@appshell/react 1.0.0-alpha.0 → 1.0.0-alpha.10

package/CHANGELOG.md

@@ -3,23 +3,39 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
-# 1.0.0-alpha.0 (2026-08-18)
+# [1.0.0-alpha.10](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.9...v1.0.0-alpha.10) (2026-08-19)
 
-### Bug Fixes
+**Note:** Version bump only for package @appshell/react
 
-- appshell loader override check ([aedda4a](https://github.com/appshell-org/appshell/commit/aedda4abf81560297dce03df09fba68e8785242f))
-- capture direct dependencies passed to FederatedComponent for re-render ([3621879](https://github.com/appshell-org/appshell/commit/36218793a5cb47f74bd8d1ce93deffdb1b85cd1c))
-- rename @appshell/react-federated-component package to @appshell/react ([0b74498](https://github.com/appshell-org/appshell/commit/0b74498bf17ba73db4d936c8a012af1d3b111a28))
-- resolve npm audit vulnerabilities (74 → 4) ([36a2d56](https://github.com/appshell-org/appshell/commit/36a2d56a76dabd55a6886ddb9f020948420fd832))
+# [1.0.0-alpha.8](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.7...v1.0.0-alpha.8) (2026-08-19)
 
-### Features
+**Note:** Version bump only for package @appshell/react
 
-- api key support ([9cdcbee](https://github.com/appshell-org/appshell/commit/9cdcbee36e44b8a179b49768d74a25767f1cc5f2))
-- AppshellComponent impl ([2b82621](https://github.com/appshell-org/appshell/commit/2b82621c13302f790a8e1c457f9a82f39903fc1f))
-- **config:** carry the host root and its props in the composition ([ca9ed63](https://github.com/appshell-org/appshell/commit/ca9ed630a5a22cb62d6630b5f191d15c54f1c595))
-- consolidate runtime artifacts ([#26](https://github.com/appshell-org/appshell/issues/26)) ([a29479a](https://github.com/appshell-org/appshell/commit/a29479a49f0c5ec1273c9f8e4c7384096f2d4ba0))
-- **loader:** pin the runtime wire contract and add a resolver chain ([95dbb10](https://github.com/appshell-org/appshell/commit/95dbb10d2bd0a7c2429852839c8be352a2c1bbe8))
-- **react:** render from the registry-inlined composition ([1bcf134](https://github.com/appshell-org/appshell/commit/1bcf1341a459fd8b1ae357da7f27d427bb898c6c))
+# [1.0.0-alpha.7](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.6...v1.0.0-alpha.7) (2026-08-18)
+
+**Note:** Version bump only for package @appshell/react
+
+**Note:** Version bump only for package @appshell/react
+
+# [1.0.0-alpha.6](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.5...v1.0.0-alpha.6) (2026-08-18)
+
+**Note:** Version bump only for package @appshell/react
+
+# [1.0.0-alpha.5](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.4...v1.0.0-alpha.5) (2026-08-18)
+
+**Note:** Version bump only for package @appshell/react
+
+**Note:** Version bump only for package @appshell/react
+
+# [1.0.0-alpha.4](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.3...v1.0.0-alpha.4) (2026-08-18)
+
+**Note:** Version bump only for package @appshell/react
+
+**Note:** Version bump only for package @appshell/react
+
+# [1.0.0-alpha.3](https://github.com/appshell-org/appshell/compare/v1.0.0-alpha.2...v1.0.0-alpha.3) (2026-08-18)
+
+**Note:** Version bump only for package @appshell/react
 
