@gooddata/sdk-ui-pluggable-host 11.62.0-alpha.2 → 11.62.0-alpha.3

package/esm/components/Root.scss

@@ -9,6 +9,18 @@
     }
 
     &__error {
+        min-height: 100vh;
+        box-sizing: border-box;
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+        justify-content: center;
         padding: 2rem;
+        text-align: center;
     }
 }
+
+// The app slot sits below the host header, so a viewport-high fallback would overflow it.
+.gd-host-chrome__app-container > .gd-host-root__error {
+    min-height: 100%;
+}

package/esm/components/useRedirectTarget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useRedirectTarget.d.ts","sourceRoot":"","sources":["../../src/components/useRedirectTarget.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAOlF,MAAM,MAAM,mBAAmB,GACzB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;GAEG;AACH,wBAAgB,iBAAiB,CAC7B,IAAI,EAAE,gCAAgC,EAAE,EACxC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,GAChB,mBAAmB,CA6DrB"}
+{"version":3,"file":"useRedirectTarget.d.ts","sourceRoot":"","sources":["../../src/components/useRedirectTarget.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAQlF,MAAM,MAAM,mBAAmB,GACzB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;GAEG;AACH,wBAAgB,iBAAiB,CAC7B,IAAI,EAAE,gCAAgC,EAAE,EACxC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,GAChB,mBAAmB,CAsErB"}

package/esm/components/useRedirectTarget.js

@@ -1,8 +1,10 @@
 // (C) 2026 GoodData Corporation
 import { useEffect, useState } from "react";
+import { isNotAuthenticated } from "@gooddata/sdk-backend-spi";
 import { debugLog } from "../debug.js";
 import { AppNotFoundError, resolveRedirectTarget } from "../loader/redirectLogic.js";
 import { getBackend } from "../platformContext/backend.js";
+import { afterNotAuthenticatedGrace } from "../platformContext/notAuthenticatedGrace.js";
 import { getWorkspaceAccess } from "../platformContext/workspaceAccess.js";
 /**
  * Resolves the redirect target for the current URL and permission context.
@@ -11,6 +13,7 @@ export function useRedirectTarget(apps, ctx, pathname, search) {
     const [redirectState, setRedirectState] = useState({ state: "loading" });
     useEffect(() => {
         let cancelled = false;
+        let cancelGrace;
         // Preserve "render" state during re-resolution so that HostUiContainer stays mounted
         // while the async redirect check runs. Other states (loading, error, not-found) reset to loading.
         setRedirectState((prev) => (prev.state === "render" ? prev : { state: "loading" }));
@@ -54,11 +57,17 @@ export function useRedirectTarget(apps, ctx, pathname, search) {
             else {
                 const error = e instanceof Error ? e.message : "Unknown redirect error.";
                 debugLog(`[host-app/redirect] useRedirectTarget: unexpected error → ${error}`);
+                // Stay "loading" while the backend redirects to login on a 401.
+                if (isNotAuthenticated(e)) {
+                    cancelGrace = afterNotAuthenticatedGrace(() => setRedirectState({ state: "error", error }));
+                    return;
+                }
                 setRedirectState({ state: "error", error });
             }
         });
         return () => {
             cancelled = true;
+            cancelGrace?.();
         };
     }, [apps, pathname, search, ctx]);
     return redirectState;

package/esm/lib/stylesheetRegistry.d.ts

@@ -23,6 +23,15 @@ export declare function registerAppStylesheetScope(appId: string, remoteEntryUrl
  * is resolved before an app renders inside it.
  */
 export declare function reserveHostStylesheetScope(remoteEntryUrl: string): void;
+/**
+ * Declares that the remote at `remoteEntryUrl` serves its assets from `assetBaseUrl`, so
+ * stylesheet links under that base belong to whichever app owns the remote entry URL.
+ *
+ * Call order relative to `registerAppStylesheetScope` does not matter. Refused with a warning
+ * when the base is an origin root or covers the host UI module's scope, because it would then
+ * claim host stylesheets.
+ */
+export declare function registerRemoteAssetBase(remoteEntryUrl: string, assetBaseUrl: string): void;
 /**
  * Re-enables all stylesheets attributed to the app. Safe to call before any of the
  * app's CSS exists and repeatedly.

