@appshell/loader 1.0.0-alpha.59 → 1.0.0-alpha.61

package/dist/types/config/src/index.d.ts

@@ -11,6 +11,7 @@ export { default as outdated } from './outdated';
 export { activate, openOverlay, publish } from './publish';
 export type { OpenedOverlay, OverlayRemotePatch, PublishOptions, PublishResult } from './publish';
 export { default as sync } from './sync';
+export { caFile, httpsAgent } from './tls';
 export type { AppshellComposition, AppshellConfig, AppshellConfigRemote, AppshellIndex, AppshellManifest, AppshellRemote, AppshellTemplate, AppshellTokenUsage, ComparisonResult, ComparisonResults, ComparisonTarget, Metadata, ModuleFederationPluginOptions, PackageSpec, ResolvedRemote, Schema, SharedConfig, SharedModuleSpec, SharedObject, } from './types';
 export * as utils from './utils';
 export * as validators from './validators';

package/dist/types/config/src/tls.d.ts

@@ -0,0 +1,23 @@
+import https from 'https';
+/**
+ * An extra CA bundle to trust, from `ca-file` in the cli config or `APPSHELL_CA_FILE`.
+ *
+ * A registry behind a private CA — a corporate root, a TLS-inspecting proxy, or a local
+ * cluster using mkcert — fails with "unable to verify the first certificate", which says
+ * nothing about which host or what to do. Node can be told through `NODE_EXTRA_CA_CERTS`
+ * or `--use-system-ca`, but both are environment variables a user has to remember in
+ * every new terminal, and neither travels with the registry they apply to.
+ *
+ * npm draws the same conclusion with `cafile` in .npmrc: trust is configuration of the
+ * registry you talk to, not of the shell you happen to be in.
+ */
+export declare const caFile: () => string | undefined;
+/**
+ * The agent to use for registry and issuer requests, or undefined when no CA is
+ * configured and Node's defaults apply.
+ *
+ * A configured file that does not exist throws rather than being skipped: falling back
+ * silently would reproduce the original certificate error, having been told exactly how
+ * to avoid it.
+ */
+export declare const httpsAgent: () => https.Agent | undefined;

package/dist/types/config/src/types.d.ts

@@ -47,6 +47,12 @@ export type ComparisonTarget = {
 };
 export type CliConfig = Record<string, string> & {
     apiKey: string;
+    /**
+     * PEM bundle to trust in addition to Node's built-ins, for a registry behind a private
+     * CA. Optional, and absent from `config init` output: an empty path is not a default
+     * worth writing, and its absence means "use Node's defaults".
+     */
+    caFile?: string;
     registry: string;
     application: string;
     scopeId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appshell/loader",
-  "version": "1.0.0-alpha.59",
+  "version": "1.0.0-alpha.61",
   "description": "Utility for loading Appshell components",
   "main": "dist/main.js",
   "types": "dist/loader/src/index.d.ts",
@@ -32,8 +32,8 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@appshell/runtime": "^1.0.0-alpha.59",
+    "@appshell/runtime": "^1.0.0-alpha.61",
     "@module-federation/enhanced": "^2.8.2"
   },
-  "gitHead": "45466207a4695c42ec23ab9f9a49879baca2fb9f"
+  "gitHead": "f5b20c95dabe1a721f2560dc4af4c4e2dc44ddd4"
 }