@nsxbet/admin-sdk 0.7.0 → 0.8.0

package/dist/shell/AdminShell.d.ts

@@ -1,5 +1,9 @@
 import type { AuthClient } from "../auth/client/interface";
 import type { AdminModuleManifest, RegistryClient } from "../registry";
+/** Use admin-bff cookie / Okta auth (`createBffAuthClient`). `true` uses current origin. */
+export type AdminShellBffConfig = true | {
+    baseUrl?: string;
+};
 export interface AdminShellProps {
     /**
      * Module manifests to load (used for standalone mode when no registryClient)
@@ -12,17 +16,12 @@ export interface AdminShellProps {
      */
     children?: React.ReactNode;
     /**
-     * Keycloak configuration
-     * If not provided, uses in-memory (mock) authentication
+     * BFF / Okta cookie authentication (recommended for production).
      */
-    keycloak?: {
-        url: string;
-        realm: string;
-        clientId: string;
-    };
+    bff?: AdminShellBffConfig;
     /**
      * Auth client to use for authentication.
-     * If not provided, creates one based on keycloak prop or environment.
+     * If not provided, creates one from `bff` or in-memory (mock) authentication depending on environment.
      */
     authClient?: AuthClient;
     /** Registry client for fetching modules from API */
@@ -33,5 +32,9 @@ export interface AdminShellProps {
     inMemoryRegistry?: boolean;
     /** Environment (default: "local") */
     environment?: string;
+    /** BFF base URL (passed from shell's env config). Only used when `bff` is `true`. */
+    bffBaseUrl?: string;
+    /** Registry polling interval in ms (passed from shell's env config). */
+    registryPollInterval?: number;
 }
-export declare function AdminShell({ modules: manifests, children, keycloak, authClient: providedAuthClient, registryClient, apiUrl, inMemoryRegistry, environment, }: AdminShellProps): import("react/jsx-runtime").JSX.Element;
+export declare function AdminShell({ modules: manifests, children, bff, authClient: providedAuthClient, registryClient, apiUrl, inMemoryRegistry, environment, bffBaseUrl: bffBaseUrlProp, registryPollInterval: registryPollIntervalProp, }: AdminShellProps): import("react/jsx-runtime").JSX.Element;

