@iloveagents/foundry-web-shell 0.2.2 → 0.3.1

package/AGENTS.md

@@ -2,7 +2,7 @@ Browser bootstrap for the LastSpace agent UI starter. Published as `@iloveagents
 
 # Architecture
 
-Source-shipping (no build step) — same convention as the other `@lastspace/*` packages.
+Source-shipping (no build step) — same convention as the other `@iloveagents/foundry-*` packages.
 
 ```
 src/
@@ -79,4 +79,4 @@ pnpm --filter @iloveagents/foundry-web-shell typecheck   # tsc --noEmit
 
 # Authoring a module
 
-See [`docs/AUTHORING_A_MODULE.md`](../../docs/AUTHORING_A_MODULE.md).
+The `ChatModule` protocol is documented in **Public API** above; the canonical type definitions live in [`src/types.ts`](src/types.ts) (`ChatModule`, `defineChatModule`). For the nav-mutation-from-`useInit` pattern, have your module's `useInit` write the sidebar nav `config` into `useNavStore` (the same store [`src/shell-layout.tsx`](src/shell-layout.tsx) reads via `useNavStore((s) => s.config)`).

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @iloveagents/foundry-web-shell
 
+## 0.3.1
+
+### Patch Changes
+
+- Updated dependencies [9ec870e]
+  - @iloveagents/foundry-web-ui@0.3.1
+  - @iloveagents/foundry-agent@0.3.1
+  - @iloveagents/foundry-web-primitives@0.3.1
+
+## 0.3.0
+
+### Minor Changes
+
+- df383c9: Add runtime configuration support so the web app can ship as a single prebuilt
+  container image that boots for any environment without a rebuild. New
+  `runtimeConfig(key)` helper resolves `window.__APP_CONFIG__[key]` (injected by
+  the container at startup) before `import.meta.env[key]` (build-time Vite env,
+  the local-dev fallback). The default MSAL auth adapter and agent fetch client
+  now read `VITE_MSAL_*` / `VITE_API_BASE_URL` through it. Local `pnpm dev` is
+  unchanged (no `/config.js` → falls back to `import.meta.env`).
+
+### Patch Changes
+
+- @iloveagents/foundry-agent@0.3.0
+- @iloveagents/foundry-web-primitives@0.3.0
+- @iloveagents/foundry-web-ui@0.3.0
+
 ## 0.2.2
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iloveagents/foundry-web-shell",
-  "version": "0.2.2",
+  "version": "0.3.1",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
   "types": "./src/index.ts",
@@ -19,9 +19,9 @@
     "zustand": "^5.0.0"
   },
   "dependencies": {
-    "@iloveagents/foundry-agent": "0.2.2",
-    "@iloveagents/foundry-web-primitives": "0.2.2",
-    "@iloveagents/foundry-web-ui": "0.2.2"
+    "@iloveagents/foundry-agent": "0.3.1",
+    "@iloveagents/foundry-web-primitives": "0.3.1",
+    "@iloveagents/foundry-web-ui": "0.3.1"
   },
   "devDependencies": {
     "typescript": "~5.9.3",

package/src/auth-default.tsx

@@ -2,6 +2,7 @@ import type { FC, ReactNode } from "react";
 import { AuthProvider } from "@iloveagents/foundry-web-ui";
 import type { MsalAuthConfig } from "@iloveagents/foundry-agent/msal";
 import type { AuthAdapter } from "./types.ts";
+import { runtimeConfig } from "./runtime-config.ts";
 
 
 
@@ -23,15 +24,16 @@ function AuthConfigError({ missingKeys }: AuthConfigErrorProps) {
 }
 
 /**
- * Read MSAL configuration from Vite env. Returns the resolved config or the
- * list of missing keys. The shell renders <AuthConfigError /> when any key
- * is missing.
+ * Read MSAL configuration. Prefers runtime config (`window.__APP_CONFIG__`,
+ * injected by the container at startup) and falls back to build-time Vite env
+ * (`import.meta.env`) for local dev — see {@link runtimeConfig}. Returns the
+ * resolved config or the list of missing keys; the shell renders
+ * <AuthConfigError /> when any key is missing.
  */
-function readMsalConfigFromEnv(): MsalAuthConfig | { missing: string[] } {
-  const env = import.meta.env;
-  const clientId = env.VITE_MSAL_CLIENT_ID;
-  const authority = env.VITE_MSAL_AUTHORITY;
-  const apiScope = env.VITE_MSAL_API_SCOPE;
+function readMsalConfig(): MsalAuthConfig | { missing: string[] } {
