@equinor/fusion-framework-app 10.4.9 → 11.0.0

package/CHANGELOG.md

@@ -1,5 +1,54 @@
 # Change Log
 
+## 11.0.0
+
+### Major Changes
+
+- abffa53: Major version bump for Fusion Framework React 19 release.
+
+  All packages are bumped to the next major version as part of the React 19 upgrade. This release drops support for React versions below 18 and includes breaking changes across the framework.
+
+  **Breaking changes:**
+  - Peer dependencies now require React 18 or 19 (`^18.0.0 || ^19.0.0`)
+  - React Router upgraded from v6 to v7
+  - Navigation module refactored with new history API
+  - `renderComponent` and `renderApp` now use `createRoot` API
+
+  **Migration:**
+  - Update your React version to 18.0.0 or higher before upgrading
+  - Replace `NavigationProvider.createRouter()` with `@equinor/fusion-framework-react-router`
+  - See individual package changelogs for package-specific migration steps
+
+### Patch Changes
+
+- aaa3f74: fix(security): address undici multiple vulnerabilities (CVE-2026-1524, 1527, 1528, 2581)
+
+  Upgrade undici from 7.22.0 to 7.24.3 to fix multiple security vulnerabilities affecting WebSocket parsing, HTTP header validation, and request deduplication:
+  - **CVE-2026-1528** (HIGH): WebSocket 64-bit length integer overflow causing process crash
+  - **CVE-2026-1524** (MODERATE): HTTP/1.1 response field header injection
+  - **CVE-2026-1527** (MODERATE): CRLF injection via upgrade option enabling protocol smuggling
+  - **CVE-2026-2581** (MODERATE): Unbounded memory consumption in deduplication handler
+
+  These are non-breaking security patches that harden undici against untrusted upstream endpoints and malicious WebSocket frames.
+
+  **Advisories**: GHSA-f269-vfmq-vjvj, GHSA-v9p9-hfj2-hcw8, GHSA-4992-7rv2-5pvq, GHSA-phc3-fgpg-7m6h
+  **Fixed in**: undici 7.24.0+ (deployed 7.24.3)
+
+- Updated dependencies [abffa53]
+- Updated dependencies [abffa53]
+- Updated dependencies [abffa53]
+- Updated dependencies [abffa53]
+- Updated dependencies [aaa3f74]
+- Updated dependencies [abffa53]
+  - @equinor/fusion-framework@8.0.0
+  - @equinor/fusion-framework-module@6.0.0
+  - @equinor/fusion-framework-module-app@8.0.0
+  - @equinor/fusion-framework-module-bookmark@4.0.0
+  - @equinor/fusion-framework-module-event@6.0.0
+  - @equinor/fusion-framework-module-http@8.0.0
+  - @equinor/fusion-framework-module-msal@8.0.0
+  - @equinor/fusion-framework-module-telemetry@5.0.0
+
 ## 10.4.9
 
 ### Patch Changes
@@ -97,7 +146,6 @@
   App can override url and scopes with app config.
 
   Priority:
-
   1. Session overrides
   2. AppConfig
   3. ServiceDiscovery
@@ -203,7 +251,6 @@
 ### Minor Changes
 
 - [#3493](https://github.com/equinor/fusion-framework/pull/3493) [`9f5de98`](https://github.com/equinor/fusion-framework/commit/9f5de9844181b8bc2d770032ff3b1709e87c7c21) Thanks [@odinr](https://github.com/odinr)! - Add telemetry integration to app configurator.
-
   - Add telemetry module dependency to enable telemetry collection
   - Configure telemetry in app module configurator with metadata extraction from app manifest
   - Add event mapping to prefix configurator events with `AppConfigurator::` namespace
@@ -217,7 +264,6 @@
 ### Patch Changes
 
 - [#3490](https://github.com/equinor/fusion-framework/pull/3490) [`45954e5`](https://github.com/equinor/fusion-framework/commit/45954e5db471a2faa24e88e41fc6d6c18817d6d1) Thanks [@odinr](https://github.com/odinr)! - Remove explicit logger initialization from configurator constructors in favor of telemetry.
-
   - Removed `this.logger = new ModuleConsoleLogger(...)` from FrameworkConfigurator, AppConfigurator, and WidgetConfigurator constructors
   - Logger functionality will be handled through telemetry module with console logging adapter
 
