@iyulab/modern-app 0.18.2 → 0.18.4

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## [0.18.4] - 2026-08-23
+
+### Fixed
+
+- **`App.load()` now initializes the theme before checking the `auth` gate.** When `auth.me()`
+  resolves to `null`, `load()` calls `auth.renderLogin()` and returns before the shell is built —
+  but `Theme.init()` used to run only after the auth check passed, so any `renderLogin` screen
+  that relies on `--u-*` design tokens (background, spacing, accent colors) rendered with no
+  stylesheet in the document at all. `Theme.init()` and `iconBasepath` setup are pure display
+  configuration independent of auth state, so they now run unconditionally before the gate —
+  every render path, including the pre-auth login screen, has tokens available.
+
+## [0.18.3] - 2026-08-22
+
+### Fixed
+
+- **`SidebarButtonConfig.id`'s docs no longer claim external light-DOM `u-popover` anchoring
+  works.** It doesn't: the rendered `<u-sidebar-button>` lives inside `<u-sidebar-layout>`'s own
+  shadow root, and `for="#id"` lookups never cross a shadow boundary — a popover placed outside
+  the layout can never find the anchor, no matter how the `id` is passed. Documents the recipe
+  that does work instead: assemble the trigger and its `u-popover` together inside a single
+  `type: 'html'` item, with `placement` chosen from the sidebar's own state (a sideways flyout
+  has no room once the sidebar widens on mobile; a vertical one always does). Not a code change —
+  `id` still passes through exactly as before.
+
 ## [0.18.2] - 2026-08-19
 
 ### Fixed

package/dist/App.js

@@ -28,7 +28,7 @@ var o = class o {
 		return t;
 	}
 	async load(a) {
-		if (this.unload(), this._config = a, a.auth) {
+		if (this.unload(), this._config = a, await i.init(a.theme), a.iconBasepath && r(a.iconBasepath), a.auth) {
 			let e = await a.auth.me();
 			if (e == null) {
 				let e = a.root || document.body, t = a.auth.renderLogin({
@@ -42,7 +42,7 @@ var o = class o {
 			}
 			this._user = e, await a.auth.onAuthenticated?.(e);
 		}
-		if (await i.init(a.theme), a.iconBasepath && r(a.iconBasepath), a.i18n) {
+		if (a.i18n) {
 			for (let e of a.i18n.plugins || []) t.use(e);
 			await t.init(a.i18n);
 		}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@iyulab/modern-app",
   "description": "web-framework by iyulab based on lit-element",
-  "version": "0.18.2",
+  "version": "0.18.4",
   "keywords": [
     "iyulab",
     "web-framework",

package/skills/modern-app/references/layout.md

@@ -144,6 +144,7 @@ Action button — triggers a callback instead of navigating.
 ```typescript
 interface SidebarButtonConfig {
   type: 'button';
+  id?: string;
   icon?: string;
   lib?: string;
   label: string | DirectiveResult;
@@ -158,6 +159,12 @@ Example:
 { type: 'button', icon: 'logout', label: 'Sign Out', onClick: () => auth.signOut() }
 ```
 
+`id` is passed straight through to the rendered `<u-sidebar-button>` host. **It does not enable
+anchoring a `u-popover` you place outside the layout** — the button lives inside
+`<u-sidebar-layout>`'s own shadow root, and `querySelector`/`for="#id"` never crosses a shadow
+boundary. If you need a popover anchored to a sidebar item, use `type: 'html'` and assemble both
+inside the same template — see [popup-style submenus](#popup-style-submenus-u-popover) below.
+
 ---
 
 ### `SidebarHtmlConfig` — `type: 'html'`
@@ -190,6 +197,38 @@ Example:
 
 ---
 
+### Popup-style submenus (`u-popover`)
+
+For a submenu that flies out from a sidebar item (rather than expanding in place like
+`SidebarGroupConfig`), assemble a `u-popover` and its trigger together inside a single
+`type: 'html'` item — both then live in the sidebar layout's own shadow root, which is required
+for `for="#id"` anchoring to resolve (see the `id` note above).
+
+```typescript
+{
+  type: 'html',
+  render: (state) => html`
+    <u-sidebar-button id="more-trigger" icon="three-dots" label="More"></u-sidebar-button>
+    <u-popover for="#more-trigger" placement=${state.startsWith('mobile') ? 'bottom-start' : 'right-start'}>
+      <u-menu>
+        <u-menu-item @click=${doA}>Action A</u-menu-item>
+        <u-menu-item @click=${doB}>Action B</u-menu-item>
+      </u-menu>
+    </u-popover>
+  `,
+}
+```
+
+⚠**Pick `placement` based on `state`, not a fixed value.** On `mobile`/`mobile-open`, the sidebar
+itself widens to occupy nearly the full screen — a sideways placement (`right-start`, the natural
+choice for a desktop flyout) then has no room on either side, and `flip()` correctly declines to
+flip when the opposite side has none either. The popover renders off-screen and is invisible. A
+vertical placement (`bottom-start`) has room regardless of sidebar width and works at every state.
+Confirmed empirically in `tests/browser/sidebar-popover-submenu.browser.test.ts` — this is not a
+`strategy="absolute"` vs `"fixed"` distinction, switching strategy does not change the outcome.
+
+---
+
 ## Sidebar parts
 
 Parts available for `styles` overrides on the root layout: