@microsoft/power-apps-native-host 0.2.22 → 0.3.0

package/lib/typescript/commonjs/connections/useConnectionSetup.d.ts

@@ -17,7 +17,7 @@
  *   // Call setup.startCreate() to trigger connection creation
  *   // Call setup.checkNow() to re-poll after WebView finishes
  */
-import type { NativeConnectionInstance } from '../connections/types';
+import type { ConnectionInput, NativeConnectionInstance } from './types';
 /**
  * The current phase of the connection setup flow for one connector.
  *
@@ -43,12 +43,12 @@ export interface UseConnectionSetupOptions {
     onConnected?: (instance: NativeConnectionInstance) => void;
     /**
      * The ISV/wrap-app AAD client ID (from auth.config.json `msal.clientId`).
-     * After connection creation, `addAadAppToConnectionAcl` is called to append
-     * the ISV's client ID to the connection ACE's AppIds list. This is required
-     * so that APIM accepts tokens bearing this appid at runtime (otherwise APIM
-     * returns 403 "missing connection ACL" for all third-party app tokens).
+      * After connection creation, delegated user consent adds the calling app ID
+      * to the most specific applicable connection ACL.
      */
-    isvClientId?: string;
+    isvClientId: string;
+    /** Fixed shared connection resource ID. */
+    sharedConnectionId?: string;
     /**
      * Redirect URL passed to the getConsentLink API call.
      * Defaults to the standard native-client redirect accepted by Power Platform.
@@ -71,7 +71,11 @@ export interface UseConnectionSetupResult {
      * Start the connection creation flow.
      * Transitions: idle/error → creating → (oauth | connected | error).
      */
-    startCreate: () => Promise<void>;
+    startCreate: (input?: ConnectionInput) => Promise<void>;
+    /** Update and re-consent an existing unauthenticated connection. */
+    startRepair: (instance: NativeConnectionInstance, input?: ConnectionInput, requiresApiConsent?: boolean) => Promise<void>;
+    /** Verify third-party ACL access before accepting an existing connection. */
+    useExisting: (instance: NativeConnectionInstance) => Promise<void>;
     /**
      * Call after the OAuth WebView is dismissed (or anytime during 'oauth' phase)
      * to immediately poll the connection status instead of waiting for the next
@@ -92,5 +96,5 @@ export interface UseConnectionSetupResult {
     /** Reset the flow back to idle (e.g., for a retry). */
     reset: () => void;
 }
-export declare function useConnectionSetup({ connectorId, environmentId, region, acquireToken, onConnected, isvClientId, oauthRedirectUrl, polling, }: UseConnectionSetupOptions): UseConnectionSetupResult;
+export declare function useConnectionSetup({ connectorId, environmentId, region, acquireToken, onConnected, sharedConnectionId, oauthRedirectUrl, polling, }: UseConnectionSetupOptions): UseConnectionSetupResult;
 //# sourceMappingURL=useConnectionSetup.d.ts.map

package/lib/typescript/commonjs/controls/FilePicker.d.ts

@@ -11,6 +11,12 @@ export interface PickedFileInfo {
 }
 export interface FilePickerProps {
     label?: string;
+    /** Optional test ID for the outer container. */
+    testID?: string;
+    /** Optional test ID for the selected file row. */
+    fileRowTestID?: string;
+    /** Optional test ID for the pick/replace button. */
+    pickButtonTestID?: string;
     /**
      * The file name to display.
      * - In view mode: the name of the existing Dataverse file.
@@ -61,5 +67,5 @@ export interface FilePickerProps {
  * - Pass both to show the existing file name (tappable to download) alongside a
  *   replace button — useful when the edit screen should also allow previewing.
  */
-export declare function FilePicker({ label, fileName, onDownload, shareTitle, onChange, acceptedTypes, pickButtonLabel, replaceButtonLabel, readingLabel, containerStyle, labelStyle, fileRowStyle, fileNameStyle, buttonStyle, buttonTextStyle, accentColor, }: FilePickerProps): React.JSX.Element;
+export declare function FilePicker({ label, testID, fileRowTestID, pickButtonTestID, fileName, onDownload, shareTitle, onChange, acceptedTypes, pickButtonLabel, replaceButtonLabel, readingLabel, containerStyle, labelStyle, fileRowStyle, fileNameStyle, buttonStyle, buttonTextStyle, accentColor, }: FilePickerProps): React.JSX.Element;
 //# sourceMappingURL=FilePicker.d.ts.map

