@gooddata/sdk-ui-pluggable-host 11.41.0-alpha.4 → 11.41.0

package/esm/components/FullScreenLoader.d.ts

@@ -1 +1,2 @@
 export declare function FullScreenLoader(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=FullScreenLoader.d.ts.map

package/esm/components/FullScreenLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FullScreenLoader.d.ts","sourceRoot":"","sources":["../../src/components/FullScreenLoader.tsx"],"names":[],"mappings":"AAOA,wBAAgB,gBAAgB,4CAM/B"}

package/esm/components/HostUiContainer.d.ts

@@ -14,3 +14,4 @@ export interface IHostUiContainerProps {
  * updates (context, apps, pathname) via the host mount handle.
  */
 export declare function HostUiContainer({ ctx, apps, pathname, routerNavigate }: IHostUiContainerProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=HostUiContainer.d.ts.map

package/esm/components/HostUiContainer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HostUiContainer.d.ts","sourceRoot":"","sources":["../../src/components/HostUiContainer.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,OAAO,EAAE,KAAK,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAEH,KAAK,gBAAgB,EAExB,MAAM,2CAA2C,CAAC;AAWnD,OAAO,wBAAwB,CAAC;AAEhC,MAAM,WAAW,qBAAqB;IAClC,GAAG,EAAE,gBAAgB,CAAC;IACtB,IAAI,EAAE,gCAAgC,EAAE,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,gBAAgB,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,qBAAqB,2CAsL7F"}

package/esm/components/HostUiContainer.js

@@ -24,12 +24,18 @@ export function HostUiContainer({ ctx, apps, pathname, routerNavigate }) {
     const [hostReady, setHostReady] = useState(false);
     const latestMountStateRef = useAutoupdateRef({ ctx, apps, pathname });
     const [headerOptions, setHeaderOptions] = useState(undefined);
+    const [pageTitle, setPageTitle] = useState(undefined);
     const activeAppRef = useAutoupdateRef(activeInternalApplication);
     const onHeaderChange = useCallback((appId, header) => {
         if (activeAppRef.current?.id === appId) {
             setHeaderOptions(header);
         }
     }, [activeAppRef]);
+    const onDocumentTitleChange = useCallback((appId, title) => {
+        if (activeAppRef.current?.id === appId) {
+            setPageTitle(title);
+        }
+    }, [activeAppRef]);
     // Stable navigation callbacks that always use the latest router navigate
     const navigateRef = useAutoupdateRef(routerNavigate);
     const navigate = useCallback((url) => {
@@ -110,6 +116,13 @@ export function HostUiContainer({ ctx, apps, pathname, routerNavigate }) {
         }
         handleRef.current?.updateHeader?.(headerOptions);
     }, [hostReady, headerOptions]);
+    // Push the active application's page title to the host UI whenever it changes
+    useEffect(() => {
+        if (!hostReady) {
+            return;
+        }
+        handleRef.current?.updateDocumentTitle?.(pageTitle);
+    }, [hostReady, pageTitle]);
     // Track app navigation and page views when the active application changes.
     // Also clear header options on app switch so stale customizations don't leak.
     const prevAppIdRef = useRef(undefined);
@@ -123,6 +136,7 @@ export function HostUiContainer({ ctx, apps, pathname, routerNavigate }) {
             }
             prevAppIdRef.current = activeId;
             setHeaderOptions(undefined);
+            setPageTitle(undefined);
         }
     }, [activeInternalApplication, pathname]);
     // Render the active pluggable application into the host UI's app container
@@ -131,11 +145,11 @@ export function HostUiContainer({ ctx, apps, pathname, routerNavigate }) {
             return;
         }
         if (activeInternalApplication) {
-            appRootRef.current.render(_jsx(HostIntlProvider, { locale: resolveLocale(ctx.preferredLocale), children: _jsx(PluggableApplicationRenderer, { app: activeInternalApplication, ctx: ctx, pathname: pathname, onHeaderChange: onHeaderChange }, activeInternalApplication.id) }));
+            appRootRef.current.render(_jsx(HostIntlProvider, { locale: resolveLocale(ctx.preferredLocale), children: _jsx(PluggableApplicationRenderer, { app: activeInternalApplication, ctx: ctx, pathname: pathname, onHeaderChange: onHeaderChange, onDocumentTitleChange: onDocumentTitleChange }, activeInternalApplication.id) }));
         }
         else {
             appRootRef.current.render(null);
         }
-    }, [hostReady, activeInternalApplication, ctx, onHeaderChange, pathname]);
+    }, [hostReady, activeInternalApplication, ctx, onHeaderChange, onDocumentTitleChange, pathname]);
     return _jsx("div", { ref: containerRef, className: "gd-host-ui-container" });
 }

package/esm/components/Root.d.ts

@@ -14,3 +14,4 @@ export interface IRootCallbacks {
 export declare function Root({ callbacks }: {
     callbacks?: IRootCallbacks;
 }): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=Root.d.ts.map

