@microsoft/power-apps-native-host 0.2.22 → 0.2.25

package/lib/commonjs/auth/AuthContext.web.js

@@ -0,0 +1,32 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.AuthProvider = AuthProvider;
+exports.useAuth = useAuth;
+var _react = _interopRequireWildcard(require("react"));
+var _jsxRuntime = require("react/jsx-runtime");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
+const hostedWebAuthState = {
+  isLoading: false,
+  isAuthReady: true,
+  isSignedIn: true,
+  hasRealAccount: false,
+  error: null,
+  acquireToken: async () => null,
+  signIn: async () => undefined,
+  signOut: async () => undefined
+};
+const AuthContext = /*#__PURE__*/(0, _react.createContext)(hostedWebAuthState);
+function AuthProvider({
+  children
+}) {
+  return /*#__PURE__*/(0, _jsxRuntime.jsx)(AuthContext.Provider, {
+    value: hostedWebAuthState,
+    children: children
+  });
+}
+function useAuth() {
+  return (0, _react.useContext)(AuthContext);
+}

package/lib/commonjs/auth/completePowerAppsAuthSession.js

@@ -0,0 +1,16 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.completePowerAppsAuthSession = completePowerAppsAuthSession;
+var WebBrowser = _interopRequireWildcard(require("expo-web-browser"));
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
+/**
+ * Completes an Expo web authentication popup when the current route is its
+ * redirect target. Call this at module initialization in the OAuth callback
+ * route; navigation after completion remains application-owned.
+ */
+function completePowerAppsAuthSession(options) {
+  return WebBrowser.maybeCompleteAuthSession(options);
+}

package/lib/commonjs/bridge/NativePowerAppsBridge.js

@@ -256,8 +256,18 @@ class NativePowerAppsBridge {
       const sdkKey = key === 'content-type' ? 'Content-Type' : key;
       responseHeaders[sdkKey] = value;
     });
-    const buffer = await response.arrayBuffer();
     (0, _logger.debugLog)(`[bridge] ${method} ${urlLabel} → ${response.status}`);
+    let buffer;
+    try {
+      buffer = await response.arrayBuffer();
+    } catch (readErr) {
+      (0, _logger.debugWarn)(`[bridge] HTTP ${response.status} for ${method} ${urlLabel} | failed to read response body:`, readErr);
+      scenario.fail(undefined, {
+        errorName: getSafeErrorName(readErr),
+        httpStatus: response.status
+      });
+      throw readErr;
+    }
     if (!response.ok) {
       const bodyText = new TextDecoder().decode(buffer).slice(0, 1000);
       (0, _logger.debugWarn)(`[bridge] HTTP ${response.status} for ${method} ${urlLabel} | res: ${bodyText}`);