 # 0.12.0-alpha.0 (2026-04-20)
 

package/dist/main.js

@@ -1 +1 @@
-!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t(require("react"));else if("function"==typeof define&&define.amd)define(["react"],t);else{var r="object"==typeof exports?t(require("react")):t(e.react);for(var n in r)("object"==typeof exports?exports:e)[n]=r[n]}}(self,(e=>(()=>{"use strict";var t={155(t){t.exports=e}},r={};function n(e){var o=r[e];if(void 0!==o)return o.exports;var a=r[e]={exports:{}};return t[e](a,a.exports,n),a.exports}n.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return n.d(t,{a:t}),t},n.d=(e,t)=>{for(var r in t)n.o(t,r)&&!n.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},n.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),n.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},(()=>{n.S={};var e={},t={};n.I=(r,o)=>{o||(o=[]);var a=t[r];if(a||(a=t[r]={}),!(o.indexOf(a)>=0)){if(o.push(a),e[r])return e[r];n.o(n.S,r)||(n.S[r]={}),n.S[r];var c=[];return e[r]=c.length?Promise.all(c).then((()=>e[r]=1)):1}}})();var o={};n.r(o),n.d(o,{AppshellComponent:()=>$,FederatedComponent:()=>C,GlobalConfigProvider:()=>P,ManifestProvider:()=>v,MetadataProvider:()=>R,ReactHost:()=>M,RemoteProvider:()=>y,jsonResource:()=>T,useGlobalConfig:()=>O,useManifest:()=>F,useMetadata:()=>I,useRemote:()=>U});const a=new Set,c=async e=>{const t=document.createElement("script");return new Promise(((r,n)=>{a.has(e)?r(!1):(a.add(e),t.src=e,t.type="text/javascript",t.async=!0,t.onload=()=>{console.debug(`Remote entry fetched from '${e}'.`),r(!0)},t.onerror=()=>{const t=`Failed to fetch remote entry from '${e}'.`;console.error(t),a.delete(e),n(t)},document.head.appendChild(t))})).finally((()=>{document.head.contains(t)&&document.head.removeChild(t)}))};(Object.getOwnPropertyDescriptor(c,"name")||{}).writable||Object.defineProperty(c,"name",{value:"default",configurable:!0});const i=async(e,t,r="default")=>{console.debug(`loading Appshell component: { scope: ${e}, module: ${t}, shareScope: ${r} }`),await n.I(r);const o=window[e];if(!o)throw new Error(`Failed to find module container ${e}`);await o.init(n.S[r]);const a=await o.get(t);if(!a)throw new Error(`Invalid factory produced by container for module ${t}.`);const c=a();return console.debug(`Appshell component loaded: { scope: ${e}, module: ${t}, shareScope: ${r} }`),c.default};(Object.getOwnPropertyDescriptor(i,"name")||{}).writable||Object.defineProperty(i,"name",{value:"default",configurable:!0});const s=(e,t)=>({remotes:t,environment:e.environment,modules:{}}),l=new Set,d=(e,t={})=>{const r=t.composition??("undefined"==typeof window?void 0:window.__appshell_config__),n=t.resolver??((...e)=>async t=>{for(const r of e){const e=await r(t);if(e)return e}})((e=>async t=>{const r=e?.remotes[t];if(e&&r)return{remote:r,environment:e.environment[r.scope]??{},manifest:s(e,e.remotes)}})(r),((e,t="")=>async r=>{if(!e)return;const n=`${t}/v1/environments/${e.environmentId}/remotes/${r}`,o=await fetch(n,{credentials:"include"});if(!o.ok)return;const a=await o.json();return{remote:a,environment:e.environment[a.scope]??{},manifest:s(e,{[r]:a})}})(r),(e=>{const t=new Map;return async r=>{const n=e.index?.[r];if(!n)return;const o=await(e=>{const r=t.get(e);if(r)return r;const n=fetch(e,{credentials:"include"}).then((async t=>{if(!t.ok)throw new Error(`Failed to get manifest from ${e}. ${await t.text()}`);return t.json()}));return t.set(e,n),n})(n),a=o?.remotes[r];return a?{remote:a,environment:{...o.environment[a.scope]??{},...e.overrides?.environment?.[a.scope]??{}},manifest:o}:void 0}})(e));return async e=>{const t=t=>new Error(`Failed to load component '${e}'. ${t?.toString()}`);let r;try{r=await n(e)}catch(e){throw t(e)}if(!r)throw new Error(`Remote resource not found in registry. Expected: ${e}`);const{remote:o,environment:a,manifest:s}=r;try{return window[`__appshell_env__${o.scope}`]=a,l.has(o.remoteEntryUrl)||await c(o.remoteEntryUrl)?