package/lib/typescript/commonjs/controls/ImagePicker.d.ts

@@ -13,6 +13,14 @@ export interface PickedImageInfo {
 }
 export interface ImagePickerProps {
     label?: string;
+    /** Optional test ID for the outer container. */
+    testID?: string;
+    /** Optional test ID for the camera button. */
+    cameraButtonTestID?: string;
+    /** Optional test ID for the image-library button. */
+    selectButtonTestID?: string;
+    /** Optional test ID for the selected image preview. */
+    previewTestID?: string;
     /**
      * Base64 string from Dataverse (the `cr_assetimage` thumbnail).
      * The component builds the preview data URI internally.
@@ -72,5 +80,5 @@ export interface ImagePickerProps {
  * - On pick, the image is returned as base64 for legacy callers and as a
  *   File-compatible object for generated Dataverse upload methods.
  */
-export declare function ImagePicker({ label, initialBase64, onChange, containerStyle, labelStyle, buttonRowStyle, buttonStyle, buttonTextStyle, previewStyle, accentColor, onImageChange, imageFileName, quality, allowsEditing, aspect, cropShape, exif, legacy, cameraButtonLabel, selectButtonLabel, changeButtonLabel, readingLabel, }: ImagePickerProps): React.JSX.Element;
+export declare function ImagePicker({ label, testID, cameraButtonTestID, selectButtonTestID, previewTestID, initialBase64, onChange, containerStyle, labelStyle, buttonRowStyle, buttonStyle, buttonTextStyle, previewStyle, accentColor, onImageChange, imageFileName, quality, allowsEditing, aspect, cropShape, exif, legacy, cameraButtonLabel, selectButtonLabel, changeButtonLabel, readingLabel, }: ImagePickerProps): React.JSX.Element;
 //# sourceMappingURL=ImagePicker.d.ts.map

