@gooddata/sdk-pluggable-application-model 11.41.0-alpha.5 → 11.42.0-alpha.0

package/esm/__version.js

@@ -1,7 +1,7 @@
 // (C) 2026 GoodData Corporation
 // DO NOT CHANGE THIS FILE, IT IS RE-GENERATED ON EVERY BUILD
 /** @alpha */
-export const LIB_VERSION = "11.41.0-alpha.5";
+export const LIB_VERSION = "11.42.0-alpha.0";
 /** @alpha */
 export const LIB_DESCRIPTION = "GoodData SDK model contracts for pluggable applications";
 /** @alpha */

package/esm/hostUi.d.ts

@@ -127,8 +127,8 @@ export interface IHostUiMountHandle {
      * Pushes the active application's page-title segment into the host UI.
      *
      * @remarks
-     * Called by the host whenever the active pluggable application sets a page title via its
-     * `onDocumentTitleChange` callback. The host UI composes the browser tab title as
+     * Called by the host whenever the active pluggable application sets a page title by emitting a
+     * document-title-changed event. The host UI composes the browser tab title as
      * `"{pageTitle} - {brand}"`. When called with `undefined`, the host UI falls back to the
      * active application's manifest title.
      */

package/esm/index.d.ts

@@ -7,6 +7,6 @@ export { DefaultApplicationId } from "./defaultPlatformApplications.js";
 export { LIB_VERSION, LIB_DESCRIPTION, LIB_NAME } from "./__version.js";
 export { type EmbeddingMode, type IApiTokenAuthCredentials, type IAuthCredentials, type IContextDeferredAuthCredentials, type IEffectiveSettings, type IJwtAuthCredentials, type IOrganization, type IOrganizationPermissions, type IPlatformContext, type IPlatformContextV1, type IPluggableApplicationNavigation, PantherTier, isPlatformContextV1, isWorkspaceScopedSettings, } from "./platformContext.js";
 export { type ILocale } from "@gooddata/sdk-model";
-export { type IAppHeaderOptions, type IAppInstance, type KnownPluggableAppEventTypeName, type IPluggableApp, type IPluggableApplicationMountHandle, type IPluggableApplicationMountOptions, type IPluggableAppEvent, type IPluggableAppTelemetryCallbacks, type IReloadPlatformContextRequestedEvent, type ITelemetryEventOptions, isReloadPlatformContextRequestedEvent, type PluggableApplicationMount, PluggableAppEventType, type PluggableAppEventTypeName, reloadPlatformContextRequested, type TelemetryChannel, } from "./mount.js";
+export { type IAppHeaderOptions, type IAppInstance, type KnownPluggableAppEventTypeName, type IDocumentTitleChangedEvent, type IPluggableApp, type IPluggableApplicationMountHandle, type IPluggableApplicationMountOptions, type IPluggableAppEvent, type IPluggableAppTelemetryCallbacks, type IReloadPlatformContextRequestedEvent, type ITelemetryEventOptions, documentTitleChanged, isDocumentTitleChangedEvent, isReloadPlatformContextRequestedEvent, type PluggableApplicationMount, PluggableAppEventType, type PluggableAppEventTypeName, reloadPlatformContextRequested, type TelemetryChannel, } from "./mount.js";
 export { type IHostUiModule, type IHostUiMountHandle, type IHostUiMountOptions, type IHostUiNotification, type INewDeploymentAvailableHostUiNotification, type HostUiMount, } from "./hostUi.js";
 //# sourceMappingURL=index.d.ts.map