package/esm/components/Root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Root.d.ts","sourceRoot":"","sources":["../../src/components/Root.tsx"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAYlF,OAAO,sBAAsB,CAAC;AAE9B,OAAO,aAAa,CAAC;AAIrB;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtD;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE;IAAE,SAAS,CAAC,EAAE,cAAc,CAAA;CAAE,2CAqBjE"}

package/esm/components/lib/translations.d.ts

@@ -5,3 +5,4 @@ export declare const DEFAULT_MESSAGES: Record<string, ITranslations>;
  * Memoized to cache promises and prevent duplicate async imports.
  */
 export declare const resolveMessages: (locale: string) => Promise<ITranslations>;
+//# sourceMappingURL=translations.d.ts.map

package/esm/components/lib/translations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"translations.d.ts","sourceRoot":"","sources":["../../../src/components/lib/translations.ts"],"names":[],"mappings":"AAIA,OAAO,EAIH,KAAK,aAAa,EAGrB,MAAM,kBAAkB,CAAC;AAuC1B,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAK1D,CAAC;AAyBF;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAoC,CAAC"}

package/esm/components/useRedirectNavigation.d.ts

@@ -5,3 +5,4 @@ import { type RedirectTargetState } from "./useRedirectTarget.js";
  * Deduplicates consecutive redirects to the same URL by tracking the last navigated path.
  */
 export declare function useRedirectNavigation(redirect: RedirectTargetState, navigate: NavigateFunction): void;
+//# sourceMappingURL=useRedirectNavigation.d.ts.map

package/esm/components/useRedirectNavigation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRedirectNavigation.d.ts","sourceRoot":"","sources":["../../src/components/useRedirectNavigation.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIrD,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAElE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAgBrG"}

package/esm/components/useRedirectTarget.d.ts

@@ -17,3 +17,4 @@ export type RedirectTargetState = {
  * Resolves the redirect target for the current URL and permission context.
  */
 export declare function useRedirectTarget(apps: PluggableApplicationRegistryItem[], ctx: IPlatformContext, pathname: string): RedirectTargetState;
+//# sourceMappingURL=useRedirectTarget.d.ts.map

package/esm/components/useRedirectTarget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRedirectTarget.d.ts","sourceRoot":"","sources":["../../src/components/useRedirectTarget.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAMlF,MAAM,MAAM,mBAAmB,GACzB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;GAEG;AACH,wBAAgB,iBAAiB,CAC7B,IAAI,EAAE,gCAAgC,EAAE,EACxC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,GACjB,mBAAmB,CA2DrB"}

package/esm/debug.d.ts

@@ -7,3 +7,4 @@ export declare function debugLog(message: string, ...args: unknown[]): void;
  * when available and falling back to Date.now().
  */
 export declare function now(): number;
+//# sourceMappingURL=debug.d.ts.map

package/esm/debug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug.d.ts","sourceRoot":"","sources":["../src/debug.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAKlE;AAED;;;GAGG;AACH,wBAAgB,GAAG,IAAI,MAAM,CAE5B"}

package/esm/index.d.ts

@@ -9,3 +9,4 @@ export { type IAppLifecycleCallbacks } from "./types/lifecycle.js";
 export { STALE_CHUNK_RELOAD_PARAM, installPreloadErrorHandler, installVersionWatcher, reloadForStaleChunks, setStaleChunkReloadListener, type IStaleChunkReloadInfo, type IVersionWatcherOptions, type StaleChunkReloadListener, } from "./lib/chunkReloadGuard.js";
 export { dispatchHostNotification } from "./lib/hostNotifications.js";
 export { setHostPricingExtension, type UseHostPricingExtension, type IHostChromePricing, } from "./ui/useHostChromePricing.js";
+//# sourceMappingURL=index.d.ts.map

package/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACjF,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAAE,KAAK,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAE9F,OAAO,EACH,+BAA+B,EAC/B,KAAK,+BAA+B,GACvC,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AAExF,OAAO,EAAE,IAAI,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE,OAAO,EACH,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,GAChC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EACH,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GAC1B,MAAM,8BAA8B,CAAC"}

package/esm/lib/chunkReloadGuard.d.ts

@@ -87,3 +87,4 @@ export interface IVersionWatcherOptions {
  * @alpha
  */
 export declare function installVersionWatcher({ url, intervalMs, onNewDeployment }: IVersionWatcherOptions): void;
+//# sourceMappingURL=chunkReloadGuard.d.ts.map

package/esm/lib/chunkReloadGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunkReloadGuard.d.ts","sourceRoot":"","sources":["../../src/lib/chunkReloadGuard.ts"],"names":[],"mappings":"AAsBA;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IAClC,2EAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,UAAU,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,IAAI,EAAE,qBAAqB,KAAK,IAAI,CAAC;AAoC7E;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,wBAAwB,GAAG,SAAS,GAAG,IAAI,CAEhG;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,UAAU,CAAC;AAEhD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CA2BzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAkBjD;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9C;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,EAClC,GAAG,EACH,UAAuB,EACvB,eAAe,EAClB,EAAE,sBAAsB,GAAG,IAAI,CAsE/B"}