package/dist/shell/AdminShell.js

@@ -15,7 +15,7 @@ import { RegistryPage } from "./components/RegistryPage";
 import { HomePage } from "./components/HomePage";
 import { AuthProvider, useAuthContext } from "../components/AuthProvider";
 import { createInMemoryAuthClient, createMockUsersFromRoles, } from "../auth/client/in-memory";
-import { createKeycloakAuthClient } from "../auth/client/keycloak";
+import { createBffAuthClient } from "../auth/client/bff";
 import { createInMemoryRegistryClient } from "../registry/client/in-memory";
 import { createCachedCatalog } from "../registry/cache/cached-catalog";
 import { DevtoolsPanel } from "./components/DevtoolsPanel";
@@ -25,8 +25,9 @@ import { useRegistryPolling } from "../registry/useRegistryPolling";
 import { DynamicModule } from "../router/DynamicModule";
 import { SidebarProvider, SidebarInset } from "@nsxbet/admin-ui";
 import { initTelemetry, track, trackError } from "./telemetry";
-import { initI18n, saveLocale, isSupportedLocale, i18n } from "../i18n";
+import { initI18n, saveLocale, isSupportedLocale, i18n, DEFAULT_LOCALE } from "../i18n";
 import { resolvePollingInterval } from "./polling-config";
+import { SDK_PACKAGE_VERSION } from "../sdk-version.js";
 const TIMEZONE_STORAGE_KEY = "admin-timezone-mode";
 function getStoredTimezoneMode() {
     if (typeof window === "undefined")
@@ -62,6 +63,7 @@ function manifestToModule(manifest, baseUrl) {
             supportChannel: manifest.owners?.supportChannel || "",
         },
         status: "active",
+        sdkVersion: manifest.sdkVersion ?? SDK_PACKAGE_VERSION,
         navigationOrder: manifest.navigationOrder,
         icon: manifest.icon,
         navigation: manifest.navigation ? {
@@ -96,6 +98,7 @@ function catalogModuleToModule(m) {
         permissions: m.permissions,
         owners: m.owners,
         status: m.status,
+        sdkVersion: m.sdkVersion,
         navigationOrder: m.navigationOrder,
         icon: m.icon,
         navigation: m.navigation ? {
@@ -176,6 +179,9 @@ function ShellContent({ modules, children, environment, locale, onLocaleChange,
             fetch: async (input, init) => {
                 const token = await auth.getAccessToken();
                 const headers = new Headers(init?.headers);
+                if (token === null) {
+                    return fetch(input, { ...init, headers, credentials: "include" });
+                }
                 headers.set("Authorization", `Bearer ${token}`);
                 return fetch(input, { ...init, headers });
             },
@@ -220,12 +226,12 @@ function ShellContent({ modules, children, environment, locale, onLocaleChange,
                                                             owners: module.owners,
                                                         } })) : (_jsxs("div", { className: "text-muted-foreground", children: ["Module ", module.id, " has no baseUrl configured"] })) }) }, module.id))), _jsx(Route, { path: "*", element: _jsx(MainContent, { modules: modules, moduleBreadcrumbs: moduleBreadcrumbs, children: isStandaloneMode ? children : null }) })] })] })] }), _jsx(CommandPalette, { open: commandPaletteOpen, onOpenChange: onCommandPaletteChange, catalog: catalog }), _jsx(DevtoolsPanel, { environment: environment, modules: modules, catalogVersion: catalog.version, catalogGeneratedAt: catalog.generatedAt, registryMode: registryClient ? "api" : "in-memory", cacheStatus: cacheStatus })] }));
 }
-export function AdminShell({ modules: manifests = [], children, keycloak, authClient: providedAuthClient, registryClient, apiUrl, inMemoryRegistry = true, environment = "local", }) {
+export function AdminShell({ modules: manifests = [], children, bff, authClient: providedAuthClient, registryClient, apiUrl, inMemoryRegistry = true, environment = "local", bffBaseUrl: bffBaseUrlProp, registryPollInterval: registryPollIntervalProp, }) {
     const [commandPaletteOpen, setCommandPaletteOpen] = useState(false);
     const [locale, setLocale] = useState(() => {
         // Initialize i18n and get the current language
         initI18n();
-        return i18n.language || "pt-BR";
+        return i18n.language || DEFAULT_LOCALE;
     });
     const [apiModules, setApiModules] = useState([]);
     const [initialCatalogVersion, setInitialCatalogVersion] = useState("");
@@ -270,70 +276,47 @@ export function AdminShell({ modules: manifests = [], children, keycloak, authCl
         if (providedAuthClient) {
             return providedAuthClient;
         }
-        const isProd = import.meta.env.PROD === true;
-        const mockAuthExplicit = import.meta.env.VITE_MOCK_AUTH === 'true';
-        const noAuthConfig = !keycloak;
-        // Production guard: require auth config unless explicitly opted in
-        if (typeof window !== 'undefined' &&
-            isProd &&
-            noAuthConfig &&
-            !mockAuthExplicit) {
-            throw new Error('[AdminShell] Authentication configuration is required in production. ' +
-                'Provide authClient or keycloak prop, or set VITE_MOCK_AUTH=true to explicitly opt in to mock auth.');
-        }
-        // Check if we should use mock auth
-        const useMockAuth = typeof window !== 'undefined' &&
-            (mockAuthExplicit || noAuthConfig);
-        if (useMockAuth) {
-            if (isProd && mockAuthExplicit) {
-                console.warn('[AdminShell] Mock auth is active in production build (VITE_MOCK_AUTH=true). ' +
-                    'Use real authentication (Keycloak) for production deployments.');
-            }
-            // Default mock users with explicit roles for tasks and users modules
-            const defaultMockUsers = createMockUsersFromRoles({
-                admin: [
-                    'admin.tasks.view',
-                    'admin.tasks.edit',
-                    'admin.tasks.delete',
-                    'admin.users.view',
-                    'admin.users.edit',
-                    'admin.users.delete',
-                    'admin.platform.view',
-                    'admin.platform.edit',
-                    'admin.platform.delete',
-                ],
-                editor: [
-                    'admin.tasks.view',