package/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EACH,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,+BAA+B,EACpC,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,+BAA+B,EACpC,WAAW,EACX,mBAAmB,EACnB,yBAAyB,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EACH,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,8BAA8B,EACnC,KAAK,aAAa,EAClB,KAAK,gCAAgC,EACrC,KAAK,iCAAiC,EACtC,KAAK,kBAAkB,EACvB,KAAK,+BAA+B,EACpC,KAAK,oCAAoC,EACzC,KAAK,sBAAsB,EAC3B,qCAAqC,EACrC,KAAK,yBAAyB,EAC9B,qBAAqB,EACrB,KAAK,yBAAyB,EAC9B,8BAA8B,EAC9B,KAAK,gBAAgB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACH,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,yCAAyC,EAC9C,KAAK,WAAW,GACnB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EACH,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,+BAA+B,EACpC,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,+BAA+B,EACpC,WAAW,EACX,mBAAmB,EACnB,yBAAyB,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EACH,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,8BAA8B,EACnC,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,gCAAgC,EACrC,KAAK,iCAAiC,EACtC,KAAK,kBAAkB,EACvB,KAAK,+BAA+B,EACpC,KAAK,oCAAoC,EACzC,KAAK,sBAAsB,EAC3B,oBAAoB,EACpB,2BAA2B,EAC3B,qCAAqC,EACrC,KAAK,yBAAyB,EAC9B,qBAAqB,EACrB,KAAK,yBAAyB,EAC9B,8BAA8B,EAC9B,KAAK,gBAAgB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACH,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,yCAAyC,EAC9C,KAAK,WAAW,GACnB,MAAM,aAAa,CAAC"}

package/esm/index.js

@@ -8,4 +8,4 @@
 export { DefaultApplicationId } from "./defaultPlatformApplications.js";
 export { LIB_VERSION, LIB_DESCRIPTION, LIB_NAME } from "./__version.js";
 export { PantherTier, isPlatformContextV1, isWorkspaceScopedSettings, } from "./platformContext.js";
-export { isReloadPlatformContextRequestedEvent, PluggableAppEventType, reloadPlatformContextRequested, } from "./mount.js";
+export { documentTitleChanged, isDocumentTitleChangedEvent, isReloadPlatformContextRequestedEvent, PluggableAppEventType, reloadPlatformContextRequested, } from "./mount.js";

package/esm/mount.d.ts

@@ -6,6 +6,7 @@ import { type IPlatformContext } from "./platformContext.js";
  */
 export declare const PluggableAppEventType: {
     readonly RELOAD_PLATFORM_CONTEXT_REQUESTED: "GDC.PLUGGABLE_APP/EVT.RELOAD_PLATFORM_CONTEXT.REQUESTED";
+    readonly DOCUMENT_TITLE_CHANGED: "GDC.PLUGGABLE_APP/EVT.DOCUMENT_TITLE.CHANGED";
 };
 /**
  * Union of known pluggable application event type names.
@@ -58,6 +59,38 @@ export declare function reloadPlatformContextRequested(): IReloadPlatformContext
  * @alpha
  */
 export declare function isReloadPlatformContextRequestedEvent(obj: unknown): obj is IReloadPlatformContextRequestedEvent;
+/**
+ * Event setting the page-title segment of the browser tab title on the host.
+ *
+ * @remarks
+ * The host owns `document.title` and composes it as `"{pageTitle} - {brand}"`. A `pageTitle` of
+ * `undefined` tells the host to fall back to the application's manifest title.
+ *
+ * @alpha
+ */
+export interface IDocumentTitleChangedEvent extends IPluggableAppEvent {
+    readonly type: "GDC.PLUGGABLE_APP/EVT.DOCUMENT_TITLE.CHANGED";
+    readonly payload: {
+        readonly pageTitle: string | undefined;
+    };
+}
+/**
+ * Creates an {@link IDocumentTitleChangedEvent}.
+ *
+ * @alpha
+ */
+export declare function documentTitleChanged(pageTitle: string | undefined): IDocumentTitleChangedEvent;
+/**
+ * Type guard for {@link IDocumentTitleChangedEvent}.
+ *
+ * @remarks
+ * Validates the payload shape too (not just the type), so a malformed event — e.g. one emitted
+ * from JS or a mismatched remote module without the expected `payload` — is rejected rather than
+ * narrowed to a type whose later `payload.pageTitle` access would throw.
+ *
+ * @alpha
+ */
+export declare function isDocumentTitleChangedEvent(obj: unknown): obj is IDocumentTitleChangedEvent;
 /**
  * Telemetry channel determines which analytics pipeline receives the event.
  *
@@ -193,15 +226,6 @@ export interface IPluggableApplicationMountOptions {
      * The host falls back to its own defaults for any fields not present.
      */
     onHeaderChange?: (header: IAppHeaderOptions) => void;
-    /**
-     * Callback invoked by the pluggable application to set the page-title segment of the browser
-     * tab title. The host owns `document.title` and composes it as `"{pageTitle} - {brand}"`.
-     *
-     * @remarks
-     * Call this at mount time and again whenever the page title changes (e.g. after navigating to
-     * a different dashboard). Pass `undefined` to fall back to the application's manifest title.
-     */
-    onDocumentTitleChange?: (pageTitle: string | undefined) => void;
 }
 /**
  * Handle returned from mount for lifecycle management and host -\> module interaction.
@@ -242,5 +266,30 @@ export interface IAppInstance extends IPluggableApplicationMountHandle {
  */
 export interface IPluggableApp {
     mount: PluggableApplicationMount;
+    /**
+     * Organization IDs allowed to load this app.
+     *
+     * @remarks
+     * The host enforces this check only for apps loaded from a secured remote origin
+     * (e.g. the shared demo plugins bucket). When enforced, the current organization's
+     * id must appear in this list or the host refuses to mount the app. Apps loaded
+     * from any other origin (same-hostname remotes, local modules) are not subject
+     * to this check.
+     *
+     * @alpha
+     */
+    allowedOrganizations?: string[];
+    /**
+     * Unix milliseconds timestamp captured at build time.
+     *
+     * @remarks
+     * The host enforces this check only for apps loaded from a secured remote origin
+     * (e.g. the shared demo plugins bucket). When enforced, builds older than the host's
+     * freshness window are rejected. Apps loaded from any other origin are not subject
+     * to this check.
+     *
+     * @alpha
+     */
+    buildTimestamp?: number;
 }
 //# sourceMappingURL=mount.d.ts.map