@@ -289,7 +335,6 @@
 ### Patch Changes
 
 - [#3088](https://github.com/equinor/fusion-framework/pull/3088) [`7441b13`](https://github.com/equinor/fusion-framework/commit/7441b13aa50dd7362d1629086a27b6b4e571575d) Thanks [@eikeland](https://github.com/eikeland)! - chore: update package typesVersions
-
   - Updated package.json typesVersions.
   - Ensures backward compatibility with older node versions.
   - Ensured consistency with workspace and repository configuration.
@@ -667,7 +712,6 @@
 - [#2320](https://github.com/equinor/fusion-framework/pull/2320) [`1dd85f3`](https://github.com/equinor/fusion-framework/commit/1dd85f3a408a73df556d1812a5f280945cc100ee) Thanks [@odinr](https://github.com/odinr)! - Removed the `removeComments` option from the `tsconfig.base.json` file.
 
   Removing the `removeComments` option allows TypeScript to preserve comments in the compiled JavaScript output. This can be beneficial for several reasons:
-
   1. Improved debugging: Preserved comments can help developers understand the code better during debugging sessions.
   2. Documentation: JSDoc comments and other important code documentation will be retained in the compiled output.
   3. Source map accuracy: Keeping comments can lead to more accurate source maps, which is crucial for debugging and error tracking.
@@ -1139,7 +1183,6 @@
 ### Patch Changes
 
 - [#905](https://github.com/equinor/fusion-framework/pull/905) [`a7858a1c`](https://github.com/equinor/fusion-framework/commit/a7858a1c01542e2dc94370709f122b4b99c3219c) Thanks [@odinr](https://github.com/odinr)! - **🚧 Chore: dedupe packages**
-
   - align all versions of typescript
   - update types to build
     - a couple of typecasts did not [satisfies](https://www.typescriptlang.org/docs/handbook/release-notes/typescript-5-0.html#satisfies-support-in-jsdoc) and was recasted as `unknwon`, marked with `TODO`, should be fixed in future

package/README.md

@@ -1,32 +1,176 @@
 # @equinor/fusion-framework-app
 
-> support package for initializing application modules 
+Configuration and initialization layer for Fusion applications.
 
-## 📚 read the [Doc](https://equinor.github.io/fusion-framework/)
+Use this package to set up application modules, configure HTTP clients, integrate
+with service discovery, enable bookmarks, and wire up telemetry — all with a
+single `configureModules` call.
 
-## Bookmarks
+> **Most Fusion apps should use `@equinor/fusion-framework-react-app` instead.**
+> This lower-level package is for framework-agnostic or advanced scenarios.
 
-The bookmark module provides a way to save and restore the state of the application. This is useful for saving the state of the application when the user navigates away from the application and then returns to the application.
+## Installation
 
-> [!IMPORTANT]
-> please use the `enableBookmark` from  `@equinor/fusion-framework-app/bookmark` or `@equinor/fusion-framework-react-app/bookmark` to enable the bookmark module.
+```sh
+pnpm add @equinor/fusion-framework-app
+```
+
+## Quick Start
+
+```ts
+import { configureModules } from '@equinor/fusion-framework-app';
+
+// Create an initializer with custom configuration
+const initialize = configureModules((configurator, { fusion, env }) => {
+  // Register a named HTTP client
+  configurator.configureHttpClient('myApi', {
+    baseUri: 'https://api.example.com',
+    defaultScopes: ['api://client-id/.default'],
+  });
+});
+
+// Bootstrap the application
+const modules = await initialize({ fusion, env });
+```
+
+## Key Concepts
+
+| Concept | Description |
+|---|---|
+| `configureModules` | Factory function that creates an async initializer for application modules. |
+| `AppConfigurator` | Internal configurator created by `configureModules`; registers default modules (`event`, `http`, `msal`) and reads endpoint config. |
+| `IAppConfigurator` | Public interface for the configurator, used when typing configuration callbacks. |
+| `AppModuleInitiator` | Callback signature accepted by `configureModules` for user-supplied setup. |
+| `AppEnv` | Environment descriptor containing the app manifest, config, and optional basename. |
+| `enableBookmark` | Helper to enable the bookmark module (import from `@equinor/fusion-framework-app/enable-bookmark`). |
+
+## API Surface
+
+### `configureModules(cb?)`
+
+Returns an async initializer `(args: { fusion, env }) => Promise<AppModulesInstance>`.
+
+The optional callback receives an `IAppConfigurator` and the Fusion/env args,
+giving you access to:
+
+- **`configurator.configureHttpClient(name, options)`** — register a named HTTP client with explicit base URI and scopes.
+- **`configurator.configureHttp(...)`** — low-level HTTP module configuration.
+- **`configurator.useFrameworkServiceClient(serviceName, options?)`** — register a client resolved via Fusion service discovery.
+
+### Sub-path Exports
+
+| Export path | What it provides |
+|---|---|
+| `@equinor/fusion-framework-app` | `configureModules`, `AppConfigurator`, `IAppConfigurator`, all type aliases |
+| `@equinor/fusion-framework-app/enable-bookmark` | `enableBookmark` function |
+
+## Configure HTTP Clients
+
+The `AppConfigurator` can register named HTTP clients from several sources.
+You retrieve a client at runtime with `framework.modules.http.createClient(name)`.
+
+### From Application Config (auto-registration)
+
+Endpoints defined in `app.config.<env>.ts` are **automatically registered as
+named HTTP clients** when the `AppConfigurator` is created — no extra code
+needed in `config.ts`.
+
+```ts
+// app.config.ts
+import { defineAppConfig } from '@equinor/fusion-framework-cli/app';
+
+export default defineAppConfig(() => ({
+  endpoints: {
+    schedule: {
+      url: 'https://schedule-api.example.com',
+      scopes: ['api://schedule-id/.default'],
+    },
+  },
+}));
+```
+
+After initialization, use the client directly:
 
