@gooddata/sdk-ui-pluggable-host 11.54.0-alpha.4 → 11.54.0-alpha.5

package/esm/lib/stylesheetRegistry.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Registers the URL scope of a remote app's stylesheets: every stylesheet link whose
+ * href starts with the directory of `remoteEntryUrl` belongs to `appId`.
+ *
+ * Idempotent. Registering a different URL for a known app replaces its scope and retires the
+ * previous build's links, so the old CSS never comes back with the new build. Must be called
+ * before the app's module is loaded so late-injected CSS of deactivated apps is caught by the
+ * observer.
+ *
+ * Refused with a warning when the prefix would swallow host stylesheets: a remote entry at the
+ * host page's own origin root, or a prefix covering a scope reserved by
+ * `reserveHostStylesheetScope`. A refused app is simply not tracked, so its CSS stays applied
+ * across navigation. A root on another origin cannot match a host link and is kept.
+ *
+ * If one remote ever served two pluggable apps from the same base URL, attribution would
+ * over-match; the fix would be the per-expose CSS lists in mf-manifest.json
+ * (`exposes[].assets.css`).
+ */
+export declare function registerAppStylesheetScope(appId: string, remoteEntryUrl: string): void;
+/**
+ * Reserves the URL scope of the host's own remote UI module so no app can claim stylesheets
+ * served from the same directory. Must be called before any app registers a scope; the host UI
+ * is resolved before an app renders inside it.
+ */
+export declare function reserveHostStylesheetScope(remoteEntryUrl: string): void;
+/**
+ * Re-enables all stylesheets attributed to the app. Safe to call before any of the
+ * app's CSS exists and repeatedly.
+ */
+export declare function activateAppStylesheets(appId: string): void;
+/**
+ * Disables all stylesheets attributed to the app. Idempotent; a no-op scan for an
+ * unknown appId.
+ */
+export declare function deactivateAppStylesheets(appId: string): void;
+/**
+ * Test-only: clears all registry state and disconnects the head observer.
+ */
+export declare function resetStylesheetRegistry(): void;
+//# sourceMappingURL=stylesheetRegistry.d.ts.map

package/esm/lib/stylesheetRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stylesheetRegistry.d.ts","sourceRoot":"","sources":["../../src/lib/stylesheetRegistry.ts"],"names":[],"mappings":"AAkJA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAiCtF;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAQvE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAM1D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAM5D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAQ9C"}