package/lib/commonjs/bridge/PowerPagesBridge.js

@@ -0,0 +1,138 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PowerPagesBridge = void 0;
+exports.setupPowerPagesHost = setupPowerPagesHost;
+function toPowerPagesUrl(url) {
+  const parsedUrl = new URL(url, window.location.origin);
+  if (parsedUrl.origin === window.location.origin && parsedUrl.pathname.startsWith('/_api/')) {
+    return `${parsedUrl.pathname}${parsedUrl.search}`;
+  }
+  const lowerPath = parsedUrl.pathname.toLowerCase();
+  if (lowerPath.includes('/$metadata') || lowerPath.includes('/entitydefinitions') || lowerPath.includes('/$batch') || lowerPath.includes('/microsoft.dynamics.crm.')) {
+    throw new Error(`PowerPagesBridge does not support this Dataverse operation: ${parsedUrl.pathname}`);
+  }
+  const dataverseApiPattern = /\/api\/data\/v\d+(?:\.\d+)+\//gi;
+  let finalMatch = null;
+  let match;
+  while ((match = dataverseApiPattern.exec(parsedUrl.pathname)) !== null) {
+    finalMatch = match;
+  }
+  if (finalMatch?.index === undefined) {
+    throw new Error(`PowerPagesBridge only supports Dataverse Web API requests: ${parsedUrl.pathname}`);
+  }
+  const resourcePath = parsedUrl.pathname.slice(finalMatch.index + finalMatch[0].length);
+  return `/_api/${resourcePath}${parsedUrl.search}`;
+}
+let requestVerificationTokenPromise;
+function getRequestVerificationToken() {
+  requestVerificationTokenPromise ??= (async () => {
+    const response = await fetch('/_layout/tokenhtml', {
+      credentials: 'same-origin'
+    });
+    if (!response.ok) {
+      throw new Error(`PowerPagesBridge could not get a CSRF token (${response.status})`);
+    }
+    const tokenDocument = new DOMParser().parseFromString(await response.text(), 'text/html');
+    const token = tokenDocument.querySelector('input[name="__RequestVerificationToken"]')?.getAttribute('value');
+    if (!token) {
+      throw new Error('PowerPagesBridge could not find a CSRF token in /_layout/tokenhtml');
+    }
+    return token;
+  })().catch(error => {
+    requestVerificationTokenPromise = undefined;
+    throw error;
+  });
+  return requestVerificationTokenPromise;
+}
+function createHeaders(headers, token) {
+  const result = new Headers();
+  for (const [name, value] of Object.entries(headers ?? {})) {
+    if (name.toLowerCase() !== 'authorization') {
+      result.set(name, value);
+    }
+  }
+  result.set('__RequestVerificationToken', token);
+  return result;
+}
+class PowerPagesBridge {
+  constructor(options) {
+    this.options = options;
+  }
+  updateOptions(options) {
+    this.options = options;
+  }
+  async initialize() {}
+  createRequestBody(config) {
+    return config.body ?? '';
+  }
+  async executePluginAsync(pluginName, pluginAction, params) {
+    const pluginKey = `${pluginName}.${pluginAction}`;
+    switch (pluginKey) {
+      case 'AppIdentityServicePlugin.getAppAccessTokenAsync':
+      case 'AppIdentityServicePlugin.getAppDynamicResourceAccessTokenAsync':
+        return '';
+      case 'AppPowerAppsClientPlugin.getAppCdsDataSourceConfigsAsync':
+        return this.options.dataSources;
+      case 'AppPowerAppsClientPlugin.loadAppConnectionsAsync_v2':
+      case 'AppPowerAppsClientPlugin.loadNonCompositeConnectionsAsync':
+        return this.options.connections;
+      case 'AppPowerAppsClientPlugin.resolveCompositeConnectionsAsync':
+        return null;
+      case 'AppHttpClientPlugin.sendHttpAsync':
+        return this.sendHttpAsync(params);
+      case 'PublishedAppTelemetry.trackEvent':
+      case 'PublishedAppTelemetry.trackException':
+      case 'PublishedAppTelemetry.trackMetric':
+      case 'PublishedAppTelemetry.startScenario':
+      case 'PublishedAppTelemetry.endScenario':
+      case 'PublishedAppTelemetry.setDefaultProperties':
+        return undefined;
+      default:
+        throw new Error(`PowerPagesBridge does not support ${pluginKey}`);
+    }
+  }
+  async sendHttpAsync(params) {
+    const request = params[0];
+    const body = params[1];
+    const powerPagesUrl = toPowerPagesUrl(request.url);
+    const token = await getRequestVerificationToken();
+    const response = await fetch(powerPagesUrl, {
+      method: request.method,
+      headers: createHeaders(request.headers, token),
+      body: body || undefined,
+      credentials: 'same-origin'
+    });
+    const responseHeaders = {};
+    response.headers.forEach((value, name) => {
+      responseHeaders[name === 'content-type' ? 'Content-Type' : name] = value;
+    });
+    const responseBody = await response.arrayBuffer();
+    if (!response.ok) {
+      const responseText = new TextDecoder().decode(responseBody).slice(0, 1000);
+      const detail = responseText ? `: ${responseText}` : '';
+      // RuntimeDataClient treats JSON tuples as successful before inspecting status.
+      // Reject with its HTTP-plugin error shape so 4xx/5xx responses remain failures.
+      throw [[`Power Pages Web API request failed (${response.status})${detail}`, undefined, {
+        status: response.status,
+        headers: responseHeaders
+      }], responseBody];
+    }
+    return [{
+      status: response.status,
+      headers: responseHeaders
+    }, responseBody];
+  }
+}
+exports.PowerPagesBridge = PowerPagesBridge;
+let bridge;
+function setupPowerPagesHost(options) {
+  if (bridge) {
+    bridge.updateOptions(options);
+    return;
+  }
+  bridge = new PowerPagesBridge(options);
+  globalThis.powerAppsBridge = bridge;
+}