package/esm/mount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../src/mount.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;CAExB,CAAC;AAEX;;;;GAIG;AACH,MAAM,MAAM,8BAA8B,GACtC,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC;AAEvE;;;;;;;;;GASG;AACH,MAAM,MAAM,yBAAyB,GAAG,8BAA8B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEvF;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,oCAAqC,SAAQ,kBAAkB;IAC5E,QAAQ,CAAC,IAAI,EAAE,yDAAyD,CAAC;CAC5E;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,IAAI,oCAAoC,CAErF;AAED;;;;GAIG;AACH,wBAAgB,qCAAqC,CACjD,GAAG,EAAE,OAAO,GACb,GAAG,IAAI,oCAAoC,CAO7C;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,IAAI,CAAC;AAEjD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;OAIG;IACH,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,+BAA+B;IAC5C;;;;;;OAMG;IACH,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC1G,0DAA0D;IAC1D,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,iEAAiE;IACjE,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3E;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAC9B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACN;AAED;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAC9C;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,SAAS,EAAE,WAAW,CAAC;IAEvB;;OAEG;IACH,GAAG,EAAE,gBAAgB,CAAC;IAEtB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAE1C;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;IAEnD;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAErD;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;CACnE;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC7C;;OAEG;IACH,OAAO,IAAI,IAAI,CAAC;IAEhB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACnD;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACpC,OAAO,EAAE,iCAAiC,KACzC,gCAAgC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,gCAAgC;IAClE,EAAE,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,yBAAyB,CAAC;CACpC"}
+{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../src/mount.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;CAGxB,CAAC;AAEX;;;;GAIG;AACH,MAAM,MAAM,8BAA8B,GACtC,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC;AAEvE;;;;;;;;;GASG;AACH,MAAM,MAAM,yBAAyB,GAAG,8BAA8B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEvF;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,oCAAqC,SAAQ,kBAAkB;IAC5E,QAAQ,CAAC,IAAI,EAAE,yDAAyD,CAAC;CAC5E;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,IAAI,oCAAoC,CAErF;AAED;;;;GAIG;AACH,wBAAgB,qCAAqC,CACjD,GAAG,EAAE,OAAO,GACb,GAAG,IAAI,oCAAoC,CAO7C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IAClE,QAAQ,CAAC,IAAI,EAAE,8CAA8C,CAAC;IAC9D,QAAQ,CAAC,OAAO,EAAE;QACd,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;KAC1C,CAAC;CACL;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,0BAA0B,CAE9F;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,0BAA0B,CAc3F;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,IAAI,CAAC;AAEjD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;OAIG;IACH,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,+BAA+B;IAC5C;;;;;;OAMG;IACH,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC1G,0DAA0D;IAC1D,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,iEAAiE;IACjE,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3E;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAC9B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACN;AAED;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAC9C;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,SAAS,EAAE,WAAW,CAAC;IAEvB;;OAEG;IACH,GAAG,EAAE,gBAAgB,CAAC;IAEtB;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAE1C;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;IAEnD;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;CACxD;AAED;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC7C;;OAEG;IACH,OAAO,IAAI,IAAI,CAAC;IAEhB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACnD;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACpC,OAAO,EAAE,iCAAiC,KACzC,gCAAgC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,gCAAgC;IAClE,EAAE,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,yBAAyB,CAAC;IAEjC;;;;;;;;;;;OAWG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B"}