package/esm/lib/stylesheetRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stylesheetRegistry.d.ts","sourceRoot":"","sources":["../../src/lib/stylesheetRegistry.ts"],"names":[],"mappings":"AAkJA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAiCtF;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAQvE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAM1D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAM5D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAQ9C"}
+{"version":3,"file":"stylesheetRegistry.d.ts","sourceRoot":"","sources":["../../src/lib/stylesheetRegistry.ts"],"names":[],"mappings":"AA4JA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAiCtF;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAQvE;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAkB1F;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAM1D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAM5D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAS9C"}

package/esm/lib/stylesheetRegistry.js

@@ -1,10 +1,14 @@
 // (C) 2026 GoodData Corporation
 const scopePrefixes = new Map();
 const reservedHostPrefixes = new Set();
+const assetBaseAliases = new Map();
 const deactivatedApps = new Set();
 let linkLoadStates = new WeakMap();
 let retiredLinks = new WeakSet();
 let observer;
+function withAliases(prefix) {
+    return [prefix, ...(assetBaseAliases.get(prefix) ?? [])];
+}
 function deriveScopePrefix(remoteEntryUrl) {
     try {
         const url = new URL(remoteEntryUrl, document.baseURI);
@@ -21,9 +25,11 @@ function findOwnerOfHref(href) {
     let longestPrefixLength = -1;
     for (const [appId, prefixes] of scopePrefixes) {
         for (const prefix of prefixes) {
-            if (href.startsWith(prefix) && prefix.length > longestPrefixLength) {
-                owner = appId;
-                longestPrefixLength = prefix.length;
+            for (const candidate of withAliases(prefix)) {
+                if (href.startsWith(candidate) && candidate.length > longestPrefixLength) {
+                    owner = appId;
+                    longestPrefixLength = candidate.length;
+                }
             }
         }
     }
@@ -32,7 +38,7 @@ function findOwnerOfHref(href) {
 // An app prefix above a reserved host prefix would claim the host's own links.
 function coversReservedHostScope(prefix) {
     for (const reserved of reservedHostPrefixes) {
-        if (reserved.startsWith(prefix)) {
+        if (withAliases(reserved).some((candidate) => candidate.startsWith(prefix))) {
             return true;
         }
     }
@@ -171,6 +177,31 @@ export function reserveHostStylesheetScope(remoteEntryUrl) {
         reservedHostPrefixes.add(prefix);
     }
 }
+/**
+ * Declares that the remote at `remoteEntryUrl` serves its assets from `assetBaseUrl`, so
+ * stylesheet links under that base belong to whichever app owns the remote entry URL.
+ *
+ * Call order relative to `registerAppStylesheetScope` does not matter. Refused with a warning
+ * when the base is an origin root or covers the host UI module's scope, because it would then
+ * claim host stylesheets.
+ */
+export function registerRemoteAssetBase(remoteEntryUrl, assetBaseUrl) {
+    if (typeof document === "undefined") {
+        return;
+    }
+    const prefix = deriveScopePrefix(remoteEntryUrl);
+    const alias = deriveScopePrefix(assetBaseUrl.endsWith("/") ? assetBaseUrl : `${assetBaseUrl}/`);
+    if (!prefix || !alias || alias === prefix) {
+        return;
+    }
+    if (new URL(alias).pathname === "/" || coversReservedHostScope(alias)) {
+        console.warn(`[host-runtime/stylesheet-registry] Not tracking stylesheets under asset base "${assetBaseUrl}" of remote "${remoteEntryUrl}": the base would also cover host stylesheets.`);
+        return;
+    }
+    const aliases = assetBaseAliases.get(prefix) ?? new Set();
+    aliases.add(alias);
+    assetBaseAliases.set(prefix, aliases);
+}
 /**
  * Re-enables all stylesheets attributed to the app. Safe to call before any of the
  * app's CSS exists and repeatedly.
@@ -199,6 +230,7 @@ export function deactivateAppStylesheets(appId) {
 export function resetStylesheetRegistry() {
     scopePrefixes.clear();
     reservedHostPrefixes.clear();
+    assetBaseAliases.clear();
     deactivatedApps.clear();
     linkLoadStates = new WeakMap();
     retiredLinks = new WeakSet();