package/esm/lib/hostNotifications.d.ts

@@ -18,3 +18,4 @@ export declare function dispatchHostNotification(notification: IHostUiNotificati
  * on unmount. On register, any queued notifications are flushed in arrival order.
  */
 export declare function setActiveHostHandle(handle: IHostUiMountHandle | undefined): void;
+//# sourceMappingURL=hostNotifications.d.ts.map

package/esm/lib/hostNotifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostNotifications.d.ts","sourceRoot":"","sources":["../../src/lib/hostNotifications.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAiB9G;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAShF;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,GAAG,IAAI,CAShF"}

package/esm/lib/isProduction.d.ts

@@ -10,3 +10,4 @@
  * @internal
  */
 export declare const isProduction: boolean;
+//# sourceMappingURL=isProduction.d.ts.map

package/esm/lib/isProduction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isProduction.d.ts","sourceRoot":"","sources":["../../src/lib/isProduction.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,EAAE,OAAyD,CAAC"}

package/esm/loader/appSecurityValidation.d.ts

@@ -0,0 +1,57 @@
+import { type PluggableApplicationRegistryItem } from "@gooddata/sdk-model";
+import { type IPluggableApp, type IPlatformContext } from "@gooddata/sdk-pluggable-application-model";
+/**
+ * Maximum age of a secured-remote build, in milliseconds.
+ *
+ * @remarks
+ * Demo apps shipped from the playground are explicitly time-boxed; the host
+ * refuses to mount builds older than this window. App owners must rebuild
+ * and redeploy at least this often, even if nothing else changed.
+ */
+export declare const BUILD_FRESHNESS_WINDOW_MS: number;
+/**
+ * Why a secured-remote app was rejected by {@link validateAppSecurity}.
+ */
+export type AppSecurityFailure = {
+    kind: "organization-not-allowed";
+} | {
+    kind: "build-expired";
+    ageMs: number;
+} | {
+    kind: "metadata-missing";
+};
+/**
+ * Returns true when a remote URL points at a hostname that requires
+ * build-time-baked security metadata on the loaded app.
+ */
+export declare function isSecuredRemoteUrl(url: string | undefined): boolean;
+/**
+ * Validates the build-time-baked security metadata of a loaded pluggable app
+ * against the current platform context.
+ *
+ * @remarks
+ * Returns `undefined` when the app is not subject to these checks (i.e. it
+ * was not loaded from a secured remote hostname). Otherwise returns a
+ * structured failure describing the reason; the caller is responsible for
+ * surfacing it via the renderer's error UI.
+ *
+ * The check fails closed: a secured-remote app missing either
+ * `allowedOrganizations` or `buildTimestamp` — or carrying a non-finite or
+ * future-dated `buildTimestamp` (which would otherwise bypass the
+ * freshness window via a negative age) — is rejected with
+ * `metadata-missing`. An empty allowlist is treated like any other
+ * allowlist — it simply matches no organization.
+ */
+export declare function validateAppSecurity(app: PluggableApplicationRegistryItem, loadedApp: IPluggableApp, ctx: IPlatformContext, now?: number): AppSecurityFailure | undefined;
+/**
+ * Returns the timestamp until which a secured-remote ("demo bucket") app stays
+ * within its build freshness window, or `undefined` when the app is not a
+ * secured-remote app carrying a usable build timestamp.
+ *
+ * @remarks
+ * Intended to be called only for apps that have already passed
+ * {@link validateAppSecurity}. The host surfaces the returned date in a small
+ * "valid till" badge so demo users can see when the build will expire.
+ */
+export declare function getSecuredRemoteAppValidUntil(app: PluggableApplicationRegistryItem, loadedApp: IPluggableApp): number | undefined;
+//# sourceMappingURL=appSecurityValidation.d.ts.map

package/esm/loader/appSecurityValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appSecurityValidation.d.ts","sourceRoot":"","sources":["../../src/loader/appSecurityValidation.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,KAAK,gCAAgC,EAExC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAgBtG;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,QAA2B,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,kBAAkB,GACxB;IAAE,IAAI,EAAE,0BAA0B,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEnC;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAUnE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAC/B,GAAG,EAAE,gCAAgC,EACrC,SAAS,EAAE,aAAa,EACxB,GAAG,EAAE,gBAAgB,EACrB,GAAG,GAAE,MAAmB,GACzB,kBAAkB,GAAG,SAAS,CA4BhC;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CACzC,GAAG,EAAE,gCAAgC,EACrC,SAAS,EAAE,aAAa,GACzB,MAAM,GAAG,SAAS,CAWpB"}

