@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.149

package/dist/application/portal-reservation.js

@@ -0,0 +1,183 @@
+import { LOCAL_APPLICATION_BUILD, localApplicationHttpOrigin } from "./local-build.js";
+export class ApplicationPortalError extends Error {
+    reason;
+    constructor(reason) {
+        super("application authorization popup unavailable");
+        this.reason = reason;
+        this.name = "ApplicationPortalError";
+    }
+}
+const owned = new WeakSet();
+/** Reserve before ANY startup/expiry await. Window lifetime and original caller
+ * remain pinned; this helper neither starts/retries authorization nor owns keys. */
+export function reserveApplicationPortal(host) {
+    const origin = host.cpOrigin, signal = host.signal, current = host.isCurrent, open = host.open;
+    const check = () => {
+        let active = false;
+        try {
+            active = !signal.aborted && current() === true;
+        }
+        catch { /* stale host observations are fenced */ }
+        if (!active)
+            throw new ApplicationPortalError("application_popup_fenced");
+    };
+    check();
+    let cp;
+    try {
+        cp = new URL(origin);
+    }
+    catch {
+        throw new ApplicationPortalError("application_popup_binding");
+    }
+    const loopback = host.allowLoopbackHttp === true && cp.protocol === "http:" && (LOCAL_APPLICATION_BUILD ? localApplicationHttpOrigin(origin) : ["localhost", "127.0.0.1", "[::1]"].includes(cp.hostname));
+    if (cp.origin !== origin || cp.username || cp.password || cp.search || cp.hash || cp.pathname !== "/" || (cp.protocol !== "https:" && !loopback))
+        throw new ApplicationPortalError("application_popup_binding");
+    let window;
+    try {
+        window = open();
+    }
+    catch {
+        throw new ApplicationPortalError("application_popup_unavailable");
+    }
+    if (window === null)
+        throw new ApplicationPortalError("application_popup_blocked");
+    if (owned.has(window))
+        throw new ApplicationPortalError("application_popup_binding");
+    owned.add(window);
+    let stopped = false, stopFailure = null;
+    const close = () => {
+        if (stopped) {
+            if (stopFailure)
+                throw stopFailure;
+            return;
+        }
+        stopped = true;
+        signal.removeEventListener("abort", abort);
+        try {
+            window.close();
+        }
+        catch {
+            stopFailure = new ApplicationPortalError("application_popup_stop_failed");
+            throw stopFailure;
+        }
+        // Keep the original window reserved even after a successful close. It is
+        // never a replacement resource for another operation or generation.
+    };
+    const abort = () => { try {
+        close();
+    }
+    catch { /* retained original physical stop failure */ } };
+    signal.addEventListener("abort", abort, { once: true });
+    try {
+        check();
+    }
+    catch (error) {
+        close();
+        throw error;
+    }
+    return Object.freeze({ close, get closed() { try {
+            return stopped || window.closed?.() === true;
+        }
+        catch {
+            return false;
+        } }, focus() {
+            check();
+            if (stopped)
+                return;
+            try {
+                window.focus?.();
+            }
+            catch {
+                throw new ApplicationPortalError("application_popup_unavailable");
+            }
+            check();
+        }, navigate(uri) {
+            check();
+            if (stopped)
+                throw new ApplicationPortalError("application_popup_fenced");
+            let url;
+            try {
+                url = new URL(uri);
+            }
+            catch {
+                throw new ApplicationPortalError("application_popup_binding");
+            }
+            if (url.origin !== origin || url.username || url.password)
+                throw new ApplicationPortalError("application_popup_binding");
+            try {
+                window.navigate(url.href);
+            }
+            catch (error) {
+                if (error instanceof ApplicationPortalError)
+                    throw error;
+                throw new ApplicationPortalError("application_popup_unavailable");
+            }
+            check();
+            if (stopped)
+                throw new ApplicationPortalError("application_popup_fenced");
+        } });
+}
+const browserWindows = new WeakMap();
+const POPUP_WIDTH = 620, POPUP_HEIGHT = 760;
+/** A popup window (not a tab) centred over the app on desktop, as the production
+ * Connect client opens it; mobile browsers may still use a tab. No noopener: the
+ * Connect window closes itself through window.opener. */
+function popupFeatures() {
+    let left = 0, top = 0;
+    try {
+        const w = globalThis.window;
+        left = Math.max(0, Math.round(w.screenX + (w.outerWidth - POPUP_WIDTH) / 2));
+        top = Math.max(0, Math.round(w.screenY + (w.outerHeight - POPUP_HEIGHT) / 2));
+    }
+    catch { /* default placement */ }
+    return `popup,width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${Number.isFinite(left) ? left : 0},top=${Number.isFinite(top) ? top : 0}`;
+}
+/** Default SDK UI adapter. No app callback, browser-runtime or manual URL input. */
+export function browserApplicationPortalHost(cpOrigin, signal, isCurrent, allowLoopbackHttp = false) {
+    return { cpOrigin, signal, isCurrent, allowLoopbackHttp, open() {
+            const popup = globalThis.window.open("about:blank", "_blank", popupFeatures());
+            if (!popup)
+                return null;
+            const original = browserWindows.get(popup);
+            if (original)
+                return original;
+            const port = { navigate(uri) {
+                    if (popup.closed)
+                        throw new ApplicationPortalError("application_popup_fenced");
+                    popup.location.href = uri;
+                }, close() {
+                    const open = !popup.closed;
+                    popup.close();
+                    // Return the person to the app the window was opened from.
+                    if (open)
+                        try {
+                            globalThis.window.focus();
+                        }
+                        catch { /* focus is best-effort */ }
+                }, focus() { try {
+                    popup.focus();
+                }
+                catch { /* focus is best-effort, never a new approval */ } }, closed: () => popup.closed };
+            browserWindows.set(popup, port);
+            return port;
+        } };
+}
+/** System-browser/extension adapter for the public `signIn` opener. Opening is
+ * deferred to the first CP-bound navigate; opener failures are not retried and
+ * the pairing request persists, so `start()` resumes it in a later context. */
+export function openerApplicationPortalHost(cpOrigin, signal, isCurrent, opener, allowLoopbackHttp = false) {
+    return { cpOrigin, signal, isCurrent, allowLoopbackHttp, open() {
+            let opened = false;
+            return { navigate(uri) {
+                    const url = new URL(uri);
+                    if (opener.returnUrl !== undefined)
+                        url.searchParams.set("return_url", opener.returnUrl);
+                    opened = true;
+                    void Promise.resolve().then(() => opener.open(url.href)).catch(() => { });
+                }, close() {
+                    if (opened && opener.close)
+                        void Promise.resolve().then(() => opener.close()).catch(() => { });
+                } };
+        } };
+}
+//# sourceMappingURL=portal-reservation.js.map

package/dist/application/portal-reservation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal-reservation.js","sourceRoot":"","sources":["../../src/application/portal-reservation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAGvF,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC1B;IAArB,YAAqB,MAAyJ;QAC5K,KAAK,CAAC,6CAA6C,CAAC,CAAC;QADlC,WAAM,GAAN,MAAM,CAAmJ;QACvH,IAAI,CAAC,IAAI,GAAC,wBAAwB,CAAC;IAC1F,CAAC;CACF;AAcD,MAAM,KAAK,GAAC,IAAI,OAAO,EAA0B,CAAC;AAClD;oFACoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,IAA0B;IACjE,MAAM,MAAM,GAAC,IAAI,CAAC,QAAQ,EAAC,MAAM,GAAC,IAAI,CAAC,MAAM,EAAC,OAAO,GAAC,IAAI,CAAC,SAAS,EAAC,IAAI,GAAC,IAAI,CAAC,IAAI,CAAC;IACpF,MAAM,KAAK,GAAC,GAAE,EAAE;QACd,IAAI,MAAM,GAAC,KAAK,CAAC;QAAA,IAAG,CAAC;YAAA,MAAM,GAAC,CAAC,MAAM,CAAC,OAAO,IAAE,OAAO,EAAE,KAAG,IAAI,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC,CAAA,wCAAwC,CAAA,CAAC;QAC9G,IAAG,CAAC,MAAM;YAAC,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;IAC1E,CAAC,CAAC;IACF,KAAK,EAAE,CAAC;IACR,IAAI,EAAM,CAAC;IAAA,IAAG,CAAC;QAAA,EAAE,GAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,CAAC,CAAC;IAAA,CAAC;IACxG,MAAM,QAAQ,GAAC,IAAI,CAAC,iBAAiB,KAAG,IAAI,IAAE,EAAE,CAAC,QAAQ,KAAG,OAAO,IAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAC,WAAW,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9L,IAAG,EAAE,CAAC,MAAM,KAAG,MAAM,IAAE,EAAE,CAAC,QAAQ,IAAE,EAAE,CAAC,QAAQ,IAAE,EAAE,CAAC,MAAM,IAAE,EAAE,CAAC,IAAI,IAAE,EAAE,CAAC,QAAQ,KAAG,GAAG,IAAE,CAAC,EAAE,CAAC,QAAQ,KAAG,QAAQ,IAAE,CAAC,QAAQ,CAAC;QAAC,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,CAAC,CAAC;IAC1L,IAAI,MAAkC,CAAC;IACvC,IAAG,CAAC;QAAA,MAAM,GAAC,IAAI,EAAE,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,CAAC,CAAC;IAAA,CAAC;IAC5F,IAAG,MAAM,KAAG,IAAI;QAAC,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,CAAC,CAAC;IAC/E,IAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QAAC,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,CAAC,CAAC;IACnF,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,IAAI,OAAO,GAAC,KAAK,EAAC,WAAW,GAA6B,IAAI,CAAC;IAC/D,MAAM,KAAK,GAAC,GAAE,EAAE;QACd,IAAG,OAAO,EAAC,CAAC;YAAA,IAAG,WAAW;gBAAC,MAAM,WAAW,CAAC;YAAA,OAAO;QAAA,CAAC;QACrD,OAAO,GAAC,IAAI,CAAC;QAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QACvD,IAAG,CAAC;YAAA,MAAM,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC;YAAA,WAAW,GAAC,IAAI,sBAAsB,CAAC,+BAA+B,CAAC,CAAC;YAAA,MAAM,WAAW,CAAC;QAAA,CAAC;QACrH,yEAAyE;QACzE,oEAAoE;IACtE,CAAC,CAAC;IACF,MAAM,KAAK,GAAC,GAAE,EAAE,GAAC,IAAG,CAAC;QAAA,KAAK,EAAE,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC,CAAA,6CAA6C,CAAA,CAAC,CAAA,CAAC,CAAC;IACpF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;IACnD,IAAG,CAAC;QAAA,KAAK,EAAE,CAAC;IAAA,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QAAA,KAAK,EAAE,CAAC;QAAA,MAAM,KAAK,CAAC;IAAA,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,IAAI,MAAM,KAAG,IAAG,CAAC;YAAA,OAAO,OAAO,IAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAG,IAAI,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC;YAAA,OAAO,KAAK,CAAC;QAAA,CAAC,CAAA,CAAC,EAAC,KAAK;YAChH,KAAK,EAAE,CAAC;YAAA,IAAG,OAAO;gBAAC,OAAO;YAC1B,IAAG,CAAC;gBAAA,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,CAAC,CAAC;YAAA,CAAC;YAC/F,KAAK,EAAE,CAAC;QACV,CAAC,EAAC,QAAQ,CAAC,GAAU;YACnB,KAAK,EAAE,CAAC;YAAA,IAAG,OAAO;gBAAC,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;YAChF,IAAI,GAAO,CAAC;YAAA,IAAG,CAAC;gBAAA,GAAG,GAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,CAAC,CAAC;YAAA,CAAC;YACvG,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ;gBAAC,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,CAAC,CAAC;YACjH,IAAG,CAAC;gBAAA,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAA,CAAC;YAAA,OAAM,KAAK,EAAC,CAAC;gBAAA,IAAG,KAAK,YAAY,sBAAsB;oBAAC,MAAM,KAAK,CAAC;gBAAA,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,CAAC,CAAC;YAAA,CAAC;YACtK,KAAK,EAAE,CAAC;YAAA,IAAG,OAAO;gBAAC,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;QAClF,CAAC,EAAC,CAAC,CAAC;AACN,CAAC;AACD,MAAM,cAAc,GAAC,IAAI,OAAO,EAAiC,CAAC;AAClE,MAAM,WAAW,GAAC,GAAG,EAAC,YAAY,GAAC,GAAG,CAAC;AACvC;;yDAEyD;AACzD,SAAS,aAAa;IACpB,IAAI,IAAI,GAAC,CAAC,EAAC,GAAG,GAAC,CAAC,CAAC;IACjB,IAAG,CAAC;QAAA,MAAM,CAAC,GAAC,UAAU,CAAC,MAAM,CAAC;QAAA,IAAI,GAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAC,CAAC,CAAC,CAAC,UAAU,GAAC,WAAW,CAAC,GAAC,CAAC,CAAC,CAAC,CAAC;QAAA,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAC,CAAC,CAAC,CAAC,WAAW,GAAC,YAAY,CAAC,GAAC,CAAC,CAAC,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC,CAAA,uBAAuB,CAAA,CAAC;IACtM,OAAO,eAAe,WAAW,WAAW,YAAY,SAAS,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,CAAC,EAAE,CAAC;AACpI,CAAC;AACD,oFAAoF;AACpF,MAAM,UAAU,4BAA4B,CAAC,QAAe,EAAC,MAAkB,EAAC,SAAqB,EAAC,iBAAiB,GAAC,KAAK;IAC3H,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,SAAS,EAAC,iBAAiB,EAAC,IAAI;YACtD,MAAM,KAAK,GAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAC,QAAQ,EAAC,aAAa,EAAE,CAAC,CAAC;YAC3E,IAAG,CAAC,KAAK;gBAAC,OAAO,IAAI,CAAC;YACtB,MAAM,QAAQ,GAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAAA,IAAG,QAAQ;gBAAC,OAAO,QAAQ,CAAC;YACrE,MAAM,IAAI,GAAwB,EAAC,QAAQ,CAAC,GAAG;oBAC7C,IAAG,KAAK,CAAC,MAAM;wBAAC,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;oBAC7E,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAC,GAAG,CAAC;gBAC1B,CAAC,EAAC,KAAK;oBACL,MAAM,IAAI,GAAC,CAAC,KAAK,CAAC,MAAM,CAAC;oBAAA,KAAK,CAAC,KAAK,EAAE,CAAC;oBACvC,2DAA2D;oBAC3D,IAAG,IAAI;wBAAC,IAAG,CAAC;4BAAA,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAAA,CAAC;wBAAA,MAAK,CAAC,CAAA,0BAA0B,CAAA,CAAC;gBAC1E,CAAC,EAAC,KAAK,KAAG,IAAG,CAAC;oBAAA,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,gDAAgD,CAAA,CAAC,CAAA,CAAC,EAAC,MAAM,EAAC,GAAE,EAAE,CAAA,KAAK,CAAC,MAAM,EAAC,CAAC;YAC/G,cAAc,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAC7C,CAAC,EAAC,CAAC;AACL,CAAC;AACD;;+EAE+E;AAC/E,MAAM,UAAU,2BAA2B,CAAC,QAAe,EAAC,MAAkB,EAAC,SAAqB,EAClG,MAAmG,EAAC,iBAAiB,GAAC,KAAK;IAC3H,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,SAAS,EAAC,iBAAiB,EAAC,IAAI;YACtD,IAAI,MAAM,GAAC,KAAK,CAAC;YACjB,OAAO,EAAC,QAAQ,CAAC,GAAG;oBAClB,MAAM,GAAG,GAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;oBAAA,IAAG,MAAM,CAAC,SAAS,KAAG,SAAS;wBAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC3G,MAAM,GAAC,IAAI,CAAC;oBAAA,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,GAAsC,CAAC,CAAC,CAAC;gBACxH,CAAC,EAAC,KAAK;oBACL,IAAG,MAAM,IAAE,MAAM,CAAC,KAAK;wBAAC,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,MAAM,CAAC,KAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,GAA4B,CAAC,CAAC,CAAC;gBACpH,CAAC,EAAC,CAAC;QACL,CAAC,EAAC,CAAC;AACL,CAAC"}

package/dist/application/private-collections.d.ts

@@ -0,0 +1,114 @@
+/**
+ * SDK-10: Private collections (kept on the person's computers, reached through
+ * the relay with an app grant) in the entry's one collection list, beside the
+ * hosted ones, and opened by the same selection.
+ *
+ * Page-side and per tab: a Private collection opens as a thin client in this
+ * page, never in the shared Worker. The list shows the collections this
+ * browser holds a grant for; `add` asks for a new grant from the user gesture.
+ */
+import type { NativeCompletion } from "../app-grant/native-completion.js";
+import type { NativeAuthorizationCall, NativeAuthorizationResult } from "./native-authorization-rpc.js";
+import type { AppWebSignInPortal } from "../app-host/web-sign-in-session.js";
+import type { AppInstallationCollection } from "../app-host/installation-sign-in.js";
+import type { AppWebSignInSnapshot } from "../app-host/web-sign-in-session.js";
+import type { AppWebSignInProblemDetail } from "../app-host/web-sign-in-problem.js";
+import type { MdbaseAppGrants, AppGrantPopup } from "../app-grant/client.js";
+import type { MdbaseClient } from "../client.js";
+import type { MdbaseApplicationDeclaration } from "./declaration.js";
+import type { MdbaseApplicationConnection, MdbaseApplicationReadinessSnapshot } from "./entry.js";
+import type { MdbaseSetupPlan, MdbaseSetupPlanOptions } from "./setup.js";
+/** The grant operations this controller uses (a fake in tests). */
+export type ApplicationPrivateGrants = Pick<MdbaseAppGrants, "collections" | "availability" | "waitForAvailable" | "connector" | "people" | "setup" | "forget" | "forgetAllGrants" | "authorize"> & Partial<Pick<MdbaseAppGrants, "prepareAuthorization" | "verifiedStoredNativeGrant">>;
+export interface ApplicationPrivateCollectionsOptions {
+    readonly declaration: MdbaseApplicationDeclaration;
+    /** Loads the grants on first use (the relay, Noise and grant store load lazily). */
+    readonly grants?: () => Promise<ApplicationPrivateGrants>;
+    /** Open the thin client; defaults to `connect` over the grant's connector. */
+    readonly connect?: (grants: ApplicationPrivateGrants, collectionId: string, signal: AbortSignal) => Promise<MdbaseClient>;
+    readonly onChange: () => void;
+    /** How long an open waits for the person's computer (default 10 minutes). */
+    readonly waitMs?: number;
+}
+/** The open Private collection, in the session snapshot's terms. */
+export interface ApplicationPrivateState {
+    readonly collectionId: string;
+    readonly status: "opening" | "ready" | "setup_required" | "blocked";
+    readonly problem: string | null;
+    readonly problemDetail?: AppWebSignInProblemDetail;
+    readonly readiness: MdbaseApplicationReadinessSnapshot;
+}
+/** The declaration's redirect URI on its own origin (where the grant popup returns). */
+export declare function appGrantRedirectUri(declaration: MdbaseApplicationDeclaration): string;
+/** The entry's collection list with this browser's Private collections added
+ * (a hosted entry of the same ID wins), and the open Private collection as the
+ * session's selected one while no hosted collection is open. */
+export declare function withPrivateCollections<T extends AppWebSignInSnapshot>(raw: T, entries: readonly AppInstallationCollection[], open: ApplicationPrivateState | null): T;
+export declare class ApplicationPrivateCollections {
+    private readonly options;
+    private loading;
+    private list;
+    private open;
+    private listed;
+    /** The account whose list read finished (read or failed): until then a
+     * requested collection missing from the list may still be in it. */
+    private settled;
+    private refreshing;
+    private closed;
+    private bindings;
+    private bindingsAccount;
+    private native;
+    /** Bumped on every change: entries and state are stable between bumps. */
+    revision: number;
+    constructor(options: ApplicationPrivateCollectionsOptions);
+    private grants;
+    private changed;
+    /** Only verified SAME-account protected references may label stored keys. */
+    bind(account: string | null, grants: readonly NativeCompletion[]): void;
+    nativeAuthorization(call: NativeAuthorizationCall, portal: AppWebSignInPortal, signal: AbortSignal): Promise<NativeAuthorizationResult>;
+    /** Private collections this browser holds a grant for. */
+    entries(): readonly AppInstallationCollection[];
+    has(collectionId: string): boolean;
+    state(): ApplicationPrivateState | null;
+    connection(collectionId: string): MdbaseApplicationConnection | null;
+    /** True until this browser's list for `account` has been read (or failed to
+     * read): a collection not yet listed may still be one of them. */
+    listing(account: string | null): boolean;
+    /** Read the list once per signed-in account (and again on `refresh`). */
+    ensure(account: string): void;
+    refresh(account?: string | null): Promise<void>;
+    private setList;
+    private setAvailability;
+    private set;
+    /** Open one Private collection in this page (closing any open one). Waits,
+     * bounded, for the person's computer; the state says what is happening. */
+    openCollection(collectionId: string, scope: {
+        readonly account: string;
+        readonly installation: string;
+    }): Promise<void>;
+    private assessOpen;
+    private current;
+    isOpen(): boolean;
+    assess(): Promise<MdbaseApplicationReadinessSnapshot>;
+    plan(options?: MdbaseSetupPlanOptions): Promise<MdbaseSetupPlan>;
+    apply(plan: MdbaseSetupPlan, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<void>;
+    /** Set up from the declaration with nothing to review. */
+    configure(options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<void>;
+    /** From the user gesture (the popup is already reserved): grant this app a
+     * Private collection (or `collectionId` again). Resolves with its ID. */
+    add(popup: AppGrantPopup, collectionId?: string, signal?: AbortSignal): Promise<string>;
+    /** Forget the grant in this browser (does not revoke it at Connect). */
+    forget(collectionId: string): Promise<void>;
+    /** Sign-out: every grant this browser holds goes too — including any in
+     * the store that this page never listed (grants carry no account, so one
+     * left behind could serve a different account). Rejects when the wipe
+     * could not complete; the caller reports it, never swallows it. */
+    forgetAll(): Promise<void>;
+    /** Close the open Private collection (its client), if any. */
+    close(notify?: boolean): void;
+    dispose(): void;
+}