@appshell/loader 0.12.0 → 1.0.0-alpha.8

package/CHANGELOG.md

@@ -3,26 +3,35 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
-# 0.12.0 (2026-04-20)
+# [1.0.0-alpha.8](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.7...v1.0.0-alpha.8) (2026-08-19)
 
-### Bug Fixes
+**Note:** Version bump only for package @appshell/loader
 
-- appshell loader override check ([aedda4a](https://github.com/appshell-org/appshell/commit/aedda4abf81560297dce03df09fba68e8785242f))
-- configurable api key header support, minor fixes ([2f0bf02](https://github.com/appshell-org/appshell/commit/2f0bf027b92398f91b8e8cbfbf543d61fe37b7a0))
-- hot module replacement support, example updates ([a67d230](https://github.com/appshell-org/appshell/commit/a67d2303b40f5911373225cc0b4ccf9b67c33d11))
-- registry projection, enable env overwrite, refactor docker workflow, consolidate env names ([33a28fe](https://github.com/appshell-org/appshell/commit/33a28fe76b58e05c5b6b6b33d4b402e52bb29e70))
-- rename @appshell/react-federated-component package to @appshell/react ([0b74498](https://github.com/appshell-org/appshell/commit/0b74498bf17ba73db4d936c8a012af1d3b111a28))
-- replace config intermediate file with template ([9b79e65](https://github.com/appshell-org/appshell/commit/9b79e65b355686a0cca273c89c7164bb031e8437))
-- resolve npm audit vulnerabilities (74 → 4) ([36a2d56](https://github.com/appshell-org/appshell/commit/36a2d56a76dabd55a6886ddb9f020948420fd832))
+# [1.0.0-alpha.7](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.6...v1.0.0-alpha.7) (2026-08-18)
 
-### Features
+**Note:** Version bump only for package @appshell/loader
 
-- api key support ([9cdcbee](https://github.com/appshell-org/appshell/commit/9cdcbee36e44b8a179b49768d74a25767f1cc5f2))
-- appshell cli api key support, init sync and outdated commands ([#6](https://github.com/appshell-org/appshell/issues/6)) ([acc5fa2](https://github.com/appshell-org/appshell/commit/acc5fa234f91a167038161d5080481c43f8eb8b4))
-- AppshellComponent impl ([2b82621](https://github.com/appshell-org/appshell/commit/2b82621c13302f790a8e1c457f9a82f39903fc1f))
-- consolidate runtime artifacts ([#26](https://github.com/appshell-org/appshell/issues/26)) ([a29479a](https://github.com/appshell-org/appshell/commit/a29479a49f0c5ec1273c9f8e4c7384096f2d4ba0))
-- environment variable override for federated components ([#27](https://github.com/appshell-org/appshell/issues/27)) ([d32de0b](https://github.com/appshell-org/appshell/commit/d32de0b0d1cbb1792715e1b363c80ed4600df155))
-- foundation refactor wip ([339b930](https://github.com/appshell-org/appshell/commit/339b9306accaa9aba1712f3a0dee6c4cab7ed273))
+**Note:** Version bump only for package @appshell/loader
+
+# [1.0.0-alpha.6](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.5...v1.0.0-alpha.6) (2026-08-18)
+
+**Note:** Version bump only for package @appshell/loader
+
+# [1.0.0-alpha.5](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.4...v1.0.0-alpha.5) (2026-08-18)
+
+**Note:** Version bump only for package @appshell/loader
+
+**Note:** Version bump only for package @appshell/loader
+
+# [1.0.0-alpha.4](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.3...v1.0.0-alpha.4) (2026-08-18)
+
+**Note:** Version bump only for package @appshell/loader
+
+**Note:** Version bump only for package @appshell/loader
+
+# [1.0.0-alpha.3](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.2...v1.0.0-alpha.3) (2026-08-18)
+
+**Note:** Version bump only for package @appshell/loader
 
 # 0.12.0-alpha.0 (2026-04-20)
 

package/README.md

@@ -55,6 +55,27 @@ render(<Component />);
 appshell generate global-config --registry appshell_registry_path
 ```
 
+## How a remote is resolved
+
+The loader walks a chain of resolvers and uses the first one that answers:
+
+| Resolver                 | Source                                                | When it answers                                                            |
+| ------------------------ | ----------------------------------------------------- | -------------------------------------------------------------------------- |
+| `inlineResolver`         | `window.__appshell_config__`                          | The registry served the page and inlined the composition. No network call. |
+| `registryResolver`       | `GET /v1/environments/:id/remotes/:key`               | The remote was activated after this page was served.                       |
+| `legacyManifestResolver` | `index[key]` → the app's own `appshell.manifest.json` | Pre-registry hosts.                                                        |
+
+Environment variables reach `window.__appshell_env__<scope>` already merged with the
+environment's overrides when a composition is present, because the registry does that
+merge server side. The legacy resolver still merges in the browser, since in that mode
+no server has.
+
+You can bypass the chain entirely, which is mainly useful for tests and embedders:
+
+```ts
+const load = componentLoader(config, { resolver: myResolver });
+```
+
 **Do you have any framework specific loaders?**
 
 > See [@appshell/react](https://www.npmjs.com/package/@appshell/react) for a `React` loader.