package/lib/typescript/commonjs/index.d.ts

@@ -4,24 +4,34 @@
  *
  */
 export { NativePowerAppsBridge } from './bridge/NativePowerAppsBridge';
+export { PowerPagesBridge, setupPowerPagesHost } from './bridge/PowerPagesBridge';
+export type { PowerPagesBridgeOptions } from './bridge/PowerPagesBridge';
 export type { NativeBridgeOptions, CdsDataSourceConfig, AppConnection, AppConnectionReference } from './bridge/NativePowerAppsBridge';
 export { buildConnectionReferences } from './bridge/NativePowerAppsBridge';
 export { setupNativeHost } from './bridge/setupNativeHost';
+export { updateBridgeOptionsInPlace } from './bridge/bridgeState';
 export { AuthProvider, useAuth } from './auth/AuthContext';
 export type { AuthState, AuthProviderProps } from './auth/AuthContext';
+export { completePowerAppsAuthSession } from './auth/completePowerAppsAuthSession';
 export type { AuthConfig, MsalAuthConfig, IntuneConfig } from '@microsoft/power-apps-native-auth';
 export { PowerAppsHostProvider } from './provider/PowerAppsHostProvider';
 export type { PowerAppsHostProviderProps } from './provider/PowerAppsHostProvider';
 export { PowerAppsProvider } from './provider/PowerAppsProvider';
-export type { PowerAppsProviderProps, PowerConfig } from './provider/PowerAppsProvider';
-export { fetchInstanceUrl, buildCdsDataSources, buildEnvironmentEndpoint, POWER_PLATFORM_API_SCOPE } from './platform/PowerPlatformEnvironmentApi';
-export type { LinkedEnvironmentMetadata, DatabaseReference, DatabaseReferenceDataSource } from './platform/PowerPlatformEnvironmentApi';
-export { useConnectionRefs } from './platform/useConnectionRefs';
-export type { UseConnectionRefsOptions, UseConnectionRefsResult, ConnectorSchema } from './platform/useConnectionRefs';
-export { fetchConnectorMetadata, fetchConnectionsForConnector, createConnection, pollConnectionStatus, confirmConsentCode, fetchAppLaunchData, } from './platform/PowerPlatformConnectionApi';
-export type { ConnectorMetadata, CreateConnectionResult, AppLaunchResult, } from './platform/PowerPlatformConnectionApi';
+export type { AppInsightsConfig, PowerAppsProviderProps, PowerConfig } from './provider/PowerAppsProvider';
+export { buildEnvironmentEndpoint, POWER_PLATFORM_API_SCOPE } from './platform/PowerPlatformEnvironmentApi';
+export { fetchInstanceUrl } from './platform/DataverseGlobalDiscoveryApi';
+export { buildCdsDataSources } from './platform/DataverseDataSources';
+export type { LinkedEnvironmentMetadata, DatabaseReference, DatabaseReferenceDataSource } from './platform/DataverseDataSources';
+export { useConnectionRefs } from './connections/useConnectionRefs';
+export type { UseConnectionRefsOptions, UseConnectionRefsResult, ConnectorSchema } from './connections/useConnectionRefs';
+export { fetchConnectorMetadata, fetchConnectionsForConnector, deleteConnection, createConnection, pollConnectionStatus, confirmConsentCode, repairConnection, fetchAppLaunchData, fetchAppConnectionUsages, postConnectionUsage, reportScopeConsents, } from './connections/PowerPlatformConnectionApi';
+export type { ConnectorMetadata, CreateConnectionResult, AppLaunchResult, RegisteredConnectionUsage, } from './connections/PowerPlatformConnectionApi';
 export { disambiguateConnections, extractConnectionId } from './connections/disambiguate';
-export type { NativeConnectionInstance, NativeConnectionResolution, NativeDisambiguationResult, OnDisambiguationNeeded, OnMissingConnection, } from './connections/types';
+export { shouldPersistConnectionUsages, shouldShowConnectionReview, } from './connections/connectionState';
+export { buildConnectionRequirements, buildConnectionResolutionKey, findConnectionDataSourceConflicts, hasCompleteStaticConnectionConfig, isCompositeConnectionApiId, getConnectorId, normalizeApiId, } from './connections/types';
+export { buildConnectionUserConsentUrl, buildConsentLinkDefinition, buildConnectionParameterSets, buildConnectionUsageRequest, buildConnectionUsageUrl, buildScopeConsentRequest, buildScopeConsentUrl, hasOAuthParameter, parseConnectionParameters, serializeConnectionParameters, } from './connections/connectionMetadata';
+export type { ConsentLinkDefinition, RawConnectionParameter, RawConnectionParameterSet, SerializedConnectionParameters, } from './connections/connectionMetadata';
+export type { ConnectionConsentDetails, ConnectionInput, ConnectionParameterDefinition, ConnectionParameterSet, ConnectionParameterType, ConnectionParameterValue, ConnectionReferenceConfig, ConnectionRequirement, ConnectionUsageInput, ResourceConsentRequirement, NativeConnectionInstance, NativeConnectionResolution, NativeDisambiguationResult, OnDisambiguationNeeded, OnMissingConnection, } from './connections/types';
 export { useConnectionSetup } from './connections/useConnectionSetup';
 export type { ConnectionSetupPhase, UseConnectionSetupOptions, UseConnectionSetupResult, } from './connections/useConnectionSetup';
 export { ConnectionSetupScreen } from './connections/ConnectionSetupScreen';
@@ -36,7 +46,7 @@ export { ImagePicker } from './controls/ImagePicker';
 export type { ImagePickerProps, PickedImageInfo } from './controls/ImagePicker';
 export { isDevPlayer } from './utils/isDevPlayer';
 export { base64ToDataverseUploadFile, base64ToUint8Array, createDataverseUploadFile, } from './utils/dataverseUtils';
-export { getAppLogger, configureAppLogger, HostOperationNames } from './telemetry';
-export type { ILogger } from '@microsoft/power-apps-native-common';
+export { getAppLogger, configureAppLogger, getCustomerTelemetryLogger, HostOperationNames, } from './telemetry';
+export type { ICustomerTelemetryLogger, ILogger, } from '@microsoft/power-apps-native-common';
 export { ErrorBoundary } from './ErrorBoundary';
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/commonjs/logger.d.ts

@@ -1,11 +1,11 @@
 /**
  * Conditional debug logger for power-apps-native-host.
  *
- * Debug logs (debugLog / debugWarn) are only emitted when the JS bundle
- * is running inside the Power Apps Dev Player (detected via
- * `Constants.expoConfig.extra.isDevPlayer`).  They are silenced in release
- * APKs generated from the template so the production log stream stays clean.
+ * Debug logs (debugLog / debugWarn) are emitted in development bundles or when
+ * running inside Power Apps Dev Player. They remain silent in wrapped release
+ * apps so the production log stream stays clean.
  */
+export declare function isDebugLoggingEnabled(): boolean;
 export declare function debugLog(...args: unknown[]): void;
 export declare function debugWarn(...args: unknown[]): void;
 //# sourceMappingURL=logger.d.ts.map

package/lib/typescript/commonjs/offline/createOfflineHostActivationCallbacks.d.ts

@@ -0,0 +1,12 @@
+import { QueryClient } from '@tanstack/react-query';
+export declare function createHostQueryClient(): QueryClient;
+export declare function createOfflineHostActivationCallbacks(queryClient: QueryClient): {
+    prepareForOfflineActivation: () => Promise<void>;
+    completeOfflineActivation: () => Promise<void>;
+    rollbackOfflineActivation: () => Promise<void>;
+};
+export declare function resolveSdkMountDecision(value: unknown): {
+    shouldMountChildren: boolean;
+    contractSupported: boolean;
+};
+//# sourceMappingURL=createOfflineHostActivationCallbacks.d.ts.map

package/lib/typescript/commonjs/offline/useOfflineIntegration.d.ts

@@ -0,0 +1,2 @@
+export { useOfflineIntegration } from '@microsoft/power-apps-native-offline';
+//# sourceMappingURL=useOfflineIntegration.d.ts.map

package/lib/typescript/commonjs/offline/useOfflineIntegration.web.d.ts

@@ -0,0 +1,4 @@
+export declare function useOfflineIntegration(_options: unknown): {
+    StatusOverlay: null;
+};
+//# sourceMappingURL=useOfflineIntegration.web.d.ts.map

package/lib/typescript/commonjs/offline/useOfflineIntegrationWithStartupGate.d.ts

@@ -0,0 +1,15 @@
+import { useOfflineIntegration } from './useOfflineIntegration';
+type Options = {
+    powerConfig: Parameters<typeof useOfflineIntegration>[0]['powerConfig'];
+    offlineProfile?: Record<string, unknown>;
+    acquireToken: (scopes: string[]) => Promise<string | null>;
+    hasRealAccount: boolean;
+    isAuthReady: boolean;
+};
+export declare function useOfflineIntegrationWithStartupGate({ powerConfig, offlineProfile, acquireToken, hasRealAccount, isAuthReady, }: Options): {
+    isEnabled: boolean;
+    StatusOverlay: import("react").ComponentType<Record<string, never>> | null;
+    shouldMountChildren: boolean;
+};
+export {};
+//# sourceMappingURL=useOfflineIntegrationWithStartupGate.d.ts.map

package/lib/typescript/commonjs/offline/useOfflineIntegrationWithStartupGate.web.d.ts

@@ -0,0 +1,6 @@
+export declare function useOfflineIntegrationWithStartupGate(_options: unknown): {
+    isEnabled: false;
+    StatusOverlay: null;
+    shouldMountChildren: true;
+};
+//# sourceMappingURL=useOfflineIntegrationWithStartupGate.web.d.ts.map

package/lib/typescript/commonjs/platform/DataverseDataSources.d.ts

@@ -0,0 +1,27 @@
+export interface LinkedEnvironmentMetadata {
+    resourceId?: string;
+    friendlyName?: string;
+    uniqueName?: string;
+    domainName?: string;
+    version?: string;
+    instanceUrl?: string;
+    instanceApiUrl?: string;
+    baseLanguage?: number;
+    instanceState?: string;
+    createdTime?: string;
+    platformSku?: string;
+}
+export interface DatabaseReferenceDataSource {
+    entitySetName?: string;
+    logicalName?: string;
+}
+export interface DatabaseReference {
+    dataSources?: Record<string, DatabaseReferenceDataSource>;
+}
+export declare function buildCdsDataSources(databaseReferences: Record<string, DatabaseReference>, dataverseOrgUrl: string): Array<{
+    runtimeUrl: string;
+    entitySetName: string;
+    logicalName: string;
+    version: string;
+}>;
+//# sourceMappingURL=DataverseDataSources.d.ts.map

package/lib/typescript/commonjs/platform/DataverseGlobalDiscoveryApi.d.ts

@@ -0,0 +1,3 @@
+/** Fetch the Dataverse instance URL from the Dataverse Global Discovery Service. */
+export declare function fetchInstanceUrl(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, _bearerToken?: string): Promise<string | undefined>;
+//# sourceMappingURL=DataverseGlobalDiscoveryApi.d.ts.map

package/lib/typescript/commonjs/platform/GlobalDiscovery.d.ts

@@ -0,0 +1,4 @@
+export declare function globalDiscoveryEndpoint(region: string): string;
+export declare function globalDiscoveryScope(region: string): string;
+export declare function buildGlobalDiscoveryUrl(environmentId: string, region: string): string;
+//# sourceMappingURL=GlobalDiscovery.d.ts.map

