01
Microfrontend
Host your app in an iframe. Load the SDK, call init, and talk to the shell over postMessage. The chrome stays in the host — layouts, toasts, dialogs, theme, and language included.
- → Sidebar, top bar, or window layout
- → Toast, dialog, modal, and drawer from the SDK
- → One
shellui.config.ts
02
Authentication
Sign-in lives in the shell. Connect identity-service or Supabase, protect routes, and decide who can join — public, a domain allow list, or invitation only.
- → OAuth, JWT sessions, and JWKS
- → Groups and login logs
- → Access tokens for users and services
03
Administration
Staff and company owners open an embedded admin from the account menu. Manage the directory there, then inject your own apps into the sidebar from config.
- → Users, organization, and join modes
- → Groups, logs, tokens, and OAuth clients
- → Custom admin navigation
04
Storage
A company bucket behind the shell. New files stay private until you share them. Iframe apps upload, list, and pick files through shellui.storage.
- → Access grants for users, groups, or the company
- → Share links with expiry and download caps
- → Company and per-user quotas