package/__tests__/remoteLoader.spec.ts

@@ -117,4 +117,28 @@ describe('remoteLoader', () => {
       /Failed to load component/i,
     );
   });
+
+  it('should load from an inlined composition without fetching a manifest', async () => {
+    const ExpectedComponent = () => 'test component';
+    jest.spyOn(fetchDynamicScript, 'default').mockReturnValueOnce(Promise.resolve(true));
+    jest.spyOn(loadAppshellComponent, 'default').mockResolvedValue(ExpectedComponent);
+    fetch.resetMocks();
+
+    const loadRemote = remoteLoader(config, {
+      composition: {
+        environmentId: 'acme/dev',
+        revision: 1,
+        index: config.index,
+        remotes: manifest.remotes,
+        environment: { TestModule: { ENV_VAR_A: 'Composed value for A' } },
+      },
+    });
+    const [ActualComponent, actualManifest] = await loadRemote('TestModule/TestComponent');
+
+    expect(fetch).not.toHaveBeenCalled();
+    expect(ActualComponent).toEqual(ExpectedComponent);
+    expect(actualManifest?.modules).toEqual({});
+    // eslint-disable-next-line no-underscore-dangle
+    expect(window.__appshell_env__TestModule).toEqual({ ENV_VAR_A: 'Composed value for A' });
+  });
 });

package/__tests__/resolvers.spec.ts

@@ -0,0 +1,128 @@
+/** @jest-environment jsdom */
+import { AppshellComposition, AppshellGlobalConfig, AppshellManifest } from '@appshell/config';
+import fetch, { enableFetchMocks } from 'jest-fetch-mock';
+import {
+  chainResolvers,
+  inlineResolver,
+  legacyManifestResolver,
+  registryResolver,
+} from '../src/resolvers';
+
+enableFetchMocks();
+
+const MANIFEST_URL = 'http://test.com/appshell.manifest.json';
+const KEY = 'TestModule/TestComponent';
+
+const manifest: AppshellManifest = {
+  remotes: {
+    [KEY]: {
+      id: 'test-component',
+      scope: 'TestModule',
+      module: './TestComponent',
+      manifestUrl: MANIFEST_URL,
+      remoteEntryUrl: 'http://test.com/remoteEntry.js',
+      metadata: { title: 'Test' },
+    },
+  },
+  modules: { TestModule: { name: 'TestModule' } },
+  environment: { TestModule: { ENV_VAR_A: 'Original value for A' } },
+};
+
+const config: AppshellGlobalConfig = { index: { [KEY]: MANIFEST_URL } };
+
+const composition: AppshellComposition = {
+  environmentId: 'acme/dev',
+  revision: 7,
+  index: config.index,
+  remotes: manifest.remotes,
+  environment: manifest.environment,
+};
+
+beforeEach(() => {
+  fetch.resetMocks();
+});
+
+describe('inlineResolver', () => {
+  it('resolves without any network call', async () => {
+    const resolution = await inlineResolver(composition)(KEY);
+
+    expect(fetch).not.toHaveBeenCalled();
+    expect(resolution?.remote).toEqual(manifest.remotes[KEY]);
+    expect(resolution?.environment).toEqual({ ENV_VAR_A: 'Original value for A' });
+  });
+
+  it('yields to the next resolver when the key is absent', async () => {
+    await expect(inlineResolver(composition)('Other/Key')).resolves.toBeUndefined();
+    await expect(inlineResolver(undefined)(KEY)).resolves.toBeUndefined();
+  });
+
+  // Locks the claim that the synthesized manifest is a drop-in for `ManifestProvider`.
+  it('synthesizes a manifest matching the legacy one apart from modules', async () => {
+    fetch.mockResponseOnce(JSON.stringify(manifest));
+
+    const legacy = await legacyManifestResolver(config)(KEY);
+    const inline = await inlineResolver(composition)(KEY);
+
+    expect(inline?.manifest).toEqual({ ...legacy?.manifest, modules: {} });
+    expect(inline?.environment).toEqual(legacy?.environment);
+  });
+});
+
+describe('legacyManifestResolver', () => {
+  it('merges environment overrides client side, because no server did', async () => {
+    fetch.mockResponseOnce(JSON.stringify(manifest));
+
+    const resolution = await legacyManifestResolver({
+      ...config,
+      overrides: { environment: { TestModule: { ENV_VAR_A: 'New value for A' } } },
+    })(KEY);
+
+    expect(resolution?.environment).toEqual({ ENV_VAR_A: 'New value for A' });
+  });
+
+  it('fetches each manifest only once', async () => {
+    fetch.mockResponse(JSON.stringify(manifest));
+    const resolve = legacyManifestResolver(config);
+
+    await resolve(KEY);
+    await resolve(KEY);
+
+    expect(fetch).toHaveBeenCalledTimes(1);
+  });
+});
+
+describe('registryResolver', () => {
+  it('fetches a remote activated after the page was served', async () => {
+    const added = { ...manifest.remotes[KEY], scope: 'LateModule', module: './Late' };
+    fetch.mockResponseOnce(JSON.stringify(added));
+
+    const resolution = await registryResolver(composition, 'http://registry')('LateModule/Late');
+
+    expect(fetch).toHaveBeenCalledWith(
+      'http://registry/v1/environments/acme/dev/remotes/LateModule/Late',
+      expect.anything(),
+    );
+    expect(resolution?.remote).toEqual(added);
+  });
+
+  it('yields to the next resolver when the registry has no such remote', async () => {
+    fetch.mockResponseOnce('', { status: 404 });
+
+    await expect(registryResolver(composition)('Nope/Nope')).resolves.toBeUndefined();
+  });
+});
+
+describe('chainResolvers', () => {
+  it('returns the first resolution and stops', async () => {
+    const second = jest.fn();
+    const resolve = chainResolvers(inlineResolver(composition), second);
+
+    await resolve(KEY);
+
+    expect(second).not.toHaveBeenCalled();
+  });
+
+  it('resolves undefined when no resolver matches', async () => {
+    await expect(chainResolvers()('Nope/Nope')).resolves.toBeUndefined();
+  });
+});

package/dist/main.js

@@ -1 +1 @@