package/esm/lib/stylesheetRegistry.js

@@ -0,0 +1,207 @@
+// (C) 2026 GoodData Corporation
+const scopePrefixes = new Map();
+const reservedHostPrefixes = new Set();
+const deactivatedApps = new Set();
+let linkLoadStates = new WeakMap();
+let retiredLinks = new WeakSet();
+let observer;
+function deriveScopePrefix(remoteEntryUrl) {
+    try {
+        const url = new URL(remoteEntryUrl, document.baseURI);
+        return url.origin + url.pathname.slice(0, url.pathname.lastIndexOf("/") + 1);
+    }
+    catch {
+        console.error(`[host-runtime/stylesheet-registry] Cannot derive stylesheet scope from remote URL "${remoteEntryUrl}".`);
+        return undefined;
+    }
+}
+// The longest match wins, so nested directories cannot make ownership depend on registration order.
+function findOwnerOfHref(href) {
+    let owner;
+    let longestPrefixLength = -1;
+    for (const [appId, prefixes] of scopePrefixes) {
+        for (const prefix of prefixes) {
+            if (href.startsWith(prefix) && prefix.length > longestPrefixLength) {
+                owner = appId;
+                longestPrefixLength = prefix.length;
+            }
+        }
+    }
+    return owner;
+}
+// An app prefix above a reserved host prefix would claim the host's own links.
+function coversReservedHostScope(prefix) {
+    for (const reserved of reservedHostPrefixes) {
+        if (reserved.startsWith(prefix)) {
+            return true;
+        }
+    }
+    return false;
+}
+function isAppStylesheetLink(node) {
+    return node instanceof HTMLLinkElement && node.relList.contains("stylesheet");
+}
+// `link.sheet` says whether a sheet is attached right now, not whether one ever loaded:
+// disabling a link detaches it and re-enabling reattaches it asynchronously. So once this
+// registry has disabled a link, only a remembered flag can still be trusted.
+function hasLoaded(link) {
+    if (link.sheet) {
+        linkLoadStates.set(link, "loaded");
+    }
+    return linkLoadStates.get(link) === "loaded";
+}
+function setLinkDisabled(link, disabled) {
+    if (!disabled) {
+        link.disabled = false;
+        return;
+    }
+    if (hasLoaded(link)) {
+        link.disabled = true;
+        return;
+    }
+    if (linkLoadStates.get(link) === "awaiting-load") {
+        return;
+    }
+    linkLoadStates.set(link, "awaiting-load");
+    // Disabling a link that has never finished loading can suppress its load event, which
+    // Vite's preload helper awaits — the pending chunk import would hang forever.
+    link.addEventListener("load", () => {
+        linkLoadStates.set(link, "loaded");
+        // A retired link outlives the scope that owned it, so its owner can no longer be found.
+        if (retiredLinks.has(link)) {
+            link.disabled = true;
+            return;
+        }
+        const owner = findOwnerOfHref(link.href);
+        if (owner && deactivatedApps.has(owner)) {
+            link.disabled = true;
+        }
+    }, { once: true });
+}
+function forEachOwnedLink(appId, callback) {
+    const prefixes = scopePrefixes.get(appId);
+    if (!prefixes?.size) {
+        return;
+    }
+    document.head.querySelectorAll("link").forEach((link) => {
+        if (isAppStylesheetLink(link) && findOwnerOfHref(link.href) === appId) {
+            callback(link);
+        }
+    });
+}
+function handleHeadMutations(mutations) {
+    for (const mutation of mutations) {
+        mutation.addedNodes.forEach((node) => {
+            if (!isAppStylesheetLink(node)) {
+                return;
+            }
+            const owner = findOwnerOfHref(node.href);
+            if (owner && deactivatedApps.has(owner)) {
+                setLinkDisabled(node, true);
+            }
+        });
+    }
+}
+function ensureObserver() {
+    if (observer) {
+        return;
+    }
+    observer = new MutationObserver(handleHeadMutations);
+    observer.observe(document.head, { childList: true });
+}
+/**
+ * Registers the URL scope of a remote app's stylesheets: every stylesheet link whose
+ * href starts with the directory of `remoteEntryUrl` belongs to `appId`.
+ *
+ * Idempotent. Registering a different URL for a known app replaces its scope and retires the
+ * previous build's links, so the old CSS never comes back with the new build. Must be called
+ * before the app's module is loaded so late-injected CSS of deactivated apps is caught by the
+ * observer.
+ *
+ * Refused with a warning when the prefix would swallow host stylesheets: a remote entry at the
+ * host page's own origin root, or a prefix covering a scope reserved by
+ * `reserveHostStylesheetScope`. A refused app is simply not tracked, so its CSS stays applied
+ * across navigation. A root on another origin cannot match a host link and is kept.
+ *
+ * If one remote ever served two pluggable apps from the same base URL, attribution would
+ * over-match; the fix would be the per-expose CSS lists in mf-manifest.json
+ * (`exposes[].assets.css`).
+ */
+export function registerAppStylesheetScope(appId, remoteEntryUrl) {
+    if (typeof document === "undefined") {
+        return;
+    }
+    const prefix = deriveScopePrefix(remoteEntryUrl);
+    if (!prefix) {
+        return;
+    }
+    if (prefix === `${new URL(document.baseURI).origin}/`) {
+        console.warn(`[host-runtime/stylesheet-registry] Not tracking stylesheets of app "${appId}": its remote URL "${remoteEntryUrl}" resolves to the host page origin root, where its CSS cannot be told apart from the host's own.`);
+        return;
+    }
+    if (coversReservedHostScope(prefix)) {
+        console.warn(`[host-runtime/stylesheet-registry] Not tracking stylesheets of app "${appId}": its remote URL "${remoteEntryUrl}" covers the host UI module's directory, whose CSS must stay applied.`);
+        return;
+    }
+    const prefixes = scopePrefixes.get(appId);
+    if (!prefixes?.has(prefix)) {
+        if (prefixes?.size) {
+            // A new remote URL for a known app means its previous build is gone. Those links stay
+            // in the document, so they must be disabled before the scope stops covering them.
+            forEachOwnedLink(appId, (link) => {
+                retiredLinks.add(link);
+                setLinkDisabled(link, true);
+            });
+        }
+        scopePrefixes.set(appId, new Set([prefix]));
+    }
+    ensureObserver();
+}
+/**
+ * Reserves the URL scope of the host's own remote UI module so no app can claim stylesheets
+ * served from the same directory. Must be called before any app registers a scope; the host UI
+ * is resolved before an app renders inside it.
+ */
+export function reserveHostStylesheetScope(remoteEntryUrl) {
+    if (typeof document === "undefined") {
+        return;
+    }
+    const prefix = deriveScopePrefix(remoteEntryUrl);
+    if (prefix) {
+        reservedHostPrefixes.add(prefix);
+    }
+}
+/**
+ * Re-enables all stylesheets attributed to the app. Safe to call before any of the
+ * app's CSS exists and repeatedly.
+ */
+export function activateAppStylesheets(appId) {
+    if (typeof document === "undefined") {
+        return;
+    }
+    deactivatedApps.delete(appId);
+    forEachOwnedLink(appId, (link) => setLinkDisabled(link, false));
+}
+/**
+ * Disables all stylesheets attributed to the app. Idempotent; a no-op scan for an
+ * unknown appId.
+ */
+export function deactivateAppStylesheets(appId) {
+    if (typeof document === "undefined") {
+        return;
+    }
+    deactivatedApps.add(appId);
+    forEachOwnedLink(appId, (link) => setLinkDisabled(link, true));
+}
+/**
+ * Test-only: clears all registry state and disconnects the head observer.
+ */
+export function resetStylesheetRegistry() {
+    scopePrefixes.clear();
+    reservedHostPrefixes.clear();
+    deactivatedApps.clear();
+    linkLoadStates = new WeakMap();
+    retiredLinks = new WeakSet();
+    observer?.disconnect();
+    observer = undefined;
+}