-> [!WARNING]
-> The application must be install the `@equinor/fusion-framework-module-bookmark` package to use the bookmark module.
-> 
-> __Do not use the `enableBookmark` from that package when developing Fusion Apps__
->
-> _We might in the future allow application configure their own module, but for now, use the enabler in the app package_
+```ts
+const client = framework.modules.http.createClient('schedule');
+const data = await client.json('/items');
+```
 
-### Usage
+### Via Service Discovery
 
 ```ts
-import type { AppModuleInitiator, IAppConfigurator } from '@equinor/fusion-framework-react-app';
+const initialize = configureModules((configurator) => {
+  configurator.useFrameworkServiceClient('people');
+});
+```
+
+### Explicit Registration
 
-import { enableBookmark } from '@equinor/fusion-framework-react-app/bookmark';
+Use `configureHttpClient` in `config.ts` when the endpoint is **not** in
+`app.config.ts`, or when you need custom transport behavior such as headers,
+response guards, or a custom client class.
 
-export const configure: AppModuleInitiator = (configurator: IAppConfigurator) => {
-    enableBookmark(configurator);
-};
+```ts
+configurator.configureHttpClient('custom-api', {
+  baseUri: 'https://custom.api.example.com',
+  defaultScopes: ['api://custom-id/.default'],
+  onCreate: (client) => {
+    client.requestHandler.setHeader('X-Source', 'portal');
+  },
+});
 ```
 
+### Resolution Priority
+
+When the same client name is configured in more than one place, the
+highest-priority source wins:
+
+| Priority | Source | Example |
+|----------|--------|---------|
+| 1 (highest) | **Session overrides** | User-specific URL / scopes set at runtime via `sessionStorage` |
+| 2 | **Application config endpoints** | `endpoints` in `app.config.ts` |
+| 3 | **Service-discovery registry** | Resolved via `useFrameworkServiceClient` |
+| 4 (lowest) | **Explicit registration** | `configureHttpClient(name, options)` in `config.ts` |
+
+This means an endpoint defined in `app.config.ts` will override a
+`configureHttpClient` call for the same name, and a session override will
+override both.
+
+## Enable Bookmarks
+
+The bookmark module allows applications to save and restore application state.
+
+> **Important:** Import `enableBookmark` from the app-level package, not from
+> `@equinor/fusion-framework-module-bookmark` directly.
+
+```ts
+import { configureModules } from '@equinor/fusion-framework-app';
+import { enableBookmark } from '@equinor/fusion-framework-app/enable-bookmark';
+
+const initialize = configureModules((configurator) => {
+  enableBookmark(configurator);
+});
+```
+
+Payload generators registered through the bookmark module are automatically
+cleaned up when the module is disposed.
+
+## Types
+
+| Type | Purpose |
+|---|---|
+| `AppEnv` | Environment descriptor (manifest, config, basename, props) |
+| `AppModuleInitiator` | Configuration callback signature for `configureModules` |
+| `AppModuleInit` | Full factory type wrapping `AppModuleInitiator` |
+| `AppModuleInitArgs` | Arguments passed to the returned initializer |
+| `AppRenderFn` | Render function for mounting an app into a DOM element |
+| `AppManifest` | Application manifest metadata (re-export) |
+| `AppConfig` | Environment-specific config (re-export) |
+| `AppModules` | Union of default application modules (re-export) |
+| `AppModulesInstance` | Resolved module instances after initialization (re-export) |
+
+## Further Reading
+
+- [Fusion Framework documentation](https://equinor.github.io/fusion-framework/)
+- [`@equinor/fusion-framework-react-app`](../react/app/) — React wrapper with hooks and providers
+