-!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var o=t();for(var r in o)("object"==typeof exports?exports:e)[r]=o[r]}}(self,(()=>(()=>{"use strict";var e={d:(t,o)=>{for(var r in o)e.o(o,r)&&!e.o(t,r)&&Object.defineProperty(t,r,{enumerable:!0,get:o[r]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}};(()=>{e.S={};var t={},o={};e.I=(r,n)=>{n||(n=[]);var a=o[r];if(a||(a=o[r]={}),!(n.indexOf(a)>=0)){if(n.push(a),t[r])return t[r];e.o(e.S,r)||(e.S[r]={}),e.S[r];var c=[];return t[r]=c.length?Promise.all(c).then((()=>t[r]=1)):1}}})();var t={};e.r(t),e.d(t,{default:()=>l});const o=new Set,r=async e=>{const t=document.createElement("script");return new Promise(((r,n)=>{o.has(e)?r(!1):(o.add(e),t.src=e,t.type="text/javascript",t.async=!0,t.onload=()=>{console.debug(`Remote entry fetched from '${e}'.`),r(!0)},t.onerror=()=>{const t=`Failed to fetch remote entry from '${e}'.`;console.error(t),o.delete(e),n(t)},document.head.appendChild(t))})).finally((()=>{document.head.contains(t)&&document.head.removeChild(t)}))};(Object.getOwnPropertyDescriptor(r,"name")||{}).writable||Object.defineProperty(r,"name",{value:"default",configurable:!0});const n=async(t,o,r="default")=>{console.debug(`loading Appshell component: { scope: ${t}, module: ${o}, shareScope: ${r} }`),await e.I(r);const n=window[t];if(!n)throw new Error(`Failed to find module container ${t}`);await n.init(e.S[r]);const a=await n.get(o);if(!a)throw new Error(`Invalid factory produced by container for module ${o}.`);const c=a();return console.debug(`Appshell component loaded: { scope: ${t}, module: ${o}, shareScope: ${r} }`),c.default};(Object.getOwnPropertyDescriptor(n,"name")||{}).writable||Object.defineProperty(n,"name",{value:"default",configurable:!0});const a=new Set,c=new Map,i=e=>async t=>{let o;const i=e.index[t];if(!i)throw new Error(`Remote resource not found in registry. Expected: ${t}`);try{const l=await(async e=>{if(c.has(e))return c.get(e);c.set(e,void 0);const t=await fetch(e,{credentials:"include"});if(t.ok)return t.json();const o=await t.text();throw new Error(`Failed to get manifest from ${e}. ${o}`)})(i);if(l){c.set(i,l);const d=l.remotes[t],s=l.environment[d.scope]||{},f=e.overrides?.environment&&e.overrides?.environment[d.scope]||{};if(window[`__appshell_env__${d.scope}`]={...s,...f},a.has(d.remoteEntryUrl)||await r(d.remoteEntryUrl))return a.add(d.remoteEntryUrl),o=await n(d.scope,d.module,d.shareScope),[o,l]}return[null,null]}catch(e){throw new Error(`Failed to load component '${t}'. ${e?.toString()}`)}};(Object.getOwnPropertyDescriptor(i,"name")||{}).writable||Object.defineProperty(i,"name",{value:"default",configurable:!0});const l=i;return t})()));
+!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var n=t();for(var o in n)("object"==typeof exports?exports:e)[o]=n[o]}}(self,(()=>(()=>{"use strict";var e={d:(t,n)=>{for(var o in n)e.o(n,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:n[o]})},o:(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}};(()=>{e.S={};var t={},n={};e.I=(o,r)=>{r||(r=[]);var a=n[o];if(a||(a=n[o]={}),!(r.indexOf(a)>=0)){if(r.push(a),t[o])return t[o];e.o(e.S,o)||(e.S[o]={}),e.S[o];var i=[];return t[o]=i.length?Promise.all(i).then((()=>t[o]=1)):1}}})();var t={};e.r(t),e.d(t,{chainResolvers:()=>l,default:()=>m,inlineResolver:()=>i,legacyManifestResolver:()=>s,registryResolver:()=>c});const n=new Set,o=async e=>{const t=document.createElement("script");return new Promise(((o,r)=>{n.has(e)?o(!1):(n.add(e),t.src=e,t.type="text/javascript",t.async=!0,t.onload=()=>{console.debug(`Remote entry fetched from '${e}'.`),o(!0)},t.onerror=()=>{const t=`Failed to fetch remote entry from '${e}'.`;console.error(t),n.delete(e),r(t)},document.head.appendChild(t))})).finally((()=>{document.head.contains(t)&&document.head.removeChild(t)}))};(Object.getOwnPropertyDescriptor(o,"name")||{}).writable||Object.defineProperty(o,"name",{value:"default",configurable:!0});const r=async(t,n,o="default")=>{console.debug(`loading Appshell component: { scope: ${t}, module: ${n}, shareScope: ${o} }`),await e.I(o);const r=window[t];if(!r)throw new Error(`Failed to find module container ${t}`);await r.init(e.S[o]);const a=await r.get(n);if(!a)throw new Error(`Invalid factory produced by container for module ${n}.`);const i=a();return console.debug(`Appshell component loaded: { scope: ${t}, module: ${n}, shareScope: ${o} }`),i.default};(Object.getOwnPropertyDescriptor(r,"name")||{}).writable||Object.defineProperty(r,"name",{value:"default",configurable:!0});const a=(e,t)=>({remotes:t,environment:e.environment,modules:{}}),i=e=>async t=>{const n=e?.remotes[t];if(e&&n)return{remote:n,environment:e.environment[n.scope]??{},manifest:a(e,e.remotes)}},c=(e,t="")=>async n=>{if(!e)return;const o=`${t}/v1/environments/${e.environmentId}/remotes/${n}`,r=await fetch(o,{credentials:"include"});if(!r.ok)return;const i=await r.json();return{remote:i,environment:e.environment[i.scope]??{},manifest:a(e,{[n]:i})}},s=e=>{const t=new Map;return async n=>{const o=e.index?.[n];if(!o)return;const r=await(e=>{const n=t.get(e);if(n)return n;const o=fetch(e,{credentials:"include"}).then((async t=>{if(!t.ok)throw new Error(`Failed to get manifest from ${e}. ${await t.text()}`);return t.json()}));return t.set(e,o),o})(o),a=r?.remotes[n];return a?{remote:a,environment:{...r.environment[a.scope]??{},...e.overrides?.environment?.[a.scope]??{}},manifest:r}:void 0}},l=(...e)=>async t=>{for(const n of e){const e=await n(t);if(e)return e}},d=new Set,f=(e,t={})=>{const n=t.composition??("undefined"==typeof window?void 0:window.__appshell_config__),a=t.resolver??l(i(n),c(n),s(e));return async e=>{const t=t=>new Error(`Failed to load component '${e}'. ${t?.toString()}`);let n;try{n=await a(e)}catch(e){throw t(e)}if(!n)throw new Error(`Remote resource not found in registry. Expected: ${e}`);const{remote:i,environment:c,manifest:s}=n;try{return window[`__appshell_env__${i.scope}`]=c,d.has(i.remoteEntryUrl)||await o(i.remoteEntryUrl)?(d.add(i.remoteEntryUrl),[await r(i.scope,i.module,i.shareScope),s]):[null,null]}catch(e){throw t(e)}}};(Object.getOwnPropertyDescriptor(f,"name")||{}).writable||Object.defineProperty(f,"name",{value:"default",configurable:!0});const m=f;return t})()));