package/esm/mount.js

@@ -6,6 +6,7 @@
  */
 export const PluggableAppEventType = {
     RELOAD_PLATFORM_CONTEXT_REQUESTED: "GDC.PLUGGABLE_APP/EVT.RELOAD_PLATFORM_CONTEXT.REQUESTED",
+    DOCUMENT_TITLE_CHANGED: "GDC.PLUGGABLE_APP/EVT.DOCUMENT_TITLE.CHANGED",
 };
 /**
  * Creates an {@link IReloadPlatformContextRequestedEvent}.
@@ -26,3 +27,34 @@ export function isReloadPlatformContextRequestedEvent(obj) {
         "type" in obj &&
         obj.type === "GDC.PLUGGABLE_APP/EVT.RELOAD_PLATFORM_CONTEXT.REQUESTED");
 }
+/**
+ * Creates an {@link IDocumentTitleChangedEvent}.
+ *
+ * @alpha
+ */
+export function documentTitleChanged(pageTitle) {
+    return { type: "GDC.PLUGGABLE_APP/EVT.DOCUMENT_TITLE.CHANGED", payload: { pageTitle } };
+}
+/**
+ * Type guard for {@link IDocumentTitleChangedEvent}.
+ *
+ * @remarks
+ * Validates the payload shape too (not just the type), so a malformed event — e.g. one emitted
+ * from JS or a mismatched remote module without the expected `payload` — is rejected rather than
+ * narrowed to a type whose later `payload.pageTitle` access would throw.
+ *
+ * @alpha
+ */
+export function isDocumentTitleChangedEvent(obj) {
+    if (typeof obj !== "object" ||
+        obj === null ||
+        obj.type !== "GDC.PLUGGABLE_APP/EVT.DOCUMENT_TITLE.CHANGED") {
+        return false;
+    }
+    const payload = obj.payload;
+    if (typeof payload !== "object" || payload === null) {
+        return false;
+    }
+    const pageTitle = payload.pageTitle;
+    return typeof pageTitle === "string" || pageTitle === undefined;
+}

package/esm/sdk-pluggable-application-model.d.ts

@@ -35,6 +35,13 @@ export declare const DefaultApplicationId: {
     WORKSPACE_CATALOG: string;
 };
 
+/**
+ * Creates an {@link IDocumentTitleChangedEvent}.
+ *
+ * @alpha
+ */
+export declare function documentTitleChanged(pageTitle: string | undefined): IDocumentTitleChangedEvent;
+
 /**
  * Plˍuggable application embedding mode.
  *
@@ -137,6 +144,22 @@ export declare interface IContextDeferredAuthCredentials {
     externalProviderId?: string;
 }
 
+/**
+ * Event setting the page-title segment of the browser tab title on the host.
+ *
+ * @remarks
+ * The host owns `document.title` and composes it as `"{pageTitle} - {brand}"`. A `pageTitle` of
+ * `undefined` tells the host to fall back to the application's manifest title.
+ *
+ * @alpha
+ */
+export declare interface IDocumentTitleChangedEvent extends IPluggableAppEvent {
+    readonly type: "GDC.PLUGGABLE_APP/EVT.DOCUMENT_TITLE.CHANGED";
+    readonly payload: {
+        readonly pageTitle: string | undefined;
+    };
+}
+
 /**
  * Effective settings for the active application scope.
  *
@@ -216,8 +239,8 @@ export declare interface IHostUiMountHandle {
      * Pushes the active application's page-title segment into the host UI.
      *
      * @remarks
-     * Called by the host whenever the active pluggable application sets a page title via its
-     * `onDocumentTitleChange` callback. The host UI composes the browser tab title as
+     * Called by the host whenever the active pluggable application sets a page title by emitting a
+     * document-title-changed event. The host UI composes the browser tab title as
      * `"{pageTitle} - {brand}"`. When called with `undefined`, the host UI falls back to the
      * active application's manifest title.
      */
@@ -442,6 +465,31 @@ export declare interface IPlatformContextV1 {
  */
 export declare interface IPluggableApp {
     mount: PluggableApplicationMount;
+    /**
+     * Organization IDs allowed to load this app.
+     *
+     * @remarks
+     * The host enforces this check only for apps loaded from a secured remote origin
+     * (e.g. the shared demo plugins bucket). When enforced, the current organization's
+     * id must appear in this list or the host refuses to mount the app. Apps loaded
+     * from any other origin (same-hostname remotes, local modules) are not subject
+     * to this check.
+     *
+     * @alpha
+     */
+    allowedOrganizations?: string[];
+    /**
+     * Unix milliseconds timestamp captured at build time.
+     *
+     * @remarks
+     * The host enforces this check only for apps loaded from a secured remote origin
+     * (e.g. the shared demo plugins bucket). When enforced, builds older than the host's
+     * freshness window are rejected. Apps loaded from any other origin are not subject
+     * to this check.
+     *
+     * @alpha
+     */
+    buildTimestamp?: number;
 }
 