(l.add(o.remoteEntryUrl),[await i(o.scope,o.module,o.shareScope),s]):[null,null]}catch(e){throw t(e)}}};(Object.getOwnPropertyDescriptor(d,"name")||{}).writable||Object.defineProperty(d,"name",{value:"default",configurable:!0});const u=d;var f=n(155),m=n.n(f);const p=(0,f.createContext)({remotes:{},modules:{},environment:{}}),v=({manifest:e,children:t})=>{const r=(0,f.useMemo)((()=>(e=>new Proxy(e,{get:(e,t,r)=>("modules"===t&&console.warn("useManifest().modules is deprecated and will be removed. It is build-time webpack config; use useRemote() for what the browser needs. Please open an issue at github.com/appshell-org/appshell if you rely on it."),Reflect.get(e,t,r))}))(e)),[e]);return m().createElement(p.Provider,{value:r},t)},w=(p.Consumer,p),b=(0,f.createContext)(void 0),y=({remote:e,children:t})=>m().createElement(b.Provider,{value:e},t);y.defaultProps={remote:void 0},b.Consumer;const h=b,g=(0,f.createContext)({index:{}}),P=({config:e,children:t})=>m().createElement(g.Provider,{value:e},t),j=(g.Consumer,g),O=()=>m().useContext(j);(Object.getOwnPropertyDescriptor(O,"name")||{}).writable||Object.defineProperty(O,"name",{value:"default",configurable:!0});const x=({remote:e,reason:t})=>m().createElement("div",{style:{border:"3px solid red"}},m().createElement("h5",null,`Error loading Appshell component '${e}.'`),m().createElement("span",{style:{fontSize:"1rem"}},t)),E=({remote:e,fallback:t,...r})=>{const n=O(),[o,a]=(0,f.useState)();return(0,f.useEffect)((()=>{let t=!1;const o=u(n);return t||async function(){try{t=!0,a(void 0);const[n,c]=await o(e);if(!n)return;t=!1,a(m().createElement(v,{manifest:c},m().createElement(y,{remote:c.remotes[e]},m().createElement(n,r))))}catch(t){a(m().createElement(x,{remote:e,reason:`${t}`}))}}(),()=>{t=!1}}),[e,n,...Object.values(r)]),console.debug(`rendering AppshellComponent[${e}], loading=${!o}`),m().createElement(m().Fragment,null,o||t)};E.defaultProps={fallback:void 0};const $=E,C=E;function S(){return S=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)({}).hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},S.apply(null,arguments)}const _=()=>{const e="undefined"==typeof window?void 0:window.__appshell_config__;return e&&{index:e.index}},k=({configUrl:e,remote:t,fallback:r,...n})=>{const[o,a]=m().useState(_);return(0,f.useEffect)((()=>{o||(e?(async()=>{const t=await fetch(e);a(t.ok?await t.json():{index:{}})})():a({index:{}}))}),[o,e]),o?m().createElement(P,{config:o},m().createElement($,S({remote:t,fallback:r},n))):null};k.defaultProps={configUrl:void 0,fallback:void 0};const M=k,D=(0,f.createContext)({}),R=({metata:e,children:t})=>m().createElement(D.Provider,{value:e},t),A=(D.Consumer,D),F=()=>m().useContext(w);(Object.getOwnPropertyDescriptor(F,"name")||{}).writable||Object.defineProperty(F,"name",{value:"default",configurable:!0});const I=()=>m().useContext(A);(Object.getOwnPropertyDescriptor(I,"name")||{}).writable||Object.defineProperty(I,"name",{value:"default",configurable:!0});const U=()=>m().useContext(h);(Object.getOwnPropertyDescriptor(U,"name")||{}).writable||Object.defineProperty(U,"name",{value:"default",configurable:!0});const T=e=>{let t,r="pending";const n=fetch(e,{headers:{"Content-Type":"application/json",Accept:"application/json"}}).then((e=>{if(e.ok)return e.json().then((e=>{r="success",t=e}));r="error",t=new Error(`${e.status} ${e.statusText} ${e.url}`)}));return{read(){if("pending"===r)throw n;if("error"===r)throw t;if("success"===r)return t}}};return(Object.getOwnPropertyDescriptor(T,"name")||{}).writable||Object.defineProperty(T,"name",{value:"default",configurable:!0}),o})()));