package/dist/types/config/src/context.d.ts

@@ -0,0 +1,23 @@
+export type AppshellContext = {
+    registry?: string;
+    /** Activation target as `scope/name`. */
+    environment?: string;
+    scopeId: string;
+    token?: string;
+};
+/**
+ * The registry, environment, and token a developer is working against, resolved
+ * the way the CLI resolves them: env var, then `~/.appshell/config`, then a
+ * default. This lets the webpack plugin defer to `appshell config set` and
+ * `appshell login` instead of requiring per-project configuration.
+ */
+export declare const resolveContext: () => AppshellContext;
+/**
+ * What `~/.appshell/config` alone declares, so a caller can warn when an env var
+ * or an explicit option points somewhere other than the developer's CLI context.
+ */
+export declare const persistedContext: () => {
+    registry?: string;
+    environment?: string;
+};
+//# sourceMappingURL=context.d.ts.map

package/dist/types/config/src/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../../../config/src/context.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAaF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,QAAO,eAQjC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,QAAO;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAK5E,CAAC"}

package/dist/types/config/src/credentials.d.ts

@@ -0,0 +1,16 @@
+export type Credential = {
+    accessToken: string;
+    refreshToken?: string;
+    /** Epoch milliseconds. */
+    expiresAt?: number;
+};
+export declare const credentialsPath: () => string;
+export declare const saveCredential: (registry: string, credential: Credential) => void;
+export declare const clearCredential: (registry: string) => void;
+/**
+ * APPSHELL_TOKEN wins so CI never depends on a writable home directory.
+ * Expired tokens are treated as absent; refresh is the caller's concern.
+ */
+export declare const resolveToken: (registry: string) => string | undefined;
+export declare const requireToken: (registry: string) => string;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/types/config/src/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../../config/src/credentials.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAKF,eAAO,MAAM,eAAe,cAC6D,CAAC;AAqB1F,eAAO,MAAM,cAAc,aAAc,MAAM,cAAc,UAAU,SAEtE,CAAC;AAEF,eAAO,MAAM,eAAe,aAAc,MAAM,SAI/C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,aAAc,MAAM,KAAG,MAAM,GAAG,SAexD,CAAC;AAEF,eAAO,MAAM,YAAY,aAAc,MAAM,KAAG,MAO/C,CAAC"}

package/dist/types/config/src/index.d.ts

@@ -2,14 +2,20 @@
  * @appshell/config package API
  */
 export { default as configmap } from './configmap';
+export { persistedContext, resolveContext } from './context';
+export type { AppshellContext } from './context';
+export { clearCredential, credentialsPath, requireToken, resolveToken, saveCredential, } from './credentials';
+export type { Credential } from './credentials';
 export { default as deregister } from './deregister';
 export { default as generateEnv } from './generate.env';
 export { default as generateGlobalConfig } from './generate.global-config';
 export { default as generateManifest } from './generate.manifest';
 export { default as outdated } from './outdated';
+export { activate, publish } from './publish';
+export type { PublishOptions, PublishResult } from './publish';
 export { default as register } from './register';
 export { default as sync } from './sync';
-export type { AppshellConfig, AppshellConfigRemote, AppshellGlobalConfig, AppshellIndex, AppshellManifest, AppshellRemote, AppshellTemplate, ComparisonResult, ComparisonResults, ComparisonTarget, Metadata, ModuleFederationPluginOptions, PackageSpec, Schema, SharedModuleSpec, } from './types';
+export type { AppshellComposition, AppshellConfig, AppshellConfigRemote, AppshellGlobalConfig, AppshellIndex, AppshellManifest, AppshellRemote, AppshellTemplate, ComparisonResult, ComparisonResults, ComparisonTarget, Metadata, ModuleFederationPluginOptions, PackageSpec, ResolvedRemote, Schema, SharedModuleSpec, } from './types';
 export * as utils from './utils';
 export * as validators from './validators';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/config/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../config/src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,QAAQ,CAAC;AACzC,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,EACR,6BAA6B,EAC7B,WAAW,EACX,MAAM,EACN,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../config/src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EACL,eAAe,EACf,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,QAAQ,CAAC;AACzC,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,EACR,6BAA6B,EAC7B,WAAW,EACX,cAAc,EACd,MAAM,EACN,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC"}

package/dist/types/config/src/publish.d.ts

@@ -0,0 +1,29 @@
+import { AppshellManifest, Metadata } from './types';
+export type PublishOptions = {
+    registry: string;
+    token?: string;
+    name: string;
+    version: string;
+    manifest: AppshellManifest;
+    visibility?: 'public' | 'private';
+    metadata?: Metadata;
+    /** Ask the registry to overwrite an existing version whose content differs. */
+    force?: boolean;
+};
+export type PublishResult = {
+    /** `scope/name@version`. The scope comes from the token, not the caller. */
+    id: string;
+    created: boolean;
+};
+/**
+ * Publishing the same content twice is a no-op; publishing different content
+ * under a version that already exists is rejected by the registry, unless
+ * `force` is set and the registry is configured to honor it (dev registries).