package/esm/loader/appSecurityValidation.js

@@ -0,0 +1,102 @@
+// (C) 2026 GoodData Corporation
+import { isRemotePluggableApplicationRegistryItem, } from "@gooddata/sdk-model";
+/**
+ * Hostnames that trigger build-time-baked security checks on loaded apps.
+ *
+ * @remarks
+ * These hostnames host artifacts written by external pipelines (e.g. the
+ * gdc-ui-pluggable-applications playground). The build artifacts are expected
+ * to embed `allowedOrganizations` and `buildTimestamp` on the exported
+ * pluggable app; the host enforces both at load time. Apps loaded from any
+ * other origin (same-hostname, local bundle) are not subject to these checks
+ * — their integrity is already constrained by the hostname allowlist in
+ * `remoteUrlSecurity.ts`.
+ */
+const SECURED_REMOTE_HOSTNAMES = new Set(["demo-dashboard-plugins.gooddata.com"]);
+/**
+ * Maximum age of a secured-remote build, in milliseconds.
+ *
+ * @remarks
+ * Demo apps shipped from the playground are explicitly time-boxed; the host
+ * refuses to mount builds older than this window. App owners must rebuild
+ * and redeploy at least this often, even if nothing else changed.
+ */
+export const BUILD_FRESHNESS_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
+/**
+ * Returns true when a remote URL points at a hostname that requires
+ * build-time-baked security metadata on the loaded app.
+ */
+export function isSecuredRemoteUrl(url) {
+    if (!url) {
+        return false;
+    }
+    try {
+        const { hostname } = new URL(url, window.location.origin);
+        return SECURED_REMOTE_HOSTNAMES.has(hostname);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Validates the build-time-baked security metadata of a loaded pluggable app
+ * against the current platform context.
+ *
+ * @remarks
+ * Returns `undefined` when the app is not subject to these checks (i.e. it
+ * was not loaded from a secured remote hostname). Otherwise returns a
+ * structured failure describing the reason; the caller is responsible for
+ * surfacing it via the renderer's error UI.
+ *
+ * The check fails closed: a secured-remote app missing either
+ * `allowedOrganizations` or `buildTimestamp` — or carrying a non-finite or
+ * future-dated `buildTimestamp` (which would otherwise bypass the
+ * freshness window via a negative age) — is rejected with
+ * `metadata-missing`. An empty allowlist is treated like any other
+ * allowlist — it simply matches no organization.
+ */
+export function validateAppSecurity(app, loadedApp, ctx, now = Date.now()) {
+    if (!isRemotePluggableApplicationRegistryItem(app)) {
+        return undefined;
+    }
+    if (!isSecuredRemoteUrl(app.remote.url)) {
+        return undefined;
+    }
+    if (!Array.isArray(loadedApp.allowedOrganizations) ||
+        typeof loadedApp.buildTimestamp !== "number" ||
+        !Number.isFinite(loadedApp.buildTimestamp) ||
+        loadedApp.buildTimestamp > now) {
+        return { kind: "metadata-missing" };
+    }
+    const orgId = ctx.organization?.id;
+    if (!orgId || !loadedApp.allowedOrganizations.includes(orgId)) {
+        return { kind: "organization-not-allowed" };
+    }
+    const ageMs = now - loadedApp.buildTimestamp;
+    if (ageMs > BUILD_FRESHNESS_WINDOW_MS) {
+        return { kind: "build-expired", ageMs };
+    }
+    return undefined;
+}
+/**
+ * Returns the timestamp until which a secured-remote ("demo bucket") app stays
+ * within its build freshness window, or `undefined` when the app is not a
+ * secured-remote app carrying a usable build timestamp.
+ *
+ * @remarks
+ * Intended to be called only for apps that have already passed
+ * {@link validateAppSecurity}. The host surfaces the returned date in a small
+ * "valid till" badge so demo users can see when the build will expire.
+ */
+export function getSecuredRemoteAppValidUntil(app, loadedApp) {
+    if (!isRemotePluggableApplicationRegistryItem(app)) {
+        return undefined;
+    }
+    if (!isSecuredRemoteUrl(app.remote.url)) {
+        return undefined;
+    }
+    if (typeof loadedApp.buildTimestamp !== "number" || !Number.isFinite(loadedApp.buildTimestamp)) {
+        return undefined;
+    }
+    return loadedApp.buildTimestamp + BUILD_FRESHNESS_WINDOW_MS;
+}

package/esm/loader/lastVisitedApp.d.ts

@@ -9,3 +9,4 @@ export declare function getLastVisitedApp(scope: ApplicationScope): string | und
  * Silently swallows errors (e.g. storage full, private browsing).
  */
 export declare function setLastVisitedApp(scope: ApplicationScope, appId: string): void;
+//# sourceMappingURL=lastVisitedApp.d.ts.map

package/esm/loader/lastVisitedApp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lastVisitedApp.d.ts","sourceRoot":"","sources":["../../src/loader/lastVisitedApp.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAuB5D;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAM7E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAQ9E"}

package/esm/loader/localLoader.d.ts

@@ -14,3 +14,4 @@ export type LocalPluggableApplicationLoader = () => Promise<{
  */
 export declare function registerLocalApplicationLoaders(loaders: Record<string, LocalPluggableApplicationLoader>): void;
 export declare function loadLocalPluggableApplication(moduleId: string): Promise<IPluggableApp>;
+//# sourceMappingURL=localLoader.d.ts.map

package/esm/loader/localLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localLoader.d.ts","sourceRoot":"","sources":["../../src/loader/localLoader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,+BAA+B,GAAG,MAAM,OAAO,CAAC;IAGxD,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC;IAClC,YAAY,CAAC,EAAE,aAAa,CAAC;CAChC,CAAC,CAAC;AAaH;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,+BAA+B,CAAC,GACzD,IAAI,CAGN;AAcD,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAqBtF"}

