@frontfriend/sdk 1.2.3 → 1.2.4

package/README.md

@@ -326,6 +326,10 @@ npx frontfriend init --tag <tag-name-or-id>
 
 `--version` takes a Release ID, not an SDK version. A Studio refusal, such as a missing login or no access to the Design System, stops initialization.
 
+After the tokens, an online `init` registers the App named in `frontfriend.config.js` on its tag (`--tag`, then `tag`) with its `framework` and `primitive`, so `update` and the design reads find it. When Studio refuses the registration, `init` stops with the reason; the installed tokens stay. During an outage it keeps the tokens and asks you to run `init` again. When the App adopts contracts and `frontfriend.lock.json` pins a design snapshot, `init` also writes that snapshot's contracts to `.frontfriend/design/` and, when they are missing or belong to another snapshot, its rules to `.frontfriend/rules/`: the same files `update` writes.
+
+`frontfriend.lock.json` lists its contract pins by slug, then kind, and its `adoptionDigest` does not depend on the order of the pins. A lock written by an earlier SDK in another order is still valid; `update` keeps its bytes until the adoption itself changes.
+
 Every online `init` keeps a verified copy of the selected tokens in `.frontfriend/artifacts`. When Studio is unreachable (network failure, timeout or server error), a signed-in `init` restores that copy. A first install during an outage has no copy to restore.
 
 ### Offline tokens
@@ -340,7 +344,7 @@ npx frontfriend init --offline
 
 The default API uses the production token CDN automatically. For a custom API, set `token-cdn-url`, `FF_TOKEN_CDN_URL`, or `--token-cdn-url`. Set `token-cdn-url: false` to disable CDN delivery.
 
-Downloads validate artifact identity and integrity. Access refusals and invalid data stop initialization. Token delivery does not update component files, register the application, or publish changes. Run `connect` or `design sync` online for those operations. External fonts and images have their own availability.
+Downloads validate artifact identity and integrity. Access refusals and invalid data stop initialization. Token delivery does not update component files or publish changes; `init --offline` also does not register the application or write contracts. Run `init`, `connect` or `design sync` online for those operations. External fonts and images have their own availability.
 
 ## CI authentication
 

package/dist/application-adoption-lock.d.ts

@@ -3,6 +3,7 @@ import type {
   AdoptionComponent,
   AdoptionDigestLock,
   ApplicationLock,
+  DesignAdoption,
 } from "./application-adoption";
 
 export type {
@@ -26,6 +27,18 @@ export type ParsedApplicationLock =
 
 export function sortedObject<T>(value: Record<string, T>): Record<string, T>;
 export function adoptionDigest(lock: AdoptionDigestLock): string;
+export function hasValidAdoptionDigest(lock: AdoptionDigestLock): boolean;
+export function sameAdoption(
+  left: AdoptionDigestLock,
+  right: AdoptionDigestLock,
+): boolean;
+export function sortContractPins<T extends { slug: string; kind: string }>(
+  pins: T[],
+): T[];
+export function canonicalDesignAdoption<T extends DesignAdoption>(design: T): T;
+export function canonicalApplicationLock<T extends AdoptionDigestLock>(
+  lock: T,
+): T;
 export function normalizeLock(value: unknown): ParsedApplicationLock;
 export function parseApplicationLock(content: unknown): ParsedApplicationLock;
 export function serializeApplicationLock(lock: unknown): string;