package/dist/esm/AppConfigurator.js

@@ -2,6 +2,28 @@ import { ModulesConfigurator, } from '@equinor/fusion-framework-module';
 import event from '@equinor/fusion-framework-module-event';
 import http, { configureHttpClient, configureHttp, } from '@equinor/fusion-framework-module-http';
 import auth from '@equinor/fusion-framework-module-msal';
+/**
+ * Configurator that bootstraps default Fusion application modules and provides
+ * helper methods for HTTP client and service-discovery setup.
+ *
+ * `AppConfigurator` is created internally by {@link configureModules}. It registers
+ * the `event`, `http`, and `msal` (auth) modules by default and reads any HTTP
+ * endpoints declared in the application’s environment config.
+ *
+ * @template TModules - Additional application-specific modules beyond the defaults.
+ * @template TRef - The resolved Fusion modules instance used as an initialization reference.
+ * @template TEnv - The application environment descriptor (manifest, config, basename).
+ *
+ * @example
+ * ```ts
+ * // Typically used indirectly via configureModules:
+ * import { configureModules } from '@equinor/fusion-framework-app';
+ *
+ * const initialize = configureModules((configurator) => {
+ *   configurator.useFrameworkServiceClient('my-service');
+ * });
+ * ```
+ */
 export class AppConfigurator extends ModulesConfigurator {
     env;
     /**
@@ -9,14 +31,25 @@ export class AppConfigurator extends ModulesConfigurator {
      * the name is preserved through compilation and minification.
      */
     static className = 'AppConfigurator';
-    // @todo - use zod to validate provided env config shape?
+    /**
+     * Create an application configurator with default modules and environment.
+     *
+     * Registers the `event`, `http`, and `msal` modules and pre-configures any
+     * HTTP clients declared in `env.config.endpoints`.
+     *
+     * @param env - The application environment containing manifest, config, and optional basename.
+     */
     constructor(env) {
         super([event, http, auth]);
         this.env = env;
         this._configureHttpClientsFromAppConfig();
     }
     /**
-     * Reads app config's endpoints and configure the endpoints as httpClients
+     * Read HTTP endpoint definitions from the application config and register each
+     * one as a named HTTP client.
+     *
+     * Iterates over `env.config.endpoints` and calls
+     * {@link IAppConfigurator.configureHttpClient | configureHttpClient} for each entry.
      */
     _configureHttpClientsFromAppConfig() {
         const { endpoints = {} } = this.env.config ?? {};
@@ -27,25 +60,36 @@ export class AppConfigurator extends ModulesConfigurator {
             });
         }
     }
+    /** {@inheritDoc IAppConfigurator.configureHttp} */
     configureHttp(...args) {
         this.addConfig(configureHttp(...args));
     }
+    /** {@inheritDoc IAppConfigurator.configureHttpClient} */
     configureHttpClient(...args) {
         this.addConfig(configureHttpClient(...args));
     }
     /**
-     * Configures a http client for the service `serviceName`.
-     * The serviceName is looked up in ServiceDiscovery.
-     * User can override url and scopes with session values.
-     * App can override url and scopes with app config.
+     * Register a named HTTP client whose base URI and scopes are resolved via
+     * Fusion service discovery.
+     *
+     * Resolution priority (highest wins):
+     * 1. Session overrides (user-specific URL / scopes)
+     * 2. Application config (`env.config.endpoints`)
+     * 3. Service-discovery registry
+     *
+     * If a client with the same `serviceName` is already registered (e.g. from
+     * app config) and the service has **not** been overridden at session level,
+     * a warning is logged and the existing configuration is kept.
      *
-     * Priority:
-     * 1. Session overrides
-     * 2. AppConfig
-     * 3. ServiceDiscovery
+     * @param serviceName - Registered name of the service in Fusion service discovery.
+     * @param options - Optional HTTP client overrides. `baseUri` and `defaultScopes`
+     *                  are excluded because they come from service discovery.
+     * @throws {Error} When the service cannot be resolved from service discovery.
      *
-     * @see modules/service-discovery/src/client.ts
-     * @see configureHttpClientsFromAppConfig()
+     * @example
+     * ```ts
+     * configurator.useFrameworkServiceClient('my-backend-service');
+     * ```
      */
     useFrameworkServiceClient(serviceName, 
     // eslint-disable-next-line @typescript-eslint/no-explicit-any

