TraitProvider as m, type TraitProviderProps as n, useEntitySchema as o, useEntitySchemaOptional as p, useServerBridge as q, useTrait as r, useTraitContext as s, useEntityBindingSnapshot as u };
+export { type AccessTokenProvider as A, EntityBindingContext as E, type SendEventResult as S, TraitContext as T, type EntityBindingSource as a, type EntitySchemaContextValue as b, EntitySchemaProvider as c, type EntitySchemaProviderProps as d, type ServerBridgeContextValue as e, ServerBridgeProvider as f, type ServerBridgeProviderProps as g, type ServerBridgeTransport as h, type ServerClientEffect as i, type ServerResponseMeta as j, type TraitContextValue as k, type TraitInstance as l, TraitProvider as m, type TraitProviderProps as n, useEntitySchema as o, useEntitySchemaOptional as p, useServerBridge as q, useTrait as r, useTraitContext as s, useEntityBindingSnapshot as u };

package/dist/avl/index.cjs

@@ -59920,7 +59920,7 @@ function TraitInitializer({ traits: traits2, routeParams, orbitalNames, onNaviga
   }, [bridge.connected, orbitalNames, bridge.sendEvent, uiSlots, onNavigate, onNavigateBack, embeddedTraits, activeTraitNames, withActiveTraits, routeParams]);
   return /* @__PURE__ */ jsxRuntime.jsx(providers.EntityBindingContext.Provider, { value: entityBindingSource, children });
 }
-function SchemaRunner({ schema, serverUrl, transport, mockData, pageName, routeParams, onNavigate, onNavigateBack, onLocalFallback, persistence }) {
+function SchemaRunner({ schema, serverUrl, transport, getAccessToken, mockData, pageName, routeParams, onNavigate, onNavigateBack, onLocalFallback, persistence }) {
   const { traits: traits2, allEntities, allTraits, ir } = useResolvedSchema(schema, pageName);
   const allPageTraits = React96.useMemo(() => {
     let base;
@@ -60077,7 +60077,7 @@ function SchemaRunner({ schema, serverUrl, transport, mockData, pageName, routeP
     }
   ) });
   if (serverUrl || transport) {
-    return /* @__PURE__ */ jsxRuntime.jsx(providers.ServerBridgeProvider, { schema, serverUrl, transport, children: inner });
+    return /* @__PURE__ */ jsxRuntime.jsx(providers.ServerBridgeProvider, { schema, serverUrl, transport, getAccessToken, children: inner });
   }
   return inner;
 }
@@ -60089,6 +60089,7 @@ function OrbPreview({
   className,
   serverUrl,
   transport,
+  getAccessToken,
   initialPagePath,
   isolated = false
 }) {
@@ -60269,6 +60270,7 @@ function OrbPreview({
                   schema: parseResult.schema,
                   serverUrl,
                   transport,
+                  getAccessToken,
                   mockData: effectiveMockData,
                   pageName: currentPage,
                   routeParams,

package/dist/avl/index.js

@@ -59844,7 +59844,7 @@ function TraitInitializer({ traits: traits2, routeParams, orbitalNames, onNaviga
   }, [bridge.connected, orbitalNames, bridge.sendEvent, uiSlots, onNavigate, onNavigateBack, embeddedTraits, activeTraitNames, withActiveTraits, routeParams]);
   return /* @__PURE__ */ jsx(EntityBindingContext.Provider, { value: entityBindingSource, children });
 }
-function SchemaRunner({ schema, serverUrl, transport, mockData, pageName, routeParams, onNavigate, onNavigateBack, onLocalFallback, persistence }) {
+function SchemaRunner({ schema, serverUrl, transport, getAccessToken, mockData, pageName, routeParams, onNavigate, onNavigateBack, onLocalFallback, persistence }) {
   const { traits: traits2, allEntities, allTraits, ir } = useResolvedSchema(schema, pageName);
   const allPageTraits = useMemo(() => {
     let base;
@@ -60001,7 +60001,7 @@ function SchemaRunner({ schema, serverUrl, transport, mockData, pageName, routeP
     }
   ) });
   if (serverUrl || transport) {
-    return /* @__PURE__ */ jsx(ServerBridgeProvider, { schema, serverUrl, transport, children: inner });
+    return /* @__PURE__ */ jsx(ServerBridgeProvider, { schema, serverUrl, transport, getAccessToken, children: inner });
   }
   return inner;
 }
@@ -60013,6 +60013,7 @@ function OrbPreview({
   className,
   serverUrl,
   transport,
+  getAccessToken,
   initialPagePath,
   isolated = false
 }) {
@@ -60193,6 +60194,7 @@ function OrbPreview({
                   schema: parseResult.schema,
                   serverUrl,
                   transport,
+                  getAccessToken,
                   mockData: effectiveMockData,
                   pageName: currentPage,
                   routeParams,

