@nsxbet/admin-sdk 0.7.0 → 0.8.0

package/dist/env.js

@@ -0,0 +1,50 @@
+/**
+ * Runtime environment from `window.__ENV__` (set by `/env.js` from the shell or adminModule() dev server).
+ */
+function isValidUrl(value) {
+    try {
+        new URL(value);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function parseEnv() {
+    const raw = (typeof window !== "undefined" && window.__ENV__) || {};
+    let adminGatewayUrl;
+    if (typeof raw.ADMIN_GATEWAY_URL === "string" && raw.ADMIN_GATEWAY_URL) {
+        if (isValidUrl(raw.ADMIN_GATEWAY_URL)) {
+            adminGatewayUrl = raw.ADMIN_GATEWAY_URL;
+        }
+        else {
+            console.warn("[env] ADMIN_GATEWAY_URL is not a valid URL:", raw.ADMIN_GATEWAY_URL);
+        }
+    }
+    const mockAuthRaw = raw.MOCK_AUTH;
+    if (mockAuthRaw !== undefined &&
+        mockAuthRaw !== "true" &&
+        mockAuthRaw !== "false") {
+        console.warn('[env] MOCK_AUTH must be "true" or "false", got:', mockAuthRaw);
+    }
+    let registryPollInterval;
+    const rawPoll = raw.REGISTRY_POLL_INTERVAL;
+    if (rawPoll !== undefined && rawPoll !== null && rawPoll !== "") {
+        const parsed = Number(rawPoll);
+        if (!Number.isNaN(parsed)) {
+            registryPollInterval = parsed;
+        }
+        else {
+            console.warn("[env] REGISTRY_POLL_INTERVAL must be a number, got:", rawPoll);
+        }
+    }
+    return {
+        adminGatewayUrl,
+        mockAuth: mockAuthRaw === "true",
+        environment: typeof raw.ENVIRONMENT === "string" && raw.ENVIRONMENT
+            ? raw.ENVIRONMENT
+            : "local",
+        registryPollInterval,
+    };
+}
+export const env = parseEnv();

package/dist/hooks/useAuth.d.ts

@@ -3,8 +3,8 @@ import type { User } from '../types/platform';
  * Authentication methods available in all modes
  */
 export interface UseAuthResult {
-    /** Get the current access token */
-    getAccessToken: () => Promise<string>;
+    /** Get the current access token. Null when using BFF HttpOnly cookie auth. */
+    getAccessToken: () => Promise<string | null>;
     /** Check if user has a specific permission */
     hasPermission: (permission: string) => boolean;
     /** Get current user information */
@@ -15,6 +15,6 @@ export interface UseAuthResult {
 /**
  * useAuth provides authentication methods that work seamlessly across:
  * - Shell mode (using platform API)
- * - Standalone mode with AuthClient (Keycloak or in-memory)
+ * - Standalone mode with AuthClient (BFF cookie or in-memory)
  */
 export declare function useAuth(): UseAuthResult;

package/dist/hooks/useAuth.js

@@ -1,34 +1,39 @@
 /**
  * Unified authentication hook that works in shell, standalone, and mock modes
  */
+import { useMemo } from 'react';
 import { usePlatformAPI } from './usePlatformAPI';
+import { useCallbackRef } from './useCallbackRef';
 import { useOptionalAuthContext } from '../components/AuthProvider';
 /**
  * useAuth provides authentication methods that work seamlessly across:
  * - Shell mode (using platform API)
- * - Standalone mode with AuthClient (Keycloak or in-memory)
+ * - Standalone mode with AuthClient (BFF cookie or in-memory)
  */
 export function useAuth() {
     const { isShellMode, api } = usePlatformAPI();
     const authContext = useOptionalAuthContext();
-    // In shell mode, use the platform API
-    if (isShellMode && api) {
-        return {
-            getAccessToken: api.auth.getAccessToken,
-            hasPermission: api.auth.hasPermission,
-            getUser: api.auth.getUser,
-            logout: api.auth.logout,
-        };
-    }
-    // Use AuthProvider context (new AuthClient-based system)
-    if (authContext) {
-        return {
-            getAccessToken: authContext.getAccessToken,
-            hasPermission: authContext.hasPermission,
-            getUser: () => authContext.user || { id: '', email: '', displayName: '', roles: [] },
-            logout: authContext.logout,
-        };
-    }
-    throw new Error('useAuth must be used within AuthProvider. ' +
-        'Wrap your app with <AuthProvider authClient={...}> from @nsxbet/admin-sdk');
+    const standaloneGetUser = useCallbackRef(authContext
+        ? () => authContext.user || { id: '', email: '', displayName: '', roles: [] }
+        : undefined);
+    return useMemo(() => {
+        if (isShellMode && api) {
+            return {
+                getAccessToken: api.auth.getAccessToken,
+                hasPermission: api.auth.hasPermission,
+                getUser: api.auth.getUser,
+                logout: api.auth.logout,
+            };
+        }
+        if (authContext) {
+            return {
+                getAccessToken: authContext.getAccessToken,
+                hasPermission: authContext.hasPermission,
+                getUser: standaloneGetUser,
+                logout: authContext.logout,
+            };
+        }
+        throw new Error('useAuth must be used within AuthProvider. ' +
+            'Wrap your app with <AuthProvider authClient={...}> from @nsxbet/admin-sdk');
+    }, [isShellMode, api, authContext, standaloneGetUser]);
 }