package/esm/loader/pluggableApplicationsLoader.d.ts

@@ -11,3 +11,4 @@ export declare function registerAppLifecycleCallbacks(callbacks: IAppLifecycleCa
 export declare function getAppLifecycleCallbacks(): IAppLifecycleCallbacks | undefined;
 export declare function preloadPluggableApplication(app: PluggableApplicationRegistryItem): void;
 export declare function loadPluggableApplication(app: PluggableApplicationRegistryItem): Promise<IPluggableApp>;
+//# sourceMappingURL=pluggableApplicationsLoader.d.ts.map

package/esm/loader/pluggableApplicationsLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluggableApplicationsLoader.d.ts","sourceRoot":"","sources":["../../src/loader/pluggableApplicationsLoader.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,KAAK,gCAAgC,EAIxC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAG/E,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAOpE;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,sBAAsB,GAAG,IAAI,CAErF;AAED,wBAAgB,wBAAwB,IAAI,sBAAsB,GAAG,SAAS,CAE7E;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,gCAAgC,GAAG,IAAI,CAwBvF;AAED,wBAAsB,wBAAwB,CAC1C,GAAG,EAAE,gCAAgC,GACtC,OAAO,CAAC,aAAa,CAAC,CAgBxB"}

package/esm/loader/redirectLogic.d.ts

@@ -28,3 +28,4 @@ export interface IResolveRedirectTargetOptions {
  * @throws {Error} Unexpected failure (show generic error screen)
  */
 export declare function resolveRedirectTarget({ apps, ctx, pathname, fetchFirstWorkspaceId }: IResolveRedirectTargetOptions): Promise<string | null>;
+//# sourceMappingURL=redirectLogic.d.ts.map

package/esm/loader/redirectLogic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirectLogic.d.ts","sourceRoot":"","sources":["../../src/loader/redirectLogic.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AACnG,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAOlF;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACvC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACJ;AAED,MAAM,WAAW,6BAA6B;IAC1C;;;OAGG;IACH,IAAI,EAAE,gCAAgC,EAAE,CAAC;IACzC,GAAG,EAAE,gBAAgB,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,qBAAqB,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC5D;AAqFD;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,EACxC,IAAI,EACJ,GAAG,EACH,QAAQ,EACR,qBAAqB,EACxB,EAAE,6BAA6B,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoExD"}

package/esm/loader/remoteLoader.d.ts

@@ -3,3 +3,4 @@ import { type IPluggableApp, type IHostUiModule } from "@gooddata/sdk-pluggable-
 export declare function loadRemotePluggableApplication(remote: IRemotePluggableApplicationModule): Promise<IPluggableApp>;
 export declare function loadRemoteHostUiModule(remote: IRemotePluggableApplicationModule): Promise<IHostUiModule>;
 export declare function preloadRemotePluggableApplication(remote: IRemotePluggableApplicationModule): Promise<IPluggableApp>;
+//# sourceMappingURL=remoteLoader.d.ts.map

package/esm/loader/remoteLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteLoader.d.ts","sourceRoot":"","sources":["../../src/loader/remoteLoader.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,iCAAiC,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,2CAA2C,CAAC;AA4GnG,wBAAgB,8BAA8B,CAC1C,MAAM,EAAE,iCAAiC,GAC1C,OAAO,CAAC,aAAa,CAAC,CAiBxB;AA0BD,wBAAsB,sBAAsB,CACxC,MAAM,EAAE,iCAAiC,GAC1C,OAAO,CAAC,aAAa,CAAC,CAGxB;AAED,wBAAgB,iCAAiC,CAC7C,MAAM,EAAE,iCAAiC,GAC1C,OAAO,CAAC,aAAa,CAAC,CA8BxB"}

package/esm/loader/remoteUrlSecurity.d.ts

@@ -1 +1,2 @@
 export declare function isAllowedRemoteHostname(url: string): boolean;
+//# sourceMappingURL=remoteUrlSecurity.d.ts.map

package/esm/loader/remoteUrlSecurity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteUrlSecurity.d.ts","sourceRoot":"","sources":["../../src/loader/remoteUrlSecurity.ts"],"names":[],"mappings":"AAmBA,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO5D"}

package/esm/loader/routing.d.ts

@@ -20,3 +20,4 @@ export declare function substituteExternalUrlPlaceholders(url: string, ctx: IPla
 export declare function getApplicationHref(app: PluggableApplicationRegistryItem, ctx: IPlatformContext, pathname?: string): string;
 export declare function isInternalAppRouteActive(app: PluggableApplicationRegistryItem, ctx: IPlatformContext, pathname: string): boolean;
 export declare function getActiveInternalApplication(apps: PluggableApplicationRegistryItem[], ctx: IPlatformContext, pathname: string): PluggableApplicationRegistryItem | undefined;
+//# sourceMappingURL=routing.d.ts.map

