Implement widget manifest system, dynamic app loading, and auth test coverage by Copilot · Pull Request #424 · objectstack-ai/objectui

Copilot · 2026-02-10T04:18:09Z

Delivers the remaining items from ROADMAP §1.5 (auth test coverage) and §1.6 (widget system + dynamic app loading).

WidgetManifest type system (`@object-ui/types`)

WidgetManifest interface with three source strategies: module (ES module URL), inline (pre-loaded component), registry (existing component registry key)
Supporting types: WidgetInput, WidgetCapabilities, ResolvedWidget, WidgetRegistryEvent

WidgetRegistry (`@object-ui/core`)

Runtime widget management with async loading and dependency resolution
Auto-syncs loaded widgets into the component registry
Event system for registration/load/error lifecycle

const widgets = new WidgetRegistry({ componentRegistry: registry });
widgets.register({
  name: 'custom-chart',
  version: '1.0.0',
  type: 'chart',
  label: 'Custom Chart',
  source: { type: 'module', url: '/widgets/chart.js' },
});
const resolved = await widgets.load('custom-chart');

`useDynamicApp` hook (`@object-ui/react`)

Fetches app config from server via adapter.getApp(appId), falls back to static config
refresh() invalidates MetadataCache and re-fetches for schema hot-reload

const { config, isLoading, refresh } = useDynamicApp({
  appId: 'crm',
  staticConfig: fallbackConfig,
  adapter: dataSource,
});

Auth package test coverage

34 tests covering createAuthClient, createAuthenticatedFetch, AuthProvider, useAuth, AuthGuard, and getUserInitials

ROADMAP

Updated §1.5 Phase 2/3 and §1.6 checkboxes to reflect current state

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

vercel · 2026-02-10T04:18:16Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectui	Error		Feb 10, 2026 4:58am
objectui-console	Ready	Preview, Comment	Feb 10, 2026 4:58am
objectui-storybook	Ready	Preview, Comment	Feb 10, 2026 4:58am

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

…ic loading work Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Copilot

Pull request overview

Adds foundational runtime extensibility and configuration loading to ObjectUI: a widget manifest/registry system (types + core) and a useDynamicApp hook (react) to load app definitions from server metadata with cache invalidation support, alongside expanded auth package test coverage and ROADMAP updates.

Changes:

Introduces WidgetManifest / widget registry type system in @object-ui/types and exports them from the package entrypoint.
Adds WidgetRegistry in @object-ui/core with async widget loading (inline/registry/module), dependency resolution, registry sync, events, and tests.
Adds useDynamicApp hook in @object-ui/react with tests, plus additional auth unit tests and ROADMAP checkbox updates.

Reviewed changes

Copilot reviewed 13 out of 13 changed files in this pull request and generated 9 comments.

Show a summary per file

File	Description
packages/types/src/widget.ts	Defines widget manifest/source/capability/event types for runtime widget loading/registration.
packages/types/src/index.ts	Re-exports widget system types from `@object-ui/types`.
packages/core/src/registry/WidgetRegistry.ts	Implements runtime widget registry with loading strategies, dependency handling, eventing, and component registry sync.
packages/core/src/registry/tests/WidgetRegistry.test.ts	Adds unit tests covering WidgetRegistry registration/loading/events/stats behaviors.
packages/core/src/index.ts	Exposes `WidgetRegistry` from `@object-ui/core` public API.
packages/react/src/hooks/useDynamicApp.ts	Adds hook to fetch app config via adapter `getApp()` with fallback + refresh cache invalidation.
packages/react/src/hooks/index.ts	Exports `useDynamicApp` from hooks barrel.
packages/react/src/hooks/tests/useDynamicApp.test.ts	Adds unit tests for `useDynamicApp` loading/fallback/refresh behaviors.
packages/auth/src/tests/types.test.ts	Adds tests for `getUserInitials`.
packages/auth/src/tests/createAuthenticatedFetch.test.ts	Adds tests for auth header injection behavior.
packages/auth/src/tests/createAuthClient.test.ts	Adds tests for `createAuthClient` request construction + error handling.
packages/auth/src/tests/AuthProvider.test.tsx	Adds tests for AuthProvider/useAuth/AuthGuard integration behavior.
ROADMAP.md	Updates roadmap checkboxes to reflect completion of auth + widget/dynamic app loading milestones.

Copilot · 2026-02-10T04:51:15Z

+    // Resolve dependencies first
+    if (manifest.dependencies) {
+      for (const dep of manifest.dependencies) {
+        if (!this.isLoaded(dep)) {
+          await this.load(dep);


Dependency resolution recurses with await this.load(dep) but has no cycle detection. A cyclic dependency graph (A -> B -> A) will cause infinite recursion / stack overflow. Consider tracking a loading/visiting set per call and throwing a clear error when a cycle is detected.

Copilot · 2026-02-10T04:51:16Z

+      // Sync to component registry if available
+      if (this.componentRegistry) {
+        this.componentRegistry.register(manifest.type, component as any, {
+          label: manifest.label,
+          icon: manifest.icon,


When syncing into Registry, this registers manifest.type without a namespace. Registry.register() currently emits a deprecation console.warn for non-namespaced registrations, so loading widgets will spam warnings at runtime. Consider providing a namespace in the meta (while still allowing the short-name fallback) to avoid the warning.

Copilot · 2026-02-10T04:51:16Z

+ */
+
+import React from 'react';
+import { describe, it, expect, vi, beforeEach } from 'vitest';


Unused import: beforeEach is imported from vitest but never used in this test file.