+ */
+export declare const publish: ({ registry, token, name, version, manifest, visibility, metadata, force, }: PublishOptions) => Promise<PublishResult>;
+/**
+ * Activating a newer version of an already active app upgrades it in place.
+ * @param environment `scope/name`
+ */
+export declare const activate: (registry: string, environment: string, appId: string, token?: string) => Promise<void>;
+//# sourceMappingURL=publish.d.ts.map

package/dist/types/config/src/publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../../../../config/src/publish.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAErD,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAmBF;;;;GAIG;AACH,eAAO,MAAM,OAAO,+EASjB,cAAc,KAAG,OAAO,CAAC,aAAa,CAYxC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,QAAQ,aACT,MAAM,eACH,MAAM,SACZ,MAAM,UACL,MAAM,KACb,OAAO,CAAC,IAAI,CAgBd,CAAC"}

package/dist/types/config/src/sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../../../config/src/sync.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAAC;AACtD,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,CAAC;AAE5C,eAAO,MAAM,mBAAmB,cAAe,gBAAgB,EAAE,SAuBhE,CAAC;AAEF,eAAO,MAAM,gBAAgB,eACf,MAAM,YACR,MAAM,YACN,MAAM,EAAE,kBACF,KAAK,GAAG,MAAM,kBAwB/B,CAAC;AAEF,eAAO,MAAM,gBAAgB,cAChB,gBAAgB,EAAE,EAAE,sBACX,kBAAkB,aAmBvC,CAAC;AAEF,eAAO,MAAM,kBAAkB,cAAe,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,yBACQ,CAAC;AAEvF,eAAO,MAAM,mBAAmB,cAAe,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,yBACQ,CAAC;AAExF,eAAO,MAAM,qBAAqB,cAAe,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,yBACQ,CAAC;AAE1F;;;;;;;;GAQG;qCAEW,MAAM,YACR,MAAM,aACL,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,uBACvB,kBAAkB,mBACtB,cAAc;AALhC,wBA6BE"}
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../../../config/src/sync.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAAC;AACtD,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,CAAC;AAE5C,eAAO,MAAM,mBAAmB,cAAe,gBAAgB,EAAE,SAuBhE,CAAC;AAEF,eAAO,MAAM,gBAAgB,eACf,MAAM,YACR,MAAM,YACN,MAAM,EAAE,kBACF,KAAK,GAAG,MAAM,kBAkC/B,CAAC;AAEF,eAAO,MAAM,gBAAgB,cAChB,gBAAgB,EAAE,EAAE,sBACX,kBAAkB,aAmBvC,CAAC;AAEF,eAAO,MAAM,kBAAkB,cAAe,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,yBACQ,CAAC;AAEvF,eAAO,MAAM,mBAAmB,cAAe,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,yBACQ,CAAC;AAExF,eAAO,MAAM,qBAAqB,cAAe,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,yBACQ,CAAC;AAE1F;;;;;;;;GAQG;qCAEW,MAAM,YACR,MAAM,aACL,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,uBACvB,kBAAkB,mBACtB,cAAc;AALhC,wBA6BE"}

package/dist/types/config/src/types.d.ts

@@ -46,6 +46,10 @@ export type ComparisonTarget = {
 export type CliConfig = Record<string, string> & {
     apiKey: string;
     registry: string;
+    environment: string;
+    scopeId: string;
+    authIssuer: string;
+    clientId: string;
 };
 export type AppshellConfigRemote<TMetadata = Metadata> = {
     id: string;
@@ -92,6 +96,26 @@ export type AppshellGlobalConfig<TMetadata = Metadata> = {
     metadata?: Record<string, TMetadata>;
     overrides?: AppshellOverrides;
 };
+/** An `AppshellRemote` the registry already resolved, so the browser needs no manifest fetch. */
+export type ResolvedRemote<TMetadata = Metadata> = AppshellRemote<TMetadata>;
+/**
+ * The wire contract for `window.__appshell_config__`. Deliberately not an
+ * `AppshellManifest`: that is a build artifact, and reusing it left it unclear
+ * which fields the browser actually needs. `modules` is build-time webpack
+ * config and never crosses the wire; `environment` arrives already merged with
+ * the environment's overrides, leaving the browser only local overrides to apply.
+ */
+export type AppshellComposition<TMetadata = Metadata> = {
+    /** `scope/name` — makes the payload self-describing for fetch-on-miss and for `env diff`. */
+    environmentId: string;
+    revision: number;
+    /** The remote key the host mounts at the root, and the props it is given. */
+    root: string;
+    rootProps: Record<string, unknown>;
+    index: AppshellIndex;
+    remotes: Record<string, ResolvedRemote<TMetadata>>;
+    environment: Record<string, Record<string, string | number | undefined>>;
+};
 /**
  * Advanced configuration for modules that should be exposed by this container.