package/dist/components/index.d.cts

@@ -7925,7 +7925,7 @@ interface DataGridProps extends DataDndProps {
      */
     look?: "dense" | "spacious" | "striped" | "borderless" | "card-rows";
 }
-declare function DataGrid({ entity, fields, columns, itemActions, maxInlineActions, scrollX, cols, gap, minCardWidth, className, isLoading, error, imageField, selectable, selectionEvent, infiniteScroll, loadMoreEvent, hasMore, children, pageSize, renderItem: schemaRenderItem, dragGroup, accepts, sortable, dropEvent, reorderEvent, positionEvent, dndItemIdField, dndRoot, look, }: DataGridProps): string | number | bigint | boolean | Iterable<React__default.ReactNode> | Promise<string | number | bigint | boolean | React__default.ReactPortal | React__default.ReactElement<unknown, string | React__default.JSXElementConstructor<any>> | Iterable<React__default.ReactNode> | null | undefined> | React__default.JSX.Element | null | undefined;
+declare function DataGrid({ entity, fields, columns, itemActions, maxInlineActions, scrollX, cols, gap, minCardWidth, className, isLoading, error, imageField, selectable, selectionEvent, infiniteScroll, loadMoreEvent, hasMore, children, pageSize, renderItem: schemaRenderItem, dragGroup, accepts, sortable, dropEvent, reorderEvent, positionEvent, dndItemIdField, dndRoot, look, }: DataGridProps): string | number | bigint | boolean | React__default.JSX.Element | Iterable<React__default.ReactNode> | Promise<string | number | bigint | boolean | React__default.ReactPortal | React__default.ReactElement<unknown, string | React__default.JSXElementConstructor<any>> | Iterable<React__default.ReactNode> | null | undefined> | null | undefined;
 declare namespace DataGrid {
     var displayName: string;
 }
@@ -8079,7 +8079,7 @@ interface DataListProps extends DataDndProps {
      */
     look?: "dense" | "spacious" | "striped" | "borderless" | "card-rows";
 }
-declare function DataList({ entity, fields, columns, itemActions, maxInlineActions, itemClickEvent, gap, variant, groupBy, senderField, senderLabelField, currentUser, emptyMessage, className, isLoading, error, reorderable: _reorderable, reorderEvent: _reorderEvent, swipeLeftEvent: _swipeLeftEvent, swipeLeftActions: _swipeLeftActions, swipeRightEvent: _swipeRightEvent, swipeRightActions: _swipeRightActions, longPressEvent: _longPressEvent, infiniteScroll, loadMoreEvent, hasMore, children, pageSize, sortBy, sortDirection, renderItem: schemaRenderItem, dragGroup, accepts, sortable: sortableProp, dropEvent, reorderEvent: dndReorderEvent, positionEvent, dndItemIdField, dndRoot, look, }: DataListProps): string | number | bigint | boolean | Iterable<React__default.ReactNode> | Promise<string | number | bigint | boolean | React__default.ReactPortal | React__default.ReactElement<unknown, string | React__default.JSXElementConstructor<any>> | Iterable<React__default.ReactNode> | null | undefined> | React__default.JSX.Element | null | undefined;
+declare function DataList({ entity, fields, columns, itemActions, maxInlineActions, itemClickEvent, gap, variant, groupBy, senderField, senderLabelField, currentUser, emptyMessage, className, isLoading, error, reorderable: _reorderable, reorderEvent: _reorderEvent, swipeLeftEvent: _swipeLeftEvent, swipeLeftActions: _swipeLeftActions, swipeRightEvent: _swipeRightEvent, swipeRightActions: _swipeRightActions, longPressEvent: _longPressEvent, infiniteScroll, loadMoreEvent, hasMore, children, pageSize, sortBy, sortDirection, renderItem: schemaRenderItem, dragGroup, accepts, sortable: sortableProp, dropEvent, reorderEvent: dndReorderEvent, positionEvent, dndItemIdField, dndRoot, look, }: DataListProps): string | number | bigint | boolean | React__default.JSX.Element | Iterable<React__default.ReactNode> | Promise<string | number | bigint | boolean | React__default.ReactPortal | React__default.ReactElement<unknown, string | React__default.JSXElementConstructor<any>> | Iterable<React__default.ReactNode> | null | undefined> | null | undefined;
 declare namespace DataList {
     var displayName: string;
 }