package/dist/hooks/useCallbackRef.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Returns a stable function reference that always invokes the latest callback.
+ *
+ * Follows the Radix UI / "Latest Ref" pattern: the returned function identity
+ * never changes, but calling it always executes the most recent `callback`.
+ */
+export declare function useCallbackRef<T extends (...args: any[]) => any>(callback: T | undefined): T;

package/dist/hooks/useCallbackRef.js

@@ -0,0 +1,14 @@
+import { useRef, useEffect, useMemo } from 'react';
+/**
+ * Returns a stable function reference that always invokes the latest callback.
+ *
+ * Follows the Radix UI / "Latest Ref" pattern: the returned function identity
+ * never changes, but calling it always executes the most recent `callback`.
+ */
+export function useCallbackRef(callback) {
+    const callbackRef = useRef(callback);
+    useEffect(() => {
+        callbackRef.current = callback;
+    });
+    return useMemo(() => ((...args) => callbackRef.current?.(...args)), []);
+}

package/dist/hooks/useFetch.js

@@ -18,8 +18,13 @@ export function useFetch() {
             // In shell mode, use platform fetch (handles auth automatically)
             return api.fetch(input, init);
         }
-        // In standalone mode, add auth header manually
         const token = await getAccessToken();
+        if (token === null) {
+            return fetch(input, {
+                ...init,
+                credentials: 'include',
+            });
+        }
         return fetch(input, {
             ...init,
             headers: {

package/dist/hooks/useI18n.js

@@ -4,7 +4,7 @@
 import { useEffect, useState, useCallback } from 'react';
 import { useTranslation } from 'react-i18next';
 import { usePlatformAPI } from './usePlatformAPI';
-import { saveLocale, isSupportedLocale, i18n } from '../i18n';
+import { saveLocale, isSupportedLocale, i18n, DEFAULT_LOCALE } from '../i18n';
 /**
  * useI18n provides internationalization methods and translation access
  *
@@ -37,7 +37,7 @@ import { saveLocale, isSupportedLocale, i18n } from '../i18n';
  */
 export function useI18n(namespace) {
     const { isShellMode, api } = usePlatformAPI();
-    const [standaloneLocale, setStandaloneLocale] = useState(i18n.language || 'pt-BR');
+    const [standaloneLocale, setStandaloneLocale] = useState(i18n.language || DEFAULT_LOCALE);
     // Use react-i18next's useTranslation for reactive updates
     const { t, i18n: i18nInstance } = useTranslation(namespace || 'shell');
     // Subscribe to platform locale changes in shell mode

package/dist/hooks/usePlatformAPI.d.ts

@@ -1,6 +1,3 @@
-/**
- * Hook to access the platform API
- */
 import type { PlatformAPI } from '../types/platform';
 /**
  * Returns the platform API and whether the module is running in shell mode