Suggested change

import { describe, it, expect, vi, beforeEach } from 'vitest';

import { describe, it, expect, vi } from 'vitest';

Copilot · 2026-02-10T04:51:16Z

+    try {
+      const serverConfig = await adapter.getApp(appId);
+
+      if (!mountedRef.current) return;
+


loadConfig only guards against unmounts via mountedRef, but it does not guard against stale in-flight requests. If appId (or adapter/staticConfig/enabled) changes while a previous getApp call is still pending, the older request can resolve later and overwrite state with the wrong app config. Consider tracking a monotonically increasing request id (or AbortController) and only applying results for the latest request.

Copilot · 2026-02-10T04:51:16Z

+  async load(name: string): Promise<ResolvedWidget> {
+    // Return cached if already loaded
+    const cached = this.resolved.get(name);
+    if (cached) return cached;


load() only memoizes completed loads in this.resolved. If load(name) is called concurrently before the first call finishes, the widget may be resolved/imported multiple times and events may emit multiple times. Consider caching an in-flight Promise per name to dedupe concurrent loads.

Copilot · 2026-02-10T04:51:17Z

+  unregister(name: string): boolean {
+    const existed = this.manifests.delete(name);
+    this.resolved.delete(name);
+    if (existed) {
+      this.emit({ type: 'widget:unregistered', name });


unregister() removes the widget from manifests/resolved, but if the widget was previously loaded it remains registered in componentRegistry (there is no corresponding unregister). That can make unregister() appear to succeed while schema rendering still finds the component via the registry. Consider either adding/removing a registry entry (if supported) or documenting this behavior explicitly / adding a syncToComponentRegistry option.

Copilot · 2026-02-10T04:51:17Z

+      case 'module': {
+        const mod = await import(/* @vite-ignore */ source.url);
+        const exportName = source.exportName ?? 'default';
+        const component = mod[exportName];
+        if (!component) {


Runtime module loading uses import(/* @vite-ignore */ source.url), which bakes a Vite-specific directive into @object-ui/core and may not behave correctly in non-Vite bundlers/environments. Consider making the module loader injectable (e.g., via WidgetRegistryOptions) and validating/normalizing URLs before executing dynamic imports.

Copilot · 2026-02-10T04:51:17Z

+ * Tests for useDynamicApp hook
+ */
+
+import { describe, it, expect, vi, beforeEach } from 'vitest';


Unused import: beforeEach is imported from vitest but never used in this test file.

Suggested change

import { describe, it, expect, vi, beforeEach } from 'vitest';

import { describe, it, expect, vi } from 'vitest';

Copilot · 2026-02-10T04:51:17Z

+    it('loads a widget from the component registry', async () => {
+      const componentRegistry = new Registry();
+      const component = () => null;
+      componentRegistry.register('existing-type', component);


Registry.register() emits a deprecation console.warn when called without a namespace. This test registers existing-type without meta, which can add noisy warnings to test output. Consider passing a namespace in the meta argument (or using a helper) to keep test logs clean.

Suggested change

componentRegistry.register('existing-type', component);

componentRegistry.register('existing-type', component, { namespace: 'test' });

Initial plan

c9e2a76

Copilot AI assigned Copilot and hotlong Feb 10, 2026

Copilot started work on behalf of hotlong February 10, 2026 04:18 View session

Copilot AI and others added 4 commits February 10, 2026 04:28

Add comprehensive unit tests for @object-ui/auth package (34 tests)

ec911ef

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Add WidgetManifest types and WidgetRegistry implementation with tests

d13eded

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Add useDynamicApp hook for dynamic app configuration loading with tests

b7c97fd

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Update ROADMAP.md to reflect completed auth, widget system, and dynam…

44f817a

…ic loading work Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

vercel Bot deployed to Preview – objectui-storybook February 10, 2026 04:42 View deployment

Copilot AI changed the title ~~[WIP] Add console authentication system to project~~ Implement widget manifest system, dynamic app loading, and auth test coverage Feb 10, 2026

Copilot AI requested a review from hotlong February 10, 2026 04:43

Copilot finished work on behalf of hotlong February 10, 2026 04:43

hotlong marked this pull request as ready for review February 10, 2026 04:45

Copilot AI review requested due to automatic review settings February 10, 2026 04:45

hotlong merged commit 63b9ba7 into main Feb 10, 2026
4 of 6 checks passed

Copilot started reviewing on behalf of hotlong February 10, 2026 04:45 View session

vercel Bot had a problem deploying to Preview – objectui February 10, 2026 04:45 Failure

Copilot AI reviewed Feb 10, 2026

View reviewed changes

vercel Bot deployed to Preview – objectui-console February 10, 2026 04:58 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Implement widget manifest system, dynamic app loading, and auth test coverage#424

Implement widget manifest system, dynamic app loading, and auth test coverage#424
hotlong merged 5 commits intomainfrom
copilot/implement-console-authentication-system

Copilot AI commented Feb 10, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Feb 10, 2026 •

edited

Loading

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

	import { describe, it, expect, vi, beforeEach } from 'vitest';
	import { describe, it, expect, vi } from 'vitest';

	componentRegistry.register('existing-type', component);
	componentRegistry.register('existing-type', component, { namespace: 'test' });

Conversation

Copilot AI commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

WidgetManifest type system (@object-ui/types)

WidgetRegistry (@object-ui/core)

useDynamicApp hook (@object-ui/react)

Auth package test coverage

ROADMAP

Uh oh!

vercel Bot commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Feb 10, 2026 •

edited

Loading

WidgetManifest type system (`@object-ui/types`)

WidgetRegistry (`@object-ui/core`)

`useDynamicApp` hook (`@object-ui/react`)

vercel Bot commented Feb 10, 2026 •

edited

Loading