package/dist/components/index.d.ts

@@ -7925,7 +7925,7 @@ interface DataGridProps extends DataDndProps {
      */
     look?: "dense" | "spacious" | "striped" | "borderless" | "card-rows";
 }
-declare function DataGrid({ entity, fields, columns, itemActions, maxInlineActions, scrollX, cols, gap, minCardWidth, className, isLoading, error, imageField, selectable, selectionEvent, infiniteScroll, loadMoreEvent, hasMore, children, pageSize, renderItem: schemaRenderItem, dragGroup, accepts, sortable, dropEvent, reorderEvent, positionEvent, dndItemIdField, dndRoot, look, }: DataGridProps): string | number | bigint | boolean | Iterable<React__default.ReactNode> | Promise<string | number | bigint | boolean | React__default.ReactPortal | React__default.ReactElement<unknown, string | React__default.JSXElementConstructor<any>> | Iterable<React__default.ReactNode> | null | undefined> | React__default.JSX.Element | null | undefined;
+declare function DataGrid({ entity, fields, columns, itemActions, maxInlineActions, scrollX, cols, gap, minCardWidth, className, isLoading, error, imageField, selectable, selectionEvent, infiniteScroll, loadMoreEvent, hasMore, children, pageSize, renderItem: schemaRenderItem, dragGroup, accepts, sortable, dropEvent, reorderEvent, positionEvent, dndItemIdField, dndRoot, look, }: DataGridProps): string | number | bigint | boolean | React__default.JSX.Element | Iterable<React__default.ReactNode> | Promise<string | number | bigint | boolean | React__default.ReactPortal | React__default.ReactElement<unknown, string | React__default.JSXElementConstructor<any>> | Iterable<React__default.ReactNode> | null | undefined> | null | undefined;
 declare namespace DataGrid {
     var displayName: string;
 }
@@ -8079,7 +8079,7 @@ interface DataListProps extends DataDndProps {
      */
     look?: "dense" | "spacious" | "striped" | "borderless" | "card-rows";
 }
-declare function DataList({ entity, fields, columns, itemActions, maxInlineActions, itemClickEvent, gap, variant, groupBy, senderField, senderLabelField, currentUser, emptyMessage, className, isLoading, error, reorderable: _reorderable, reorderEvent: _reorderEvent, swipeLeftEvent: _swipeLeftEvent, swipeLeftActions: _swipeLeftActions, swipeRightEvent: _swipeRightEvent, swipeRightActions: _swipeRightActions, longPressEvent: _longPressEvent, infiniteScroll, loadMoreEvent, hasMore, children, pageSize, sortBy, sortDirection, renderItem: schemaRenderItem, dragGroup, accepts, sortable: sortableProp, dropEvent, reorderEvent: dndReorderEvent, positionEvent, dndItemIdField, dndRoot, look, }: DataListProps): string | number | bigint | boolean | Iterable<React__default.ReactNode> | Promise<string | number | bigint | boolean | React__default.ReactPortal | React__default.ReactElement<unknown, string | React__default.JSXElementConstructor<any>> | Iterable<React__default.ReactNode> | null | undefined> | React__default.JSX.Element | null | undefined;
+declare function DataList({ entity, fields, columns, itemActions, maxInlineActions, itemClickEvent, gap, variant, groupBy, senderField, senderLabelField, currentUser, emptyMessage, className, isLoading, error, reorderable: _reorderable, reorderEvent: _reorderEvent, swipeLeftEvent: _swipeLeftEvent, swipeLeftActions: _swipeLeftActions, swipeRightEvent: _swipeRightEvent, swipeRightActions: _swipeRightActions, longPressEvent: _longPressEvent, infiniteScroll, loadMoreEvent, hasMore, children, pageSize, sortBy, sortDirection, renderItem: schemaRenderItem, dragGroup, accepts, sortable: sortableProp, dropEvent, reorderEvent: dndReorderEvent, positionEvent, dndItemIdField, dndRoot, look, }: DataListProps): string | number | bigint | boolean | React__default.JSX.Element | Iterable<React__default.ReactNode> | Promise<string | number | bigint | boolean | React__default.ReactPortal | React__default.ReactElement<unknown, string | React__default.JSXElementConstructor<any>> | Iterable<React__default.ReactNode> | null | undefined> | null | undefined;
 declare namespace DataList {
     var displayName: string;
 }

package/dist/providers/index.cjs

@@ -53946,13 +53946,19 @@ function deriveEventsUrl(serverUrl) {
   const apiRoot = trimmed.replace(/\/[^/]*$/, "");
   return `${apiRoot}/events`;
 }
-function createHttpTransport(serverUrl) {
+async function authHeaders(getAccessToken) {
+  const headers = { "Content-Type": "application/json" };
+  const token = getAccessToken ? await getAccessToken() : void 0;
+  if (token) headers.Authorization = `Bearer ${token}`;
+  return headers;
+}
+function createHttpTransport(serverUrl, getAccessToken) {
   return {
     register: async (schema) => {
       try {
         const res = await fetch(`${serverUrl}/register`, {
           method: "POST",
-          headers: { "Content-Type": "application/json" },
+          headers: await authHeaders(getAccessToken),
           body: JSON.stringify({ schema })
         });
         const result = await res.json();
@@ -53968,7 +53974,7 @@ function createHttpTransport(serverUrl) {
     },
     unregister: async () => {
       try {
-        await fetch(`${serverUrl}/unregister`, { method: "DELETE" });
+        await fetch(`${serverUrl}/unregister`, { method: "DELETE", headers: await authHeaders(getAccessToken) });
       } catch {
       }
     },
@@ -53976,7 +53982,7 @@ function createHttpTransport(serverUrl) {
       const body = { event, payload, clientId, tick, sourceTrait };
       const res = await fetch(`${serverUrl}/${orbitalName}/events`, {
         method: "POST",
-        headers: { "Content-Type": "application/json" },
+        headers: await authHeaders(getAccessToken),
         body: JSON.stringify(body)
       });
       return res.json();
@@ -53996,6 +54002,7 @@ function ServerBridgeProvider({
   schema,
   serverUrl,
   transport: customTransport,
+  getAccessToken,
   children
 }) {
   if (!serverUrl && !customTransport) {
@@ -54007,8 +54014,8 @@ function ServerBridgeProvider({
   const eventBus = useEventBus();
   const [connected, setConnected] = React89.useState(false);
   const transport = React89.useMemo(
-    () => customTransport ?? createHttpTransport(serverUrl),
-    [serverUrl, customTransport]
+    () => customTransport ?? createHttpTransport(serverUrl, getAccessToken),
+    [serverUrl, customTransport, getAccessToken]
   );
   const registerSchema = React89.useCallback(
     async () => transport.register(schema),
@@ -54145,16 +54152,28 @@ function ServerBridgeProvider({
   React89.useEffect(() => {
     if (!serverUrl) return;
     if (typeof EventSource === "undefined") return;
-    const url = `${deriveEventsUrl(serverUrl)}?clientId=${encodeURIComponent(getTabClientId())}`;
-    return acquirePushChannel(url, (parsed) => {
+    let release;
+    let cancelled = false;
+    const subscribe = (parsed) => {
       serverBridgeLog.debug("push:received", {
         event: parsed.event,
         sourceOrbital: parsed.source?.orbital,
         sourceTrait: parsed.source?.trait
       });
       reEmitServerEvent(eventBus, parsed, "push");
-    });
-  }, [serverUrl, eventBus]);
+    };
+    void (async () => {
+      const token = getAccessToken ? await getAccessToken() : void 0;
+      if (cancelled) return;
+      const params = new URLSearchParams({ clientId: getTabClientId() });
+      if (token) params.set("access_token", token);
+      release = acquirePushChannel(`${deriveEventsUrl(serverUrl)}?${params.toString()}`, subscribe);
+    })();
+    return () => {
+      cancelled = true;
+      release?.();
+    };
+  }, [serverUrl, eventBus, getAccessToken]);
   return /* @__PURE__ */ jsxRuntime.jsx(ServerBridgeContext.Provider, { value: { connected, sendEvent }, children });
 }
 var log13 = logger.createLogger("almadar:ui:trait-provider");