package/dist/hooks/usePlatformAPI.js

@@ -1,10 +1,12 @@
+/**
+ * Hook to access the platform API
+ */
+import { useMemo } from 'react';
 /**
  * Returns the platform API and whether the module is running in shell mode
  */
 export function usePlatformAPI() {
     const isShellMode = typeof window !== 'undefined' && window.__ADMIN_PLATFORM_API__ !== undefined;
-    return {
-        isShellMode,
-        api: isShellMode ? window.__ADMIN_PLATFORM_API__ : undefined,
-    };
+    const api = isShellMode ? window.__ADMIN_PLATFORM_API__ : undefined;
+    return useMemo(() => ({ isShellMode, api }), [isShellMode, api]);
 }

package/dist/i18n/config.d.ts

@@ -4,8 +4,9 @@
  * Supports: Portuguese (Brazil), Spanish, English (US), Romanian
  */
 import i18n from 'i18next';
-export declare const SUPPORTED_LOCALES: readonly ["pt-BR", "es", "en-US", "ro"];
+export declare const SUPPORTED_LOCALES: readonly ["en-US", "pt-BR", "es", "ro"];
 export type SupportedLocale = (typeof SUPPORTED_LOCALES)[number];
+export declare const DEFAULT_LOCALE: SupportedLocale;
 /**
  * Localized string value - one string per supported locale.
  * Used for manifest title, description, and command titles.

package/dist/i18n/config.js

@@ -9,7 +9,8 @@ import ptBR from './locales/pt-BR.json';
 import es from './locales/es.json';
 import enUS from './locales/en-US.json';
 import ro from './locales/ro.json';
-export const SUPPORTED_LOCALES = ['pt-BR', 'es', 'en-US', 'ro'];
+export const SUPPORTED_LOCALES = ['en-US', 'pt-BR', 'es', 'ro'];
+export const DEFAULT_LOCALE = 'en-US';
 /**
  * Resolves a localized string for the given locale.
  * Falls back to en-US if the locale is missing.
@@ -69,12 +70,12 @@ export function registerModuleTranslations(namespace, translations) {
  */
 function getSavedLocale() {
     if (typeof window === 'undefined')
-        return 'pt-BR';
+        return DEFAULT_LOCALE;
     const saved = localStorage.getItem(STORAGE_KEY);
     if (saved && SUPPORTED_LOCALES.includes(saved)) {
         return saved;
     }
-    return 'pt-BR';
+    return DEFAULT_LOCALE;
 }
 /**
  * Save locale to localStorage

package/dist/i18n/index.d.ts

@@ -1,5 +1,5 @@
 /**
  * i18n module exports
  */
-export { initI18n, saveLocale, isSupportedLocale, resolveLocalizedString, registerModuleTranslations, i18n, SUPPORTED_LOCALES, LOCALE_FLAGS, LOCALE_NAMES, } from './config';
+export { initI18n, saveLocale, isSupportedLocale, resolveLocalizedString, registerModuleTranslations, i18n, SUPPORTED_LOCALES, DEFAULT_LOCALE, LOCALE_FLAGS, LOCALE_NAMES, } from './config';
 export type { SupportedLocale, LocalizedField } from './config';

package/dist/i18n/index.js

@@ -1,4 +1,4 @@
 /**
  * i18n module exports
  */
-export { initI18n, saveLocale, isSupportedLocale, resolveLocalizedString, registerModuleTranslations, i18n, SUPPORTED_LOCALES, LOCALE_FLAGS, LOCALE_NAMES, } from './config';
+export { initI18n, saveLocale, isSupportedLocale, resolveLocalizedString, registerModuleTranslations, i18n, SUPPORTED_LOCALES, DEFAULT_LOCALE, LOCALE_FLAGS, LOCALE_NAMES, } from './config';

package/dist/i18n/locales/en-US.json

@@ -212,6 +212,13 @@
         "baseUrl": "Base URL",
         "id": "ID"
     },
+    "loginPage": {
+        "welcomeTo": "Welcome to",
+        "brandName": "NSXBet Admin",
+        "subtitle": "Administration Platform",
+        "loginButton": "Login with Corporate SSO",
+        "secureAuth": "Secure Authentication"
+    },
     "breadcrumbs": {
         "home": "Home",
         "registry": "Registry",

package/dist/i18n/locales/es.json

@@ -212,6 +212,13 @@
         "baseUrl": "URL Base",
         "id": "ID"
     },
+    "loginPage": {
+        "welcomeTo": "Bienvenido a",
+        "brandName": "NSXBet Admin",
+        "subtitle": "Plataforma de Administración",
+        "loginButton": "Iniciar sesión con SSO Corporativo",
+        "secureAuth": "Autenticación Segura"
+    },
     "breadcrumbs": {
         "home": "Inicio",
         "registry": "Registro",

