@archie/devtools 0.0.12 → 0.0.13

package/dist/client/client.d.mts

@@ -1,6 +1,42 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
 
+/** Only configured domains (Archie host origins) and optionally localhost in dev. "*" is never used. */
+type InjectOptions = {
+    id?: string;
+    /**
+     * Origin(s) allowed to send postMessage commands to the inspector.
+     * If not set, uses Archie host origins + localhost when dev is true.
+     * "*" is not allowed; pass an array of concrete origins.
+     */
+    allowedOrigins?: string | string[];
+    /**
+     * Origin to which the inspector sends postMessage replies (the parent window).
+     * If not set and in an iframe, uses document.referrer origin — except when the page
+     * is a preview iframe (*.previews.staging.archie-platform.com), in which case you
+     * must pass the parent app origin (e.g. https://app.dev.archie-platform.com).
+     * "*" is not allowed.
+     */
+    targetOrigin?: string;
+    /**
+     * When true, allowedOrigins default includes localhost for local testing.
+     * When undefined, inferred from document.referrer (localhost or missing = dev).
+     */
+    dev?: boolean;
+    /**
+     * Where to load the inspector script from.
+     * - "remote" (default): load from REMOTE_INSPECTOR_SCRIPT_URL with a dynamic hash to avoid cache.
+     * - "local": load from the bundled module (import('./inspector.js')).
+     */
+    scriptSource?: 'remote' | 'local';
+    /**
+     * Override the remote script URL (e.g. your own CDN, a pinned version, or a URL with SRI hash).
+     * Only used when scriptSource is "remote" (default). Defaults to REMOTE_INSPECTOR_SCRIPT_URL.
+     * Example: 'https://my-cdn.com/inspector.standalone.js'
+     */
+    scriptUrl?: string;
+};
+
 interface ArchieRouteObjectLike {
     id?: string;
     path?: string;
@@ -31,11 +67,12 @@ interface ArchieRouterLike {
 interface ArchieDevToolsRuntimeOptions {
     router: ArchieRouterLike;
     inspector?: boolean;
+    inspectorOptions?: InjectOptions;
 }
 
 interface ArchieDevToolProviderProps extends ArchieDevToolsRuntimeOptions {
     children: ReactNode;
 }
-declare function ArchieDevToolProvider({ children, router, inspector, }: ArchieDevToolProviderProps): react_jsx_runtime.JSX.Element;
+declare function ArchieDevToolProvider({ children, router, inspector, inspectorOptions, }: ArchieDevToolProviderProps): react_jsx_runtime.JSX.Element;
 
 export { ArchieDevToolProvider, type ArchieDevToolProviderProps };

package/dist/client/client.d.ts

@@ -1,6 +1,42 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
 
+/** Only configured domains (Archie host origins) and optionally localhost in dev. "*" is never used. */
+type InjectOptions = {
+    id?: string;
+    /**
+     * Origin(s) allowed to send postMessage commands to the inspector.
+     * If not set, uses Archie host origins + localhost when dev is true.
+     * "*" is not allowed; pass an array of concrete origins.
+     */
+    allowedOrigins?: string | string[];
+    /**
+     * Origin to which the inspector sends postMessage replies (the parent window).
+     * If not set and in an iframe, uses document.referrer origin — except when the page
+     * is a preview iframe (*.previews.staging.archie-platform.com), in which case you
+     * must pass the parent app origin (e.g. https://app.dev.archie-platform.com).
+     * "*" is not allowed.
+     */
+    targetOrigin?: string;
+    /**
+     * When true, allowedOrigins default includes localhost for local testing.
+     * When undefined, inferred from document.referrer (localhost or missing = dev).
+     */
+    dev?: boolean;
+    /**
+     * Where to load the inspector script from.
+     * - "remote" (default): load from REMOTE_INSPECTOR_SCRIPT_URL with a dynamic hash to avoid cache.
+     * - "local": load from the bundled module (import('./inspector.js')).
+     */
+    scriptSource?: 'remote' | 'local';
+    /**
+     * Override the remote script URL (e.g. your own CDN, a pinned version, or a URL with SRI hash).
+     * Only used when scriptSource is "remote" (default). Defaults to REMOTE_INSPECTOR_SCRIPT_URL.
+     * Example: 'https://my-cdn.com/inspector.standalone.js'
+     */
+    scriptUrl?: string;
+};
+
 interface ArchieRouteObjectLike {
     id?: string;
     path?: string;
@@ -31,11 +67,12 @@ interface ArchieRouterLike {
 interface ArchieDevToolsRuntimeOptions {
     router: ArchieRouterLike;
     inspector?: boolean;
+    inspectorOptions?: InjectOptions;
 }
 
 interface ArchieDevToolProviderProps extends ArchieDevToolsRuntimeOptions {
     children: ReactNode;
 }
-declare function ArchieDevToolProvider({ children, router, inspector, }: ArchieDevToolProviderProps): react_jsx_runtime.JSX.Element;
+declare function ArchieDevToolProvider({ children, router, inspector, inspectorOptions, }: ArchieDevToolProviderProps): react_jsx_runtime.JSX.Element;
 
 export { ArchieDevToolProvider, type ArchieDevToolProviderProps };