+  const clientId = runtimeConfig("VITE_MSAL_CLIENT_ID");
+  const authority = runtimeConfig("VITE_MSAL_AUTHORITY");
+  const apiScope = runtimeConfig("VITE_MSAL_API_SCOPE");
   const missing = [
     !clientId ? "VITE_MSAL_CLIENT_ID" : null,
     !authority ? "VITE_MSAL_AUTHORITY" : null,
@@ -39,21 +41,22 @@ function readMsalConfigFromEnv(): MsalAuthConfig | { missing: string[] } {
   ].filter((v): v is string => v !== null);
   if (missing.length > 0) return { missing };
   return {
-    clientId: clientId!,
-    authority: authority!,
-    apiScope: apiScope!,
+    clientId,
+    authority,
+    apiScope,
     redirectUri: window.location.origin,
   };
 }
 
 /**
- * Default MSAL-backed auth adapter. Reads VITE_MSAL_* from import.meta.env.
+ * Default MSAL-backed auth adapter. Reads VITE_MSAL_* from runtime config
+ * (`window.__APP_CONFIG__`) with `import.meta.env` fallback for local dev.
  * Customers override via `bootstrapShell({ authProvider: { Provider: ... } })`
  * for tests or non-MSAL deployments.
  */
 export const defaultAuthAdapter: AuthAdapter = {
   Provider: ({ children }: { children: ReactNode }) => {
-    const result = readMsalConfigFromEnv();
+    const result = readMsalConfig();
     if ("missing" in result) {
       return <AuthConfigError missingKeys={result.missing} />;
     }

package/src/index.ts

@@ -3,6 +3,7 @@ export { ShellApp } from "./shell-app.tsx";
 export { ShellLayout } from "./shell-layout.tsx";
 export { defaultAuthAdapter, ShellAuth } from "./auth-default.tsx";
 export { defaultAgentFetch } from "./service-fetch-default.ts";
+export { runtimeConfig } from "./runtime-config.ts";
 export { defineChatModule } from "./types.ts";
 export type {
   ChatModule,

package/src/runtime-config.ts

@@ -0,0 +1,30 @@
+/**
+ * Runtime configuration reader.
+ *
+ * The web app ships as a SINGLE prebuilt container image that must boot
+ * correctly for any customer / environment without a rebuild. Per-env values
+ * (API base URL, MSAL client/authority/scopes) therefore arrive at RUNTIME —
+ * the container entrypoint writes a small `/config.js` from env vars that sets
+ * `window.__APP_CONFIG__`, loaded before the app bundle.
+ *
+ * `runtimeConfig(key)` resolves, in order:
+ *   1. `window.__APP_CONFIG__[key]`  — runtime config injected by the container
+ *   2. `import.meta.env[key]`        — build-time Vite env (local `pnpm dev`)
+ *   3. `""`                          — absent
+ *
+ * Keeping `import.meta.env` as the fallback means local dev is unchanged: there
+ * is no `/config.js` in dev, so `window.__APP_CONFIG__` is undefined and the
+ * existing `VITE_*` values from `.env` are used exactly as before.
+ *
+ * The window cast is inline (no `declare global`) so this can be duplicated in
+ * sibling packages without conflicting global augmentations.
+ */
+export function runtimeConfig(key: string): string {
+  const fromWindow =
+    typeof window !== "undefined"
+      ? (window as { __APP_CONFIG__?: Record<string, string | undefined> })
+          .__APP_CONFIG__?.[key]
+      : undefined;
+  const fromEnv = (import.meta.env as Record<string, string | undefined>)[key];
+  return fromWindow ?? fromEnv ?? "";
+}

package/src/service-fetch-default.ts

@@ -1,5 +1,6 @@
 import { createServiceFetch } from "@iloveagents/foundry-agent";
 import { authStore } from "@iloveagents/foundry-agent/msal";
+import { runtimeConfig } from "./runtime-config.ts";
 
 /**
  * Default agent fetch client wired to the MSAL token store and the host's
@@ -21,5 +22,5 @@ export const defaultAgentFetch: typeof fetch = createServiceFetch({
   acquireToken: (options) => authStore.getState().getAccessToken("api", options),
   recoverFromHardAuthFailure: (reason) =>
     authStore.getState().recoverFromHardAuthFailure(reason),
-  baseUrl: import.meta.env.VITE_API_BASE_URL,
+  baseUrl: runtimeConfig("VITE_API_BASE_URL"),
 });