package/dist/esm/AppConfigurator.js.map

@@ -1 +1 @@
-{"version":3,"file":"AppConfigurator.js","sourceRoot":"","sources":["../../src/AppConfigurator.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,MAAM,wCAAwC,CAAC;AAE3D,OAAO,IAAI,EAAE,EACX,mBAAmB,EACnB,aAAa,GAEd,MAAM,uCAAuC,CAAC;AAE/C,OAAO,IAAI,MAAM,uCAAuC,CAAC;AAmDzD,MAAM,OAAO,eAKX,SAAQ,mBAA+C;IAU3B;IAP5B;;;OAGG;IACH,MAAM,CAAU,SAAS,GAAW,iBAAiB,CAAC;IAEtD,yDAAyD;IACzD,YAA4B,GAAS;QACnC,KAAK,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QADD,QAAG,GAAH,GAAG,CAAM;QAGnC,IAAI,CAAC,kCAAkC,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACO,kCAAkC;QAC1C,MAAM,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE;gBAC5B,OAAO,EAAE,GAAG;gBACZ,aAAa,EAAE,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,aAAa,CAAC,GAAG,IAAsC;QAC5D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAEM,mBAAmB,CAAC,GAAG,IAA4C;QACxE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,yBAAyB,CAC9B,WAAmB;IACnB,8DAA8D;IAC9D,OAAmE;QAEnE,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;gBAC/B,iEAAiE;gBACjE,MAAM,OAAO,GAAG,MAAM,GAAG,EAAE,gBAAgB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBACxE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,KAAK,CAAC,gCAAgC,WAAW,GAAG,CAAC,CAAC;gBAC9D,CAAC;gBAED,2EAA2E;gBAC3E,0EAA0E;gBAC1E,uCAAuC;gBACvC,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACzD,OAAO,CAAC,IAAI,CACV,GAAG,WAAW;;oCAEU,CACzB,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE;oBAClC,GAAG,OAAO;oBACV,OAAO,EAAE,OAAO,CAAC,GAAG;oBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;;AAGH,eAAe,eAAe,CAAC"}
+{"version":3,"file":"AppConfigurator.js","sourceRoot":"","sources":["../../src/AppConfigurator.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,MAAM,wCAAwC,CAAC;AAE3D,OAAO,IAAI,EAAE,EACX,mBAAmB,EACnB,aAAa,GAEd,MAAM,uCAAuC,CAAC;AAE/C,OAAO,IAAI,MAAM,uCAAuC,CAAC;AAgFzD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,eAKX,SAAQ,mBAA+C;IAiB3B;IAd5B;;;OAGG;IACH,MAAM,CAAU,SAAS,GAAW,iBAAiB,CAAC;IAEtD;;;;;;;OAOG;IACH,YAA4B,GAAS;QACnC,KAAK,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QADD,QAAG,GAAH,GAAG,CAAM;QAGnC,IAAI,CAAC,kCAAkC,EAAE,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACO,kCAAkC;QAC1C,MAAM,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE;gBAC5B,OAAO,EAAE,GAAG;gBACZ,aAAa,EAAE,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mDAAmD;IAC5C,aAAa,CAAC,GAAG,IAAsC;QAC5D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,yDAAyD;IAClD,mBAAmB,CAAC,GAAG,IAA4C;QACxE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACI,yBAAyB,CAC9B,WAAmB;IACnB,8DAA8D;IAC9D,OAAmE;QAEnE,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;gBAC/B,iEAAiE;gBACjE,MAAM,OAAO,GAAG,MAAM,GAAG,EAAE,gBAAgB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBACxE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,KAAK,CAAC,gCAAgC,WAAW,GAAG,CAAC,CAAC;gBAC9D,CAAC;gBAED,2EAA2E;gBAC3E,0EAA0E;gBAC1E,uCAAuC;gBACvC,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACzD,OAAO,CAAC,IAAI,CACV,GAAG,WAAW;;oCAEU,CACzB,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE;oBAClC,GAAG,OAAO;oBACV,OAAO,EAAE,OAAO,CAAC,GAAG;oBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;;AAGH,eAAe,eAAe,CAAC"}

