@nsxbet/admin-sdk 0.7.1 → 0.8.0

package/dist/registry/client/in-memory.js

@@ -5,6 +5,17 @@
  * Used for local development and testing without a backend.
  */
 import { parseManifest } from '../types';
+import { SDK_PACKAGE_VERSION } from '../../sdk-version.js';
+function parseManifestWithSdkDefault(value) {
+    const raw = value;
+    const merged = {
+        ...raw,
+        sdkVersion: typeof raw.sdkVersion === 'string' && raw.sdkVersion.trim() !== ''
+            ? raw.sdkVersion
+            : SDK_PACKAGE_VERSION,
+    };
+    return parseManifest(merged);
+}
 const DEFAULT_STORAGE_KEY = '@nsxbet/registry';
 /**
  * Create an in-memory registry client
@@ -47,12 +58,13 @@ export function createInMemoryRegistryClient(options = {}) {
     if (options.seed && data.modules.length === 0) {
         const now = new Date().toISOString();
         for (const manifest of options.seed) {
-            const validated = parseManifest(manifest);
+            const validated = parseManifestWithSdkDefault(manifest);
             data.modules.push({
                 id: ++data.autoIncrement,
                 moduleId: validated.id,
                 baseUrl: '',
                 manifest: validated,
+                sdkVersion: validated.sdkVersion,
                 navigationOrder: validated.navigationOrder ?? data.autoIncrement * 10,
                 enabled: true,
                 registeredAt: now,
@@ -66,12 +78,13 @@ export function createInMemoryRegistryClient(options = {}) {
         const now = new Date().toISOString();
         for (const moduleConfig of options.initialModules) {
             const { baseUrl, ...manifestData } = moduleConfig;
-            const validated = parseManifest(manifestData);
+            const validated = parseManifestWithSdkDefault(manifestData);
             data.modules.push({
                 id: ++data.autoIncrement,
                 moduleId: validated.id,
                 baseUrl,
                 manifest: validated,
+                sdkVersion: validated.sdkVersion,
                 navigationOrder: validated.navigationOrder ?? data.autoIncrement * 10,
                 enabled: true,
                 registeredAt: now,
@@ -92,7 +105,7 @@ export function createInMemoryRegistryClient(options = {}) {
                 result = result.filter((m) => m.manifest.category === filters.category);
             }
             if (filters?.status) {
-                result = result.filter(() => filters.status === 'active');
+                result = result.filter((m) => filters.status === 'active' ? m.enabled : !m.enabled);
             }
             // Sort by navigationOrder
             result.sort((a, b) => a.navigationOrder - b.navigationOrder);
@@ -119,13 +132,13 @@ export function createInMemoryRegistryClient(options = {}) {
             const manifestData = await response.json();
             // Extract manifest without entry (entry is fetched by DynamicModule at runtime)
             const { entry: _entry, ...manifest } = manifestData;
-            const validated = parseManifest(manifest);
+            const validated = parseManifestWithSdkDefault(manifest);
             return this.registerFromManifest(validated, baseUrl);
         },
         async registerFromManifest(manifest, baseUrl = '') {
             data = loadStorage(storageKey);
             // Validate manifest
-            const validated = parseManifest(manifest);
+            const validated = parseManifestWithSdkDefault(manifest);
             // Check for duplicate moduleId
             if (data.modules.some((m) => m.moduleId === validated.id)) {
                 throw new Error(`Module with id ${validated.id} already exists`);
@@ -136,6 +149,7 @@ export function createInMemoryRegistryClient(options = {}) {
                 moduleId: validated.id,
                 baseUrl,
                 manifest: validated,
+                sdkVersion: validated.sdkVersion,
                 navigationOrder: validated.navigationOrder ?? data.autoIncrement * 10,
                 enabled: true,
                 registeredAt: now,
@@ -265,6 +279,7 @@ export function createInMemoryRegistryClient(options = {}) {
                     supportChannel: m.manifest.owners?.supportChannel ?? '#general',
                 },
                 status: 'active',
+                sdkVersion: m.manifest.sdkVersion ?? SDK_PACKAGE_VERSION,
                 navigationOrder: m.navigationOrder,
                 icon: m.manifest.icon,
                 navigation: m.manifest.navigation ? {

package/dist/registry/types/manifest.d.ts

@@ -82,6 +82,11 @@ export interface AdminModuleManifest {
     permissions?: ModulePermissions;
     /** Module ownership info */
     owners?: ModuleOwners;
+    /**
+     * Semver of @nsxbet/admin-sdk the module was built against.
+     * Injected at build time by `defineModuleConfig` — omit in source `admin.module.json`.
+     */
+    sdkVersion?: string;
 }
 /**
  * Validates that an object is a valid AdminModuleManifest

package/dist/registry/types/manifest.js

@@ -36,6 +36,9 @@ export function validateManifest(value) {
     if (!isLocalizedField(obj.description)) {
         return false;
     }
+    if (typeof obj.sdkVersion !== "string" || obj.sdkVersion.trim() === "") {
+        return false;
+    }
     // Optional field validations
     if (obj.category !== undefined && typeof obj.category !== 'string') {
         return false;
@@ -74,7 +77,7 @@ export function validateManifest(value) {
  */
 export function parseManifest(value) {
     if (!validateManifest(value)) {
-        throw new Error('Invalid manifest: must have id, title (localized), description (localized), and routeBase (starting with /). Title and description must be objects with all 4 locales: en-US, pt-BR, es, ro.');
+        throw new Error("Invalid manifest: must include id, title (all locales), description (all locales), routeBase (starting with /), and sdkVersion (non-empty string, injected at build time by defineModuleConfig). Title and description must include en-US, pt-BR, es, ro.");
     }
     return value;
 }

package/dist/registry/types/module.d.ts

@@ -18,6 +18,8 @@ export interface RegisteredModule {
     version?: string;
     /** Full parsed module.manifest.json (without entry - fetched at runtime) */
     manifest: AdminModuleManifest;
+    /** Semver of @nsxbet/admin-sdk (DB column; mirrors manifest.sdkVersion) */
+    sdkVersion?: string;
     /** Admin-controlled navigation order */
     navigationOrder: number;
     /** Whether the module is enabled */
@@ -59,7 +61,7 @@ export interface ModuleFilters {
     /** Filter by category */
     category?: string;
     /** Filter by status */
-    status?: 'active' | 'deprecated' | 'disabled';
+    status?: 'active' | 'disabled';
 }
 /**
  * Catalog structure for shell consumption (denormalized)
@@ -96,7 +98,9 @@ export interface CatalogModule {
         team: string;
         supportChannel: string;
     };
-    status: 'active' | 'deprecated' | 'disabled';
+    status: 'active' | 'disabled';
+    /** Semver of @nsxbet/admin-sdk the module was built against */
+    sdkVersion: string;
     navigationOrder?: number;
     icon?: string;
     navigation?: {

package/dist/sdk-version.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Semver of @nsxbet/admin-sdk (synced from package.json by scripts/write-sdk-version.mjs).
+ * Do not edit manually — run `node scripts/write-sdk-version.mjs` after version bumps.
+ */
+export declare const SDK_PACKAGE_VERSION: string;

package/dist/sdk-version.js

@@ -0,0 +1,5 @@
+/**
+ * Semver of @nsxbet/admin-sdk (synced from package.json by scripts/write-sdk-version.mjs).
+ * Do not edit manually — run `node scripts/write-sdk-version.mjs` after version bumps.
+ */
+export const SDK_PACKAGE_VERSION = "0.8.0";

package/dist/shell/AdminShell.d.ts

@@ -1,5 +1,9 @@
 import type { AuthClient } from "../auth/client/interface";
 import type { AdminModuleManifest, RegistryClient } from "../registry";
+/** Use admin-bff cookie / Okta auth (`createBffAuthClient`). `true` uses current origin. */
+export type AdminShellBffConfig = true | {
+    baseUrl?: string;
+};
 export interface AdminShellProps {
     /**
      * Module manifests to load (used for standalone mode when no registryClient)
@@ -12,17 +16,12 @@ export interface AdminShellProps {
      */
     children?: React.ReactNode;
     /**
-     * Keycloak configuration
-     * If not provided, uses in-memory (mock) authentication
+     * BFF / Okta cookie authentication (recommended for production).
      */
-    keycloak?: {
-        url: string;
-        realm: string;
-        clientId: string;
-    };
+    bff?: AdminShellBffConfig;
     /**
      * Auth client to use for authentication.
-     * If not provided, creates one based on keycloak prop or environment.
+     * If not provided, creates one from `bff` or in-memory (mock) authentication depending on environment.
      */
     authClient?: AuthClient;
     /** Registry client for fetching modules from API */
@@ -33,5 +32,9 @@ export interface AdminShellProps {
     inMemoryRegistry?: boolean;
     /** Environment (default: "local") */
     environment?: string;
+    /** BFF base URL (passed from shell's env config). Only used when `bff` is `true`. */
+    bffBaseUrl?: string;
+    /** Registry polling interval in ms (passed from shell's env config). */
+    registryPollInterval?: number;
 }
-export declare function AdminShell({ modules: manifests, children, keycloak, authClient: providedAuthClient, registryClient, apiUrl, inMemoryRegistry, environment, }: AdminShellProps): import("react/jsx-runtime").JSX.Element;
+export declare function AdminShell({ modules: manifests, children, bff, authClient: providedAuthClient, registryClient, apiUrl, inMemoryRegistry, environment, bffBaseUrl: bffBaseUrlProp, registryPollInterval: registryPollIntervalProp, }: AdminShellProps): import("react/jsx-runtime").JSX.Element;

package/dist/shell/AdminShell.js

@@ -15,7 +15,7 @@ import { RegistryPage } from "./components/RegistryPage";
 import { HomePage } from "./components/HomePage";
 import { AuthProvider, useAuthContext } from "../components/AuthProvider";
 import { createInMemoryAuthClient, createMockUsersFromRoles, } from "../auth/client/in-memory";
-import { createKeycloakAuthClient } from "../auth/client/keycloak";
+import { createBffAuthClient } from "../auth/client/bff";
 import { createInMemoryRegistryClient } from "../registry/client/in-memory";
 import { createCachedCatalog } from "../registry/cache/cached-catalog";
 import { DevtoolsPanel } from "./components/DevtoolsPanel";
@@ -25,8 +25,9 @@ import { useRegistryPolling } from "../registry/useRegistryPolling";
 import { DynamicModule } from "../router/DynamicModule";
 import { SidebarProvider, SidebarInset } from "@nsxbet/admin-ui";
 import { initTelemetry, track, trackError } from "./telemetry";
-import { initI18n, saveLocale, isSupportedLocale, i18n } from "../i18n";
+import { initI18n, saveLocale, isSupportedLocale, i18n, DEFAULT_LOCALE } from "../i18n";
 import { resolvePollingInterval } from "./polling-config";
+import { SDK_PACKAGE_VERSION } from "../sdk-version.js";
 const TIMEZONE_STORAGE_KEY = "admin-timezone-mode";
 function getStoredTimezoneMode() {
     if (typeof window === "undefined")
@@ -62,6 +63,7 @@ function manifestToModule(manifest, baseUrl) {
             supportChannel: manifest.owners?.supportChannel || "",
         },
         status: "active",
+        sdkVersion: manifest.sdkVersion ?? SDK_PACKAGE_VERSION,
         navigationOrder: manifest.navigationOrder,
         icon: manifest.icon,
         navigation: manifest.navigation ? {
@@ -96,6 +98,7 @@ function catalogModuleToModule(m) {
         permissions: m.permissions,
         owners: m.owners,
         status: m.status,
+        sdkVersion: m.sdkVersion,
         navigationOrder: m.navigationOrder,
         icon: m.icon,
         navigation: m.navigation ? {
@@ -176,6 +179,9 @@ function ShellContent({ modules, children, environment, locale, onLocaleChange,
             fetch: async (input, init) => {
                 const token = await auth.getAccessToken();
                 const headers = new Headers(init?.headers);
+                if (token === null) {
+                    return fetch(input, { ...init, headers, credentials: "include" });
+                }
                 headers.set("Authorization", `Bearer ${token}`);
                 return fetch(input, { ...init, headers });
             },
@@ -220,12 +226,12 @@ function ShellContent({ modules, children, environment, locale, onLocaleChange,
                                                             owners: module.owners,
                                                         } })) : (_jsxs("div", { className: "text-muted-foreground", children: ["Module ", module.id, " has no baseUrl configured"] })) }) }, module.id))), _jsx(Route, { path: "*", element: _jsx(MainContent, { modules: modules, moduleBreadcrumbs: moduleBreadcrumbs, children: isStandaloneMode ? children : null }) })] })] })] }), _jsx(CommandPalette, { open: commandPaletteOpen, onOpenChange: onCommandPaletteChange, catalog: catalog }), _jsx(DevtoolsPanel, { environment: environment, modules: modules, catalogVersion: catalog.version, catalogGeneratedAt: catalog.generatedAt, registryMode: registryClient ? "api" : "in-memory", cacheStatus: cacheStatus })] }));
 }
-export function AdminShell({ modules: manifests = [], children, keycloak, authClient: providedAuthClient, registryClient, apiUrl, inMemoryRegistry = true, environment = "local", }) {
+export function AdminShell({ modules: manifests = [], children, bff, authClient: providedAuthClient, registryClient, apiUrl, inMemoryRegistry = true, environment = "local", bffBaseUrl: bffBaseUrlProp, registryPollInterval: registryPollIntervalProp, }) {
     const [commandPaletteOpen, setCommandPaletteOpen] = useState(false);
     const [locale, setLocale] = useState(() => {
         // Initialize i18n and get the current language
         initI18n();
-        return i18n.language || "pt-BR";
+        return i18n.language || DEFAULT_LOCALE;
     });
     const [apiModules, setApiModules] = useState([]);
     const [initialCatalogVersion, setInitialCatalogVersion] = useState("");
@@ -270,70 +276,47 @@ export function AdminShell({ modules: manifests = [], children, keycloak, authCl
         if (providedAuthClient) {
             return providedAuthClient;
         }
-        const isProd = import.meta.env.PROD === true;
-        const mockAuthExplicit = import.meta.env.VITE_MOCK_AUTH === 'true';
-        const noAuthConfig = !keycloak;
-        // Production guard: require auth config unless explicitly opted in
-        if (typeof window !== 'undefined' &&
-            isProd &&
-            noAuthConfig &&
-            !mockAuthExplicit) {
-            throw new Error('[AdminShell] Authentication configuration is required in production. ' +
-                'Provide authClient or keycloak prop, or set VITE_MOCK_AUTH=true to explicitly opt in to mock auth.');
-        }
-        // Check if we should use mock auth
-        const useMockAuth = typeof window !== 'undefined' &&
-            (mockAuthExplicit || noAuthConfig);
-        if (useMockAuth) {
-            if (isProd && mockAuthExplicit) {
-                console.warn('[AdminShell] Mock auth is active in production build (VITE_MOCK_AUTH=true). ' +
-                    'Use real authentication (Keycloak) for production deployments.');
-            }
-            // Default mock users with explicit roles for tasks and users modules
-            const defaultMockUsers = createMockUsersFromRoles({
-                admin: [
-                    'admin.tasks.view',
-                    'admin.tasks.edit',
-                    'admin.tasks.delete',
-                    'admin.users.view',
-                    'admin.users.edit',
-                    'admin.users.delete',
-                    'admin.platform.view',
-                    'admin.platform.edit',
-                    'admin.platform.delete',
-                ],
-                editor: [
-                    'admin.tasks.view',
-                    'admin.tasks.edit',
-                    'admin.users.view',
-                    'admin.users.edit',
-                    'admin.platform.view',
-                    'admin.platform.edit',
-                ],
-                viewer: ['admin.tasks.view', 'admin.users.view', 'admin.platform.view'],
-                noAccess: [],
-            });
-            return createInMemoryAuthClient({ users: defaultMockUsers, gatewayUrl: import.meta.env.VITE_ADMIN_GATEWAY_URL });
+        if (bff) {
+            const baseUrl = bff === true
+                ? bffBaseUrlProp
+                    ? bffBaseUrlProp.replace(/\/$/, '')
+                    : window.location.origin
+                : bff.baseUrl
+                    ? bff.baseUrl.replace(/\/$/, '')
+                    : bffBaseUrlProp
+                        ? bffBaseUrlProp.replace(/\/$/, '')
+                        : window.location.origin;
+            return createBffAuthClient({ bffBaseUrl: baseUrl });
         }
-        // Use Keycloak
-        return createKeycloakAuthClient({
-            config: keycloak,
+        const defaultMockUsers = createMockUsersFromRoles({
+            admin: [
+                'admin.tasks.view',
+                'admin.tasks.edit',
+                'admin.tasks.delete',
+                'admin.users.view',
+                'admin.users.edit',
+                'admin.users.delete',
+                'admin.platform.view',
+                'admin.platform.edit',
+                'admin.platform.delete',
+            ],
+            editor: [
+                'admin.tasks.view',
+                'admin.tasks.edit',
+                'admin.users.view',
+                'admin.users.edit',
+                'admin.platform.view',
+                'admin.platform.edit',
+            ],
+            viewer: ['admin.tasks.view', 'admin.users.view', 'admin.platform.view'],
+            noAccess: [],
         });
-    }, [providedAuthClient, keycloak]);
+        return createInMemoryAuthClient({ users: defaultMockUsers });
+    }, [providedAuthClient, bff, bffBaseUrlProp]);
     // Initialize telemetry
     useEffect(() => {
         initTelemetry(environment);
     }, [environment]);
-    // Initialize Keycloak configuration (for legacy support)
-    useEffect(() => {
-        if (keycloak) {
-            window.__KEYCLOAK_CONFIG__ = {
-                url: keycloak.url,
-                realm: keycloak.realm,
-                clientId: keycloak.clientId,
-            };
-        }
-    }, [keycloak]);
     // Initialize in-memory registry if enabled and no registryClient
     useEffect(() => {
         if (!registryClient && inMemoryRegistry && manifests.length > 0) {
@@ -385,8 +368,8 @@ export function AdminShell({ modules: manifests = [], children, keycloak, authCl
     const pollingInterval = useMemo(() => {
         if (!registryClient || !initialCatalogVersion)
             return 0;
-        return resolvePollingInterval(environment);
-    }, [registryClient, initialCatalogVersion, environment]);
+        return resolvePollingInterval(environment, registryPollIntervalProp);
+    }, [registryClient, initialCatalogVersion, environment, registryPollIntervalProp]);
     // Poll for catalog version changes
     const { hasUpdates, dismiss: dismissUpdate } = useRegistryPolling({
         registryClient: registryClient,
@@ -428,13 +411,16 @@ export function AdminShell({ modules: manifests = [], children, keycloak, authCl
             setCacheStatus(cachedCatalogOps.getStatus());
         }
     }, [cachedCatalogOps]);
-    // Show loading state while fetching from API
+    // Resolve shell content — loading, unavailable, or ready
+    let shellContent;
     if (isLoading) {
-        return (_jsx("div", { className: "flex h-screen items-center justify-center", children: _jsx("div", { className: "text-muted-foreground", children: "Loading modules..." }) }));
+        shellContent = (_jsx("div", { className: "flex h-screen items-center justify-center", children: _jsx("div", { className: "text-muted-foreground", children: "Loading modules..." }) }));
+    }
+    else if (cacheStatus.state === "unavailable") {
+        shellContent = _jsx(RegistryUnavailable, { onRetry: handleRetry });
     }
-    // Registry completely unavailable (no cache, no API)
-    if (cacheStatus.state === "unavailable") {
-        return (_jsx(BrowserRouter, { children: _jsx(I18nextProvider, { i18n: i18n, children: _jsx(ThemeProvider, { children: _jsx(RegistryUnavailable, { onRetry: handleRetry }) }) }) }));
+    else {
+        shellContent = (_jsx(ShellContent, { modules: modules, environment: environment, locale: locale, onLocaleChange: handleLocaleChange, onSearchClick: handleSearchClick, catalog: catalog, commandPaletteOpen: commandPaletteOpen, onCommandPaletteChange: setCommandPaletteOpen, apiUrl: apiUrl, registryClient: registryClient, isStandaloneMode: isStandaloneMode, cacheStatus: cacheStatus, onRetry: handleRetry, hasUpdates: hasUpdates, onDismissUpdate: dismissUpdate, localeCallbacksRef: localeCallbacksRef, timezoneMode: timezoneMode, onTimezoneToggle: handleTimezoneToggle, timezoneCallbacksRef: timezoneCallbacksRef, children: children }));
     }
-    return (_jsx(BrowserRouter, { children: _jsx(I18nextProvider, { i18n: i18n, children: _jsx(ThemeProvider, { children: _jsx(AuthProvider, { authClient: authClient, children: _jsx(ShellContent, { modules: modules, environment: environment, locale: locale, onLocaleChange: handleLocaleChange, onSearchClick: handleSearchClick, catalog: catalog, commandPaletteOpen: commandPaletteOpen, onCommandPaletteChange: setCommandPaletteOpen, apiUrl: apiUrl, registryClient: registryClient, isStandaloneMode: isStandaloneMode, cacheStatus: cacheStatus, onRetry: handleRetry, hasUpdates: hasUpdates, onDismissUpdate: dismissUpdate, localeCallbacksRef: localeCallbacksRef, timezoneMode: timezoneMode, onTimezoneToggle: handleTimezoneToggle, timezoneCallbacksRef: timezoneCallbacksRef, children: children }) }) }) }) }));
+    return (_jsx(BrowserRouter, { children: _jsx(I18nextProvider, { i18n: i18n, children: _jsx(ThemeProvider, { children: _jsx(AuthProvider, { authClient: authClient, children: shellContent }) }) }) }));
 }

package/dist/shell/components/ModuleOverview.js

@@ -13,11 +13,7 @@ export function ModuleOverview({ modules }) {
     if (!module) {
         return (_jsx("div", { className: "p-6 max-w-3xl mx-auto space-y-6", children: _jsx(Card, { className: "border-destructive", children: _jsx(CardContent, { className: "pt-6", children: _jsxs("div", { className: "flex items-center gap-3 text-destructive", children: [_jsx(Icon, { name: "alert-circle", className: "h-6 w-6" }), _jsxs("div", { children: [_jsx("h1", { className: "text-xl font-bold", children: t('errors.moduleNotFound') }), _jsx("p", { className: "text-muted-foreground mt-1", children: t('errors.moduleNotFoundDescription', { moduleId }) })] })] }) }) }) }));
     }
-    const statusVariant = module.status === "active"
-        ? "success"
-        : module.status === "deprecated"
-            ? "warning"
-            : "secondary";
+    const statusVariant = module.status === "active" ? "success" : "secondary";
     const moduleTitle = resolveLocalizedString(module.title, i18n.language);
     const moduleDescription = resolveLocalizedString(module.description, i18n.language);
     return (_jsxs("div", { className: "p-6 max-w-3xl mx-auto space-y-6", children: [_jsxs("div", { className: "flex items-start gap-4", children: [_jsx("div", { className: "flex-shrink-0 p-3 rounded-lg bg-muted", children: _jsx(Icon, { name: module.icon || "package", className: "h-8 w-8" }) }), _jsxs("div", { className: "flex-1", children: [_jsxs("div", { className: "flex items-center gap-3 mb-1", children: [_jsx("h1", { className: "text-3xl font-bold", children: moduleTitle }), _jsx(Badge, { variant: statusVariant, className: "capitalize", children: module.status })] }), moduleDescription && (_jsx("p", { className: "text-muted-foreground", children: moduleDescription }))] })] }), module.commands && module.commands.length > 0 && (_jsxs(Card, { children: [_jsxs(CardHeader, { className: "pb-3", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Icon, { name: "zap", className: "h-5 w-5 text-muted-foreground" }), _jsx(CardTitle, { className: "text-lg", children: t('moduleOverview.actions') })] }), _jsx(CardDescription, { children: t('moduleOverview.actionsDescription') })] }), _jsx(CardContent, { children: _jsx("div", { className: "grid gap-3 sm:grid-cols-2 lg:grid-cols-3", children: module.commands.map((command) => (_jsxs("button", { onClick: () => navigate(command.route), className: "flex items-center gap-3 rounded-lg border border-border bg-card p-4 text-left transition-colors hover:bg-accent hover:border-accent", children: [_jsx("div", { className: "flex-shrink-0 p-2 rounded-md bg-muted", children: _jsx(Icon, { name: command.icon || "file-text", className: "h-5 w-5" }) }), _jsx("span", { className: "font-medium", children: resolveLocalizedString(command.title, i18n.language) })] }, command.id))) }) })] })), _jsxs(Card, { children: [_jsx(CardHeader, { className: "pb-3", children: _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Icon, { name: "info", className: "h-5 w-5 text-muted-foreground" }), _jsx(CardTitle, { className: "text-lg", children: t('moduleOverview.information') })] }) }), _jsx(CardContent, { children: _jsxs("dl", { className: "space-y-3", children: [_jsxs("div", { className: "flex items-center justify-between py-2 border-b border-border", children: [_jsxs("dt", { className: "text-sm font-medium text-muted-foreground flex items-center gap-2", children: [_jsx(Icon, { name: "folder", className: "h-4 w-4" }), t('moduleOverview.category')] }), _jsx("dd", { className: "text-sm font-medium", children: module.category })] }), _jsxs("div", { className: "flex items-center justify-between py-2 border-b border-border", children: [_jsxs("dt", { className: "text-sm font-medium text-muted-foreground flex items-center gap-2", children: [_jsx(Icon, { name: "activity", className: "h-4 w-4" }), t('moduleOverview.status')] }), _jsx("dd", { children: _jsx(Badge, { variant: statusVariant, className: "capitalize", children: module.status }) })] }), module.owners?.team && (_jsxs("div", { className: "flex items-center justify-between py-2 border-b border-border", children: [_jsxs("dt", { className: "text-sm font-medium text-muted-foreground flex items-center gap-2", children: [_jsx(Icon, { name: "users", className: "h-4 w-4" }), t('moduleOverview.owner')] }), _jsx("dd", { className: "text-sm font-medium", children: module.owners.team })] })), module.owners?.supportChannel && (_jsxs("div", { className: "flex items-center justify-between py-2", children: [_jsxs("dt", { className: "text-sm font-medium text-muted-foreground flex items-center gap-2", children: [_jsx(Icon, { name: "message-circle", className: "h-4 w-4" }), t('moduleOverview.support')] }), _jsx("dd", { className: "text-sm font-medium", children: module.owners.supportChannel })] }))] }) })] })] }));

package/dist/shell/components/RegistryPage.js

@@ -201,7 +201,7 @@ export function RegistryPage({ apiUrl, registryClient }) {
     }
     return (_jsxs("div", { className: "p-6 max-w-4xl mx-auto space-y-6", "data-testid": "registry-page", children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-3xl font-bold mb-1", "data-testid": "registry-heading", children: t("registryPage.title") }), _jsx("p", { className: "text-muted-foreground", children: t("registryPage.description") })] }), _jsxs("div", { className: "flex items-center gap-2", children: [canEdit && !isReorderMode && (_jsxs(Button, { variant: "outline", size: "sm", onClick: enterReorderMode, children: [_jsx(Icon, { name: "arrow-up-down", className: "h-4 w-4 mr-2" }), t("registryPage.manageOrder")] })), _jsx(Badge, { variant: apiUrl ? "default" : "secondary", children: apiUrl ? t("registryPage.apiMode") : t("registryPage.inMemoryMode") })] })] }), error && (_jsx(Card, { className: "border-destructive bg-destructive/10", children: _jsx(CardContent, { className: "pt-6", children: _jsxs("div", { className: "flex items-center gap-3 text-destructive", children: [_jsx(Icon, { name: "alert-circle", className: "h-5 w-5" }), _jsx("p", { children: error })] }) }) })), isReorderMode && (_jsx(Card, { children: _jsxs(CardContent, { className: "pt-6", children: [_jsxs("div", { className: "flex items-center justify-between mb-4", children: [_jsx("h2", { className: "text-lg font-semibold", children: t("registryPage.manageOrder") }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { variant: "outline", size: "sm", onClick: cancelReorder, disabled: isSavingOrder, children: t("common.cancel") }), _jsx(Button, { size: "sm", onClick: saveOrder, disabled: isSavingOrder || !hasOrderChanged, children: isSavingOrder ? (_jsxs(_Fragment, { children: [_jsx(Icon, { name: "loader-2", className: "h-4 w-4 mr-2 animate-spin" }), t("registryPage.savingOrder")] })) : (t("registryPage.saveOrder")) })] })] }), _jsx("div", { className: "space-y-1", children: reorderList.map((module, index) => (_jsxs("div", { className: "flex items-center gap-3 p-2 rounded-lg border bg-background", children: [_jsx(Badge, { variant: "outline", className: "font-mono text-xs shrink-0", children: t("registryPage.position", { position: index + 1 }) }), _jsx("div", { className: "flex-shrink-0 p-1.5 rounded bg-muted", children: _jsx(Icon, { name: module.manifest.icon || "package", className: "h-4 w-4" }) }), _jsx("span", { className: "flex-1 font-medium truncate", children: resolveLocalizedString(module.manifest.title, i18n.language) }), _jsxs("div", { className: "flex gap-1 shrink-0", children: [_jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7", onClick: () => moveUp(index), disabled: index === 0, children: _jsx(Icon, { name: "chevron-up", className: "h-4 w-4" }) }), _jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7", onClick: () => moveDown(index), disabled: index === reorderList.length - 1, children: _jsx(Icon, { name: "chevron-down", className: "h-4 w-4" }) })] })] }, module.id))) })] }) })), !isReorderMode && (_jsxs("div", { className: "space-y-4", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Icon, { name: "package", className: "h-5 w-5 text-muted-foreground" }), _jsxs("h2", { className: "text-lg font-semibold", children: [t("registryPage.registeredModules"), " ", !isLoading && (_jsxs("span", { className: "text-muted-foreground font-normal", children: ["(", modules.length, ")"] }))] })] }), isLoading ? (_jsx(Card, { children: _jsxs(CardContent, { className: "py-8 text-center", children: [_jsx(Icon, { name: "loader-2", className: "h-8 w-8 mx-auto mb-3 animate-spin text-muted-foreground" }), _jsx("p", { className: "text-muted-foreground", children: t("registryPage.loadingModules") })] }) })) : modules.length === 0 ? (_jsx(Card, { children: _jsxs(CardContent, { className: "py-8 text-center", children: [_jsx(Icon, { name: "package", className: "h-8 w-8 mx-auto mb-3 text-muted-foreground" }), _jsx("p", { className: "text-muted-foreground", children: t("registryPage.noModules") }), _jsx("p", { className: "text-sm text-muted-foreground mt-1", children: t("registryPage.noModulesHint") })] }) })) : (_jsx("div", { className: "space-y-3", children: modules.map((module, index) => (_jsx(Card, { className: !module.enabled ? "opacity-60 border-dashed" : undefined, "data-testid": `module-card-${module.moduleId}`, children: _jsx(CardContent, { className: "pt-6", children: _jsxs("div", { className: "flex items-start justify-between gap-4", children: [_jsxs("div", { className: "flex items-start gap-4 flex-1 min-w-0", children: [_jsx("div", { className: "flex-shrink-0 p-2 rounded-lg bg-muted", children: _jsx(Icon, { name: module.manifest.icon || "package", className: "h-6 w-6" }) }), _jsxs("div", { className: "flex-1 min-w-0", children: [_jsxs("div", { className: "flex items-center gap-2 mb-1 flex-wrap", children: [_jsx("h3", { className: "font-semibold truncate", children: resolveLocalizedString(module.manifest.title, i18n.language) }), canEdit && (_jsx(Badge, { variant: module.enabled ? "success" : "secondary", children: module.enabled
                                                                         ? t("registryPage.enabled")
-                                                                        : t("registryPage.disabled") })), module.version ? (_jsxs(Badge, { variant: "outline", "data-testid": `version-badge-${module.moduleId}`, children: ["v", module.version] })) : (_jsx(Badge, { variant: "outline", className: "text-muted-foreground", children: t("registryPage.unversioned") }))] }), _jsx("p", { className: "text-sm text-muted-foreground mb-3", children: resolveLocalizedString(module.manifest.description, i18n.language) ||
+                                                                        : t("registryPage.disabled") })), module.version ? (_jsxs(Badge, { variant: "outline", "data-testid": `version-badge-${module.moduleId}`, children: ["v", module.version] })) : (_jsx(Badge, { variant: "outline", className: "text-muted-foreground", children: t("registryPage.unversioned") })), (module.sdkVersion ?? module.manifest.sdkVersion) && (_jsxs(Badge, { variant: "outline", className: "font-mono text-xs", children: ["SDK ", module.sdkVersion ?? module.manifest.sdkVersion] }))] }), _jsx("p", { className: "text-sm text-muted-foreground mb-3", children: resolveLocalizedString(module.manifest.description, i18n.language) ||
                                                                 t("registryPage.noDescription") }), _jsxs("div", { className: "flex flex-wrap gap-x-4 gap-y-1 text-xs text-muted-foreground", children: [_jsxs("span", { className: "flex items-center gap-1", children: [_jsx(Icon, { name: "hash", className: "h-3 w-3" }), module.moduleId] }), _jsxs("span", { className: "flex items-center gap-1", children: [_jsx(Icon, { name: "folder", className: "h-3 w-3" }), module.manifest.category || "General"] }), _jsxs("span", { className: "flex items-center gap-1", children: [_jsx(Icon, { name: "navigation", className: "h-3 w-3" }), module.manifest.routeBase] }), module.baseUrl && (_jsxs("span", { className: "flex items-center gap-1", title: module.baseUrl, children: [_jsx(Icon, { name: "link", className: "h-3 w-3" }), _jsx("span", { className: "truncate max-w-[200px]", children: module.baseUrl })] }))] })] })] }), _jsxs("div", { className: "flex items-center gap-2 flex-shrink-0", children: [_jsx(Badge, { variant: "outline", className: "font-mono text-xs", children: t("registryPage.position", { position: index + 1 }) }), _jsx(Button, { variant: "ghost", size: "sm", onClick: () => openVersionHistory(module), title: t("registryPage.versionHistory"), "data-testid": `version-history-btn-${module.moduleId}`, children: _jsx(Icon, { name: "history", className: "h-4 w-4" }) }), canEdit && (_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Label, { className: "text-sm text-muted-foreground", children: t("registryPage.enabled") }), _jsx(Switch, { checked: module.enabled, onCheckedChange: () => handleToggleEnabled(module), "data-testid": `enable-switch-${module.moduleId}` })] })), canDelete && (_jsx(Button, { variant: "destructive", size: "sm", onClick: () => handleDeleteModule(module), children: _jsx(Icon, { name: "trash-2", className: "h-4 w-4" }) }))] })] }) }) }, module.id))) }))] })), _jsx(Dialog, { open: !!disableTarget, onOpenChange: (open) => !open && setDisableTarget(null), children: _jsxs(DialogContent, { children: [_jsxs(DialogHeader, { children: [_jsx(DialogTitle, { children: t("registryPage.disableTitle", {
                                         name: disableTarget
                                             ? resolveLocalizedString(disableTarget.manifest.title, i18n.language)

package/dist/shell/components/TopBar.js

@@ -3,7 +3,7 @@ import { useState, useEffect } from "react";
 import { Search, Moon, Sun, Check, Clock, Globe } from "lucide-react";
 import { useTheme } from "./theme-provider";
 import { DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuTrigger, Badge, Button, } from "@nsxbet/admin-ui";
-import { SUPPORTED_LOCALES, LOCALE_FLAGS, LOCALE_NAMES } from "../../i18n";
+import { SUPPORTED_LOCALES, DEFAULT_LOCALE, LOCALE_FLAGS, LOCALE_NAMES } from "../../i18n";
 import { useI18n } from "../../hooks/useI18n";
 const ENV_COLORS = {
     local: "bg-gray-500",
@@ -30,7 +30,7 @@ const ENV_HEADER_COLORS_DARK = {
 export function TopBar({ onSearchClick, environment = "local", locale: externalLocale, onLocaleChange, timezoneMode = "local", onTimezoneToggle, }) {
     const { theme, setTheme } = useTheme();
     const { t } = useI18n();
-    const [locale, setLocale] = useState(externalLocale || "pt-BR");
+    const [locale, setLocale] = useState(externalLocale || DEFAULT_LOCALE);
     useEffect(() => {
         if (externalLocale && SUPPORTED_LOCALES.includes(externalLocale)) {
             setLocale(externalLocale);

package/dist/shell/index.d.ts

@@ -1,5 +1,5 @@
 export { AdminShell } from "./AdminShell";
-export type { AdminShellProps } from "./AdminShell";
+export type { AdminShellProps, AdminShellBffConfig } from "./AdminShell";
 export { TopBar, LeftNav, MainContent, CommandPalette, ThemeProvider, useTheme, } from "./components";
 export type { TopBarProps, CommandPaletteProps } from "./components";
 export type { Module, ModuleCommand, ModuleStatus, NavigationSection, ModuleNavigation, Catalog, ImportMap, SearchableItem, SearchResult, } from "./types";