package/esm/loader/routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/loader/routing.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,KAAK,gBAAgB,EACrB,KAAK,gCAAgC,EAIxC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAQlF;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAYtF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAEvF;AA4CD;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC7C,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,gBAAgB,EACrB,QAAQ,CAAC,EAAE,MAAM,GAClB,MAAM,CAMR;AAED,wBAAgB,kBAAkB,CAC9B,GAAG,EAAE,gCAAgC,EACrC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,CAAC,EAAE,MAAM,GAClB,MAAM,CAWR;AAED,wBAAgB,wBAAwB,CACpC,GAAG,EAAE,gCAAgC,EACrC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAQT;AAED,wBAAgB,4BAA4B,CACxC,IAAI,EAAE,gCAAgC,EAAE,EACxC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,GACjB,gCAAgC,GAAG,SAAS,CAK9C"}

package/esm/platformContext/backend.d.ts

@@ -42,3 +42,4 @@ export declare function getAuthCredentials(): IAuthCredentials;
 export declare function setNotAuthenticatedHandler(handler: NotAuthenticatedHandler): void;
 export declare function setApiToken(token: string): void;
 export declare function setJwt(jwt: string, secondsBeforeTokenExpirationToCallReminder?: number): void;
+//# sourceMappingURL=backend.d.ts.map

package/esm/platformContext/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/platformContext/backend.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AASlG,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAIlF,MAAM,WAAW,qBAAqB;IAClC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC5B,UAAU,EAAE,MAAM,kBAAkB,CAAC;IACrC,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;IAC3C,0BAA0B,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACvE,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,0CAA0C,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CACtF;AAiBD,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,GAAG,eAAe,CAiGzF;AAYD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAExD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAEjE;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,kBAAkB,CAE/C;AAED,wBAAgB,kBAAkB,IAAI,gBAAgB,CAErD;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAEjF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE/C;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,0CAA0C,CAAC,EAAE,MAAM,GAAG,IAAI,CAE7F"}

package/esm/platformContext/bootstrap.d.ts

@@ -13,3 +13,4 @@ export interface IBootstrapResult {
 }
 export declare const PLATFORM_CONTEXT_VERSION: IPlatformContext["version"];
 export declare function bootstrapApplication(backend: IAnalyticalBackend): Promise<IBootstrapResult>;
+//# sourceMappingURL=bootstrap.d.ts.map

package/esm/platformContext/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/platformContext/bootstrap.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,KAAK,sBAAsB,EAAE,KAAK,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpG,OAAO,EACH,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,WAAW,EACd,MAAM,2CAA2C,CAAC;AAsBnD,MAAM,WAAW,gBAAgB;IAC7B,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC/C,YAAY,EAAE,aAAa,GAAG,SAAS,CAAC;IACxC,uBAAuB,EAAE,wBAAwB,CAAC;IAClD,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,aAAa,EAAE,cAAc,CAAC;IAC9B,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,CAAC,SAAS,CAAS,CAAC;AA4B3E,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6FjG"}

package/esm/platformContext/loadPlatformContext.d.ts

@@ -16,3 +16,4 @@ export interface ILoadPlatformContextOptions {
     callbacks?: ILoadPlatformContextCallbacks;
 }
 export declare function loadPlatformContext(options?: ILoadPlatformContextOptions): Promise<IBackendPlatformContext>;
+//# sourceMappingURL=loadPlatformContext.d.ts.map

package/esm/platformContext/loadPlatformContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadPlatformContext.d.ts","sourceRoot":"","sources":["../../src/platformContext/loadPlatformContext.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAMlF,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,qBAAa,4BAA6B,SAAQ,KAAK;IACnD,cAGC;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC1C,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,2BAA2B;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,SAAS,CAAC,EAAE,6BAA6B,CAAC;CAC7C;AAQD,wBAAsB,mBAAmB,CACrC,OAAO,GAAE,2BAAgC,GAC1C,OAAO,CAAC,uBAAuB,CAAC,CA2ClC"}

package/esm/platformContext/tigerNotAuthenticatedHandler.d.ts

@@ -1,3 +1,4 @@
 import { type IAuthenticationContext, type NotAuthenticated } from "@gooddata/sdk-backend-spi";
 /** Not authenticated handler will be called every time 401 is returned from Tiger backend. */
 export declare function createNotAuthenticatedHandler(externalProviderId?: string): (ctx: IAuthenticationContext, err: NotAuthenticated) => void;
+//# sourceMappingURL=tigerNotAuthenticatedHandler.d.ts.map

package/esm/platformContext/tigerNotAuthenticatedHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tigerNotAuthenticatedHandler.d.ts","sourceRoot":"","sources":["../../src/platformContext/tigerNotAuthenticatedHandler.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAM/F,8FAA8F;AAE9F,wBAAgB,6BAA6B,CACzC,kBAAkB,CAAC,EAAE,MAAM,GAC5B,CAAC,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAY9D"}

package/esm/platformContext/types.d.ts

@@ -15,3 +15,4 @@ export type IRoutePlatformContext = Pick<IPlatformContext, RoutePlatformContextF
 export type IBackendPlatformContext = Omit<IPlatformContext, RoutePlatformContextFields>;
 export type IPlatformContextLoadResult<TContext> = IPlatformContextLoadingResult | IPlatformContextReadyResult<TContext> | IPlatformContextErrorResult;
 export {};
+//# sourceMappingURL=types.d.ts.map