package/lib/commonjs/index.js

@@ -63,6 +63,12 @@ Object.defineProperty(exports, "PowerAppsProvider", {
     return _PowerAppsProvider.PowerAppsProvider;
   }
 });
+Object.defineProperty(exports, "PowerPagesBridge", {
+  enumerable: true,
+  get: function () {
+    return _PowerPagesBridge.PowerPagesBridge;
+  }
+});
 Object.defineProperty(exports, "ThemeProvider", {
   enumerable: true,
   get: function () {
@@ -99,6 +105,12 @@ Object.defineProperty(exports, "buildEnvironmentEndpoint", {
     return _PowerPlatformEnvironmentApi.buildEnvironmentEndpoint;
   }
 });
+Object.defineProperty(exports, "completePowerAppsAuthSession", {
+  enumerable: true,
+  get: function () {
+    return _completePowerAppsAuthSession.completePowerAppsAuthSession;
+  }
+});
 Object.defineProperty(exports, "configureAppLogger", {
   enumerable: true,
   get: function () {
@@ -195,6 +207,12 @@ Object.defineProperty(exports, "setupNativeHost", {
     return _setupNativeHost.setupNativeHost;
   }
 });
+Object.defineProperty(exports, "setupPowerPagesHost", {
+  enumerable: true,
+  get: function () {
+    return _PowerPagesBridge.setupPowerPagesHost;
+  }
+});
 Object.defineProperty(exports, "useAuth", {
   enumerable: true,
   get: function () {
@@ -226,9 +244,11 @@ Object.defineProperty(exports, "useThemeTokens", {
   }
 });
 var _NativePowerAppsBridge = require("./bridge/NativePowerAppsBridge.js");
+var _PowerPagesBridge = require("./bridge/PowerPagesBridge.js");
 var _setupNativeHost = require("./bridge/setupNativeHost.js");
-var _AuthContext = require("./auth/AuthContext.js");
-var _PowerAppsHostProvider = require("./provider/PowerAppsHostProvider.js");
+var _AuthContext = require("./auth/AuthContext");
+var _completePowerAppsAuthSession = require("./auth/completePowerAppsAuthSession.js");
+var _PowerAppsHostProvider = require("./provider/PowerAppsHostProvider");
 var _PowerAppsProvider = require("./provider/PowerAppsProvider.js");
 var _PowerPlatformEnvironmentApi = require("./platform/PowerPlatformEnvironmentApi.js");
 var _useConnectionRefs = require("./platform/useConnectionRefs.js");

package/lib/commonjs/offline/useOfflineIntegration.js

@@ -0,0 +1,12 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "useOfflineIntegration", {
+  enumerable: true,
+  get: function () {
+    return _powerAppsNativeOffline.useOfflineIntegration;
+  }
+});
+var _powerAppsNativeOffline = require("@microsoft/power-apps-native-offline");

package/lib/commonjs/offline/useOfflineIntegration.web.js

@@ -0,0 +1,11 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.useOfflineIntegration = useOfflineIntegration;
+function useOfflineIntegration(_options) {
+  return {
+    StatusOverlay: null
+  };
+}

package/lib/commonjs/provider/PowerAppsHostProvider.web.js

@@ -0,0 +1,41 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PowerAppsHostProvider = PowerAppsHostProvider;
+var _react = _interopRequireDefault(require("react"));
+var _reactNativeSafeAreaContext = require("react-native-safe-area-context");
+var _NativePowerAppsBridge = require("../bridge/NativePowerAppsBridge.js");
+var _PowerPagesBridge = require("../bridge/PowerPagesBridge.js");
+var _jsxRuntime = require("react/jsx-runtime");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+function PowerAppsHostProvider({
+  connectionReferences,
+  databaseReferences,
+  children
+}) {
+  const isPowerPages = typeof window !== 'undefined' && Boolean(window.Microsoft?.Dynamic365?.Portal?.version);
+  if (isPowerPages) {
+    const connectorRuntimeUrl = window.location.origin;
+    const dataverseRuntimeUrl = `${window.location.origin}/api/data/v9.0/`;
+    const connections = (0, _NativePowerAppsBridge.buildConnectionReferences)(connectionReferences);
+    for (const connection of Object.values(connections)) {
+      connection.runtimeUrl = connectorRuntimeUrl;
+      connection.datasetName = window.location.origin;
+    }
+    const dataSources = Object.values(databaseReferences ?? {}).flatMap(databaseReference => Object.values(databaseReference.dataSources ?? {}).map(dataSource => ({
+      runtimeUrl: dataverseRuntimeUrl,
+      entitySetName: dataSource.entitySetName ?? '',
+      logicalName: dataSource.logicalName ?? '',
+      version: '9.2'
+    })));
+    (0, _PowerPagesBridge.setupPowerPagesHost)({
+      connections,
+      dataSources
+    });
+  }
+  return /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNativeSafeAreaContext.SafeAreaProvider, {
+    children: children
+  });
+}