 /**
@@ -534,15 +582,6 @@ export declare interface IPluggableApplicationMountOptions {
      * The host falls back to its own defaults for any fields not present.
      */
     onHeaderChange?: (header: IAppHeaderOptions) => void;
-    /**
-     * Callback invoked by the pluggable application to set the page-title segment of the browser
-     * tab title. The host owns `document.title` and composes it as `"{pageTitle} - {brand}"`.
-     *
-     * @remarks
-     * Call this at mount time and again whenever the page title changes (e.g. after navigating to
-     * a different dashboard). Pass `undefined` to fall back to the application's manifest title.
-     */
-    onDocumentTitleChange?: (pageTitle: string | undefined) => void;
 }
 
 /**
@@ -589,6 +628,18 @@ export declare interface IReloadPlatformContextRequestedEvent extends IPluggable
     readonly type: "GDC.PLUGGABLE_APP/EVT.RELOAD_PLATFORM_CONTEXT.REQUESTED";
 }
 
+/**
+ * Type guard for {@link IDocumentTitleChangedEvent}.
+ *
+ * @remarks
+ * Validates the payload shape too (not just the type), so a malformed event — e.g. one emitted
+ * from JS or a mismatched remote module without the expected `payload` — is rejected rather than
+ * narrowed to a type whose later `payload.pageTitle` access would throw.
+ *
+ * @alpha
+ */
+export declare function isDocumentTitleChangedEvent(obj: unknown): obj is IDocumentTitleChangedEvent;
+
 /**
  * Type guard for {@link IPlatformContextV1}.
  *
@@ -660,6 +711,7 @@ export declare enum PantherTier {
  */
 export declare const PluggableAppEventType: {
     readonly RELOAD_PLATFORM_CONTEXT_REQUESTED: "GDC.PLUGGABLE_APP/EVT.RELOAD_PLATFORM_CONTEXT.REQUESTED";
+    readonly DOCUMENT_TITLE_CHANGED: "GDC.PLUGGABLE_APP/EVT.DOCUMENT_TITLE.CHANGED";
 };
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gooddata/sdk-pluggable-application-model",
-  "version": "11.41.0-alpha.5",
+  "version": "11.42.0-alpha.0",
   "description": "GoodData SDK model contracts for pluggable applications",
   "license": "MIT",
   "author": "GoodData Corporation",
@@ -23,7 +23,7 @@
   "dependencies": {
     "ts-invariant": "0.10.3",
     "tslib": "2.8.1",
-    "@gooddata/sdk-model": "11.41.0-alpha.5"
+    "@gooddata/sdk-model": "11.42.0-alpha.0"
   },
   "devDependencies": {
     "@microsoft/api-documenter": "^7.17.0",
@@ -47,8 +47,8 @@
     "oxlint-tsgolint": "0.15.0",
     "typescript": "5.9.3",
     "vitest": "4.1.8",
-    "@gooddata/oxlint-config": "11.41.0-alpha.5",
-    "@gooddata/eslint-config": "11.41.0-alpha.5"
+    "@gooddata/eslint-config": "11.42.0-alpha.0",
+    "@gooddata/oxlint-config": "11.42.0-alpha.0"
   },
   "scripts": {
     "_phase:build": "npm run build",