package/esm/loader/federationRuntimePlugin.d.ts

@@ -42,7 +42,7 @@ export declare function evictRemoteEntryLoadCache(remoteInfo: {
 }): void;
 /**
  * Host-side Module Federation runtime plugin. Registered on the federation instance created
- * by the remote loader; both hooks work around behaviour of the MF runtime we cannot
+ * by the remote loader; its hooks work around behaviour of the MF runtime we cannot
  * configure any other way.
  */
 export declare function createHostFederationPlugin(): ModuleFederationRuntimePlugin;

package/esm/loader/federationRuntimePlugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"federationRuntimePlugin.d.ts","sourceRoot":"","sources":["../../src/loader/federationRuntimePlugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAEhF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B,oCAAoC,CAAC;AAK7E;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAU3F;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,6BAA6B,CAgB1E"}
+{"version":3,"file":"federationRuntimePlugin.d.ts","sourceRoot":"","sources":["../../src/loader/federationRuntimePlugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAIhF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,2BAA2B,oCAAoC,CAAC;AAK7E;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAU3F;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,6BAA6B,CA0B1E"}

package/esm/loader/federationRuntimePlugin.js

@@ -1,4 +1,5 @@
 // (C) 2026 GoodData Corporation
+import { registerRemoteAssetBase } from "../lib/stylesheetRegistry.js";
 /**
  * Timeout applied to every `<link rel="preload">` Module Federation creates.
  *
@@ -46,7 +47,7 @@ export function evictRemoteEntryLoadCache(remoteInfo) {
 }
 /**
  * Host-side Module Federation runtime plugin. Registered on the federation instance created
- * by the remote loader; both hooks work around behaviour of the MF runtime we cannot
+ * by the remote loader; its hooks work around behaviour of the MF runtime we cannot
  * configure any other way.
  */
 export function createHostFederationPlugin() {
@@ -62,5 +63,14 @@ export function createHostFederationPlugin() {
                 evictRemoteEntryLoadCache(remoteInfo);
             }
         },
+        // A manifest publicPath (e.g. the CDN base) moves the remote's CSS off its entry URL.
+        // The stylesheet registry must know that base to attribute those links to the app.
+        loadRemoteSnapshot: async (args) => {
+            const { moduleInfo, remoteSnapshot } = args;
+            if ("entry" in moduleInfo && "publicPath" in remoteSnapshot && remoteSnapshot.publicPath) {
+                registerRemoteAssetBase(moduleInfo.entry, remoteSnapshot.publicPath);
+            }
+            return args;
+        },
     };
 }

package/esm/platformContext/notAuthenticatedGrace.d.ts

@@ -0,0 +1,24 @@
+/**
+ * How long a 401 is treated as "login redirect in progress" before it is shown as an error.
+ *
+ * @remarks
+ * The backend's not-authenticated handler navigates to the login page on every 401, so the error
+ * is normally never seen. The error surfaces only when no navigation happens, e.g. the 401 carries
+ * no authentication flow or an embedding host installed a handler that does not redirect.
+ *
+ * @internal
+ */
+export declare const NOT_AUTHENTICATED_GRACE_MS = 10000;
+/**
+ * Calls `onExpired` once the grace period passes. Returns a function that cancels the call.
+ *
+ * @internal
+ */
+export declare function afterNotAuthenticatedGrace(onExpired: () => void): () => void;
+/**
+ * Resolves once the grace period passes, or immediately when `signal` aborts.
+ *
+ * @internal
+ */
+export declare function waitForNotAuthenticatedGrace(signal: AbortSignal): Promise<void>;
+//# sourceMappingURL=notAuthenticatedGrace.d.ts.map

package/esm/platformContext/notAuthenticatedGrace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notAuthenticatedGrace.d.ts","sourceRoot":"","sources":["../../src/platformContext/notAuthenticatedGrace.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAG5E;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB/E"}