package/dist/esm/configure-modules.js

@@ -1,31 +1,46 @@
 import { enableTelemetry, } from '@equinor/fusion-framework-module-telemetry';
 import { AppConfigurator } from './AppConfigurator';
 /**
+ * Create an application module initializer for a Fusion application.
  *
- * Creates a callback for initializing configuration of application modules
+ * `configureModules` is the primary entry point for setting up an application’s
+ * module pipeline. It returns an async function that, when called with the Fusion
+ * instance and the application environment, will:
+ *
+ * 1. Create an {@link AppConfigurator} with the provided environment.
+ * 2. Wire up telemetry scoped to the application.
+ * 3. Invoke the optional user-supplied configuration callback.
+ * 4. Initialize all registered modules and dispatch an `onAppModulesLoaded` event.
+ *
+ * @template TModules - Additional application-specific modules to register.
+ * @template TRef - The Fusion instance type, used as a configuration reference.
+ * @template TEnv - The application environment descriptor (manifest, config, basename).
+ *
+ * @param cb - Optional configuration callback invoked before modules are initialized.
+ *             Use this to register HTTP clients, enable bookmarks, or add custom modules.
+ * @returns An async initializer function that accepts `{ fusion, env }` and resolves
+ *          with the fully initialized application module instance.
  *
  * @example
- ```ts
-    const initialize =  configureModules((configurator, args) => {
-        configurator.configure(someModule);
-    });
-    await initialize({ fusion, { manifest, config }});
- ```
- * @template TModules Addition modules
- * @template TRef usually undefined, optional references
- * @template TEnv environment object for configuring modules
+ * ```ts
+ * import { configureModules } from '@equinor/fusion-framework-app';
  *
- * @param cb configuration callback
+ * const initialize = configureModules((configurator, { fusion, env }) => {
+ *   configurator.useFrameworkServiceClient('my-service');
+ * });
  *
- * @returns initialize function, executes configurator
+ * // Later, during app bootstrap:
+ * const modules = await initialize({ fusion, env });
+ * ```
  */
 export const configureModules = (cb) => 
 /**
+ * Async initializer that bootstraps application modules.
  *
- * Callback for initializing application modules
- *
- * @param args - Fusion and application  environments (manifest, config ...)
- * @returns initialized app modules
+ * @param args - Object containing the Fusion instance and the application environment.
+ * @param args.fusion - The active Fusion framework instance.
+ * @param args.env - The application environment with manifest, config, and basename.
+ * @returns The fully initialized application module instance.
  */
 async (args) => {
     const { fusion } = args;