package/dist/i18n/locales/pt-BR.json

@@ -212,6 +212,13 @@
         "baseUrl": "URL Base",
         "id": "ID"
     },
+    "loginPage": {
+        "welcomeTo": "Bem-vindo ao",
+        "brandName": "NSXBet Admin",
+        "subtitle": "Plataforma de Administração",
+        "loginButton": "Entrar com SSO Corporativo",
+        "secureAuth": "Autenticação Segura"
+    },
     "breadcrumbs": {
         "home": "Início",
         "registry": "Registro",

package/dist/i18n/locales/ro.json

@@ -212,6 +212,13 @@
         "baseUrl": "URL Bază",
         "id": "ID"
     },
+    "loginPage": {
+        "welcomeTo": "Bine ai venit la",
+        "brandName": "NSXBet Admin",
+        "subtitle": "Platformă de Administrare",
+        "loginButton": "Autentificare cu SSO Corporativ",
+        "secureAuth": "Autentificare Securizată"
+    },
     "breadcrumbs": {
         "home": "Acasă",
         "registry": "Registru",

package/dist/index.d.ts

@@ -4,6 +4,8 @@
  * SDK for building NSX Admin modules
  * Provides authentication, navigation, and platform integration
  */
+export { env, type EnvConfig } from "./env";
+export { SDK_PACKAGE_VERSION } from "./sdk-version";
 export { AuthProvider, useAuthContext, useOptionalAuthContext } from './components/AuthProvider';
 export { Timestamp } from './components/Timestamp';
 export type { TimestampProps } from './components/Timestamp';
@@ -13,19 +15,19 @@ export { useFetch } from './hooks/useFetch';
 export { useTelemetry } from './hooks/useTelemetry';
 export { useI18n } from './hooks/useI18n';
 export { useTimestamp } from './hooks/useTimestamp';
-export { createInMemoryAuthClient, clearInMemoryAuth, createMockUsersFromRoles, createKeycloakAuthClient, UserSelector, } from './auth';
-export type { AuthClient, InMemoryAuthClient, MockUser, MockUserRoles, AuthState, AuthStateCallback, InMemoryAuthClientOptions, KeycloakAuthClientOptions, } from './auth';
+export { useCallbackRef } from './hooks/useCallbackRef';
+export { createInMemoryAuthClient, clearInMemoryAuth, createMockUsersFromRoles, createBffAuthClient, clearLoggedOutFlag, isLoggedOutFlag, setLoggedOutFlag, UserSelector, LoginPage, } from './auth';
+export type { AuthClient, InMemoryAuthClient, MockUser, MockUserRoles, AuthState, AuthStateCallback, InMemoryAuthClientOptions, BffAuthClient, BffAuthClientOptions, BffMeResponse, LoginPageProps, } from './auth';
 export type { PlatformAPI, Breadcrumb, User, TimezoneMode, TimestampFormat } from './types/platform';
-export type { KeycloakConfig } from './types/keycloak';
 export type { UseAuthResult } from './hooks/useAuth';
 export type { UseTelemetryResult } from './hooks/useTelemetry';
 export type { UseI18nResult } from './hooks/useI18n';
 export type { UseTimestampResult } from './hooks/useTimestamp';
-export { initI18n, saveLocale, isSupportedLocale, resolveLocalizedString, registerModuleTranslations, i18n, SUPPORTED_LOCALES, LOCALE_FLAGS, LOCALE_NAMES, } from './i18n';
+export { initI18n, saveLocale, isSupportedLocale, resolveLocalizedString, registerModuleTranslations, i18n, SUPPORTED_LOCALES, DEFAULT_LOCALE, LOCALE_FLAGS, LOCALE_NAMES, } from './i18n';
 export type { SupportedLocale, LocalizedField } from './i18n';
 export { createInMemoryRegistryClient, clearInMemoryRegistry, createHttpRegistryClient, validateManifest, parseManifest, useRegistryPolling, AdminShellRegistry, useRegistry, useRegistryClient, } from './registry';
 export type { RegistryClient, ModuleOperations, CatalogOperations, InMemoryRegistryOptions, PreConfiguredModule, HttpRegistryOptions, AdminModuleManifest, ModuleCommand as RegistryModuleCommand, ModulePermissions, ModuleOwners, RegisteredModule, UpdateModuleDto, ReorderModuleDto, ModuleFilters, Catalog as RegistryCatalog, CatalogModule, CatalogVersion, ImportMap as RegistryImportMap, RegistryPollingState, UseRegistryPollingOptions, RegistryContextValue, AdminShellRegistryProps, } from './registry';
 export { AdminShell, TopBar, LeftNav, MainContent, CommandPalette, ThemeProvider, useTheme, initTelemetry, track, trackError, fuzzySearch, } from './shell';
 export { DynamicModule, ModuleLoading, ModuleErrorBoundary, } from './router';
 export type { ModuleInfo, ErrorBoundaryProps, } from './router';
-export type { AdminShellProps, TopBarProps, CommandPaletteProps, Module, ModuleCommand, ModuleStatus, NavigationSection, ModuleNavigation, Catalog, ImportMap, SearchableItem, SearchResult, SearchOptions, } from './shell';
+export type { AdminShellProps, AdminShellBffConfig, TopBarProps, CommandPaletteProps, Module, ModuleCommand, ModuleStatus, NavigationSection, ModuleNavigation, Catalog, ImportMap, SearchableItem, SearchResult, SearchOptions, } from './shell';