package/esm/platformContext/notAuthenticatedGrace.js

@@ -0,0 +1,39 @@
+// (C) 2026 GoodData Corporation
+/**
+ * How long a 401 is treated as "login redirect in progress" before it is shown as an error.
+ *
+ * @remarks
+ * The backend's not-authenticated handler navigates to the login page on every 401, so the error
+ * is normally never seen. The error surfaces only when no navigation happens, e.g. the 401 carries
+ * no authentication flow or an embedding host installed a handler that does not redirect.
+ *
+ * @internal
+ */
+export const NOT_AUTHENTICATED_GRACE_MS = 10_000;
+/**
+ * Calls `onExpired` once the grace period passes. Returns a function that cancels the call.
+ *
+ * @internal
+ */
+export function afterNotAuthenticatedGrace(onExpired) {
+    const timer = setTimeout(onExpired, NOT_AUTHENTICATED_GRACE_MS);
+    return () => clearTimeout(timer);
+}
+/**
+ * Resolves once the grace period passes, or immediately when `signal` aborts.
+ *
+ * @internal
+ */
+export function waitForNotAuthenticatedGrace(signal) {
+    return new Promise((resolve) => {
+        if (signal.aborted) {
+            resolve();
+            return;
+        }
+        const cancel = afterNotAuthenticatedGrace(resolve);
+        signal.addEventListener("abort", () => {
+            cancel();
+            resolve();
+        }, { once: true });
+    });
+}

package/esm/platformContext/tigerNotAuthenticatedHandler.d.ts

@@ -1,4 +1,5 @@
 import { type IAuthenticationContext, type NotAuthenticated } from "@gooddata/sdk-backend-spi";
+import { type RedirectToTigerAuthenticationHandler } from "@gooddata/sdk-backend-tiger";
 /** Not authenticated handler will be called every time 401 is returned from Tiger backend. */
-export declare function createNotAuthenticatedHandler(externalProviderId?: string): (ctx: IAuthenticationContext, err: NotAuthenticated) => void;
+export declare function createNotAuthenticatedHandler(externalProviderId?: string, redirectHandler?: RedirectToTigerAuthenticationHandler): (ctx: IAuthenticationContext, err: NotAuthenticated) => void;
 //# sourceMappingURL=tigerNotAuthenticatedHandler.d.ts.map

package/esm/platformContext/tigerNotAuthenticatedHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tigerNotAuthenticatedHandler.d.ts","sourceRoot":"","sources":["../../src/platformContext/tigerNotAuthenticatedHandler.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAM/F,8FAA8F;AAE9F,wBAAgB,6BAA6B,CACzC,kBAAkB,CAAC,EAAE,MAAM,GAC5B,CAAC,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAY9D"}
+{"version":3,"file":"tigerNotAuthenticatedHandler.d.ts","sourceRoot":"","sources":["../../src/platformContext/tigerNotAuthenticatedHandler.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EACH,KAAK,oCAAoC,EAG5C,MAAM,6BAA6B,CAAC;AAErC,8FAA8F;AAE9F,wBAAgB,6BAA6B,CACzC,kBAAkB,CAAC,EAAE,MAAM,EAC3B,eAAe,GAAE,oCAEkB,GACpC,CAAC,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAU9D"}

package/esm/platformContext/tigerNotAuthenticatedHandler.js

@@ -2,15 +2,15 @@
 import { throttle } from "lodash-es";
 import { createRedirectToTigerAuthenticationWithParams, redirectToTigerAuthentication, } from "@gooddata/sdk-backend-tiger";
 /** Not authenticated handler will be called every time 401 is returned from Tiger backend. */
-export function createNotAuthenticatedHandler(externalProviderId) {
-    const redirectHandler = externalProviderId
-        ? createRedirectToTigerAuthenticationWithParams({ externalProviderId })
-        : redirectToTigerAuthentication;
-    const debouncedRedirectHandler = throttle(redirectHandler, 500, {
-        leading: false,
-        trailing: true,
+export function createNotAuthenticatedHandler(externalProviderId, redirectHandler = externalProviderId
+    ? createRedirectToTigerAuthenticationWithParams({ externalProviderId })
+    : redirectToTigerAuthentication) {
+    // Boot fires several requests in parallel. Redirect on the first 401 and ignore the rest.
+    const throttledRedirectHandler = throttle(redirectHandler, 500, {
+        leading: true,
+        trailing: false,
     });
     return (ctx, err) => {
-        debouncedRedirectHandler(ctx, err);
+        throttledRedirectHandler(ctx, err);
     };
 }