package/esm/loader/failingStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failingStorage.d.ts","sourceRoot":"","sources":["../../src/loader/failingStorage.ts"],"names":[],"mappings":"AAEA,KAAK,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC;AAE1D;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAC9B,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,MAAM,IAAI,EACf,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAClC,MAAM,CAiCR"}

package/esm/loader/pluggableApplicationsLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pluggableApplicationsLoader.d.ts","sourceRoot":"","sources":["../../src/loader/pluggableApplicationsLoader.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,KAAK,gCAAgC,EAIxC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAG/E,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAOpE;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,sBAAsB,GAAG,IAAI,CAErF;AAED,wBAAgB,wBAAwB,IAAI,sBAAsB,GAAG,SAAS,CAE7E;AASD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAgB3C;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,gCAAgC,GAAG,IAAI,CA2BvF;AAED,wBAAsB,wBAAwB,CAC1C,GAAG,EAAE,gCAAgC,GACtC,OAAO,CAAC,aAAa,CAAC,CAgBxB"}
+{"version":3,"file":"pluggableApplicationsLoader.d.ts","sourceRoot":"","sources":["../../src/loader/pluggableApplicationsLoader.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,KAAK,gCAAgC,EAIxC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAI/E,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAOpE;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,sBAAsB,GAAG,IAAI,CAErF;AAED,wBAAgB,wBAAwB,IAAI,sBAAsB,GAAG,SAAS,CAE7E;AASD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAgB3C;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,gCAAgC,GAAG,IAAI,CA2BvF;AAED,wBAAsB,wBAAwB,CAC1C,GAAG,EAAE,gCAAgC,GACtC,OAAO,CAAC,aAAa,CAAC,CAiBxB"}