package/dist/index.js

@@ -4,6 +4,9 @@
  * SDK for building NSX Admin modules
  * Provides authentication, navigation, and platform integration
  */
+// Runtime env (`window.__ENV__` / `/env.js`)
+export { env } from "./env";
+export { SDK_PACKAGE_VERSION } from "./sdk-version";
 // Components
 export { AuthProvider, useAuthContext, useOptionalAuthContext } from './components/AuthProvider';
 export { Timestamp } from './components/Timestamp';
@@ -14,10 +17,11 @@ export { useFetch } from './hooks/useFetch';
 export { useTelemetry } from './hooks/useTelemetry';
 export { useI18n } from './hooks/useI18n';
 export { useTimestamp } from './hooks/useTimestamp';
+export { useCallbackRef } from './hooks/useCallbackRef';
 // Auth Client
-export { createInMemoryAuthClient, clearInMemoryAuth, createMockUsersFromRoles, createKeycloakAuthClient, UserSelector, } from './auth';
+export { createInMemoryAuthClient, clearInMemoryAuth, createMockUsersFromRoles, createBffAuthClient, clearLoggedOutFlag, isLoggedOutFlag, setLoggedOutFlag, UserSelector, LoginPage, } from './auth';
 // i18n
-export { initI18n, saveLocale, isSupportedLocale, resolveLocalizedString, registerModuleTranslations, i18n, SUPPORTED_LOCALES, LOCALE_FLAGS, LOCALE_NAMES, } from './i18n';
+export { initI18n, saveLocale, isSupportedLocale, resolveLocalizedString, registerModuleTranslations, i18n, SUPPORTED_LOCALES, DEFAULT_LOCALE, LOCALE_FLAGS, LOCALE_NAMES, } from './i18n';
 // Registry
 export { 
 // Client factory

package/dist/registry/AdminShellRegistry.js

@@ -26,6 +26,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * ```
  */
 import { createContext, useContext, useState, useEffect, useCallback, useMemo, } from 'react';
+import { useCallbackRef } from '../hooks/useCallbackRef';
 const RegistryContext = createContext(null);
 /**
  * Registry provider component
@@ -51,14 +52,14 @@ export function AdminShellRegistry({ store, children, onModulesChange, }) {
     const [modules, setModules] = useState([]);
     const [isLoading, setIsLoading] = useState(true);
     const [error, setError] = useState(null);
-    // Load modules from registry
+    const stableOnModulesChange = useCallbackRef(onModulesChange);
     const reload = useCallback(async () => {
         setIsLoading(true);
         setError(null);
         try {
             const result = await store.modules.findAll();
             setModules(result);
-            onModulesChange?.(result);
+            stableOnModulesChange(result);
         }
         catch (err) {
             setError(err instanceof Error ? err : new Error('Failed to load modules'));
@@ -67,7 +68,7 @@ export function AdminShellRegistry({ store, children, onModulesChange, }) {
         finally {
             setIsLoading(false);
         }
-    }, [store, onModulesChange]);
+    }, [store, stableOnModulesChange]);
     // Initial load
     useEffect(() => {
         reload();