package/dist/providers/index.d.cts

@@ -4,7 +4,7 @@ export { ANONYMOUS_USER } from '@almadar/core';
 import { U as UIThemeDefinition, j as UserData } from '../UserContext-g_LcDiGN.cjs';
 export { a as CurrentPagePathContext, b as CurrentPagePathProvider, c as CurrentPagePathProviderProps, d as DesignThemeProvider, O as OrbitalThemeProvider, e as OrbitalThemeProviderProps, h as UserContext, i as UserContextValue, k as UserProvider, l as UserProviderProps, u as useCurrentPagePath, m as useDesignTheme, n as useHasPermission, o as useHasRole, q as useUser, r as useUserForEvaluation } from '../UserContext-g_LcDiGN.cjs';
 import { E as EventBusContextType } from '../event-bus-types-Bl78kokd.cjs';
-export { E as EntityBindingContext, a as EntityBindingSource, b as EntitySchemaContextValue, c as EntitySchemaProvider, d as EntitySchemaProviderProps, S as SendEventResult, e as ServerBridgeContextValue, f as ServerBridgeProvider, g as ServerBridgeProviderProps, h as ServerBridgeTransport, i as ServerClientEffect, j as ServerResponseMeta, T as TraitContext, k as TraitContextValue, l as TraitInstance, m as TraitProvider, n as TraitProviderProps, u as useEntityBindingSnapshot, o as useEntitySchema, p as useEntitySchemaOptional, q as useServerBridge, r as useTrait, s as useTraitContext } from '../EntityBindingContext-Bn3ePJQC.cjs';
+export { A as AccessTokenProvider, E as EntityBindingContext, a as EntityBindingSource, b as EntitySchemaContextValue, c as EntitySchemaProvider, d as EntitySchemaProviderProps, S as SendEventResult, e as ServerBridgeContextValue, f as ServerBridgeProvider, g as ServerBridgeProviderProps, h as ServerBridgeTransport, i as ServerClientEffect, j as ServerResponseMeta, T as TraitContext, k as TraitContextValue, l as TraitInstance, m as TraitProvider, n as TraitProviderProps, u as useEntityBindingSnapshot, o as useEntitySchema, p as useEntitySchemaOptional, q as useServerBridge, r as useTrait, s as useTraitContext } from '../EntityBindingContext-Y4zXyNJZ.cjs';
 import { j as UseOfflineExecutorResult, U as UseOfflineExecutorOptions } from '../offline-executor-QUdKOj7f.cjs';
 export { c as NavigationContextValue, d as NavigationProvider, e as NavigationProviderProps, f as NavigationState, k as comparePathSpecificity, m as extractRouteParams, n as findPageByName, o as findPageByPath, p as getAllPages, q as getDefaultPage, r as matchPath, s as matchPathAmong, t as pathMatches, u as useActivePage, v as useInitPayload, w as useNavigateTo, x as useNavigation, y as useNavigationId, z as useNavigationState } from '../offline-executor-QUdKOj7f.cjs';
 export { G as GameAudioContext, a as GameAudioContextValue, b as GameAudioProvider, c as GameAudioProviderProps, u as useGameAudioContext, d as useGameAudioContextOptional } from '../GameAudioProvider-Dk_Y3LN3.cjs';

package/dist/providers/index.d.ts

@@ -4,7 +4,7 @@ export { ANONYMOUS_USER } from '@almadar/core';
 import { U as UIThemeDefinition, j as UserData } from '../UserContext-g_LcDiGN.js';
 export { a as CurrentPagePathContext, b as CurrentPagePathProvider, c as CurrentPagePathProviderProps, d as DesignThemeProvider, O as OrbitalThemeProvider, e as OrbitalThemeProviderProps, h as UserContext, i as UserContextValue, k as UserProvider, l as UserProviderProps, u as useCurrentPagePath, m as useDesignTheme, n as useHasPermission, o as useHasRole, q as useUser, r as useUserForEvaluation } from '../UserContext-g_LcDiGN.js';
 import { E as EventBusContextType } from '../event-bus-types-Bl78kokd.js';
-export { E as EntityBindingContext, a as EntityBindingSource, b as EntitySchemaContextValue, c as EntitySchemaProvider, d as EntitySchemaProviderProps, S as SendEventResult, e as ServerBridgeContextValue, f as ServerBridgeProvider, g as ServerBridgeProviderProps, h as ServerBridgeTransport, i as ServerClientEffect, j as ServerResponseMeta, T as TraitContext, k as TraitContextValue, l as TraitInstance, m as TraitProvider, n as TraitProviderProps, u as useEntityBindingSnapshot, o as useEntitySchema, p as useEntitySchemaOptional, q as useServerBridge, r as useTrait, s as useTraitContext } from '../EntityBindingContext-Bn3ePJQC.js';
+export { A as AccessTokenProvider, E as EntityBindingContext, a as EntityBindingSource, b as EntitySchemaContextValue, c as EntitySchemaProvider, d as EntitySchemaProviderProps, S as SendEventResult, e as ServerBridgeContextValue, f as ServerBridgeProvider, g as ServerBridgeProviderProps, h as ServerBridgeTransport, i as ServerClientEffect, j as ServerResponseMeta, T as TraitContext, k as TraitContextValue, l as TraitInstance, m as TraitProvider, n as TraitProviderProps, u as useEntityBindingSnapshot, o as useEntitySchema, p as useEntitySchemaOptional, q as useServerBridge, r as useTrait, s as useTraitContext } from '../EntityBindingContext-Y4zXyNJZ.js';
 import { j as UseOfflineExecutorResult, U as UseOfflineExecutorOptions } from '../offline-executor-QUdKOj7f.js';
 export { c as NavigationContextValue, d as NavigationProvider, e as NavigationProviderProps, f as NavigationState, k as comparePathSpecificity, m as extractRouteParams, n as findPageByName, o as findPageByPath, p as getAllPages, q as getDefaultPage, r as matchPath, s as matchPathAmong, t as pathMatches, u as useActivePage, v as useInitPayload, w as useNavigateTo, x as useNavigation, y as useNavigationId, z as useNavigationState } from '../offline-executor-QUdKOj7f.js';
 export { G as GameAudioContext, a as GameAudioContextValue, b as GameAudioProvider, c as GameAudioProviderProps, u as useGameAudioContext, d as useGameAudioContextOptional } from '../GameAudioProvider-Ctceau1s.js';

package/dist/providers/index.js

@@ -53872,13 +53872,19 @@ function deriveEventsUrl(serverUrl) {
   const apiRoot = trimmed.replace(/\/[^/]*$/, "");
   return `${apiRoot}/events`;
 }
-function createHttpTransport(serverUrl) {
+async function authHeaders(getAccessToken) {
+  const headers = { "Content-Type": "application/json" };
+  const token = getAccessToken ? await getAccessToken() : void 0;
+  if (token) headers.Authorization = `Bearer ${token}`;
+  return headers;
+}
+function createHttpTransport(serverUrl, getAccessToken) {
   return {
     register: async (schema) => {
       try {
         const res = await fetch(`${serverUrl}/register`, {
           method: "POST",
-          headers: { "Content-Type": "application/json" },
+          headers: await authHeaders(getAccessToken),
           body: JSON.stringify({ schema })
         });
         const result = await res.json();
@@ -53894,7 +53900,7 @@ function createHttpTransport(serverUrl) {
     },
     unregister: async () => {
       try {
-        await fetch(`${serverUrl}/unregister`, { method: "DELETE" });
+        await fetch(`${serverUrl}/unregister`, { method: "DELETE", headers: await authHeaders(getAccessToken) });
       } catch {
       }
     },
@@ -53902,7 +53908,7 @@ function createHttpTransport(serverUrl) {
       const body = { event, payload, clientId, tick, sourceTrait };
       const res = await fetch(`${serverUrl}/${orbitalName}/events`, {
         method: "POST",
-        headers: { "Content-Type": "application/json" },
+        headers: await authHeaders(getAccessToken),
         body: JSON.stringify(body)
       });
       return res.json();
@@ -53922,6 +53928,7 @@ function ServerBridgeProvider({
   schema,
   serverUrl,
   transport: customTransport,
+  getAccessToken,
   children
 }) {
   if (!serverUrl && !customTransport) {
@@ -53933,8 +53940,8 @@ function ServerBridgeProvider({
   const eventBus = useEventBus();
   const [connected, setConnected] = useState(false);
   const transport = useMemo(
-    () => customTransport ?? createHttpTransport(serverUrl),
-    [serverUrl, customTransport]
+    () => customTransport ?? createHttpTransport(serverUrl, getAccessToken),
+    [serverUrl, customTransport, getAccessToken]
   );
   const registerSchema = useCallback(
     async () => transport.register(schema),
@@ -54071,16 +54078,28 @@ function ServerBridgeProvider({
   useEffect(() => {
     if (!serverUrl) return;
     if (typeof EventSource === "undefined") return;
-    const url = `${deriveEventsUrl(serverUrl)}?clientId=${encodeURIComponent(getTabClientId())}`;
-    return acquirePushChannel(url, (parsed) => {
+    let release;
+    let cancelled = false;
+    const subscribe = (parsed) => {
       serverBridgeLog.debug("push:received", {
         event: parsed.event,
         sourceOrbital: parsed.source?.orbital,
         sourceTrait: parsed.source?.trait
       });
       reEmitServerEvent(eventBus, parsed, "push");
-    });
-  }, [serverUrl, eventBus]);
+    };
+    void (async () => {
+      const token = getAccessToken ? await getAccessToken() : void 0;
+      if (cancelled) return;
+      const params = new URLSearchParams({ clientId: getTabClientId() });
+      if (token) params.set("access_token", token);
+      release = acquirePushChannel(`${deriveEventsUrl(serverUrl)}?${params.toString()}`, subscribe);
+    })();
+    return () => {
+      cancelled = true;
+      release?.();
+    };
+  }, [serverUrl, eventBus, getAccessToken]);
   return /* @__PURE__ */ jsx(ServerBridgeContext.Provider, { value: { connected, sendEvent }, children });
 }
 var log13 = createLogger("almadar:ui:trait-provider");