package/esm/platformContext/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/platformContext/types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAElF,MAAM,WAAW,6BAA6B;IAC1C,KAAK,EAAE,SAAS,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B,CAAC,QAAQ;IACjD,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IACxC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,KAAK,0BAA0B,GACzB,oBAAoB,GACpB,yBAAyB,GACzB,sBAAsB,GACtB,mBAAmB,GACnB,cAAc,GACd,UAAU,GACV,iBAAiB,CAAC;AAExB,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;AACvF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;AAEzF,MAAM,MAAM,0BAA0B,CAAC,QAAQ,IACzC,6BAA6B,GAC7B,2BAA2B,CAAC,QAAQ,CAAC,GACrC,2BAA2B,CAAC"}

package/esm/platformContext/useLoadPlatformContext.d.ts

@@ -33,3 +33,4 @@ export declare const BackendPlatformContextProvider: IBackendPlatformContextProv
  * @alpha
  */
 export declare function registerPlatformContextCallbacks(callbacks: ILoadPlatformContextCallbacks): void;
+//# sourceMappingURL=useLoadPlatformContext.d.ts.map

package/esm/platformContext/useLoadPlatformContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useLoadPlatformContext.d.ts","sourceRoot":"","sources":["../../src/platformContext/useLoadPlatformContext.ts"],"names":[],"mappings":"AAOA,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAM3G,OAAO,EACH,KAAK,6BAA6B,EAGrC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACH,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAElC,MAAM,YAAY,CAAC;AAYpB;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CA0ErF;AAED;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC5C,YAAY,CAAC,SAAS,EAAE,6BAA6B,GAAG,IAAI,CAAC;IAC7D,SAAS,EAAE,MAAM,QAAQ,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC/E,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAChD,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAmED;;GAEG;AACH,eAAO,MAAM,8BAA8B,EAAE,+BACA,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,6BAA6B,GAAG,IAAI,CAE/F"}

package/esm/platformContext/useWorkspaceColorPalette.d.ts

@@ -15,3 +15,4 @@ type WorkspaceColorPaletteState = {
 };
 export declare function useWorkspaceColorPalette(backend: IAnalyticalBackend | undefined, workspaceId: string | undefined): WorkspaceColorPaletteState;
 export {};
+//# sourceMappingURL=useWorkspaceColorPalette.d.ts.map

package/esm/platformContext/useWorkspaceColorPalette.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWorkspaceColorPalette.d.ts","sourceRoot":"","sources":["../../src/platformContext/useWorkspaceColorPalette.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,KAAK,0BAA0B,GACzB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,aAAa,GAAG,SAAS,CAAA;CAAE,GAC3D;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,wBAAgB,wBAAwB,CACpC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,WAAW,EAAE,MAAM,GAAG,SAAS,GAChC,0BAA0B,CAsC5B"}

package/esm/platformContext/useWorkspacePermissions.d.ts

@@ -24,3 +24,4 @@ type WorkspacePermissionsState = {
  */
 export declare function useWorkspacePermissions(backend: IAnalyticalBackend | undefined, workspaceId: string | undefined): WorkspacePermissionsState;
 export {};
+//# sourceMappingURL=useWorkspacePermissions.d.ts.map

package/esm/platformContext/useWorkspacePermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWorkspacePermissions.d.ts","sourceRoot":"","sources":["../../src/platformContext/useWorkspacePermissions.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEjE,KAAK,yBAAyB,GACxB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,qBAAqB,CAAA;CAAE,GACtD;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,WAAW,EAAE,MAAM,GAAG,SAAS,GAChC,yBAAyB,CA2C3B"}

package/esm/platformContext/useWorkspaceSettings.d.ts

@@ -23,3 +23,4 @@ type WorkspaceSettingsState = {
  */
 export declare function useWorkspaceSettings(backend: IAnalyticalBackend | undefined, workspaceId: string | undefined): WorkspaceSettingsState;
 export {};
+//# sourceMappingURL=useWorkspaceSettings.d.ts.map

package/esm/platformContext/useWorkspaceSettings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWorkspaceSettings.d.ts","sourceRoot":"","sources":["../../src/platformContext/useWorkspaceSettings.ts"],"names":[],"mappings":"AAIA,OAAO,EAEH,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC9B,MAAM,2BAA2B,CAAC;AAEnC,KAAK,sBAAsB,GACrB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,sBAAsB,CAAA;CAAE,GACpD;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAChC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,WAAW,EAAE,MAAM,GAAG,SAAS,GAChC,sBAAsB,CAqCxB"}

package/esm/platformContext/useWorkspaceTheme.d.ts

@@ -15,3 +15,4 @@ type WorkspaceThemeState = {
 };
 export declare function useWorkspaceTheme(backend: IAnalyticalBackend | undefined, workspaceId: string | undefined): WorkspaceThemeState;
 export {};
+//# sourceMappingURL=useWorkspaceTheme.d.ts.map