-                    'admin.tasks.edit',
-                    'admin.users.view',
-                    'admin.users.edit',
-                    'admin.platform.view',
-                    'admin.platform.edit',
-                ],
-                viewer: ['admin.tasks.view', 'admin.users.view', 'admin.platform.view'],
-                noAccess: [],
-            });
-            return createInMemoryAuthClient({ users: defaultMockUsers, gatewayUrl: import.meta.env.VITE_ADMIN_GATEWAY_URL });
+        if (bff) {
+            const baseUrl = bff === true
+                ? bffBaseUrlProp
+                    ? bffBaseUrlProp.replace(/\/$/, '')
+                    : window.location.origin
+                : bff.baseUrl
+                    ? bff.baseUrl.replace(/\/$/, '')
+                    : bffBaseUrlProp
+                        ? bffBaseUrlProp.replace(/\/$/, '')
+                        : window.location.origin;
+            return createBffAuthClient({ bffBaseUrl: baseUrl });
         }
-        // Use Keycloak
-        return createKeycloakAuthClient({
-            config: keycloak,
+        const defaultMockUsers = createMockUsersFromRoles({
+            admin: [
+                'admin.tasks.view',
+                'admin.tasks.edit',
+                'admin.tasks.delete',
+                'admin.users.view',
+                'admin.users.edit',
+                'admin.users.delete',
+                'admin.platform.view',
+                'admin.platform.edit',
+                'admin.platform.delete',
+            ],
+            editor: [
+                'admin.tasks.view',
+                'admin.tasks.edit',
+                'admin.users.view',
+                'admin.users.edit',
+                'admin.platform.view',
+                'admin.platform.edit',
+            ],
+            viewer: ['admin.tasks.view', 'admin.users.view', 'admin.platform.view'],
+            noAccess: [],
         });
-    }, [providedAuthClient, keycloak]);
+        return createInMemoryAuthClient({ users: defaultMockUsers });
+    }, [providedAuthClient, bff, bffBaseUrlProp]);
     // Initialize telemetry
     useEffect(() => {
         initTelemetry(environment);
     }, [environment]);
-    // Initialize Keycloak configuration (for legacy support)
-    useEffect(() => {
-        if (keycloak) {
-            window.__KEYCLOAK_CONFIG__ = {
-                url: keycloak.url,
-                realm: keycloak.realm,
-                clientId: keycloak.clientId,
-            };
-        }
-    }, [keycloak]);
     // Initialize in-memory registry if enabled and no registryClient
     useEffect(() => {
         if (!registryClient && inMemoryRegistry && manifests.length > 0) {
@@ -385,8 +368,8 @@ export function AdminShell({ modules: manifests = [], children, keycloak, authCl
     const pollingInterval = useMemo(() => {
         if (!registryClient || !initialCatalogVersion)
             return 0;
-        return resolvePollingInterval(environment);
-    }, [registryClient, initialCatalogVersion, environment]);
+        return resolvePollingInterval(environment, registryPollIntervalProp);
+    }, [registryClient, initialCatalogVersion, environment, registryPollIntervalProp]);
     // Poll for catalog version changes
     const { hasUpdates, dismiss: dismissUpdate } = useRegistryPolling({
         registryClient: registryClient,
@@ -428,13 +411,16 @@ export function AdminShell({ modules: manifests = [], children, keycloak, authCl
             setCacheStatus(cachedCatalogOps.getStatus());
         }
     }, [cachedCatalogOps]);
-    // Show loading state while fetching from API
+    // Resolve shell content — loading, unavailable, or ready
+    let shellContent;
     if (isLoading) {
-        return (_jsx("div", { className: "flex h-screen items-center justify-center", children: _jsx("div", { className: "text-muted-foreground", children: "Loading modules..." }) }));
+        shellContent = (_jsx("div", { className: "flex h-screen items-center justify-center", children: _jsx("div", { className: "text-muted-foreground", children: "Loading modules..." }) }));
+    }
+    else if (cacheStatus.state === "unavailable") {
+        shellContent = _jsx(RegistryUnavailable, { onRetry: handleRetry });
     }
-    // Registry completely unavailable (no cache, no API)
-    if (cacheStatus.state === "unavailable") {
-        return (_jsx(BrowserRouter, { children: _jsx(I18nextProvider, { i18n: i18n, children: _jsx(ThemeProvider, { children: _jsx(RegistryUnavailable, { onRetry: handleRetry }) }) }) }));
+    else {
+        shellContent = (_jsx(ShellContent, { modules: modules, environment: environment, locale: locale, onLocaleChange: handleLocaleChange, onSearchClick: handleSearchClick, catalog: catalog, commandPaletteOpen: commandPaletteOpen, onCommandPaletteChange: setCommandPaletteOpen, apiUrl: apiUrl, registryClient: registryClient, isStandaloneMode: isStandaloneMode, cacheStatus: cacheStatus, onRetry: handleRetry, hasUpdates: hasUpdates, onDismissUpdate: dismissUpdate, localeCallbacksRef: localeCallbacksRef, timezoneMode: timezoneMode, onTimezoneToggle: handleTimezoneToggle, timezoneCallbacksRef: timezoneCallbacksRef, children: children }));
     }
-    return (_jsx(BrowserRouter, { children: _jsx(I18nextProvider, { i18n: i18n, children: _jsx(ThemeProvider, { children: _jsx(AuthProvider, { authClient: authClient, children: _jsx(ShellContent, { modules: modules, environment: environment, locale: locale, onLocaleChange: handleLocaleChange, onSearchClick: handleSearchClick, catalog: catalog, commandPaletteOpen: commandPaletteOpen, onCommandPaletteChange: setCommandPaletteOpen, apiUrl: apiUrl, registryClient: registryClient, isStandaloneMode: isStandaloneMode, cacheStatus: cacheStatus, onRetry: handleRetry, hasUpdates: hasUpdates, onDismissUpdate: dismissUpdate, localeCallbacksRef: localeCallbacksRef, timezoneMode: timezoneMode, onTimezoneToggle: handleTimezoneToggle, timezoneCallbacksRef: timezoneCallbacksRef, children: children }) }) }) }) }));
+    return (_jsx(BrowserRouter, { children: _jsx(I18nextProvider, { i18n: i18n, children: _jsx(ThemeProvider, { children: _jsx(AuthProvider, { authClient: authClient, children: shellContent }) }) }) }));
 }