package/esm/platformContext/useLoadPlatformContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useLoadPlatformContext.d.ts","sourceRoot":"","sources":["../../src/platformContext/useLoadPlatformContext.ts"],"names":[],"mappings":"AAOA,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAO3G,OAAO,EACH,KAAK,6BAA6B,EAGrC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACH,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAElC,MAAM,YAAY,CAAC;AAYpB;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CA6JrF;AAED;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC5C,YAAY,CAAC,SAAS,EAAE,6BAA6B,GAAG,IAAI,CAAC;IAC7D,SAAS,EAAE,MAAM,QAAQ,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC/E,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAChD,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAmED;;GAEG;AACH,eAAO,MAAM,8BAA8B,EAAE,+BACA,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,6BAA6B,GAAG,IAAI,CAE/F"}
+{"version":3,"file":"useLoadPlatformContext.d.ts","sourceRoot":"","sources":["../../src/platformContext/useLoadPlatformContext.ts"],"names":[],"mappings":"AAQA,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAO3G,OAAO,EACH,KAAK,6BAA6B,EAGrC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACH,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAElC,MAAM,YAAY,CAAC;AAYpB;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CA6JrF;AAED;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC5C,YAAY,CAAC,SAAS,EAAE,6BAA6B,GAAG,IAAI,CAAC;IAC7D,SAAS,EAAE,MAAM,QAAQ,CAAC,0BAA0B,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC/E,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAChD,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AA4ED;;GAEG;AACH,eAAO,MAAM,8BAA8B,EAAE,+BACA,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,6BAA6B,GAAG,IAAI,CAE/F"}

package/esm/platformContext/useLoadPlatformContext.js

@@ -1,12 +1,14 @@
 // (C) 2026 GoodData Corporation
 import { useEffect, useMemo, useState, useSyncExternalStore } from "react";
 import { useLocation } from "react-router";
+import { isNotAuthenticated } from "@gooddata/sdk-backend-spi";
 import { isLocale } from "@gooddata/sdk-model";
 import { isProduction } from "../lib/isProduction.js";
 import { getApplicationScopeFromPath, getWorkspaceIdFromPath } from "../loader/routing.js";
 import { resolveAvailableWorkspaceApplications } from "../registry/pluggableApplicationsRegistry.js";
 import { getBackend } from "./backend.js";
 import { HostApplicationDisabledError, loadPlatformContext, } from "./loadPlatformContext.js";
+import { waitForNotAuthenticatedGrace } from "./notAuthenticatedGrace.js";
 import { useWorkspaceColorPalette } from "./useWorkspaceColorPalette.js";
 import { useWorkspacePermissions } from "./useWorkspacePermissions.js";
 import { useWorkspaceSettings } from "./useWorkspaceSettings.js";
@@ -171,12 +173,13 @@ class BackendPlatformContextProviderClass {
             this._setResult(this._loadingStateMemo);
         }
         this._abortController = new AbortController();
+        const signal = this._abortController.signal;
         try {
             if (shouldWaitForInjectedApiToken()) {
-                await waitForInjectedApiToken(this._abortController.signal);
+                await waitForInjectedApiToken(signal);
             }
             const ctx = await loadPlatformContext({
-                signal: this._abortController.signal,
+                signal,
                 callbacks: this._callbacks,
             });
             if (!this._abortController.signal.aborted) {
@@ -191,6 +194,14 @@ class BackendPlatformContextProviderClass {
             if (e instanceof DOMException && e.name === "AbortError") {
                 return;
             }
+            // The backend redirects to login on a 401. Keep the loader up so the error does not
+            // flash before the browser leaves the page.
+            if (isNotAuthenticated(e)) {
+                await waitForNotAuthenticatedGrace(signal);
+                if (signal.aborted) {
+                    return;
+                }
+            }
             console.error("[host-runtime/platform-context] Failed to load platform context.", e);
             const message = e instanceof Error ? e.message : "Unknown platform context error.";
             if (!this._abortController.signal.aborted) {

package/esm/platformContext/useWorkspacePermissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useWorkspacePermissions.d.ts","sourceRoot":"","sources":["../../src/platformContext/useWorkspacePermissions.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAIjE,KAAK,yBAAyB,GACxB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,qBAAqB,CAAA;CAAE,GACtD;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAYxC;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,WAAW,EAAE,MAAM,GAAG,SAAS,GAChC,yBAAyB,CA6D3B"}
+{"version":3,"file":"useWorkspacePermissions.d.ts","sourceRoot":"","sources":["../../src/platformContext/useWorkspacePermissions.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,kBAAkB,EAAsB,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAKjE,KAAK,yBAAyB,GACxB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,qBAAqB,CAAA;CAAE,GACtD;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAYxC;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,WAAW,EAAE,MAAM,GAAG,SAAS,GAChC,yBAAyB,CAuE3B"}

package/esm/platformContext/useWorkspacePermissions.js

@@ -1,5 +1,7 @@
 // (C) 2026 GoodData Corporation
 import { useEffect, useState } from "react";
+import { isNotAuthenticated } from "@gooddata/sdk-backend-spi";
+import { afterNotAuthenticatedGrace } from "./notAuthenticatedGrace.js";
 import { classifyWorkspaceAccessError } from "./workspaceAccess.js";
 const IDLE = { state: "idle" };
 const LOADING = { state: "loading" };
@@ -26,6 +28,7 @@ export function useWorkspacePermissions(backend, workspaceId) {
             return;
         }
         let cancelled = false;
+        let cancelGrace;
         setSnapshot({ backend, workspaceId, state: LOADING });
         const update = (state) => {
             if (!cancelled) {
@@ -49,10 +52,19 @@ export function useWorkspacePermissions(backend, workspaceId) {
                 return;
             }
             const error = e instanceof Error ? e.message : "Unknown error loading workspace permissions.";
+            // Stay "loading" while the backend redirects to login on a 401.
+            if (isNotAuthenticated(e)) {
+                if (cancelled) {
+                    return;
+                }
+                cancelGrace = afterNotAuthenticatedGrace(() => update({ state: "error", error }));
+                return;
+            }
             update({ state: "error", error });
         });
         return () => {
             cancelled = true;
+            cancelGrace?.();
         };
     }, [backend, workspaceId]);
     if (!backend || !workspaceId) {

package/esm/platformContext/useWorkspaceSettings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useWorkspaceSettings.d.ts","sourceRoot":"","sources":["../../src/platformContext/useWorkspaceSettings.ts"],"names":[],"mappings":"AAIA,OAAO,EAEH,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC9B,MAAM,2BAA2B,CAAC;AAEnC,KAAK,sBAAsB,GACrB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,sBAAsB,CAAA;CAAE,GACpD;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAChC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,WAAW,EAAE,MAAM,GAAG,SAAS,GAChC,sBAAsB,CAqCxB"}
+{"version":3,"file":"useWorkspaceSettings.d.ts","sourceRoot":"","sources":["../../src/platformContext/useWorkspaceSettings.ts"],"names":[],"mappings":"AAIA,OAAO,EAEH,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAE9B,MAAM,2BAA2B,CAAC;AAInC,KAAK,sBAAsB,GACrB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,sBAAsB,CAAA;CAAE,GACpD;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAChC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,WAAW,EAAE,MAAM,GAAG,SAAS,GAChC,sBAAsB,CA8CxB"}