package/dist/runtime/index.cjs

@@ -54147,7 +54147,7 @@ function TraitInitializer({ traits: traits2, routeParams, orbitalNames, onNaviga
   }, [bridge.connected, orbitalNames, bridge.sendEvent, uiSlots, onNavigate, onNavigateBack, embeddedTraits, activeTraitNames, withActiveTraits, routeParams]);
   return /* @__PURE__ */ jsxRuntime.jsx(providers.EntityBindingContext.Provider, { value: entityBindingSource, children });
 }
-function SchemaRunner({ schema, serverUrl, transport, mockData, pageName, routeParams, onNavigate, onNavigateBack, onLocalFallback, persistence }) {
+function SchemaRunner({ schema, serverUrl, transport, getAccessToken, mockData, pageName, routeParams, onNavigate, onNavigateBack, onLocalFallback, persistence }) {
   const { traits: traits2, allEntities, allTraits, ir } = useResolvedSchema(schema, pageName);
   const allPageTraits = React87.useMemo(() => {
     let base;
@@ -54304,7 +54304,7 @@ function SchemaRunner({ schema, serverUrl, transport, mockData, pageName, routeP
     }
   ) });
   if (serverUrl || transport) {
-    return /* @__PURE__ */ jsxRuntime.jsx(providers.ServerBridgeProvider, { schema, serverUrl, transport, children: inner });
+    return /* @__PURE__ */ jsxRuntime.jsx(providers.ServerBridgeProvider, { schema, serverUrl, transport, getAccessToken, children: inner });
   }
   return inner;
 }
@@ -54316,6 +54316,7 @@ function OrbPreview({
   className,
   serverUrl,
   transport,
+  getAccessToken,
   initialPagePath,
   isolated = false
 }) {
@@ -54496,6 +54497,7 @@ function OrbPreview({
                   schema: parseResult.schema,
                   serverUrl,
                   transport,
+                  getAccessToken,
                   mockData: effectiveMockData,
                   pageName: currentPage,
                   routeParams,

package/dist/runtime/index.d.cts

@@ -5,8 +5,8 @@ import * as _almadar_runtime from '@almadar/runtime';
 import { TraitState, EffectHandlers } from '@almadar/runtime';
 import { K as KeyCaptureTable } from '../useKeyboardRouter-CVn8lfiX.cjs';
 import { c as useUISlots } from '../UISlotContext-BlRDbHDy.cjs';
-import { a as EntityBindingSource, h as ServerBridgeTransport } from '../EntityBindingContext-Bn3ePJQC.cjs';
-export { b as EntitySchemaContextValue, c as EntitySchemaProvider, d as EntitySchemaProviderProps, e as ServerBridgeContextValue, f as ServerBridgeProvider, i as ServerClientEffect, T as TraitContext, k as TraitContextValue, l as TraitInstance, m as TraitProvider, n as TraitProviderProps, o as useEntitySchema, p as useEntitySchemaOptional, q as useServerBridge, r as useTrait, s as useTraitContext } from '../EntityBindingContext-Bn3ePJQC.cjs';
+import { a as EntityBindingSource, h as ServerBridgeTransport, A as AccessTokenProvider } from '../EntityBindingContext-Y4zXyNJZ.cjs';
+export { b as EntitySchemaContextValue, c as EntitySchemaProvider, d as EntitySchemaProviderProps, e as ServerBridgeContextValue, f as ServerBridgeProvider, i as ServerClientEffect, T as TraitContext, k as TraitContextValue, l as TraitInstance, m as TraitProvider, n as TraitProviderProps, o as useEntitySchema, p as useEntitySchemaOptional, q as useServerBridge, r as useTrait, s as useTraitContext } from '../EntityBindingContext-Y4zXyNJZ.cjs';
 export { PERF_NAMESPACE, PerfEntry, PreparedPreviewSchema, adjustSchemaForMockData, buildMockData, clearPerf, perfEnd, perfStart, perfTime, prepareSchemaForPreview, wrapCallbackForEvent } from '@almadar/runtime/ui';
 import React__default, { ReactNode } from 'react';
 export { S as SlotHostManifest, a as SlotHostRegion, b as assertUniqueSlotsPerHost } from '../slot-host-Czc2JAxo.cjs';
@@ -246,6 +246,8 @@ interface OrbPreviewProps {
      * `OrbitalServerRuntime.processOrbitalEvent` directly without HTTP.
      */
     transport?: ServerBridgeTransport;
+    /** Bearer token for `serverUrl` requests (see `ServerBridgeProviderProps.getAccessToken`). */
+    getAccessToken?: AccessTokenProvider;
     /**
      * Initial page path to render (e.g. `/deals`). Resolves against the
      * schema's `pages[]` to seed `currentPage` so the right orbital's traits
@@ -275,7 +277,7 @@ interface OrbPreviewProps {
  * <OrbPreview schema={schema} serverUrl="/api/orbitals" />
  * ```
  */
-declare function OrbPreview({ schema, mockData, autoMock, height, className, serverUrl, transport, initialPagePath, isolated, }: OrbPreviewProps): React__default.ReactElement;
+declare function OrbPreview({ schema, mockData, autoMock, height, className, serverUrl, transport, getAccessToken, initialPagePath, isolated, }: OrbPreviewProps): React__default.ReactElement;
 declare namespace OrbPreview {
     var displayName: string;
 }
@@ -418,4 +420,4 @@ declare function useOrbitalPluginHost(): {
  */
 declare function OrbitalPluginHost({ plugins, mode, transport, deny, navigate, notify, onTransition, children, }: OrbitalPluginHostProps): React__default.ReactElement;
 
-export { BrowserPlayground, type BrowserPlaygroundProps, type ClientEventBus, type CreateClientEffectHandlersOptions, OrbPreview, type OrbPreviewProps, OrbitalPluginHost, type OrbitalPluginHostProps, type PluginHostDenyVerb, type PluginHostInbound, type PluginHostPlugin, type ResolvedSchemaResult, ServerBridgeTransport, type SlotPatternEntry, type SlotSetter, type SlotSource, type TraitStateMachineResult, type UseTraitStateMachineOptions, clearSchemaCache, createClientEffectHandlers, useDeclaredCaptureTable, useOrbitalPluginHost, useResolvedSchema, useTraitStateMachine };
+export { AccessTokenProvider, BrowserPlayground, type BrowserPlaygroundProps, type ClientEventBus, type CreateClientEffectHandlersOptions, OrbPreview, type OrbPreviewProps, OrbitalPluginHost, type OrbitalPluginHostProps, type PluginHostDenyVerb, type PluginHostInbound, type PluginHostPlugin, type ResolvedSchemaResult, ServerBridgeTransport, type SlotPatternEntry, type SlotSetter, type SlotSource, type TraitStateMachineResult, type UseTraitStateMachineOptions, clearSchemaCache, createClientEffectHandlers, useDeclaredCaptureTable, useOrbitalPluginHost, useResolvedSchema, useTraitStateMachine };

package/dist/runtime/index.d.ts

@@ -5,8 +5,8 @@ import * as _almadar_runtime from '@almadar/runtime';
 import { TraitState, EffectHandlers } from '@almadar/runtime';
 import { K as KeyCaptureTable } from '../useKeyboardRouter-B1pIi9jo.js';
 import { c as useUISlots } from '../UISlotContext-CB89mv7N.js';
-import { a as EntityBindingSource, h as ServerBridgeTransport } from '../EntityBindingContext-Bn3ePJQC.js';
-export { b as EntitySchemaContextValue, c as EntitySchemaProvider, d as EntitySchemaProviderProps, e as ServerBridgeContextValue, f as ServerBridgeProvider, i as ServerClientEffect, T as TraitContext, k as TraitContextValue, l as TraitInstance, m as TraitProvider, n as TraitProviderProps, o as useEntitySchema, p as useEntitySchemaOptional, q as useServerBridge, r as useTrait, s as useTraitContext } from '../EntityBindingContext-Bn3ePJQC.js';
+import { a as EntityBindingSource, h as ServerBridgeTransport, A as AccessTokenProvider } from '../EntityBindingContext-Y4zXyNJZ.js';
+export { b as EntitySchemaContextValue, c as EntitySchemaProvider, d as EntitySchemaProviderProps, e as ServerBridgeContextValue, f as ServerBridgeProvider, i as ServerClientEffect, T as TraitContext, k as TraitContextValue, l as TraitInstance, m as TraitProvider, n as TraitProviderProps, o as useEntitySchema, p as useEntitySchemaOptional, q as useServerBridge, r as useTrait, s as useTraitContext } from '../EntityBindingContext-Y4zXyNJZ.js';
 export { PERF_NAMESPACE, PerfEntry, PreparedPreviewSchema, adjustSchemaForMockData, buildMockData, clearPerf, perfEnd, perfStart, perfTime, prepareSchemaForPreview, wrapCallbackForEvent } from '@almadar/runtime/ui';
 import React__default, { ReactNode } from 'react';
 export { S as SlotHostManifest, a as SlotHostRegion, b as assertUniqueSlotsPerHost } from '../slot-host-Czc2JAxo.js';
@@ -246,6 +246,8 @@ interface OrbPreviewProps {
      * `OrbitalServerRuntime.processOrbitalEvent` directly without HTTP.
      */
     transport?: ServerBridgeTransport;
+    /** Bearer token for `serverUrl` requests (see `ServerBridgeProviderProps.getAccessToken`). */
+    getAccessToken?: AccessTokenProvider;
     /**
      * Initial page path to render (e.g. `/deals`). Resolves against the
      * schema's `pages[]` to seed `currentPage` so the right orbital's traits
@@ -275,7 +277,7 @@ interface OrbPreviewProps {
  * <OrbPreview schema={schema} serverUrl="/api/orbitals" />
  * ```
  */
-declare function OrbPreview({ schema, mockData, autoMock, height, className, serverUrl, transport, initialPagePath, isolated, }: OrbPreviewProps): React__default.ReactElement;
+declare function OrbPreview({ schema, mockData, autoMock, height, className, serverUrl, transport, getAccessToken, initialPagePath, isolated, }: OrbPreviewProps): React__default.ReactElement;
 declare namespace OrbPreview {
     var displayName: string;
 }
@@ -418,4 +420,4 @@ declare function useOrbitalPluginHost(): {
  */
 declare function OrbitalPluginHost({ plugins, mode, transport, deny, navigate, notify, onTransition, children, }: OrbitalPluginHostProps): React__default.ReactElement;
 