package/dist/shell/components/ModuleOverview.js

@@ -13,11 +13,7 @@ export function ModuleOverview({ modules }) {
     if (!module) {
         return (_jsx("div", { className: "p-6 max-w-3xl mx-auto space-y-6", children: _jsx(Card, { className: "border-destructive", children: _jsx(CardContent, { className: "pt-6", children: _jsxs("div", { className: "flex items-center gap-3 text-destructive", children: [_jsx(Icon, { name: "alert-circle", className: "h-6 w-6" }), _jsxs("div", { children: [_jsx("h1", { className: "text-xl font-bold", children: t('errors.moduleNotFound') }), _jsx("p", { className: "text-muted-foreground mt-1", children: t('errors.moduleNotFoundDescription', { moduleId }) })] })] }) }) }) }));
     }
-    const statusVariant = module.status === "active"
-        ? "success"
-        : module.status === "deprecated"
-            ? "warning"
-            : "secondary";
+    const statusVariant = module.status === "active" ? "success" : "secondary";
     const moduleTitle = resolveLocalizedString(module.title, i18n.language);
     const moduleDescription = resolveLocalizedString(module.description, i18n.language);
     return (_jsxs("div", { className: "p-6 max-w-3xl mx-auto space-y-6", children: [_jsxs("div", { className: "flex items-start gap-4", children: [_jsx("div", { className: "flex-shrink-0 p-3 rounded-lg bg-muted", children: _jsx(Icon, { name: module.icon || "package", className: "h-8 w-8" }) }), _jsxs("div", { className: "flex-1", children: [_jsxs("div", { className: "flex items-center gap-3 mb-1", children: [_jsx("h1", { className: "text-3xl font-bold", children: moduleTitle }), _jsx(Badge, { variant: statusVariant, className: "capitalize", children: module.status })] }), moduleDescription && (_jsx("p", { className: "text-muted-foreground", children: moduleDescription }))] })] }), module.commands && module.commands.length > 0 && (_jsxs(Card, { children: [_jsxs(CardHeader, { className: "pb-3", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Icon, { name: "zap", className: "h-5 w-5 text-muted-foreground" }), _jsx(CardTitle, { className: "text-lg", children: t('moduleOverview.actions') })] }), _jsx(CardDescription, { children: t('moduleOverview.actionsDescription') })] }), _jsx(CardContent, { children: _jsx("div", { className: "grid gap-3 sm:grid-cols-2 lg:grid-cols-3", children: module.commands.map((command) => (_jsxs("button", { onClick: () => navigate(command.route), className: "flex items-center gap-3 rounded-lg border border-border bg-card p-4 text-left transition-colors hover:bg-accent hover:border-accent", children: [_jsx("div", { className: "flex-shrink-0 p-2 rounded-md bg-muted", children: _jsx(Icon, { name: command.icon || "file-text", className: "h-5 w-5" }) }), _jsx("span", { className: "font-medium", children: resolveLocalizedString(command.title, i18n.language) })] }, command.id))) }) })] })), _jsxs(Card, { children: [_jsx(CardHeader, { className: "pb-3", children: _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Icon, { name: "info", className: "h-5 w-5 text-muted-foreground" }), _jsx(CardTitle, { className: "text-lg", children: t('moduleOverview.information') })] }) }), _jsx(CardContent, { children: _jsxs("dl", { className: "space-y-3", children: [_jsxs("div", { className: "flex items-center justify-between py-2 border-b border-border", children: [_jsxs("dt", { className: "text-sm font-medium text-muted-foreground flex items-center gap-2", children: [_jsx(Icon, { name: "folder", className: "h-4 w-4" }), t('moduleOverview.category')] }), _jsx("dd", { className: "text-sm font-medium", children: module.category })] }), _jsxs("div", { className: "flex items-center justify-between py-2 border-b border-border", children: [_jsxs("dt", { className: "text-sm font-medium text-muted-foreground flex items-center gap-2", children: [_jsx(Icon, { name: "activity", className: "h-4 w-4" }), t('moduleOverview.status')] }), _jsx("dd", { children: _jsx(Badge, { variant: statusVariant, className: "capitalize", children: module.status }) })] }), module.owners?.team && (_jsxs("div", { className: "flex items-center justify-between py-2 border-b border-border", children: [_jsxs("dt", { className: "text-sm font-medium text-muted-foreground flex items-center gap-2", children: [_jsx(Icon, { name: "users", className: "h-4 w-4" }), t('moduleOverview.owner')] }), _jsx("dd", { className: "text-sm font-medium", children: module.owners.team })] })), module.owners?.supportChannel && (_jsxs("div", { className: "flex items-center justify-between py-2", children: [_jsxs("dt", { className: "text-sm font-medium text-muted-foreground flex items-center gap-2", children: [_jsx(Icon, { name: "message-circle", className: "h-4 w-4" }), t('moduleOverview.support')] }), _jsx("dd", { className: "text-sm font-medium", children: module.owners.supportChannel })] }))] }) })] })] }));