package/dist/shell/polling-config.d.ts

@@ -2,9 +2,10 @@
  * Resolve the registry polling interval in milliseconds.
  *
  * Priority:
- * 1. Explicit `REGISTRY_POLL_INTERVAL` from `window.__ENV__` or `import.meta.env`
- * 2. Environment-based default (local: 60s, staging: 5min, production: 15min)
+ * 1. Explicit `explicitInterval` parameter (passed from shell's env config)
+ * 2. `REGISTRY_POLL_INTERVAL` from SDK `env` (parsed from `window.__ENV__` via `/env.js`)
+ * 3. Environment-based default (local: 60s, staging: 5min, production: 15min)
  *
  * Returns 0 (disabled) when the explicit value is "0".
  */
-export declare function resolvePollingInterval(environment: string): number;
+export declare function resolvePollingInterval(environment: string, explicitInterval?: number): number;

package/dist/shell/polling-config.js

@@ -1,3 +1,4 @@
+import { env } from "../env.js";
 const ENVIRONMENT_DEFAULTS = {
     local: 60000,
     development: 60000,
@@ -9,18 +10,19 @@ const ENVIRONMENT_DEFAULTS = {
  * Resolve the registry polling interval in milliseconds.
  *
  * Priority:
- * 1. Explicit `REGISTRY_POLL_INTERVAL` from `window.__ENV__` or `import.meta.env`
- * 2. Environment-based default (local: 60s, staging: 5min, production: 15min)
+ * 1. Explicit `explicitInterval` parameter (passed from shell's env config)
+ * 2. `REGISTRY_POLL_INTERVAL` from SDK `env` (parsed from `window.__ENV__` via `/env.js`)
+ * 3. Environment-based default (local: 60s, staging: 5min, production: 15min)
  *
  * Returns 0 (disabled) when the explicit value is "0".
  */
-export function resolvePollingInterval(environment) {
-    const raw = (typeof window !== 'undefined' && window.__ENV__?.REGISTRY_POLL_INTERVAL) ||
-        (typeof import.meta !== 'undefined' && import.meta.env?.VITE_REGISTRY_POLL_INTERVAL);
-    if (raw !== undefined && raw !== null && raw !== '') {
-        const parsed = Number(raw);
-        if (!Number.isNaN(parsed))
-            return parsed;
+export function resolvePollingInterval(environment, explicitInterval) {
+    if (explicitInterval !== undefined) {
+        return explicitInterval;
+    }
+    const fromEnv = env.registryPollInterval;
+    if (fromEnv !== undefined) {
+        return fromEnv;
     }
     return ENVIRONMENT_DEFAULTS[environment] ?? ENVIRONMENT_DEFAULTS.local;
 }

package/dist/shell/types.d.ts

@@ -5,7 +5,7 @@ import type { LocalizedField } from "../i18n/config.js";
 /**
  * Module status in the registry
  */
-export type ModuleStatus = "active" | "deprecated" | "disabled";
+export type ModuleStatus = "active" | "disabled";
 /**
  * Command within a module that can be searched and invoked
  */
@@ -68,6 +68,8 @@ export interface Module {
     };
     /** Module status */
     status: ModuleStatus;
+    /** Semver of @nsxbet/admin-sdk the module was built against */
+    sdkVersion: string;
     /** Optional navigation order */
     navigationOrder?: number;
     /** Optional icon name */

package/dist/types/platform.d.ts

@@ -30,8 +30,8 @@ export interface PlatformAPI {
     locale: string;
     /** Authentication methods */
     auth: {
-        /** Get the current access token (auto-refreshed by shell) */
-        getAccessToken: () => Promise<string>;
+        /** Get the current access token (auto-refreshed by shell). Null when using BFF HttpOnly cookie auth. */
+        getAccessToken: () => Promise<string | null>;
         /** Check if user has a specific permission (realm role) */
         hasPermission: (permission: string) => boolean;
         /** Get current user information */
@@ -74,21 +74,12 @@ export interface PlatformAPI {
     /** Authenticated fetch wrapper */
     fetch: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
 }
-/**
- * Keycloak configuration stored in window
- */
-export interface KeycloakWindowConfig {
-    url: string;
-    realm: string;
-    clientId: string;
-}
 /**
  * Extend Window interface to include platform API
  */
 declare global {
     interface Window {
         __ADMIN_PLATFORM_API__?: PlatformAPI;
-        __KEYCLOAK_CONFIG__?: KeycloakWindowConfig;
     }
 }
 export {};

package/dist/vite/config.d.ts

@@ -1,9 +1,4 @@
 import { type Plugin } from "vite";
-/**
- * Default admin gateway URL (staging environment).
- * Used by the env injection plugin when no explicit value is configured.
- */
-export declare const ADMIN_GATEWAY_STAGING_URL = "https://admin-bff-stg.nsx.dev";
 /**
  * Shared dependencies that are externalized in module builds.
  * These are provided by the shell via import maps.
@@ -35,11 +30,11 @@ export interface AdminModuleOptions {
     buildMode?: "auto" | "always";
     /**
      * Admin gateway URL for BFF token integration (InMemory auth).
-     * - `undefined` (default): auto-inject staging URL (`https://admin-bff-stg.nsx.dev`)
-     * - `string`: inject the provided URL
-     * - `null`: disable automatic injection entirely
+     * - `undefined` (default): use `ADMIN_GATEWAY_URL` from env, or {@link DEFAULT_GATEWAY_URL}
+     * - `string`: use this URL in `/env.js`
+     * - `null`: disable `/env.js` entirely (no runtime env injection)
      *
-     * Explicit env vars (`.env` files, shell env) always take precedence over this option.
+     * Explicit env vars (`.env` files, shell env) take precedence over the string option.
      */
     gatewayUrl?: string | null;
 }