  */

package/dist/types/config/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../config/src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEpE,MAAM,MAAM,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;AAE7D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/C,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACzC,eAAe,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAGF,MAAM,MAAM,oBAAoB,CAAC,SAAS,GAAG,QAAQ,IAAI;IACvD,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,CAAC,SAAS,GAAG,QAAQ,IAAI;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAGF,MAAM,MAAM,gBAAgB,CAAC,SAAS,GAAG,QAAQ,IAAI;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,MAAM,EAAE,6BAA6B,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,8BAA8B;AAC9B,MAAM,MAAM,cAAc,CAAC,SAAS,GAAG,QAAQ,IAAI;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC1E,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,SAAS,GAAG,QAAQ,IAAI;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;IACvD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACzE,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEnD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE/C,MAAM,MAAM,oBAAoB,CAAC,SAAS,GAAG,QAAQ,IAAI;IACvD,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE1B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,MAAM,EAAE,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,6BAA6B,CAAC;IAE1D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE3B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,sBAAsB,CAAC;IAElD;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAExB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAEjC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE5B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,MAAM,EAAE,CAAC;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,aAAa,CAAC,EAAE,GAAG,aAAa,CAAC;IAErD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IAEzB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,UAAU,CAAC,EACP,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,UAAU,GACV,WAAW,GACX,iBAAiB,GACjB,iBAAiB,GACjB,KAAK,GACL,aAAa,GACb,KAAK,GACL,MAAM,GACN,OAAO,GACP,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,eAAe,CAAC;IAEpB;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,aAAa,CAAC,EAAE,GAAG,aAAa,CAAC;IAErD;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAEzB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,YAAY,CAAC;CACnD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../config/src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEpE,MAAM,MAAM,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;AAE7D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/C,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACzC,eAAe,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAGF,MAAM,MAAM,oBAAoB,CAAC,SAAS,GAAG,QAAQ,IAAI;IACvD,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,CAAC,SAAS,GAAG,QAAQ,IAAI;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAGF,MAAM,MAAM,gBAAgB,CAAC,SAAS,GAAG,QAAQ,IAAI;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,MAAM,EAAE,6BAA6B,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,8BAA8B;AAC9B,MAAM,MAAM,cAAc,CAAC,SAAS,GAAG,QAAQ,IAAI;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC1E,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,SAAS,GAAG,QAAQ,IAAI;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;IACvD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACzE,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEnD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE/C,MAAM,MAAM,oBAAoB,CAAC,SAAS,GAAG,QAAQ,IAAI;IACvD,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,iGAAiG;AACjG,MAAM,MAAM,cAAc,CAAC,SAAS,GAAG,QAAQ,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,CAAC,SAAS,GAAG,QAAQ,IAAI;IACtD,6FAA6F;IAC7F,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC1E,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE1B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,MAAM,EAAE,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,6BAA6B,CAAC;IAE1D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE3B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,sBAAsB,CAAC;IAElD;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAExB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAEjC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE5B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,MAAM,EAAE,CAAC;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,aAAa,CAAC,EAAE,GAAG,aAAa,CAAC;IAErD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IAEzB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,UAAU,CAAC,EACP,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,UAAU,GACV,WAAW,GACX,iBAAiB,GACjB,iBAAiB,GACjB,KAAK,GACL,aAAa,GACb,KAAK,GACL,MAAM,GACN,OAAO,GACP,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,eAAe,CAAC;IAEpB;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,aAAa,CAAC,EAAE,GAAG,aAAa,CAAC;IAErD;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAEzB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,YAAY,CAAC;CACnD"}

package/dist/types/loader/src/index.d.ts

@@ -1,4 +1,6 @@
 import remoteLoader from './remoteLoader';
+export type { RemoteLoaderOptions } from './remoteLoader';
+export * from './resolvers';
 export * from './types';
 export default remoteLoader;
 //# sourceMappingURL=index.d.ts.map

package/dist/types/loader/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,gBAAgB,CAAC;AAE1C,cAAc,SAAS,CAAC;AAExB,eAAe,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,gBAAgB,CAAC;AAE1C,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AAExB,eAAe,YAAY,CAAC"}

package/dist/types/loader/src/remoteLoader.d.ts

@@ -1,5 +1,15 @@
-import { type AppshellManifest } from '@appshell/config';
-import { AppshellGlobalConfig } from 'packages/config/src/types';
-declare const _default: (config: AppshellGlobalConfig) => <TComponent>(key: string) => Promise<readonly [TComponent, AppshellManifest] | readonly [null, null]>;
+import type { AppshellComposition, AppshellGlobalConfig } from '@appshell/config';
+import { type RemoteResolver } from './resolvers';
+declare global {
+    interface Window {
+        __appshell_config__?: AppshellComposition;
+    }
+}
+export type RemoteLoaderOptions = {
+    composition?: AppshellComposition;
+    /** Replaces the resolver chain outright; a seam for tests and embedders. */
+    resolver?: RemoteResolver;
+};
+declare const _default: (config: AppshellGlobalConfig, options?: RemoteLoaderOptions) => <TComponent>(key: string) => Promise<readonly [null, null] | readonly [Awaited<TComponent>, import("@appshell/config").AppshellManifest]>;
 export default _default;
 //# sourceMappingURL=remoteLoader.d.ts.map

package/dist/types/loader/src/remoteLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remoteLoader.d.ts","sourceRoot":"","sources":["../../../../src/remoteLoader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;iCAwBzC,oBAAoB,MACnC,UAAU,OAAO,MAAM;AADhC,wBA4CI"}
+{"version":3,"file":"remoteLoader.d.ts","sourceRoot":"","sources":["../../../../src/remoteLoader.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGlF,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAIrB,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;KAC3C;CACF;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC;iCAEsB,oBAAoB,YAAW,mBAAmB,MAY1D,UAAU,OAAO,MAAM;AAZvC,wBAqDE"}

package/dist/types/loader/src/resolvers.d.ts

@@ -0,0 +1,20 @@
+import type { AppshellComposition, AppshellGlobalConfig, AppshellManifest, ResolvedRemote } from '@appshell/config';
+export type RemoteResolution = {
+    remote: ResolvedRemote;
+    /** Already merged with the environment's overrides — nothing left for the browser to layer on. */
+    environment: Record<string, string | number | undefined>;
+    /** Back-compat payload for `ManifestProvider`; synthesized when the source was a composition. */
+    manifest: AppshellManifest;
+};
+export type RemoteResolver = (key: string) => Promise<RemoteResolution | undefined>;
+/** The registry inlined the composition into the page, so no network call is needed. */
+export declare const inlineResolver: (composition?: AppshellComposition) => RemoteResolver;
+/** Fetch-on-miss: covers an app activated after this page was served. */
+export declare const registryResolver: (composition?: AppshellComposition, origin?: string) => RemoteResolver;
+/**
+ * Pre-registry hosts: follow `index[key]` to the app's own manifest. The override
+ * merge stays here because in this mode no server has done it.