package/dist/shell/components/RegistryPage.js

@@ -201,7 +201,7 @@ export function RegistryPage({ apiUrl, registryClient }) {
     }
     return (_jsxs("div", { className: "p-6 max-w-4xl mx-auto space-y-6", "data-testid": "registry-page", children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-3xl font-bold mb-1", "data-testid": "registry-heading", children: t("registryPage.title") }), _jsx("p", { className: "text-muted-foreground", children: t("registryPage.description") })] }), _jsxs("div", { className: "flex items-center gap-2", children: [canEdit && !isReorderMode && (_jsxs(Button, { variant: "outline", size: "sm", onClick: enterReorderMode, children: [_jsx(Icon, { name: "arrow-up-down", className: "h-4 w-4 mr-2" }), t("registryPage.manageOrder")] })), _jsx(Badge, { variant: apiUrl ? "default" : "secondary", children: apiUrl ? t("registryPage.apiMode") : t("registryPage.inMemoryMode") })] })] }), error && (_jsx(Card, { className: "border-destructive bg-destructive/10", children: _jsx(CardContent, { className: "pt-6", children: _jsxs("div", { className: "flex items-center gap-3 text-destructive", children: [_jsx(Icon, { name: "alert-circle", className: "h-5 w-5" }), _jsx("p", { children: error })] }) }) })), isReorderMode && (_jsx(Card, { children: _jsxs(CardContent, { className: "pt-6", children: [_jsxs("div", { className: "flex items-center justify-between mb-4", children: [_jsx("h2", { className: "text-lg font-semibold", children: t("registryPage.manageOrder") }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { variant: "outline", size: "sm", onClick: cancelReorder, disabled: isSavingOrder, children: t("common.cancel") }), _jsx(Button, { size: "sm", onClick: saveOrder, disabled: isSavingOrder || !hasOrderChanged, children: isSavingOrder ? (_jsxs(_Fragment, { children: [_jsx(Icon, { name: "loader-2", className: "h-4 w-4 mr-2 animate-spin" }), t("registryPage.savingOrder")] })) : (t("registryPage.saveOrder")) })] })] }), _jsx("div", { className: "space-y-1", children: reorderList.map((module, index) => (_jsxs("div", { className: "flex items-center gap-3 p-2 rounded-lg border bg-background", children: [_jsx(Badge, { variant: "outline", className: "font-mono text-xs shrink-0", children: t("registryPage.position", { position: index + 1 }) }), _jsx("div", { className: "flex-shrink-0 p-1.5 rounded bg-muted", children: _jsx(Icon, { name: module.manifest.icon || "package", className: "h-4 w-4" }) }), _jsx("span", { className: "flex-1 font-medium truncate", children: resolveLocalizedString(module.manifest.title, i18n.language) }), _jsxs("div", { className: "flex gap-1 shrink-0", children: [_jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7", onClick: () => moveUp(index), disabled: index === 0, children: _jsx(Icon, { name: "chevron-up", className: "h-4 w-4" }) }), _jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7", onClick: () => moveDown(index), disabled: index === reorderList.length - 1, children: _jsx(Icon, { name: "chevron-down", className: "h-4 w-4" }) })] })] }, module.id))) })] }) })), !isReorderMode && (_jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Icon, { name: "package", className: "h-5 w-5 text-muted-foreground" }), _jsxs("h2", { className: "text-lg font-semibold", children: [t("registryPage.registeredModules"), " ", !isLoading && (_jsxs("span", { className: "text-muted-foreground font-normal", children: ["(", modules.length, ")"] }))] })] }), isLoading ? (_jsx(Card, { children: _jsxs(CardContent, { className: "py-8 text-center", children: [_jsx(Icon, { name: "loader-2", className: "h-8 w-8 mx-auto mb-3 animate-spin text-muted-foreground" }), _jsx("p", { className: "text-muted-foreground", children: t("registryPage.loadingModules") })] }) })) : modules.length === 0 ? (_jsx(Card, { children: _jsxs(CardContent, { className: "py-8 text-center", children: [_jsx(Icon, { name: "package", className: "h-8 w-8 mx-auto mb-3 text-muted-foreground" }), _jsx("p", { className: "text-muted-foreground", children: t("registryPage.noModules") }), _jsx("p", { className: "text-sm text-muted-foreground mt-1", children: t("registryPage.noModulesHint") })] }) })) : (_jsx("div", { className: "space-y-3", children: modules.map((module, index) => (_jsx(Card, { className: !module.enabled ? "opacity-60 border-dashed" : undefined, "data-testid": `module-card-${module.moduleId}`, children: _jsx(CardContent, { className: "pt-6", children: _jsxs("div", { className: "flex items-start justify-between gap-4", children: [_jsxs("div", { className: "flex items-start gap-4 flex-1 min-w-0", children: [_jsx("div", { className: "flex-shrink-0 p-2 rounded-lg bg-muted", children: _jsx(Icon, { name: module.manifest.icon || "package", className: "h-6 w-6" }) }), _jsxs("div", { className: "flex-1 min-w-0", children: [_jsxs("div", { className: "flex items-center gap-2 mb-1 flex-wrap", children: [_jsx("h3", { className: "font-semibold truncate", children: resolveLocalizedString(module.manifest.title, i18n.language) }), canEdit && (_jsx(Badge, { variant: module.enabled ? "success" : "secondary", children: module.enabled
                                                                         ? t("registryPage.enabled")
-                                                                        : t("registryPage.disabled") })), module.version ? (_jsxs(Badge, { variant: "outline", "data-testid": `version-badge-${module.moduleId}`, children: ["v", module.version] })) : (_jsx(Badge, { variant: "outline", className: "text-muted-foreground", children: t("registryPage.unversioned") }))] }), _jsx("p", { className: "text-sm text-muted-foreground mb-3", children: resolveLocalizedString(module.manifest.description, i18n.language) ||
+                                                                        : t("registryPage.disabled") })), module.version ? (_jsxs(Badge, { variant: "outline", "data-testid": `version-badge-${module.moduleId}`, children: ["v", module.version] })) : (_jsx(Badge, { variant: "outline", className: "text-muted-foreground", children: t("registryPage.unversioned") })), (module.sdkVersion ?? module.manifest.sdkVersion) && (_jsxs(Badge, { variant: "outline", className: "font-mono text-xs", children: ["SDK ", module.sdkVersion ?? module.manifest.sdkVersion] }))] }), _jsx("p", { className: "text-sm text-muted-foreground mb-3", children: resolveLocalizedString(module.manifest.description, i18n.language) ||
                                                                 t("registryPage.noDescription") }), _jsxs("div", { className: "flex flex-wrap gap-x-4 gap-y-1 text-xs text-muted-foreground", children: [_jsxs("span", { className: "flex items-center gap-1", children: [_jsx(Icon, { name: "hash", className: "h-3 w-3" }), module.moduleId] }), _jsxs("span", { className: "flex items-center gap-1", children: [_jsx(Icon, { name: "folder", className: "h-3 w-3" }), module.manifest.category || "General"] }), _jsxs("span", { className: "flex items-center gap-1", children: [_jsx(Icon, { name: "navigation", className: "h-3 w-3" }), module.manifest.routeBase] }), module.baseUrl && (_jsxs("span", { className: "flex items-center gap-1", title: module.baseUrl, children: [_jsx(Icon, { name: "link", className: "h-3 w-3" }), _jsx("span", { className: "truncate max-w-[200px]", children: module.baseUrl })] }))] })] })] }), _jsxs("div", { className: "flex items-center gap-2 flex-shrink-0", children: [_jsx(Badge, { variant: "outline", className: "font-mono text-xs", children: t("registryPage.position", { position: index + 1 }) }), _jsx(Button, { variant: "ghost", size: "sm", onClick: () => openVersionHistory(module), title: t("registryPage.versionHistory"), "data-testid": `version-history-btn-${module.moduleId}`, children: _jsx(Icon, { name: "history", className: "h-4 w-4" }) }), canEdit && (_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Label, { className: "text-sm text-muted-foreground", children: t("registryPage.enabled") }), _jsx(Switch, { checked: module.enabled, onCheckedChange: () => handleToggleEnabled(module), "data-testid": `enable-switch-${module.moduleId}` })] })), canDelete && (_jsx(Button, { variant: "destructive", size: "sm", onClick: () => handleDeleteModule(module), children: _jsx(Icon, { name: "trash-2", className: "h-4 w-4" }) }))] })] }) }) }, module.id))) }))] })), _jsx(Dialog, { open: !!disableTarget, onOpenChange: (open) => !open && setDisableTarget(null), children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: t("registryPage.disableTitle", {
                                         name: disableTarget
                                             ? resolveLocalizedString(disableTarget.manifest.title, i18n.language)

package/dist/shell/components/TopBar.js

@@ -3,7 +3,7 @@ import { useState, useEffect } from "react";
 import { Search, Moon, Sun, Check, Clock, Globe } from "lucide-react";
 import { useTheme } from "./theme-provider";
 import { DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuTrigger, Badge, Button, } from "@nsxbet/admin-ui";
-import { SUPPORTED_LOCALES, LOCALE_FLAGS, LOCALE_NAMES } from "../../i18n";
+import { SUPPORTED_LOCALES, DEFAULT_LOCALE, LOCALE_FLAGS, LOCALE_NAMES } from "../../i18n";
 import { useI18n } from "../../hooks/useI18n";
 const ENV_COLORS = {
     local: "bg-gray-500",
@@ -30,7 +30,7 @@ const ENV_HEADER_COLORS_DARK = {
 export function TopBar({ onSearchClick, environment = "local", locale: externalLocale, onLocaleChange, timezoneMode = "local", onTimezoneToggle, }) {
     const { theme, setTheme } = useTheme();
     const { t } = useI18n();
-    const [locale, setLocale] = useState(externalLocale || "pt-BR");
+    const [locale, setLocale] = useState(externalLocale || DEFAULT_LOCALE);
     useEffect(() => {
         if (externalLocale && SUPPORTED_LOCALES.includes(externalLocale)) {
             setLocale(externalLocale);

package/dist/shell/components/theme-provider.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-import { createContext, useContext, useEffect, useState } from "react";
+import { createContext, useCallback, useContext, useEffect, useMemo, useState } from "react";
 const initialState = {
     theme: "system",
     setTheme: () => null,
@@ -24,13 +24,11 @@ storageKey = "admin-ui-theme", ...props }) {
         }
         root.classList.add(theme);
     }, [theme]);
-    const value = {
-        theme,
-        setTheme: (theme) => {
-            localStorage.setItem(storageKey, theme);
-            setTheme(theme);
-        },
-    };
+    const setThemeStable = useCallback((newTheme) => {
+        localStorage.setItem(storageKey, newTheme);
+        setTheme(newTheme);
+    }, [storageKey]);
+    const value = useMemo(() => ({ theme, setTheme: setThemeStable }), [theme, setThemeStable]);
     return (_jsx(ThemeProviderContext.Provider, { ...props, value: value, children: children }));
 }
 // eslint-disable-next-line react-refresh/only-export-components

package/dist/shell/index.d.ts

@@ -1,5 +1,5 @@
 export { AdminShell } from "./AdminShell";
-export type { AdminShellProps } from "./AdminShell";
+export type { AdminShellProps, AdminShellBffConfig } from "./AdminShell";
 export { TopBar, LeftNav, MainContent, CommandPalette, ThemeProvider, useTheme, } from "./components";
 export type { TopBarProps, CommandPaletteProps } from "./components";
 export type { Module, ModuleCommand, ModuleStatus, NavigationSection, ModuleNavigation, Catalog, ImportMap, SearchableItem, SearchResult, } from "./types";

package/dist/shell/polling-config.d.ts

@@ -2,9 +2,10 @@
  * Resolve the registry polling interval in milliseconds.
  *
  * Priority:
- * 1. Explicit `REGISTRY_POLL_INTERVAL` from `window.__ENV__` or `import.meta.env`
- * 2. Environment-based default (local: 60s, staging: 5min, production: 15min)
+ * 1. Explicit `explicitInterval` parameter (passed from shell's env config)
+ * 2. `REGISTRY_POLL_INTERVAL` from SDK `env` (parsed from `window.__ENV__` via `/env.js`)
+ * 3. Environment-based default (local: 60s, staging: 5min, production: 15min)
  *
  * Returns 0 (disabled) when the explicit value is "0".
  */
-export declare function resolvePollingInterval(environment: string): number;
+export declare function resolvePollingInterval(environment: string, explicitInterval?: number): number;

package/dist/shell/polling-config.js

@@ -1,3 +1,4 @@
+import { env } from "../env.js";
 const ENVIRONMENT_DEFAULTS = {
     local: 60000,
     development: 60000,
@@ -9,18 +10,19 @@ const ENVIRONMENT_DEFAULTS = {
  * Resolve the registry polling interval in milliseconds.
  *
  * Priority:
- * 1. Explicit `REGISTRY_POLL_INTERVAL` from `window.__ENV__` or `import.meta.env`
- * 2. Environment-based default (local: 60s, staging: 5min, production: 15min)
+ * 1. Explicit `explicitInterval` parameter (passed from shell's env config)
+ * 2. `REGISTRY_POLL_INTERVAL` from SDK `env` (parsed from `window.__ENV__` via `/env.js`)
+ * 3. Environment-based default (local: 60s, staging: 5min, production: 15min)
  *
  * Returns 0 (disabled) when the explicit value is "0".
  */
-export function resolvePollingInterval(environment) {
-    const raw = (typeof window !== 'undefined' && window.__ENV__?.REGISTRY_POLL_INTERVAL) ||
-        (typeof import.meta !== 'undefined' && import.meta.env?.VITE_REGISTRY_POLL_INTERVAL);
-    if (raw !== undefined && raw !== null && raw !== '') {
-        const parsed = Number(raw);
-        if (!Number.isNaN(parsed))
-            return parsed;
+export function resolvePollingInterval(environment, explicitInterval) {
+    if (explicitInterval !== undefined) {
+        return explicitInterval;
+    }
+    const fromEnv = env.registryPollInterval;
+    if (fromEnv !== undefined) {
+        return fromEnv;
     }
     return ENVIRONMENT_DEFAULTS[environment] ?? ENVIRONMENT_DEFAULTS.local;
 }

package/dist/shell/types.d.ts

@@ -5,7 +5,7 @@ import type { LocalizedField } from "../i18n/config.js";
 /**
  * Module status in the registry
  */
-export type ModuleStatus = "active" | "deprecated" | "disabled";
+export type ModuleStatus = "active" | "disabled";
 /**
  * Command within a module that can be searched and invoked
  */
@@ -68,6 +68,8 @@ export interface Module {
     };
     /** Module status */
     status: ModuleStatus;
+    /** Semver of @nsxbet/admin-sdk the module was built against */
+    sdkVersion: string;
     /** Optional navigation order */
     navigationOrder?: number;
     /** Optional icon name */

package/dist/types/platform.d.ts

@@ -30,8 +30,8 @@ export interface PlatformAPI {
     locale: string;
     /** Authentication methods */
     auth: {
-        /** Get the current access token (auto-refreshed by shell) */
-        getAccessToken: () => Promise<string>;
+        /** Get the current access token (auto-refreshed by shell). Null when using BFF HttpOnly cookie auth. */
+        getAccessToken: () => Promise<string | null>;
         /** Check if user has a specific permission (realm role) */
         hasPermission: (permission: string) => boolean;
         /** Get current user information */
@@ -74,21 +74,12 @@ export interface PlatformAPI {
     /** Authenticated fetch wrapper */
     fetch: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
 }
-/**
- * Keycloak configuration stored in window
- */
-export interface KeycloakWindowConfig {
-    url: string;
-    realm: string;
-    clientId: string;
-}
 /**
  * Extend Window interface to include platform API
  */
 declare global {
     interface Window {
         __ADMIN_PLATFORM_API__?: PlatformAPI;
-        __KEYCLOAK_CONFIG__?: KeycloakWindowConfig;
     }
 }
 export {};

package/dist/vite/config.d.ts

@@ -1,9 +1,4 @@
 import { type Plugin } from "vite";
-/**
- * Default admin gateway URL (staging environment).
- * Used by the env injection plugin when no explicit value is configured.
- */
-export declare const ADMIN_GATEWAY_STAGING_URL = "https://admin-bff-stg.nsx.dev";
 /**
  * Shared dependencies that are externalized in module builds.
  * These are provided by the shell via import maps.
@@ -35,11 +30,11 @@ export interface AdminModuleOptions {
     buildMode?: "auto" | "always";
     /**
      * Admin gateway URL for BFF token integration (InMemory auth).
-     * - `undefined` (default): auto-inject staging URL (`https://admin-bff-stg.nsx.dev`)
-     * - `string`: inject the provided URL
-     * - `null`: disable automatic injection entirely
+     * - `undefined` (default): use `ADMIN_GATEWAY_URL` from env, or {@link DEFAULT_GATEWAY_URL}
+     * - `string`: use this URL in `/env.js`
+     * - `null`: disable `/env.js` entirely (no runtime env injection)
      *
-     * Explicit env vars (`.env` files, shell env) always take precedence over this option.
+     * Explicit env vars (`.env` files, shell env) take precedence over the string option.
      */
     gatewayUrl?: string | null;
 }

package/dist/vite/config.js

@@ -2,18 +2,96 @@ import { loadEnv } from "vite";
 import { generateModuleManifestPlugin, serveDistPlugin } from "./plugins.js";
 import { adminModuleI18nPlugin } from "./i18n-plugin.js";
 import { getSharedExternals } from "./AdminShellSharedDeps.js";
-const ENV_KEY = "VITE_ADMIN_GATEWAY_URL";
-/**
- * Default admin gateway URL (staging environment).
- * Used by the env injection plugin when no explicit value is configured.
- */
-export const ADMIN_GATEWAY_STAGING_URL = "https://admin-bff-stg.nsx.dev";
+/** Default gateway when no env or option is set (internal to the plugin). */
+const DEFAULT_GATEWAY_URL = "https://admin-bff-stg.nsx.dev";
 /**
  * Shared dependencies that are externalized in module builds.
  * These are provided by the shell via import maps.
  * Derived from SHARED_DEPS_CONFIG — the single source of truth.
  */
 export const SHARED_EXTERNALS = getSharedExternals();
+function buildEnvJs(mode, gatewayUrl) {
+    const loaded = loadEnv(mode, process.cwd(), "");
+    const fromEnv = process.env.ADMIN_GATEWAY_URL || loaded.ADMIN_GATEWAY_URL;
+    let adminGateway;
+    if (fromEnv) {
+        adminGateway = fromEnv;
+    }
+    else if (gatewayUrl !== undefined && gatewayUrl !== null) {
+        adminGateway = gatewayUrl;
+    }
+    else {
+        adminGateway = DEFAULT_GATEWAY_URL;
+    }
+    const entries = {
+        ADMIN_GATEWAY_URL: adminGateway,
+    };
+    const mockAuth = loaded.MOCK_AUTH ?? process.env.MOCK_AUTH;
+    if (mockAuth !== undefined && mockAuth !== "") {
+        entries.MOCK_AUTH = mockAuth;
+    }
+    const environment = loaded.ENVIRONMENT ?? process.env.ENVIRONMENT;
+    if (environment !== undefined && environment !== "") {
+        entries.ENVIRONMENT = environment;
+    }
+    const registryPollInterval = loaded.REGISTRY_POLL_INTERVAL ?? process.env.REGISTRY_POLL_INTERVAL;
+    if (registryPollInterval !== undefined && registryPollInterval !== "") {
+        entries.REGISTRY_POLL_INTERVAL = registryPollInterval;
+    }
+    const body = Object.entries(entries)
+        .map(([k, v]) => `${k}:${JSON.stringify(v)}`)
+        .join(",");
+    return `window.__ENV__={${body}};`;
+}
+function createAdminModuleEnvPlugin(gatewayUrl) {
+    return {
+        name: "admin-module-env",
+        configureServer(server) {
+            if (gatewayUrl === null)
+                return;
+            server.middlewares.use((req, res, next) => {
+                const url = req.url?.split("?")[0];
+                if (url === "/env.js") {
+                    const mode = server.config.mode;
+                    res.setHeader("Content-Type", "application/javascript");
+                    res.setHeader("Cache-Control", "no-cache");
+                    res.end(buildEnvJs(mode, gatewayUrl));
+                    return;
+                }
+                next();
+            });
+        },
+        configurePreviewServer(server) {
+            if (gatewayUrl === null)
+                return;
+            server.middlewares.use((req, res, next) => {
+                const url = req.url?.split("?")[0];
+                if (url === "/env.js") {
+                    const mode = server.config.mode;
+                    res.setHeader("Content-Type", "application/javascript");
+                    res.setHeader("Cache-Control", "no-cache");
+                    res.end(buildEnvJs(mode, gatewayUrl));
+                    return;
+                }
+                next();
+            });
+        },
+        transformIndexHtml: {
+            order: "pre",
+            handler(html) {
+                if (gatewayUrl === null)
+                    return html;
+                if (html.includes('src="/env.js"') || html.includes("src='/env.js'")) {
+                    return html;
+                }
+                if (html.includes("</head>")) {
+                    return html.replace("</head>", `    <script src="/env.js"></script>\n  </head>`);
+                }
+                return html;
+            },
+        },
+    };
+}
 /**
  * Composable Vite plugin array for admin modules.
  * Returns plugins that handle build-time lib config, dist serving, and manifest generation.
@@ -54,26 +132,6 @@ export function adminModule(options = {}) {
             return true;
         return process.env.ADMIN_MODULE === "true";
     }
-    const envPlugin = {
-        name: "admin-module-env",
-        config(_config, { mode }) {
-            if (gatewayUrl === null)
-                return;
-            const env = loadEnv(mode, process.cwd(), "VITE_");
-            const fromEnv = process.env[ENV_KEY] || env[ENV_KEY];
-            if (fromEnv) {
-                console.log(`[admin-module-env] ${ENV_KEY} → ${fromEnv} (from env)`);
-                return;
-            }
-            const url = gatewayUrl ?? ADMIN_GATEWAY_STAGING_URL;
-            console.log(`[admin-module-env] ${ENV_KEY} → ${url} (auto-injected)`);
-            return {
-                define: {
-                    [`import.meta.env.${ENV_KEY}`]: JSON.stringify(url),
-                },
-            };
-        },
-    };
     const buildConfigPlugin = {
         name: "admin-module-build-config",
         config(_config, { command }) {
@@ -100,7 +158,7 @@ export function adminModule(options = {}) {
         },
     };
     return [
-        envPlugin,
+        createAdminModuleEnvPlugin(gatewayUrl),
         adminModuleI18nPlugin(),
         serveDistPlugin({ distDir: outDir }),
         generateModuleManifestPlugin(),

package/dist/vite/index.d.ts

@@ -15,5 +15,5 @@
  */
 export { generateModuleManifestPlugin, serveDistPlugin, type GenerateModuleManifestPluginOptions, type ServeDistPluginOptions, } from "./plugins.js";
 export { adminModuleI18nPlugin, type AdminModuleI18nPluginOptions, } from "./i18n-plugin.js";
-export { adminModule, defineModuleConfig, SHARED_EXTERNALS, ADMIN_GATEWAY_STAGING_URL, type AdminModuleOptions, type ModuleConfigOptions, } from "./config.js";
+export { adminModule, defineModuleConfig, SHARED_EXTERNALS, type AdminModuleOptions, type ModuleConfigOptions, } from "./config.js";
 export { AdminShellSharedDeps, SHARED_DEPS_CONFIG, getSharedExternals, type SharedDepConfig, } from "./AdminShellSharedDeps.js";

package/dist/vite/index.js

@@ -15,5 +15,5 @@
  */
 export { generateModuleManifestPlugin, serveDistPlugin, } from "./plugins.js";
 export { adminModuleI18nPlugin, } from "./i18n-plugin.js";
-export { adminModule, defineModuleConfig, SHARED_EXTERNALS, ADMIN_GATEWAY_STAGING_URL, } from "./config.js";
+export { adminModule, defineModuleConfig, SHARED_EXTERNALS, } from "./config.js";
 export { AdminShellSharedDeps, SHARED_DEPS_CONFIG, getSharedExternals, } from "./AdminShellSharedDeps.js";