package/dist/esm/configure-modules.js.map

@@ -1 +1 @@
-{"version":3,"file":"configure-modules.js","sourceRoot":"","sources":["../../src/configure-modules.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,GAEhB,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,CAKE,EAA6C,EACmC,EAAE;AACpF;;;;;;GAMG;AACH,KAAK,EAAE,IAAiC,EAAyC,EAAE;IACjF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,0BAA0B;IAC1B,MAAM,YAAY,GAAG,IAAI,eAAe,CAAkC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEpF,0EAA0E;IAC1E,MAAM,iBAAiB,GAAsB,GAAG,EAAE;QAChD,OAAO;YACL,MAAM,EAAE;gBACN,IAAI,EAAE,eAAe;gBACrB,GAAG,EAAE;oBACH,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,aAAa;oBAC/C,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,IAAI,iBAAiB;iBAChE;aACF;SACF,CAAC;IACJ,CAAC,CAAC;IAEF,8DAA8D;IAC9D,sFAAsF;IACtF,eAAe,CAAC,YAAY,EAAE;QAC5B,wBAAwB,EAAE,IAAI;QAC9B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YACrB,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;YACvC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC5C,kEAAkE;YAClE,OAAO,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC;KACF,CAAC,CAAC;IAEH,wEAAwE;IACxE,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAiC,CAAC,MAAM,YAAY,CAAC,UAAU,CAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,CAEpB,CAA4C,CAAC;IAE9C,+DAA+D;IAC/D,4FAA4F;IAC5F,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,oBAAoB,EAAE;YAChD,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;SACnF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEJ,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"configure-modules.js","sourceRoot":"","sources":["../../src/configure-modules.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,GAEhB,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,CAKE,EAA6C,EACmC,EAAE;AACpF;;;;;;;GAOG;AACH,KAAK,EAAE,IAAiC,EAAyC,EAAE;IACjF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,0BAA0B;IAC1B,MAAM,YAAY,GAAG,IAAI,eAAe,CAAkC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEpF,0EAA0E;IAC1E,MAAM,iBAAiB,GAAsB,GAAG,EAAE;QAChD,OAAO;YACL,MAAM,EAAE;gBACN,IAAI,EAAE,eAAe;gBACrB,GAAG,EAAE;oBACH,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,aAAa;oBAC/C,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,IAAI,iBAAiB;iBAChE;aACF;SACF,CAAC;IACJ,CAAC,CAAC;IAEF,8DAA8D;IAC9D,sFAAsF;IACtF,eAAe,CAAC,YAAY,EAAE;QAC5B,wBAAwB,EAAE,IAAI;QAC9B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YACrB,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;YACvC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC5C,kEAAkE;YAClE,OAAO,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC;KACF,CAAC,CAAC;IAEH,wEAAwE;IACxE,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAiC,CAAC,MAAM,YAAY,CAAC,UAAU,CAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,CAEpB,CAA4C,CAAC;IAE9C,+DAA+D;IAC/D,4FAA4F;IAC5F,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,oBAAoB,EAAE;YAChD,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;SACnF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEJ,eAAe,gBAAgB,CAAC"}

package/dist/esm/enable-bookmark.js

@@ -1,12 +1,32 @@
 /**
- * When enabling bookmarks for applications, we will for now only provide the portals bookmark provider.
+ * Enable the bookmark module for a Fusion application.
  *
- * This function will add the portals bookmark provider to the applications modules.
- * When adding a payload generator to the bookmark provider, we will intercept the teardown function and add it to a cleanup set.
+ * Adds bookmark support by wiring the portal’s bookmark provider into the
+ * application’s module set. Payload generators registered by the application
+ * are automatically cleaned up when the module is disposed, preventing memory
+ * leaks across application load/unload cycles.
+ *
+ * Import this function from `@equinor/fusion-framework-app/enable-bookmark` or, for
+ * React apps, from `@equinor/fusion-framework-react-app/bookmark`.
  *
  * @remarks
- * The cleanup function will be called when the module is disposed.
- * There are no guarantees that the dispose function will be called, incase of weird behavior.
+ * - The portal must expose a bookmark provider on `ref.bookmark`; if it is
+ *   missing, an error is logged and the module initializes as a no-op.
+ * - The `@equinor/fusion-framework-module-bookmark` package must be installed,
+ *   but do **not** call its `enableBookmark` directly in app code — use this
+ *   app-level enabler instead.
+ *
+ * @param config - The application configurator to register the bookmark module on.
+ *
+ * @example
+ * ```ts
+ * import { configureModules } from '@equinor/fusion-framework-app';
+ * import { enableBookmark } from '@equinor/fusion-framework-app/enable-bookmark';
+ *
+ * const initialize = configureModules((configurator) => {
+ *   enableBookmark(configurator);
+ * });
+ * ```
  */
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 export const enableBookmark = (config) => {