package/lib/commonjs/provider/PowerAppsProvider.js

@@ -9,18 +9,19 @@ var _reactNative = require("react-native");
 var _reactNativeGestureHandler = require("react-native-gesture-handler");
 var _core = require("@tamagui/core");
 var _portal = require("@tamagui/portal");
-var _v = require("@tamagui/config/v3");
+var _v = require("@tamagui/config/v5");
 var _toast = require("@tamagui/toast");
 var _reactQuery = require("@tanstack/react-query");
 var _netinfo = _interopRequireDefault(require("@react-native-community/netinfo"));
-var _AuthContext = require("../auth/AuthContext.js");
-var _PowerAppsHostProvider = require("./PowerAppsHostProvider.js");
+var _AuthContext = require("../auth/AuthContext");
+var _PowerAppsHostProvider = require("./PowerAppsHostProvider");
 var _PowerPlatformEnvironmentApi = require("../platform/PowerPlatformEnvironmentApi.js");
 var _ThemeProvider = require("../theme/ThemeProvider.js");
 var _ErrorBoundary = require("../ErrorBoundary.js");
+var _isDevPlayer = require("../utils/isDevPlayer.js");
 var _expoConstants = _interopRequireDefault(require("expo-constants"));
 var _powerAppsNativeCommon = require("@microsoft/power-apps-native-common");
-var _powerAppsNativeOffline = require("@microsoft/power-apps-native-offline");
+var _useOfflineIntegration = require("../offline/useOfflineIntegration");
 var _jsxRuntime = require("react/jsx-runtime");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
@@ -31,7 +32,7 @@ function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r
  * Power Apps canvas app inside an Expo shell:
  *
  *   GestureHandlerRootView
- *   └── TamaguiProvider  (defaults to @tamagui/config/v3)
+ *   └── TamaguiProvider  (defaults to @tamagui/config/v5)
  *       └── PortalProvider  (required by ToastViewport)
  *           └── ToastProvider + ToastViewport
  *               └── QueryClientProvider  (own QueryClient, wired to NetInfo + AppState)
@@ -58,6 +59,16 @@ function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r
 // Wire onlineManager to NetInfo so refetchOnReconnect fires on mobile
 // (the default browser-event-based detection is a no-op in React Native).
 _reactQuery.onlineManager.setEventListener(setOnline => {
+  if (_reactNative.Platform.OS === 'web' && typeof window !== 'undefined') {
+    const updateOnlineState = () => setOnline(window.navigator.onLine);
+    window.addEventListener('online', updateOnlineState);
+    window.addEventListener('offline', updateOnlineState);
+    updateOnlineState();
+    return () => {
+      window.removeEventListener('online', updateOnlineState);
+      window.removeEventListener('offline', updateOnlineState);
+    };
+  }
   return _netinfo.default.addEventListener(state => setOnline(!!state.isConnected));
 });
 
@@ -73,9 +84,9 @@ _reactQuery.focusManager.setEventListener(handleFocus => {
 
 // The app's tamagui.config.ts (generated by /tamagui-design-system) is always
 // passed as the `tamaguiConfig` prop and owns all $surface* / $accent* tokens.
-// The bare @tamagui/config/v3 preset is only a last-resort fallback for tests
+// The bare @tamagui/config/v5 preset is only a last-resort fallback for tests
 // and storybook — it will not resolve custom $surface* tokens.
-const defaultTamaguiConfig = (0, _core.createTamagui)(_v.config);
+const defaultTamaguiConfig = (0, _core.createTamagui)(_v.defaultConfig);
 
 // Whether the offline SDK will actually orchestrate for this app. Mirrors the
 // resolution that @microsoft/power-apps-native-offline's useOfflineIntegration
@@ -87,6 +98,7 @@ const defaultTamaguiConfig = (0, _core.createTamagui)(_v.config);
 // configure the client without a race. Kept deliberately narrow: it only
 // decides networkMode below.
 function isOfflineEnabled(offlineProfile) {
+  if (_reactNative.Platform.OS === 'web') return false;
   // Only honour the prop when it carries a profileId — this mirrors the SDK's
   // useOfflineIntegration, which ignores a profileId-less prop and falls through
   // to the manifest. Without this guard a truthy-but-invalid prop (no profileId)
@@ -147,6 +159,30 @@ function createQueryClient(offlineEnabled) {
     }
   });
 }
+function hasConfiguredValue(value) {
+  return typeof value === 'string' && value.trim().length > 0;
+}
+function hasEntries(value) {
+  return Boolean(value && typeof value === 'object' && Object.keys(value).length > 0);
+}
+function requiresPowerPlatformAuth(powerConfig, offlineEnabled) {
+  return Boolean(hasConfiguredValue(powerConfig.appId) || hasConfiguredValue(powerConfig.environmentId) || hasEntries(powerConfig.connectionReferences) || hasEntries(powerConfig.databaseReferences) || offlineEnabled);
+}
+function MissingClientIdErrorScreen() {
+  return /*#__PURE__*/(0, _jsxRuntime.jsxs)(_reactNative.ScrollView, {
+    contentContainerStyle: styles.errorContainer,
+    children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.Text, {
+      style: styles.errorTitle,
+      children: "Missing auth client ID"
+    }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.Text, {
+      style: styles.errorBody,
+      children: "This app needs Power Platform authentication, but `auth.config.json` does not include `msal.clientId`."
+    }), /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactNative.Text, {
+      style: styles.errorBody,
+      children: "Add the Entra app registration client ID to `auth.config.json`, rebuild the app bundle, and run it again in Power Apps Dev Player."
+    })]
+  });
+}
 
 // ---- Types ----
 
@@ -189,7 +225,7 @@ function InnerProviders({
   // and then spin in a perpetual "waiting-for-auth" 3s retry loop (each retry
   // re-renders the provider subtree). With no obtainable token offline cannot
   // sync anyway, so we only engage once a usable token exists.
-  const offline = (0, _powerAppsNativeOffline.useOfflineIntegration)({
+  const offline = (0, _useOfflineIntegration.useOfflineIntegration)({
     powerConfig,
     offlineProfile,
     acquireToken,
@@ -250,6 +286,7 @@ function PowerAppsProvider({
   // QueryClient identity stays stable across renders even if the caller passes
   // fresh offlineProfile literals.
   const offlineEnabled = (0, _react.useMemo)(() => isOfflineEnabled(offlineProfile), [offlineProfile]);
+  const missingClientIdInDevPlayer = _reactNative.Platform.OS !== 'web' && _isDevPlayer.isDevPlayer && !hasConfiguredValue(msalConfig.clientId) && requiresPowerPlatformAuth(powerConfig, offlineEnabled);
   const queryClient = (0, _react.useMemo)(() => createQueryClient(offlineEnabled), [offlineEnabled]);
 
   // Configure the app logger exactly once per mount inside useEffect so that
@@ -324,7 +361,7 @@ function PowerAppsProvider({
               duration: 3000,
               children: [/*#__PURE__*/(0, _jsxRuntime.jsx)(_reactQuery.QueryClientProvider, {
                 client: queryClient,
-                children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_AuthContext.AuthProvider, {
+                children: missingClientIdInDevPlayer ? /*#__PURE__*/(0, _jsxRuntime.jsx)(MissingClientIdErrorScreen, {}) : /*#__PURE__*/(0, _jsxRuntime.jsx)(_AuthContext.AuthProvider, {
                   msalConfig: msalConfig,
                   intuneConfig: intuneConfig,
                   children: /*#__PURE__*/(0, _jsxRuntime.jsx)(InnerProviders, {
@@ -348,4 +385,24 @@ function PowerAppsProvider({
       })
     })
   });
-}
+}
+const styles = _reactNative.StyleSheet.create({
+  errorContainer: {
+    flexGrow: 1,
+    justifyContent: 'center',
+    padding: 24,
+    backgroundColor: '#F8F8F8'
+  },
+  errorTitle: {
+    color: '#A4262C',
+    fontSize: 22,
+    fontWeight: '700',
+    marginBottom: 12
+  },
+  errorBody: {
+    color: '#323130',
+    fontSize: 15,
+    lineHeight: 22,
+    marginBottom: 10
+  }
+});