+!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t(require("react"));else if("function"==typeof define&&define.amd)define(["react"],t);else{var n="object"==typeof exports?t(require("react")):t(e.react);for(var r in n)("object"==typeof exports?exports:e)[r]=n[r]}}(self,(e=>(()=>{"use strict";var t={155(t){t.exports=e}},n={};function r(e){var o=n[e];if(void 0!==o)return o.exports;var a=n[e]={exports:{}};return t[e](a,a.exports,r),a.exports}r.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return r.d(t,{a:t}),t},r.d=(e,t)=>{for(var n in t)r.o(t,n)&&!r.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:t[n]})},r.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),r.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},(()=>{r.S={};var e={},t={};r.I=(n,o)=>{o||(o=[]);var a=t[n];if(a||(a=t[n]={}),!(o.indexOf(a)>=0)){if(o.push(a),e[n])return e[n];r.o(r.S,n)||(r.S[n]={}),r.S[n];var c=[];return e[n]=c.length?Promise.all(c).then((()=>e[n]=1)):1}}})();var o={};r.r(o),r.d(o,{AppshellComponent:()=>$,FederatedComponent:()=>C,GlobalConfigProvider:()=>P,ManifestProvider:()=>v,MetadataProvider:()=>R,ReactHost:()=>M,RemoteProvider:()=>y,jsonResource:()=>T,useGlobalConfig:()=>O,useManifest:()=>F,useMetadata:()=>I,useRemote:()=>U});const a=new Set,c=async e=>{const t=document.createElement("script"),n=document.querySelector("script[nonce]")?.nonce;return n&&(t.nonce=n),new Promise(((n,r)=>{a.has(e)?n(!1):(a.add(e),t.src=e,t.type="text/javascript",t.async=!0,t.onload=()=>{console.debug(`Remote entry fetched from '${e}'.`),n(!0)},t.onerror=()=>{const t=`Failed to fetch remote entry from '${e}'.`;console.error(t),a.delete(e),r(t)},document.head.appendChild(t))})).finally((()=>{document.head.contains(t)&&document.head.removeChild(t)}))};(Object.getOwnPropertyDescriptor(c,"name")||{}).writable||Object.defineProperty(c,"name",{value:"default",configurable:!0});const i=async(e,t,n="default")=>{console.debug(`loading Appshell component: { scope: ${e}, module: ${t}, shareScope: ${n} }`),await r.I(n);const o=window[e];if(!o)throw new Error(`Failed to find module container ${e}`);await o.init(r.S[n]);const a=await o.get(t);if(!a)throw new Error(`Invalid factory produced by container for module ${t}.`);const c=a();return console.debug(`Appshell component loaded: { scope: ${e}, module: ${t}, shareScope: ${n} }`),c.default};(Object.getOwnPropertyDescriptor(i,"name")||{}).writable||Object.defineProperty(i,"name",{value:"default",configurable:!0});const s=(e,t)=>({remotes:t,environment:e.environment,modules:{}}),l=new Set,d=(e,t={})=>{const n=t.composition??("undefined"==typeof window?void 0:window.__appshell_config__),r=t.resolver??((...e)=>async t=>{for(const n of e){const e=await n(t);if(e)return e}})((e=>async t=>{const n=e?.remotes[t];if(e&&n)return{remote:n,environment:e.environment[n.scope]??{},manifest:s(e,e.remotes)}})(n),((e,t="")=>async n=>{if(!e)return;const r=`${t}/v1/environments/${e.environmentId}/remotes/${n}`,o=await fetch(r,{credentials:"include"});if(!o.ok)return;const a=await o.json();return{remote:a,environment:e.environment[a.scope]??{},manifest:s(e,{[n]:a})}})(n),(e=>{const t=new Map;return async n=>{const r=e.index?.[n];if(!r)return;const o=await(e=>{const n=t.get(e);if(n)return n;const r=fetch(e,{credentials:"include"}).then((async t=>{if(!t.ok)throw new Error(`Failed to get manifest from ${e}. ${await t.text()}`);return t.json()}));return t.set(e,r),r})(r),a=o?.remotes[n];return a?{remote:a,environment:{...o.environment[a.scope]??{},...e.overrides?.environment?.[a.scope]??