package/esm/loader/pluggableApplicationsLoader.js

@@ -1,6 +1,7 @@
 // (C) 2026 GoodData Corporation
 import { isExternalPluggableApplicationRegistryItem, isLocalPluggableApplicationRegistryItem, isRemotePluggableApplicationRegistryItem, } from "@gooddata/sdk-model";
 import { now } from "../debug.js";
+import { registerAppStylesheetScope } from "../lib/stylesheetRegistry.js";
 import { loadLocalPluggableApplication } from "./localLoader.js";
 import { loadRemotePluggableApplication, preloadRemotePluggableApplication } from "./remoteLoader.js";
 let registeredLifecycle;
@@ -77,6 +78,7 @@ export async function loadPluggableApplication(app) {
         return loadLocalPluggableApplication(app.id);
     }
     if (isRemotePluggableApplicationRegistryItem(app)) {
+        registerAppStylesheetScope(app.id, app.remote.url);
         return loadRemotePluggableApplication(app.remote);
     }
     throw new Error(`[host-runtime/loader] Unknown application type for "${JSON.stringify(app)}".`);

package/esm/ui/PluggableApplicationRenderer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PluggableApplicationRenderer.d.ts","sourceRoot":"","sources":["../../src/ui/PluggableApplicationRenderer.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,SAAS,EAAsE,MAAM,OAAO,CAAC;AAI3G,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AACpG,OAAO,EACH,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EASxB,MAAM,2CAA2C,CAAC;AAenD,OAAO,qCAAqC,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAkBhD,MAAM,WAAW,kCAAkC;IAC/C,GAAG,EAAE,gCAAgC,CAAC;IACtC,GAAG,EAAE,gBAAgB,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6FAA6F;IAC7F,iBAAiB,CAAC,EAAE,CAChB,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,iBAAiB,EAC/B,YAAY,CAAC,EAAE,OAAO,EACtB,kBAAkB,CAAC,EAAE,OAAO,KAC3B,IAAI,CAAC;IACV,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAC;IAChC,oHAAoH;IACpH,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,WAAW,CAAC,EAAE,iBAAiB,CAAC;KACnC,KAAK,IAAI,CAAC;IACX;;;OAGG;IACH,qBAAqB,CAAC,EAAE,SAAS,CAC7B,CAAC,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,GAAG,SAAS,CACtG,CAAC;IACF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;IAC7E;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;IAC7F,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACpE,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;CAClF;AAED,wBAAgB,4BAA4B,CAAC,EACzC,GAAG,EACH,GAAG,EACH,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACxB,EAAE,kCAAkC,2CAuTpC"}
+{"version":3,"file":"PluggableApplicationRenderer.d.ts","sourceRoot":"","sources":["../../src/ui/PluggableApplicationRenderer.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,SAAS,EAAsE,MAAM,OAAO,CAAC;AAI3G,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AACpG,OAAO,EACH,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EASxB,MAAM,2CAA2C,CAAC;AAgBnD,OAAO,qCAAqC,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAkBhD,MAAM,WAAW,kCAAkC;IAC/C,GAAG,EAAE,gCAAgC,CAAC;IACtC,GAAG,EAAE,gBAAgB,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6FAA6F;IAC7F,iBAAiB,CAAC,EAAE,CAChB,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,iBAAiB,EAC/B,YAAY,CAAC,EAAE,OAAO,EACtB,kBAAkB,CAAC,EAAE,OAAO,KAC3B,IAAI,CAAC;IACV,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAC;IAChC,oHAAoH;IACpH,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,WAAW,CAAC,EAAE,iBAAiB,CAAC;KACnC,KAAK,IAAI,CAAC;IACX;;;OAGG;IACH,qBAAqB,CAAC,EAAE,SAAS,CAC7B,CAAC,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,GAAG,SAAS,CACtG,CAAC;IACF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;IAC7E;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;IAC7F,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACpE,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;CAClF;AAED,wBAAgB,4BAA4B,CAAC,EACzC,GAAG,EACH,GAAG,EACH,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACxB,EAAE,kCAAkC,2CA4TpC"}

package/esm/ui/PluggableApplicationRenderer.js

@@ -7,6 +7,7 @@ import { LoadingComponent, useAutoupdateRef } from "@gooddata/sdk-ui";
 import { bemFactory } from "@gooddata/sdk-ui-kit";
 import { now } from "../debug.js";
 import { setActiveAppAttribute } from "../lib/activeAppAttribute.js";
+import { activateAppStylesheets, deactivateAppStylesheets } from "../lib/stylesheetRegistry.js";
 import { getSecuredRemoteAppValidUntil, validateAppSecurity, } from "../loader/appSecurityValidation.js";
 import { getAppLifecycleCallbacks, loadPluggableApplication } from "../loader/pluggableApplicationsLoader.js";
 import { getApplicationHref } from "../loader/routing.js";
@@ -91,6 +92,7 @@ export function PluggableApplicationRenderer({ app, ctx, pathname, aiAssistantOp
         mountHandleRef.current = undefined;
         mountedAppRef.current = undefined;
         setViewState({ state: "loading" });
+        activateAppStylesheets(app.id);
         // unmount() is synchronous, so calling it inline can re-enter React while the parent render
         // that swapped this application out is still in progress.
         if (prevHandle) {
@@ -108,6 +110,7 @@ export function PluggableApplicationRenderer({ app, ctx, pathname, aiAssistantOp
                 const message = intlRef.current.formatMessage(SECURITY_FAILURE_MESSAGES[securityFailure.kind]);
                 console.error(`[host-runtime/renderer] Refusing to mount app "${app.id}": ${securityFailure.kind}.`, securityFailure);
                 lifecycle?.onLoadFailed?.(app.id, securityFailure.kind);
+                deactivateAppStylesheets(app.id);
                 setViewState({ state: "error", message });
                 return;
             }
@@ -149,6 +152,7 @@ export function PluggableApplicationRenderer({ app, ctx, pathname, aiAssistantOp
             const errorMessage = mountError instanceof Error ? mountError.message : "Unknown module loading error.";
             console.error(`[host-runtime/renderer] Failed to mount app "${app.id}".`, mountError);
             lifecycle?.onLoadFailed?.(app.id, errorMessage);
+            deactivateAppStylesheets(app.id);
             setViewState({
                 state: "error",
                 message: errorMessage,
@@ -160,6 +164,7 @@ export function PluggableApplicationRenderer({ app, ctx, pathname, aiAssistantOp
             if (navigationRequestRef?.current === navigationRequest) {
                 navigationRequestRef.current = undefined;
             }
+            deactivateAppStylesheets(app.id);
             const handle = mountHandleRef.current;
             if (handle) {
                 mountHandleRef.current = undefined;
@@ -200,6 +205,7 @@ export function PluggableApplicationRenderer({ app, ctx, pathname, aiAssistantOp
             if (navigationRequestRef) {
                 navigationRequestRef.current = undefined;
             }
+            deactivateAppStylesheets(mounted.app.id);
             handle.unmount();
             lifecycle?.onUnmounted?.(mounted.app.id);
             lifecycle?.onLoadFailed?.(mounted.app.id, securityFailure.kind);

package/esm/ui/resolveHostUiModule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveHostUiModule.d.ts","sourceRoot":"","sources":["../../src/ui/resolveHostUiModule.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAOtG;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAevF"}
+{"version":3,"file":"resolveHostUiModule.d.ts","sourceRoot":"","sources":["../../src/ui/resolveHostUiModule.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAQtG;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAgBvF"}