+ */
+export declare const legacyManifestResolver: (config: AppshellGlobalConfig) => RemoteResolver;
+export declare const chainResolvers: (...resolvers: RemoteResolver[]) => RemoteResolver;
+//# sourceMappingURL=resolvers.d.ts.map

package/dist/types/loader/src/resolvers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolvers.d.ts","sourceRoot":"","sources":["../../../../src/resolvers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACf,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,cAAc,CAAC;IACvB,kGAAkG;IAClG,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD,iGAAiG;IACjG,QAAQ,EAAE,gBAAgB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;AAQpF,wFAAwF;AACxF,eAAO,MAAM,cAAc,iBACV,mBAAmB,KAAG,cAUpC,CAAC;AAEJ,yEAAyE;AACzE,eAAO,MAAM,gBAAgB,iBACZ,mBAAmB,sBAAgB,cAejD,CAAC;AAEJ;;;GAGG;AACH,eAAO,MAAM,sBAAsB,WAAY,oBAAoB,KAAG,cAoCrE,CAAC;AAEF,eAAO,MAAM,cAAc,iBACV,cAAc,EAAE,KAAG,cAUjC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appshell/loader",
-  "version": "0.12.0",
+  "version": "1.0.0-alpha.8",
   "description": "Utility for loading Appshell components",
   "main": "dist/main.js",
   "types": "dist/loader/src/index.d.ts",
@@ -24,5 +24,5 @@
     "appshell"
   ],
   "license": "MIT",
-  "gitHead": "d6dcdc7e1c49f5c17953b608d067f4f70abb7d9c"
+  "gitHead": "ced8839a7c8423ad723fb32f9388e0e3d15951eb"
 }

package/src/index.ts

@@ -1,5 +1,7 @@
 import remoteLoader from './remoteLoader';
 
+export type { RemoteLoaderOptions } from './remoteLoader';
+export * from './resolvers';
 export * from './types';
 
 export default remoteLoader;

package/src/remoteLoader.ts

@@ -1,71 +1,80 @@
 /* eslint-disable no-underscore-dangle */
-import { type AppshellManifest } from '@appshell/config';
-import { AppshellGlobalConfig } from 'packages/config/src/types';
+import type { AppshellComposition, AppshellGlobalConfig } from '@appshell/config';
 import fetchDynamicScript from './fetchDynamicScript';
 import loadAppshellComponent from './loadAppshellComponent';
+import {
+  chainResolvers,
+  inlineResolver,
+  legacyManifestResolver,
+  registryResolver,
+  type RemoteResolver,
+} from './resolvers';
 
 const fetchedScriptCache = new Set<string>();
-const fetchedManifestCache = new Map<string, AppshellManifest | undefined>();
 
-const fetchManifest = async (url: string): Promise<AppshellManifest | undefined> => {
-  if (fetchedManifestCache.has(url)) {
-    return fetchedManifestCache.get(url);
+declare global {
+  interface Window {
+    __appshell_config__?: AppshellComposition;
   }
+}
 
-  fetchedManifestCache.set(url, undefined);
+export type RemoteLoaderOptions = {
+  composition?: AppshellComposition;
+  /** Replaces the resolver chain outright; a seam for tests and embedders. */
+  resolver?: RemoteResolver;
+};
 
-  const response = await fetch(url, { credentials: 'include' });
+export default (config: AppshellGlobalConfig, options: RemoteLoaderOptions = {}) => {
+  const composition =
+    options.composition ?? (typeof window === 'undefined' ? undefined : window.__appshell_config__);
 
-  if (response.ok) {
-    return response.json();
-  }
+  const resolve =
+    options.resolver ??