package/dist/registry/client/http.js

@@ -4,6 +4,7 @@
  * Implementation of RegistryClient that communicates with the admin-api.
  * Used when running with MySQL backend.
  */
+import { SDK_PACKAGE_VERSION } from '../../sdk-version.js';
 /**
  * Create an HTTP registry client
  */
@@ -61,9 +62,13 @@ export function createHttpRegistryClient(options) {
             });
         },
         async registerFromManifest(manifest, baseUrl = '') {
+            const merged = {
+                ...manifest,
+                sdkVersion: manifest.sdkVersion ?? SDK_PACKAGE_VERSION,
+            };
             return request('/modules/manifest', {
                 method: 'POST',
-                body: JSON.stringify({ manifest, baseUrl }),
+                body: JSON.stringify({ manifest: merged, baseUrl }),
             });
         },
         async update(id, data) {

package/dist/registry/client/in-memory.js

@@ -5,6 +5,17 @@
  * Used for local development and testing without a backend.
  */
 import { parseManifest } from '../types';
+import { SDK_PACKAGE_VERSION } from '../../sdk-version.js';
+function parseManifestWithSdkDefault(value) {
+    const raw = value;
+    const merged = {
+        ...raw,
+        sdkVersion: typeof raw.sdkVersion === 'string' && raw.sdkVersion.trim() !== ''
+            ? raw.sdkVersion
+            : SDK_PACKAGE_VERSION,
+    };
+    return parseManifest(merged);
+}
 const DEFAULT_STORAGE_KEY = '@nsxbet/registry';
 /**
  * Create an in-memory registry client
@@ -47,12 +58,13 @@ export function createInMemoryRegistryClient(options = {}) {
     if (options.seed && data.modules.length === 0) {
         const now = new Date().toISOString();
         for (const manifest of options.seed) {
-            const validated = parseManifest(manifest);
+            const validated = parseManifestWithSdkDefault(manifest);
             data.modules.push({
                 id: ++data.autoIncrement,
                 moduleId: validated.id,
                 baseUrl: '',
                 manifest: validated,
+                sdkVersion: validated.sdkVersion,
                 navigationOrder: validated.navigationOrder ?? data.autoIncrement * 10,
                 enabled: true,
                 registeredAt: now,
@@ -66,12 +78,13 @@ export function createInMemoryRegistryClient(options = {}) {
         const now = new Date().toISOString();
         for (const moduleConfig of options.initialModules) {
             const { baseUrl, ...manifestData } = moduleConfig;
-            const validated = parseManifest(manifestData);
+            const validated = parseManifestWithSdkDefault(manifestData);
             data.modules.push({
                 id: ++data.autoIncrement,
                 moduleId: validated.id,
                 baseUrl,
                 manifest: validated,
+                sdkVersion: validated.sdkVersion,
                 navigationOrder: validated.navigationOrder ?? data.autoIncrement * 10,
                 enabled: true,
                 registeredAt: now,
@@ -92,7 +105,7 @@ export function createInMemoryRegistryClient(options = {}) {
                 result = result.filter((m) => m.manifest.category === filters.category);
             }
             if (filters?.status) {
-                result = result.filter(() => filters.status === 'active');
+                result = result.filter((m) => filters.status === 'active' ? m.enabled : !m.enabled);
             }
             // Sort by navigationOrder
             result.sort((a, b) => a.navigationOrder - b.navigationOrder);
@@ -119,13 +132,13 @@ export function createInMemoryRegistryClient(options = {}) {
             const manifestData = await response.json();
             // Extract manifest without entry (entry is fetched by DynamicModule at runtime)
             const { entry: _entry, ...manifest } = manifestData;
-            const validated = parseManifest(manifest);
+            const validated = parseManifestWithSdkDefault(manifest);
             return this.registerFromManifest(validated, baseUrl);
         },
         async registerFromManifest(manifest, baseUrl = '') {
             data = loadStorage(storageKey);
             // Validate manifest
-            const validated = parseManifest(manifest);
+            const validated = parseManifestWithSdkDefault(manifest);
             // Check for duplicate moduleId
             if (data.modules.some((m) => m.moduleId === validated.id)) {
                 throw new Error(`Module with id ${validated.id} already exists`);
@@ -136,6 +149,7 @@ export function createInMemoryRegistryClient(options = {}) {
                 moduleId: validated.id,
                 baseUrl,
                 manifest: validated,
+                sdkVersion: validated.sdkVersion,
                 navigationOrder: validated.navigationOrder ?? data.autoIncrement * 10,
                 enabled: true,
                 registeredAt: now,
@@ -265,6 +279,7 @@ export function createInMemoryRegistryClient(options = {}) {
                     supportChannel: m.manifest.owners?.supportChannel ?? '#general',
                 },
                 status: 'active',
+                sdkVersion: m.manifest.sdkVersion ?? SDK_PACKAGE_VERSION,
                 navigationOrder: m.navigationOrder,
                 icon: m.manifest.icon,
                 navigation: m.manifest.navigation ? {