package/esm/platformContext/useWorkspaceSettings.js

@@ -1,6 +1,7 @@
 // (C) 2026 GoodData Corporation
 import { useEffect, useState } from "react";
-import { UnexpectedResponseError, } from "@gooddata/sdk-backend-spi";
+import { UnexpectedResponseError, isNotAuthenticated, } from "@gooddata/sdk-backend-spi";
+import { afterNotAuthenticatedGrace } from "./notAuthenticatedGrace.js";
 /**
  * Loads effective workspace-scoped settings for the current user.
  *
@@ -18,6 +19,7 @@ export function useWorkspaceSettings(backend, workspaceId) {
             return;
         }
         let cancelled = false;
+        let cancelGrace;
         setSettingsState({ state: "loading" });
         backend
             .workspace(workspaceId)
@@ -36,10 +38,16 @@ export function useWorkspaceSettings(backend, workspaceId) {
                 return;
             }
             const error = e instanceof Error ? e.message : "Unknown error loading workspace settings.";
+            // Stay "loading" while the backend redirects to login on a 401.
+            if (isNotAuthenticated(e)) {
+                cancelGrace = afterNotAuthenticatedGrace(() => setSettingsState({ state: "error", error }));
+                return;
+            }
             setSettingsState({ state: "error", error });
         });
         return () => {
             cancelled = true;
+            cancelGrace?.();
         };
     }, [backend, workspaceId]);
     return settingsState;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gooddata/sdk-ui-pluggable-host",
-  "version": "11.62.0-alpha.2",
+  "version": "11.62.0-alpha.3",
   "description": "GoodData SDK runtime for hosting pluggable applications — registry, loader, routing, platform context, default UI chrome",
   "license": "MIT",
   "author": "GoodData Corporation",
@@ -29,25 +29,26 @@
   "dependencies": {
     "@module-federation/runtime": "2.6.0",
     "lodash-es": "^4.17.23",
-    "@gooddata/sdk-backend-base": "11.62.0-alpha.2",
-    "@gooddata/sdk-backend-spi": "11.62.0-alpha.2",
-    "@gooddata/sdk-backend-tiger": "11.62.0-alpha.2",
-    "@gooddata/sdk-embedding": "11.62.0-alpha.2",
-    "@gooddata/sdk-model": "11.62.0-alpha.2",
-    "@gooddata/sdk-pluggable-application-model": "11.62.0-alpha.2",
-    "@gooddata/sdk-ui": "11.62.0-alpha.2",
-    "@gooddata/sdk-ui-application-header": "11.62.0-alpha.2",
-    "@gooddata/sdk-ui-ext": "11.62.0-alpha.2",
-    "@gooddata/sdk-ui-kit": "11.62.0-alpha.2",
-    "@gooddata/sdk-ui-gen-ai": "11.62.0-alpha.2",
-    "@gooddata/sdk-ui-theme-provider": "11.62.0-alpha.2",
-    "@gooddata/sdk-ui-semantic-search": "11.62.0-alpha.2",
-    "@gooddata/util": "11.62.0-alpha.2"
+    "@gooddata/sdk-backend-base": "11.62.0-alpha.3",
+    "@gooddata/sdk-embedding": "11.62.0-alpha.3",
+    "@gooddata/sdk-backend-spi": "11.62.0-alpha.3",
+    "@gooddata/sdk-model": "11.62.0-alpha.3",
+    "@gooddata/sdk-backend-tiger": "11.62.0-alpha.3",
+    "@gooddata/sdk-pluggable-application-model": "11.62.0-alpha.3",
+    "@gooddata/sdk-ui": "11.62.0-alpha.3",
+    "@gooddata/sdk-ui-application-header": "11.62.0-alpha.3",
+    "@gooddata/sdk-ui-ext": "11.62.0-alpha.3",
+    "@gooddata/sdk-ui-gen-ai": "11.62.0-alpha.3",
+    "@gooddata/sdk-ui-kit": "11.62.0-alpha.3",
+    "@gooddata/sdk-ui-semantic-search": "11.62.0-alpha.3",
+    "@gooddata/sdk-ui-theme-provider": "11.62.0-alpha.3",
+    "@gooddata/util": "11.62.0-alpha.3"
   },
   "devDependencies": {
     "@microsoft/api-documenter": "7.30.16",
     "@microsoft/api-extractor": "7.59.2",
     "@testing-library/dom": "10.4.2",
+    "@testing-library/jest-dom": "7.0.1",
     "@testing-library/react": "16.3.0",
     "@types/lodash-es": "4.17.12",
     "@types/node": "24.12.0",
@@ -55,7 +56,7 @@
     "@types/react-dom": "19.1.7",
     "@typescript-eslint/eslint-plugin": "8.58.0",
     "@typescript-eslint/parser": "8.58.0",
-    "@vitest/coverage-v8": "4.1.11",
+    "@vitest/coverage-v8": "5.0.4",
     "eslint": "^9.39.2",
     "eslint-plugin-headers": "1.3.3",
     "eslint-plugin-jsdoc": "62.1.0",
@@ -79,10 +80,9 @@
     "tslib": "2.8.1",
     "typescript": "7.0.2",
     "vite": "8.0.16",
-    "vitest": "4.1.11",
-    "vitest-dom": "0.1.1",
-    "@gooddata/eslint-config": "11.62.0-alpha.2",
-    "@gooddata/oxlint-config": "11.62.0-alpha.2"
+    "vitest": "5.0.4",
+    "@gooddata/oxlint-config": "11.62.0-alpha.3",
+    "@gooddata/eslint-config": "11.62.0-alpha.3"
   },
   "peerDependencies": {
     "react": ">=18.3.1",