+    chainResolvers(
+      inlineResolver(composition),
+      registryResolver(composition),
+      legacyManifestResolver(config),
+    );
 
-  const message = await response.text();
-  throw new Error(`Failed to get manifest from ${url}. ${message}`);
-};
+  return async <TComponent>(key: string) => {
+    const failed = (err: unknown) =>
+      new Error(`Failed to load component '${key}'. ${err?.toString()}`);
+
+    let resolution;
+    try {
+      resolution = await resolve(key);
+    } catch (err) {
+      throw failed(err);
+    }
 
-export default (config: AppshellGlobalConfig) =>
-  async <TComponent>(key: string) => {
-    let Component: TComponent;
-    const manifestUrl = config.index[key];
-    if (!manifestUrl) {
+    if (!resolution) {
       throw new Error(`Remote resource not found in registry. Expected: ${key}`);
     }
 
+    const { remote, environment, manifest } = resolution;
+
     try {
-      const manifest = await fetchManifest(manifestUrl);
+      window[`__appshell_env__${remote.scope}`] = environment;
 
-      if (manifest) {
-        fetchedManifestCache.set(manifestUrl, manifest);
+      const loaded =
+        fetchedScriptCache.has(remote.remoteEntryUrl) ||
+        (await fetchDynamicScript(remote.remoteEntryUrl));
 
-        const remote = manifest.remotes[key];
+      if (!loaded) {
+        return [null, null] as const;
+      }
 
-        const environment = manifest.environment[remote.scope] || {};
-        const overrides =
-          (config.overrides?.environment && config.overrides?.environment[remote.scope]) || {};
-        window[`__appshell_env__${remote.scope}`] = {
-          ...environment,
-          ...overrides,
-        };
+      fetchedScriptCache.add(remote.remoteEntryUrl);
 
-        const loaded =
-          fetchedScriptCache.has(remote.remoteEntryUrl) ||
-          (await fetchDynamicScript(remote.remoteEntryUrl));
-        if (loaded) {
-          fetchedScriptCache.add(remote.remoteEntryUrl);
-          Component = await loadAppshellComponent<TComponent>(
-            remote.scope,
-            remote.module,
-            remote.shareScope,
-          );
+      const Component = await loadAppshellComponent<TComponent>(
+        remote.scope,
+        remote.module,
+        remote.shareScope,
+      );
 
-          return [Component, manifest] as const;
-        }
-      }
-
-      return [null, null] as const;
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    } catch (err: any) {
-      throw new Error(`Failed to load component '${key}'. ${err?.toString()}`);
+      return [Component, manifest] as const;
+    } catch (err) {
+      throw failed(err);
     }
   };
+};

package/src/resolvers.ts

@@ -0,0 +1,110 @@
+import type {
+  AppshellComposition,
+  AppshellGlobalConfig,
+  AppshellManifest,
+  ResolvedRemote,
+} from '@appshell/config';
+
+export type RemoteResolution = {
+  remote: ResolvedRemote;
+  /** Already merged with the environment's overrides — nothing left for the browser to layer on. */
+  environment: Record<string, string | number | undefined>;
+  /** Back-compat payload for `ManifestProvider`; synthesized when the source was a composition. */
+  manifest: AppshellManifest;
+};
+
+export type RemoteResolver = (key: string) => Promise<RemoteResolution | undefined>;
+
+const manifestOf = (composition: AppshellComposition, remotes: AppshellManifest['remotes']) => ({
+  remotes,
+  environment: composition.environment,
+  modules: {},
+});
+
+/** The registry inlined the composition into the page, so no network call is needed. */
+export const inlineResolver =
+  (composition?: AppshellComposition): RemoteResolver =>
+  async (key) => {
+    const remote = composition?.remotes[key];
+    if (!composition || !remote) return undefined;
+
+    return {
+      remote,
+      environment: composition.environment[remote.scope] ?? {},
+      manifest: manifestOf(composition, composition.remotes),
+    };
+  };
+
+/** Fetch-on-miss: covers an app activated after this page was served. */
+export const registryResolver =
+  (composition?: AppshellComposition, origin = ''): RemoteResolver =>
+  async (key) => {
+    if (!composition) return undefined;
+
+    const url = `${origin}/v1/environments/${composition.environmentId}/remotes/${key}`;
+    const response = await fetch(url, { credentials: 'include' });
+    if (!response.ok) return undefined;
+
+    const remote: ResolvedRemote = await response.json();
+
+    return {
+      remote,
+      environment: composition.environment[remote.scope] ?? {},
+      manifest: manifestOf(composition, { [key]: remote }),
+    };
+  };
+
+/**
+ * Pre-registry hosts: follow `index[key]` to the app's own manifest. The override
+ * merge stays here because in this mode no server has done it.
+ */
+export const legacyManifestResolver = (config: AppshellGlobalConfig): RemoteResolver => {
+  const cache = new Map<string, Promise<AppshellManifest>>();
+
+  const fetchManifest = (url: string) => {
+    const cached = cache.get(url);
+    if (cached) return cached;
+
+    const pending = fetch(url, { credentials: 'include' }).then(async (response) => {
+      if (!response.ok) {
+        throw new Error(`Failed to get manifest from ${url}. ${await response.text()}`);
+      }
+      return response.json() as Promise<AppshellManifest>;
+    });
+
+    cache.set(url, pending);
+
+    return pending;
+  };
+
+  return async (key) => {
+    const manifestUrl = config.index?.[key];
+    if (!manifestUrl) return undefined;
+
+    const manifest = await fetchManifest(manifestUrl);
+    const remote = manifest?.remotes[key];
+    if (!remote) return undefined;
+
+    return {
+      remote,
+      environment: {
+        ...(manifest.environment[remote.scope] ?? {}),
+        ...(config.overrides?.environment?.[remote.scope] ?? {}),
+      },
+      manifest,
+    };
+  };
+};
+
+export const chainResolvers =
+  (...resolvers: RemoteResolver[]): RemoteResolver =>
+  async (key) => {
+    // eslint-disable-next-line no-restricted-syntax
+    for (const resolve of resolvers) {
+      // eslint-disable-next-line no-await-in-loop
+      const resolution = await resolve(key);
+      if (resolution) return resolution;
+    }
+
+    return undefined;
+  };