package/esm/platformContext/useWorkspaceTheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWorkspaceTheme.d.ts","sourceRoot":"","sources":["../../src/platformContext/useWorkspaceTheme.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,KAAK,mBAAmB,GAClB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAC7C;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,wBAAgB,iBAAiB,CAC7B,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,WAAW,EAAE,MAAM,GAAG,SAAS,GAChC,mBAAmB,CAqCrB"}

package/esm/platformContext/waitForInjectedApiToken.d.ts

@@ -24,3 +24,4 @@ export declare function shouldWaitForInjectedApiToken(): boolean;
  * Resolves once a valid token has been applied. Rejects if `signal` aborts.
  */
 export declare function waitForInjectedApiToken(signal?: AbortSignal): Promise<void>;
+//# sourceMappingURL=waitForInjectedApiToken.d.ts.map

package/esm/platformContext/waitForInjectedApiToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waitForInjectedApiToken.d.ts","sourceRoot":"","sources":["../../src/platformContext/waitForInjectedApiToken.ts"],"names":[],"mappings":"AA6BA;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAQvD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA6DjF"}

package/esm/registry/pluggableApplicationsRegistry.d.ts

@@ -53,3 +53,4 @@ export declare function resolveApplications({ localApps, remoteRegistry, ctx, sc
  */
 export declare function usePluggableApplications(ctx: IPlatformContext): PluggableApplicationRegistryItem[];
 export {};
+//# sourceMappingURL=pluggableApplicationsRegistry.d.ts.map

package/esm/registry/pluggableApplicationsRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluggableApplicationsRegistry.d.ts","sourceRoot":"","sources":["../../src/registry/pluggableApplicationsRegistry.tsx"],"names":[],"mappings":"AAIA,OAAO,EACH,KAAK,gBAAgB,EAKrB,KAAK,kCAAkC,EACvC,KAAK,gCAAgC,EACrC,KAAK,mCAAmC,EAE3C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEH,KAAK,gBAAgB,EACxB,MAAM,2CAA2C,CAAC;AAMnD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,kCAAkC,GAAG,IAAI,CAE5F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,mCAAmC,GAAG,SAAS,CAaxG;AAyMD,UAAU,2BAA2B;IACjC;;OAEG;IACH,SAAS,EAAE,gCAAgC,EAAE,CAAC;IAC9C;;OAEG;IACH,cAAc,EAAE,mCAAmC,GAAG,SAAS,CAAC;IAChE;;OAEG;IACH,GAAG,EAAE,gBAAgB,CAAC;IACtB;;OAEG;IACH,KAAK,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,EAChC,SAAS,EACT,cAAc,EACd,GAAG,EACH,KAAK,EACR,EAAE,2BAA2B,GAAG,gCAAgC,EAAE,CAelE;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,gBAAgB,GAAG,gCAAgC,EAAE,CAWlG"}

package/esm/translations/de-DE.json

@@ -30,5 +30,8 @@
     "messages.genAi.visualisation.link.copied": "Der Visualisierungslink wurde in Ihre Zwischenablage kopiert.",
     "messages.showMore": "Mehr anzeigen",
     "messages.showLess": "Weniger anzeigen",
-    "gen-ai.ask-assistant.search": "Erstellen Sie eine neue Visualisierung basierend auf: {question}"
+    "gen-ai.ask-assistant.search": "Erstellen Sie eine neue Visualisierung basierend auf: {question}",
+    "gs.host.error.appNotAllowedForOrganization": "This application is not available for your organization.",
+    "gs.host.error.appBuildExpired": "This application is out of date and must be rebuilt by its author before it can run again.",
+    "gs.host.error.appSecurityMetadataMissing": "This application is missing required security metadata and cannot be loaded."
 }

package/esm/translations/en-AU.json

@@ -30,5 +30,8 @@
     "messages.genAi.visualisation.link.copied": "The visualisation link has been copied to your clipboard.",
     "messages.showMore": "Show more",
     "messages.showLess": "Show less",
-    "gen-ai.ask-assistant.search": "Create new visualisation based on: {question}"
+    "gen-ai.ask-assistant.search": "Create new visualisation based on: {question}",
+    "gs.host.error.appNotAllowedForOrganization": "This application is not available for your organization.",
+    "gs.host.error.appBuildExpired": "This application is out of date and must be rebuilt by its author before it can run again.",
+    "gs.host.error.appSecurityMetadataMissing": "This application is missing required security metadata and cannot be loaded."
 }

package/esm/translations/en-GB.json

@@ -30,5 +30,8 @@
     "messages.genAi.visualisation.link.copied": "The visualisation link has been copied to your clipboard.",
     "messages.showMore": "Show more",
     "messages.showLess": "Show less",
-    "gen-ai.ask-assistant.search": "Build new visualisation based on: {question}"
+    "gen-ai.ask-assistant.search": "Build new visualisation based on: {question}",
+    "gs.host.error.appNotAllowedForOrganization": "This application is not available for your organization.",
+    "gs.host.error.appBuildExpired": "This application is out of date and must be rebuilt by its author before it can run again.",
+    "gs.host.error.appSecurityMetadataMissing": "This application is missing required security metadata and cannot be loaded."
 }