{}},manifest:o}:void 0}})(e));return async e=>{const t=t=>new Error(`Failed to load component '${e}'. ${t?.toString()}`);let n;try{n=await r(e)}catch(e){throw t(e)}if(!n)throw new Error(`Remote resource not found in registry. Expected: ${e}`);const{remote:o,environment:a,manifest:s}=n;try{return window[`__appshell_env__${o.scope}`]=a,l.has(o.remoteEntryUrl)||await c(o.remoteEntryUrl)?(l.add(o.remoteEntryUrl),[await i(o.scope,o.module,o.shareScope),s]):[null,null]}catch(e){throw t(e)}}};(Object.getOwnPropertyDescriptor(d,"name")||{}).writable||Object.defineProperty(d,"name",{value:"default",configurable:!0});const u=d;var f=r(155),m=r.n(f);const p=(0,f.createContext)({remotes:{},modules:{},environment:{}}),v=({manifest:e,children:t})=>{const n=(0,f.useMemo)((()=>(e=>new Proxy(e,{get:(e,t,n)=>("modules"===t&&console.warn("useManifest().modules is deprecated and will be removed. It is build-time webpack config; use useRemote() for what the browser needs. Please open an issue at github.com/appshell-org/appshell if you rely on it."),Reflect.get(e,t,n))}))(e)),[e]);return m().createElement(p.Provider,{value:n},t)},w=(p.Consumer,p),b=(0,f.createContext)(void 0),y=({remote:e,children:t})=>m().createElement(b.Provider,{value:e},t);y.defaultProps={remote:void 0},b.Consumer;const h=b,g=(0,f.createContext)({index:{}}),P=({config:e,children:t})=>m().createElement(g.Provider,{value:e},t),j=(g.Consumer,g),O=()=>m().useContext(j);(Object.getOwnPropertyDescriptor(O,"name")||{}).writable||Object.defineProperty(O,"name",{value:"default",configurable:!0});const x=({remote:e,reason:t})=>m().createElement("div",{style:{border:"3px solid red"}},m().createElement("h5",null,`Error loading Appshell component '${e}.'`),m().createElement("span",{style:{fontSize:"1rem"}},t)),E=({remote:e,fallback:t,...n})=>{const r=O(),[o,a]=(0,f.useState)();return(0,f.useEffect)((()=>{let t=!1;const o=u(r);return t||async function(){try{t=!0,a(void 0);const[r,c]=await o(e);if(!r)return;t=!1,a(m().createElement(v,{manifest:c},m().createElement(y,{remote:c.remotes[e]},m().createElement(r,n))))}catch(t){a(m().createElement(x,{remote:e,reason:`${t}`}))}}(),()=>{t=!1}}),[e,r,...Object.values(n)]),console.debug(`rendering AppshellComponent[${e}], loading=${!o}`),m().createElement(m().Fragment,null,o||t)};E.defaultProps={fallback:void 0};const $=E,C=E;function S(){return S=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},S.apply(null,arguments)}const _=()=>{const e="undefined"==typeof window?void 0:window.__appshell_config__;return e&&{index:e.index}},k=({configUrl:e,remote:t,fallback:n,...r})=>{const[o,a]=m().useState(_);return(0,f.useEffect)((()=>{o||(e?(async()=>{const t=await fetch(e);a(t.ok?await t.json():{index:{}})})():a({index:{}}))}),[o,e]),o?m().createElement(P,{config:o},m().createElement($,S({remote:t,fallback:n},r))):null};k.defaultProps={configUrl:void 0,fallback:void 0};const M=k,D=(0,f.createContext)({}),R=({metata:e,children:t})=>m().createElement(D.Provider,{value:e},t),A=(D.Consumer,D),F=()=>m().useContext(w);(Object.getOwnPropertyDescriptor(F,"name")||{}).writable||Object.defineProperty(F,"name",{value:"default",configurable:!0});const I=()=>m().useContext(A);(Object.getOwnPropertyDescriptor(I,"name")||{}).writable||Object.defineProperty(I,"name",{value:"default",configurable:!0});const U=()=>m().useContext(h);(Object.getOwnPropertyDescriptor(U,"name")||{}).writable||Object.defineProperty(U,"name",{value:"default",configurable:!0});const T=e=>{let t,n="pending";const r=fetch(e,{headers:{"Content-Type":"application/json",Accept:"application/json"}}).then((e=>{if(e.ok)return e.json().then((e=>{n="success",t=e}));n="error",t=new Error(`${e.status} ${e.statusText} ${e.url}`)}));return{read(){if("pending"===n)throw r;if("error"===n)throw t;if("success"===n)return t}}};return(Object.getOwnPropertyDescriptor(T,"name")||{}).writable||Object.defineProperty(T,"name",{value:"default",configurable:!0}),o})()));