package/dist/esm/enable-bookmark.js.map

@@ -1 +1 @@
-{"version":3,"file":"enable-bookmark.js","sourceRoot":"","sources":["../../src/enable-bookmark.ts"],"names":[],"mappings":"AAMA;;;;;;;;;GASG;AACH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAwB,EAAQ,EAAE;IAC/D,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAgB,CAAC;IACjD,MAAM,CAAC,SAAS,CAAC;QACf,MAAM,EAAE;YACN,IAAI,EAAE,UAAU;YAChB,UAAU,CAAC,IAAI;gBACb,kDAAkD;gBAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;gBACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;oBAC7C,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,6DAA6D;gBAC7D,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE;oBACzB,GAAG,CAAC,MAAM,EAAE,IAAI;wBACd,QAAQ,IAAI,EAAE,CAAC;4BACb,KAAK,qBAAqB;gCACxB,OAAO,CAAC,SAAmC,EAAE,EAAE;oCAC7C,kEAAkE;oCAClE,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;oCAC7D,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;oCACrC,qEAAqE;oCACrE,OAAO,GAAG,EAAE;wCACV,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;wCACxC,cAAc,EAAE,CAAC;oCACnB,CAAC,CAAC;gCACJ,CAAC,CAAC;wBACN,CAAC;wBACD;;;;;2BAKG;wBACH,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;4BACnB,yDAAyD;4BACzD,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gCACvC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;4BACnC,CAAC;4BACD,sBAAsB;4BACtB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;wBACtB,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;oBACxC,QAAQ,EAAE,CAAC;gBACb,CAAC;gBACD,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC3B,CAAC;SACuB;KAC3B,CAAC,CAAC;AACL,CAAC,CAAC"}
+{"version":3,"file":"enable-bookmark.js","sourceRoot":"","sources":["../../src/enable-bookmark.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAwB,EAAQ,EAAE;IAC/D,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAgB,CAAC;IACjD,MAAM,CAAC,SAAS,CAAC;QACf,MAAM,EAAE;YACN,IAAI,EAAE,UAAU;YAChB,UAAU,CAAC,IAAI;gBACb,kDAAkD;gBAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;gBACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;oBAC7C,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,6DAA6D;gBAC7D,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE;oBACzB,GAAG,CAAC,MAAM,EAAE,IAAI;wBACd,QAAQ,IAAI,EAAE,CAAC;4BACb,KAAK,qBAAqB;gCACxB,OAAO,CAAC,SAAmC,EAAE,EAAE;oCAC7C,kEAAkE;oCAClE,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;oCAC7D,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;oCACrC,qEAAqE;oCACrE,OAAO,GAAG,EAAE;wCACV,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;wCACxC,cAAc,EAAE,CAAC;oCACnB,CAAC,CAAC;gCACJ,CAAC,CAAC;wBACN,CAAC;wBACD;;;;;2BAKG;wBACH,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;4BACnB,yDAAyD;4BACzD,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gCACvC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;4BACnC,CAAC;4BACD,sBAAsB;4BACtB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;wBACtB,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;oBACxC,QAAQ,EAAE,CAAC;gBACb,CAAC;gBACD,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC3B,CAAC;SACuB;KAC3B,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/esm/index.js

@@ -1,6 +1,25 @@
+/**
+ * @packageDocumentation
+ *
+ * `@equinor/fusion-framework-app` provides the configuration and initialization
+ * layer for Fusion applications. Use this package to set up application modules,
+ * configure HTTP clients, enable bookmarks, and integrate with telemetry and
+ * service discovery.
+ *
+ * The main entry points are:
+ *
+ * - {@link configureModules} — factory that creates an application initializer
+ * - {@link AppConfigurator} / {@link IAppConfigurator} — configurator for registering modules and HTTP clients
+ * - Type aliases such as {@link AppModuleInitiator}, {@link AppEnv}, and {@link AppRenderFn}
+ *
+ * Bookmark support is available via the `@equinor/fusion-framework-app/enable-bookmark`
+ * sub-path export.
+ */
 export { AppConfigurator } from './AppConfigurator';
 export * from './types';
 export { configureModules, default } from './configure-modules';
-// TODO remove
+/**
+ * @deprecated Use {@link configureModules} instead. This alias will be removed in a future major version.
+ */
 export { configureModules as initAppModules } from './configure-modules';
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAoB,MAAM,mBAAmB,CAAC;AAEtE,cAAc,SAAS,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEhE,cAAc;AACd,OAAO,EAAE,gBAAgB,IAAI,cAAc,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,eAAe,EAAoB,MAAM,mBAAmB,CAAC;AAEtE,cAAc,SAAS,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEhE;;GAEG;AACH,OAAO,EAAE,gBAAgB,IAAI,cAAc,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/esm/version.js

@@ -1,3 +1,3 @@
 // Generated by genversion.
-export const version = '10.4.9';
+export const version = '11.0.0';
 //# sourceMappingURL=version.js.map