package/lib/module/auth/AuthContext.web.js

@@ -0,0 +1,26 @@
+"use strict";
+
+import React, { createContext, useContext } from 'react';
+import { jsx as _jsx } from "react/jsx-runtime";
+const hostedWebAuthState = {
+  isLoading: false,
+  isAuthReady: true,
+  isSignedIn: true,
+  hasRealAccount: false,
+  error: null,
+  acquireToken: async () => null,
+  signIn: async () => undefined,
+  signOut: async () => undefined
+};
+const AuthContext = /*#__PURE__*/createContext(hostedWebAuthState);
+export function AuthProvider({
+  children
+}) {
+  return /*#__PURE__*/_jsx(AuthContext.Provider, {
+    value: hostedWebAuthState,
+    children: children
+  });
+}
+export function useAuth() {
+  return useContext(AuthContext);
+}

package/lib/module/auth/completePowerAppsAuthSession.js

@@ -0,0 +1,11 @@
+"use strict";
+
+import * as WebBrowser from 'expo-web-browser';
+/**
+ * Completes an Expo web authentication popup when the current route is its
+ * redirect target. Call this at module initialization in the OAuth callback
+ * route; navigation after completion remains application-owned.
+ */
+export function completePowerAppsAuthSession(options) {
+  return WebBrowser.maybeCompleteAuthSession(options);
+}

package/lib/module/bridge/NativePowerAppsBridge.js

@@ -251,8 +251,18 @@ export class NativePowerAppsBridge {
       const sdkKey = key === 'content-type' ? 'Content-Type' : key;
       responseHeaders[sdkKey] = value;
     });
-    const buffer = await response.arrayBuffer();
     debugLog(`[bridge] ${method} ${urlLabel} → ${response.status}`);
+    let buffer;
+    try {
+      buffer = await response.arrayBuffer();
+    } catch (readErr) {
+      debugWarn(`[bridge] HTTP ${response.status} for ${method} ${urlLabel} | failed to read response body:`, readErr);
+      scenario.fail(undefined, {
+        errorName: getSafeErrorName(readErr),
+        httpStatus: response.status
+      });
+      throw readErr;
+    }
     if (!response.ok) {
       const bodyText = new TextDecoder().decode(buffer).slice(0, 1000);
       debugWarn(`[bridge] HTTP ${response.status} for ${method} ${urlLabel} | res: ${bodyText}`);

package/lib/module/bridge/PowerPagesBridge.js

@@ -0,0 +1,132 @@
+"use strict";
+
+function toPowerPagesUrl(url) {
+  const parsedUrl = new URL(url, window.location.origin);
+  if (parsedUrl.origin === window.location.origin && parsedUrl.pathname.startsWith('/_api/')) {
+    return `${parsedUrl.pathname}${parsedUrl.search}`;
+  }
+  const lowerPath = parsedUrl.pathname.toLowerCase();
+  if (lowerPath.includes('/$metadata') || lowerPath.includes('/entitydefinitions') || lowerPath.includes('/$batch') || lowerPath.includes('/microsoft.dynamics.crm.')) {
+    throw new Error(`PowerPagesBridge does not support this Dataverse operation: ${parsedUrl.pathname}`);
+  }
+  const dataverseApiPattern = /\/api\/data\/v\d+(?:\.\d+)+\//gi;
+  let finalMatch = null;
+  let match;
+  while ((match = dataverseApiPattern.exec(parsedUrl.pathname)) !== null) {
+    finalMatch = match;
+  }
+  if (finalMatch?.index === undefined) {
+    throw new Error(`PowerPagesBridge only supports Dataverse Web API requests: ${parsedUrl.pathname}`);
+  }
+  const resourcePath = parsedUrl.pathname.slice(finalMatch.index + finalMatch[0].length);
+  return `/_api/${resourcePath}${parsedUrl.search}`;
+}
+let requestVerificationTokenPromise;
+function getRequestVerificationToken() {
+  requestVerificationTokenPromise ??= (async () => {
+    const response = await fetch('/_layout/tokenhtml', {
+      credentials: 'same-origin'
+    });
+    if (!response.ok) {
+      throw new Error(`PowerPagesBridge could not get a CSRF token (${response.status})`);
+    }
+    const tokenDocument = new DOMParser().parseFromString(await response.text(), 'text/html');
+    const token = tokenDocument.querySelector('input[name="__RequestVerificationToken"]')?.getAttribute('value');
+    if (!token) {
+      throw new Error('PowerPagesBridge could not find a CSRF token in /_layout/tokenhtml');
+    }
+    return token;
+  })().catch(error => {
+    requestVerificationTokenPromise = undefined;
+    throw error;
+  });
+  return requestVerificationTokenPromise;
+}
+function createHeaders(headers, token) {
+  const result = new Headers();
+  for (const [name, value] of Object.entries(headers ?? {})) {
+    if (name.toLowerCase() !== 'authorization') {
+      result.set(name, value);
+    }
+  }
+  result.set('__RequestVerificationToken', token);
+  return result;
+}
+export class PowerPagesBridge {
+  constructor(options) {
+    this.options = options;
+  }
+  updateOptions(options) {
+    this.options = options;
+  }
+  async initialize() {}
+  createRequestBody(config) {
+    return config.body ?? '';
+  }
+  async executePluginAsync(pluginName, pluginAction, params) {
+    const pluginKey = `${pluginName}.${pluginAction}`;
+    switch (pluginKey) {
+      case 'AppIdentityServicePlugin.getAppAccessTokenAsync':
+      case 'AppIdentityServicePlugin.getAppDynamicResourceAccessTokenAsync':
+        return '';
+      case 'AppPowerAppsClientPlugin.getAppCdsDataSourceConfigsAsync':
+        return this.options.dataSources;
+      case 'AppPowerAppsClientPlugin.loadAppConnectionsAsync_v2':
+      case 'AppPowerAppsClientPlugin.loadNonCompositeConnectionsAsync':
+        return this.options.connections;
+      case 'AppPowerAppsClientPlugin.resolveCompositeConnectionsAsync':
+        return null;
+      case 'AppHttpClientPlugin.sendHttpAsync':
+        return this.sendHttpAsync(params);
+      case 'PublishedAppTelemetry.trackEvent':
+      case 'PublishedAppTelemetry.trackException':
+      case 'PublishedAppTelemetry.trackMetric':
+      case 'PublishedAppTelemetry.startScenario':
+      case 'PublishedAppTelemetry.endScenario':
+      case 'PublishedAppTelemetry.setDefaultProperties':
+        return undefined;
+      default:
+        throw new Error(`PowerPagesBridge does not support ${pluginKey}`);
+    }
+  }
+  async sendHttpAsync(params) {
+    const request = params[0];
+    const body = params[1];
+    const powerPagesUrl = toPowerPagesUrl(request.url);
+    const token = await getRequestVerificationToken();
+    const response = await fetch(powerPagesUrl, {
+      method: request.method,
+      headers: createHeaders(request.headers, token),
+      body: body || undefined,
+      credentials: 'same-origin'
+    });
+    const responseHeaders = {};
+    response.headers.forEach((value, name) => {
+      responseHeaders[name === 'content-type' ? 'Content-Type' : name] = value;
+    });
+    const responseBody = await response.arrayBuffer();
+    if (!response.ok) {
+      const responseText = new TextDecoder().decode(responseBody).slice(0, 1000);
+      const detail = responseText ? `: ${responseText}` : '';
+      // RuntimeDataClient treats JSON tuples as successful before inspecting status.
+      // Reject with its HTTP-plugin error shape so 4xx/5xx responses remain failures.
+      throw [[`Power Pages Web API request failed (${response.status})${detail}`, undefined, {
+        status: response.status,
+        headers: responseHeaders
+      }], responseBody];
+    }
+    return [{
+      status: response.status,
+      headers: responseHeaders
+    }, responseBody];
+  }
+}
+let bridge;
+export function setupPowerPagesHost(options) {
+  if (bridge) {
+    bridge.updateOptions(options);
+    return;
+  }
+  bridge = new PowerPagesBridge(options);
+  globalThis.powerAppsBridge = bridge;
+}