package/esm/ui/resolveHostUiModule.js

@@ -1,4 +1,5 @@
 // (C) 2026 GoodData Corporation
+import { reserveHostStylesheetScope } from "../lib/stylesheetRegistry.js";
 import { loadRemoteHostUiModule } from "../loader/remoteLoader.js";
 import { getRemoteRegistry } from "../registry/pluggableApplicationsRegistry.js";
 import { defaultHostUiModule } from "./DefaultHostUi.js";
@@ -11,6 +12,7 @@ import { defaultHostUiModule } from "./DefaultHostUi.js";
 export async function resolveHostUiModule(ctx) {
     const remoteRegistry = getRemoteRegistry(ctx);
     if (remoteRegistry?.uiModule) {
+        reserveHostStylesheetScope(remoteRegistry.uiModule.url);
         try {
             return await loadRemoteHostUiModule(remoteRegistry.uiModule);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gooddata/sdk-ui-pluggable-host",
-  "version": "11.54.0-alpha.4",
+  "version": "11.54.0-alpha.5",
   "description": "GoodData SDK runtime for hosting pluggable applications — registry, loader, routing, platform context, default UI chrome",
   "license": "MIT",
   "author": "GoodData Corporation",
@@ -29,20 +29,20 @@
   "dependencies": {
     "@module-federation/runtime": "2.6.0",
     "lodash-es": "^4.17.23",
-    "@gooddata/sdk-backend-base": "11.54.0-alpha.4",
-    "@gooddata/sdk-embedding": "11.54.0-alpha.4",
-    "@gooddata/sdk-backend-spi": "11.54.0-alpha.4",
-    "@gooddata/sdk-model": "11.54.0-alpha.4",
-    "@gooddata/sdk-backend-tiger": "11.54.0-alpha.4",
-    "@gooddata/sdk-pluggable-application-model": "11.54.0-alpha.4",
-    "@gooddata/sdk-ui": "11.54.0-alpha.4",
-    "@gooddata/sdk-ui-application-header": "11.54.0-alpha.4",
-    "@gooddata/sdk-ui-gen-ai": "11.54.0-alpha.4",
-    "@gooddata/sdk-ui-kit": "11.54.0-alpha.4",
-    "@gooddata/sdk-ui-semantic-search": "11.54.0-alpha.4",
-    "@gooddata/sdk-ui-ext": "11.54.0-alpha.4",
-    "@gooddata/sdk-ui-theme-provider": "11.54.0-alpha.4",
-    "@gooddata/util": "11.54.0-alpha.4"
+    "@gooddata/sdk-backend-base": "11.54.0-alpha.5",
+    "@gooddata/sdk-backend-spi": "11.54.0-alpha.5",
+    "@gooddata/sdk-backend-tiger": "11.54.0-alpha.5",
+    "@gooddata/sdk-embedding": "11.54.0-alpha.5",
+    "@gooddata/sdk-model": "11.54.0-alpha.5",
+    "@gooddata/sdk-pluggable-application-model": "11.54.0-alpha.5",
+    "@gooddata/sdk-ui": "11.54.0-alpha.5",
+    "@gooddata/sdk-ui-application-header": "11.54.0-alpha.5",
+    "@gooddata/sdk-ui-ext": "11.54.0-alpha.5",
+    "@gooddata/sdk-ui-gen-ai": "11.54.0-alpha.5",
+    "@gooddata/sdk-ui-theme-provider": "11.54.0-alpha.5",
+    "@gooddata/util": "11.54.0-alpha.5",
+    "@gooddata/sdk-ui-semantic-search": "11.54.0-alpha.5",
+    "@gooddata/sdk-ui-kit": "11.54.0-alpha.5"
   },
   "devDependencies": {
     "@microsoft/api-documenter": "^7.17.0",
@@ -85,8 +85,8 @@
     "vite": "8.0.16",
     "vitest": "4.1.8",
     "vitest-dom": "0.1.1",
-    "@gooddata/oxlint-config": "11.54.0-alpha.4",
-    "@gooddata/eslint-config": "11.54.0-alpha.4"
+    "@gooddata/eslint-config": "11.54.0-alpha.5",
+    "@gooddata/oxlint-config": "11.54.0-alpha.5"
   },
   "peerDependencies": {
     "react": ">=18.3.1",

package/esm/loader/test/failingStorage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"failingStorage.d.ts","sourceRoot":"","sources":["../../../src/loader/test/failingStorage.ts"],"names":[],"mappings":"AAEA,KAAK,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC;AAE1D;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAC9B,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,MAAM,IAAI,EACf,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAClC,MAAM,CAiCR"}