-export { BrowserPlayground, type BrowserPlaygroundProps, type ClientEventBus, type CreateClientEffectHandlersOptions, OrbPreview, type OrbPreviewProps, OrbitalPluginHost, type OrbitalPluginHostProps, type PluginHostDenyVerb, type PluginHostInbound, type PluginHostPlugin, type ResolvedSchemaResult, ServerBridgeTransport, type SlotPatternEntry, type SlotSetter, type SlotSource, type TraitStateMachineResult, type UseTraitStateMachineOptions, clearSchemaCache, createClientEffectHandlers, useDeclaredCaptureTable, useOrbitalPluginHost, useResolvedSchema, useTraitStateMachine };
+export { AccessTokenProvider, BrowserPlayground, type BrowserPlaygroundProps, type ClientEventBus, type CreateClientEffectHandlersOptions, OrbPreview, type OrbPreviewProps, OrbitalPluginHost, type OrbitalPluginHostProps, type PluginHostDenyVerb, type PluginHostInbound, type PluginHostPlugin, type ResolvedSchemaResult, ServerBridgeTransport, type SlotPatternEntry, type SlotSetter, type SlotSource, type TraitStateMachineResult, type UseTraitStateMachineOptions, clearSchemaCache, createClientEffectHandlers, useDeclaredCaptureTable, useOrbitalPluginHost, useResolvedSchema, useTraitStateMachine };

package/dist/runtime/index.js

@@ -54073,7 +54073,7 @@ function TraitInitializer({ traits: traits2, routeParams, orbitalNames, onNaviga
   }, [bridge.connected, orbitalNames, bridge.sendEvent, uiSlots, onNavigate, onNavigateBack, embeddedTraits, activeTraitNames, withActiveTraits, routeParams]);
   return /* @__PURE__ */ jsx(EntityBindingContext.Provider, { value: entityBindingSource, children });
 }
-function SchemaRunner({ schema, serverUrl, transport, mockData, pageName, routeParams, onNavigate, onNavigateBack, onLocalFallback, persistence }) {
+function SchemaRunner({ schema, serverUrl, transport, getAccessToken, mockData, pageName, routeParams, onNavigate, onNavigateBack, onLocalFallback, persistence }) {
   const { traits: traits2, allEntities, allTraits, ir } = useResolvedSchema(schema, pageName);
   const allPageTraits = useMemo(() => {
     let base;
@@ -54230,7 +54230,7 @@ function SchemaRunner({ schema, serverUrl, transport, mockData, pageName, routeP
     }
   ) });
   if (serverUrl || transport) {
-    return /* @__PURE__ */ jsx(ServerBridgeProvider, { schema, serverUrl, transport, children: inner });
+    return /* @__PURE__ */ jsx(ServerBridgeProvider, { schema, serverUrl, transport, getAccessToken, children: inner });
   }
   return inner;
 }
@@ -54242,6 +54242,7 @@ function OrbPreview({
   className,
   serverUrl,
   transport,
+  getAccessToken,
   initialPagePath,
   isolated = false
 }) {
@@ -54422,6 +54423,7 @@ function OrbPreview({
                   schema: parseResult.schema,
                   serverUrl,
                   transport,
+                  getAccessToken,
                   mockData: effectiveMockData,
                   pageName: currentPage,
                   routeParams,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@almadar/ui",
-  "version": "6.9.0",
+  "version": "6.10.0",
   "description": "React UI components, hooks, and providers for Almadar",
   "type": "module",
   "sideEffects": [
@@ -118,11 +118,11 @@
     "access": "public"
   },
   "dependencies": {
-    "@almadar/core": "^10.85.0",
+    "@almadar/core": "^10.86.0",
     "@almadar/evaluator": "^2.44.0",
     "@almadar/logger": "^1.12.0",
     "@almadar/runtime": "^6.71.0",
-    "@almadar/std": "^16.206.0",
+    "@almadar/std": "^16.207.0",
     "@almadar/syntax": "^1.16.0",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",