package/dist/registry/types/manifest.d.ts

@@ -82,6 +82,11 @@ export interface AdminModuleManifest {
     permissions?: ModulePermissions;
     /** Module ownership info */
     owners?: ModuleOwners;
+    /**
+     * Semver of @nsxbet/admin-sdk the module was built against.
+     * Injected at build time by `defineModuleConfig` — omit in source `admin.module.json`.
+     */
+    sdkVersion?: string;
 }
 /**
  * Validates that an object is a valid AdminModuleManifest

package/dist/registry/types/manifest.js

@@ -36,6 +36,9 @@ export function validateManifest(value) {
     if (!isLocalizedField(obj.description)) {
         return false;
     }
+    if (typeof obj.sdkVersion !== "string" || obj.sdkVersion.trim() === "") {
+        return false;
+    }
     // Optional field validations
     if (obj.category !== undefined && typeof obj.category !== 'string') {
         return false;
@@ -74,7 +77,7 @@ export function validateManifest(value) {
  */
 export function parseManifest(value) {
     if (!validateManifest(value)) {
-        throw new Error('Invalid manifest: must have id, title (localized), description (localized), and routeBase (starting with /). Title and description must be objects with all 4 locales: en-US, pt-BR, es, ro.');
+        throw new Error("Invalid manifest: must include id, title (all locales), description (all locales), routeBase (starting with /), and sdkVersion (non-empty string, injected at build time by defineModuleConfig). Title and description must include en-US, pt-BR, es, ro.");
     }
     return value;
 }

package/dist/registry/types/module.d.ts

@@ -18,6 +18,8 @@ export interface RegisteredModule {
     version?: string;
     /** Full parsed module.manifest.json (without entry - fetched at runtime) */
     manifest: AdminModuleManifest;
+    /** Semver of @nsxbet/admin-sdk (DB column; mirrors manifest.sdkVersion) */
+    sdkVersion?: string;
     /** Admin-controlled navigation order */
     navigationOrder: number;
     /** Whether the module is enabled */
@@ -59,7 +61,7 @@ export interface ModuleFilters {
     /** Filter by category */
     category?: string;
     /** Filter by status */
-    status?: 'active' | 'deprecated' | 'disabled';
+    status?: 'active' | 'disabled';
 }
 /**
  * Catalog structure for shell consumption (denormalized)
@@ -96,7 +98,9 @@ export interface CatalogModule {
         team: string;
         supportChannel: string;
     };
-    status: 'active' | 'deprecated' | 'disabled';
+    status: 'active' | 'disabled';
+    /** Semver of @nsxbet/admin-sdk the module was built against */
+    sdkVersion: string;
     navigationOrder?: number;
     icon?: string;
     navigation?: {

package/dist/sdk-version.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Semver of @nsxbet/admin-sdk (synced from package.json by scripts/write-sdk-version.mjs).
+ * Do not edit manually — run `node scripts/write-sdk-version.mjs` after version bumps.
+ */
+export declare const SDK_PACKAGE_VERSION: string;

package/dist/sdk-version.js

@@ -0,0 +1,5 @@
+/**
+ * Semver of @nsxbet/admin-sdk (synced from package.json by scripts/write-sdk-version.mjs).
+ * Do not edit manually — run `node scripts/write-sdk-version.mjs` after version bumps.
+ */
+export const SDK_PACKAGE_VERSION = "0.8.0";