package/dist/types/config/src/context.d.ts

@@ -0,0 +1,23 @@
+export type AppshellContext = {
+    registry?: string;
+    /** Activation target as `scope/name`. */
+    environment?: string;
+    scopeId: string;
+    token?: string;
+};
+/**
+ * The registry, environment, and token a developer is working against, resolved
+ * the way the CLI resolves them: env var, then `~/.appshell/config`, then a
+ * default. This lets the webpack plugin defer to `appshell config set` and
+ * `appshell login` instead of requiring per-project configuration.
+ */
+export declare const resolveContext: () => AppshellContext;
+/**
+ * What `~/.appshell/config` alone declares, so a caller can warn when an env var
+ * or an explicit option points somewhere other than the developer's CLI context.
+ */
+export declare const persistedContext: () => {
+    registry?: string;
+    environment?: string;
+};
+//# sourceMappingURL=context.d.ts.map

package/dist/types/config/src/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../../../config/src/context.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAaF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,QAAO,eAQjC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,QAAO;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAK5E,CAAC"}

package/dist/types/config/src/credentials.d.ts

@@ -0,0 +1,16 @@
+export type Credential = {
+    accessToken: string;
+    refreshToken?: string;
+    /** Epoch milliseconds. */
+    expiresAt?: number;
+};
+export declare const credentialsPath: () => string;
+export declare const saveCredential: (registry: string, credential: Credential) => void;
+export declare const clearCredential: (registry: string) => void;
+/**
+ * APPSHELL_TOKEN wins so CI never depends on a writable home directory.
+ * Expired tokens are treated as absent; refresh is the caller's concern.
+ */
+export declare const resolveToken: (registry: string) => string | undefined;
+export declare const requireToken: (registry: string) => string;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/types/config/src/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../../config/src/credentials.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAKF,eAAO,MAAM,eAAe,cAC6D,CAAC;AAqB1F,eAAO,MAAM,cAAc,aAAc,MAAM,cAAc,UAAU,SAEtE,CAAC;AAEF,eAAO,MAAM,eAAe,aAAc,MAAM,SAI/C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,aAAc,MAAM,KAAG,MAAM,GAAG,SAexD,CAAC;AAEF,eAAO,MAAM,YAAY,aAAc,MAAM,KAAG,MAO/C,CAAC"}

package/dist/types/config/src/index.d.ts

@@ -2,6 +2,10 @@
  * @appshell/config package API
  */
 export { default as configmap } from './configmap';
+export { persistedContext, resolveContext } from './context';
+export type { AppshellContext } from './context';
+export { clearCredential, credentialsPath, requireToken, resolveToken, saveCredential, } from './credentials';
+export type { Credential } from './credentials';
 export { default as deregister } from './deregister';
 export { default as generateEnv } from './generate.env';
 export { default as generateGlobalConfig } from './generate.global-config';

package/dist/types/config/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../config/src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,QAAQ,CAAC;AACzC,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,EACR,6BAA6B,EAC7B,WAAW,EACX,cAAc,EACd,MAAM,EACN,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../config/src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EACL,eAAe,EACf,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,QAAQ,CAAC;AACzC,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,EACR,6BAA6B,EAC7B,WAAW,EACX,cAAc,EACd,MAAM,EACN,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC"}

package/dist/types/config/src/publish.d.ts

@@ -7,6 +7,8 @@ export type PublishOptions = {
     manifest: AppshellManifest;
     visibility?: 'public' | 'private';
     metadata?: Metadata;
+    /** Ask the registry to overwrite an existing version whose content differs. */
+    force?: boolean;
 };
 export type PublishResult = {
     /** `scope/name@version`. The scope comes from the token, not the caller. */
@@ -15,9 +17,10 @@ export type PublishResult = {
 };
 /**
  * Publishing the same content twice is a no-op; publishing different content
- * under a version that already exists is rejected by the registry.
+ * under a version that already exists is rejected by the registry, unless
+ * `force` is set and the registry is configured to honor it (dev registries).
  */
-export declare const publish: ({ registry, token, name, version, manifest, visibility, metadata, }: PublishOptions) => Promise<PublishResult>;
+export declare const publish: ({ registry, token, name, version, manifest, visibility, metadata, force, }: PublishOptions) => Promise<PublishResult>;
 /**
  * Activating a newer version of an already active app upgrades it in place.
  * @param environment `scope/name`

package/dist/types/config/src/publish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../../../../config/src/publish.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAErD,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAmBF;;;GAGG;AACH,eAAO,MAAM,OAAO,wEAQjB,cAAc,KAAG,OAAO,CAAC,aAAa,CAYxC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,QAAQ,aACT,MAAM,eACH,MAAM,SACZ,MAAM,UACL,MAAM,KACb,OAAO,CAAC,IAAI,CAgBd,CAAC"}
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../../../../config/src/publish.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAErD,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAmBF;;;;GAIG;AACH,eAAO,MAAM,OAAO,+EASjB,cAAc,KAAG,OAAO,CAAC,aAAa,CAYxC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,QAAQ,aACT,MAAM,eACH,MAAM,SACZ,MAAM,UACL,MAAM,KACb,OAAO,CAAC,IAAI,CAgBd,CAAC"}

package/dist/types/loader/src/fetchDynamicScript.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetchDynamicScript.d.ts","sourceRoot":"","sources":["../../../../../loader/src/fetchDynamicScript.ts"],"names":[],"mappings":"8BAE2B,MAAM;AAAjC,wBAqCE"}
+{"version":3,"file":"fetchDynamicScript.d.ts","sourceRoot":"","sources":["../../../../../loader/src/fetchDynamicScript.ts"],"names":[],"mappings":"8BAM2B,MAAM;AAAjC,wBA0CE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appshell/react",
-  "version": "1.0.0-alpha.0",
+  "version": "1.0.0-alpha.10",
   "description": "React utilities for building micro-frontends with Appshell and Module Federation",
   "main": "dist/main.js",
   "types": "dist/types/react/src/index.d.ts",
@@ -27,5 +27,5 @@
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },
-  "gitHead": "97ee53524d5c729308f49adca6c613d68a262179"
+  "gitHead": "0af7909493bfba483afdfdf0665834e6a8e4b591"
 }