package/lib/typescript/commonjs/platform/PowerPlatformEnvironmentApi.d.ts

@@ -1,14 +1,7 @@
 /*!
  * power-apps-native-host — PowerPlatformEnvironmentApi
  *
- * Mirrors the Host SDK's DefaultAppMetadataProvider.fetchAppMetadataFromPowerConfig
- * pattern: resolves the Power Platform environment-scoped API endpoint from the
- * environment GUID and region, then fetches linkedEnvironmentMetadata to obtain
- * the Dataverse instanceUrl.
- *
- * Reference (Host SDK):
- *   packages/power-apps-host/src/providers/defaults/DefaultAppMetadataProvider.ts
- *   packages/power-apps-common/src/services/PowerPlatformApiDiscovery.ts
+ * Resolves Power Platform RP endpoints and scopes.
  */
 /**
  * Build the Power Platform environment-scoped API base URL.
@@ -26,19 +19,6 @@
  *   → "d909aac059d0e5b1900dc082ef5774.d7.environment.api.powerplatform.com"
  */
 export declare function buildEnvironmentEndpoint(environmentId: string, region: string): string;
-export interface LinkedEnvironmentMetadata {
-    resourceId?: string;
-    friendlyName?: string;
-    uniqueName?: string;
-    domainName?: string;
-    version?: string;
-    instanceUrl?: string;
-    instanceApiUrl?: string;
-    baseLanguage?: number;
-    instanceState?: string;
-    createdTime?: string;
-    platformSku?: string;
-}
 /**
  * Token scope for the Power Platform management API (prod cluster).
  * Non-prod clusters (test, gov, high, dev, mooncake, etc.) host the management
@@ -52,57 +32,6 @@ export declare const POWER_PLATFORM_API_SCOPE = "https://api.powerplatform.com/.
  * {@link buildEnvironmentEndpoint}.
  */
 export declare function powerPlatformScope(region: string): string;
-/**
- * Fetch the Dataverse instanceUrl for a Power Platform environment by calling
- * the environment-scoped Power Platform management API — the same call that
- * the Host SDK's DefaultAppMetadataProvider makes to populate
- * `databaseReferences[*].databaseDetails.linkedEnvironmentMetadata`.
- *
- * @param environmentId - Environment GUID (from power.config.json `environmentId`).
- * @param region        - Cluster region string (from power.config.json `region`, default "prod").
- * @param acquireToken  - Callback to obtain a bearer token for the given scopes.
- *                        Scope will be {@link powerPlatformScope}`(region)`.
- * @param bearerToken   - Optional pre-fetched bearer token for {@link powerPlatformScope}`(region)`.
- *                        Pass this to avoid a redundant `acquireToken` round-trip when the
- *                        caller has already obtained a token for the same audience.
- * @returns The Dataverse org URL (e.g. "https://org12345.crm.dynamics.com"), or
- *          `undefined` if the environment has no linked CDS database.
- */
-export declare function fetchInstanceUrl(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, bearerToken?: string): Promise<string | undefined>;
-/**
- * Shape of a single Dataverse table entry inside power.config.json
- * `databaseReferences[*].dataSources[*]`.
- */
-export interface DatabaseReferenceDataSource {
-    entitySetName?: string;
-    logicalName?: string;
-}
-/**
- * Shape of a single database reference entry inside power.config.json
- * `databaseReferences`.
- */
-export interface DatabaseReference {
-    dataSources?: Record<string, DatabaseReferenceDataSource>;
-}
-/**
- * Build the CDS data source config array that the SDK reads via
- * AppPowerAppsClientPlugin.getAppCdsDataSourceConfigsAsync.
- *
- * Pass the resolved Dataverse org URL (from useConnectionRefs) and the
- * databaseReferences map from power.config.json.  The resulting array is
- * passed directly to <PowerAppsHostProvider dataSources={...} />.
- *
- * @param databaseReferences - The `databaseReferences` map from power.config.json.
- * @param dataverseOrgUrl    - The resolved Dataverse org URL
- *                             (connectionRefs['commondataserviceforapps']?.datasetName).
- *                             Pass an empty string before the org URL is known;
- *                             the host provider will receive empty runtimeUrl entries
- *                             and the SDK will not attempt Dataverse calls.
- */
-export declare function buildCdsDataSources(databaseReferences: Record<string, DatabaseReference>, dataverseOrgUrl: string): Array<{
-    runtimeUrl: string;
-    entitySetName: string;
-    logicalName: string;
-    version: string;
-}>;
+/** Delegated permission required by the connection user-consent endpoint. */
+export declare function connectionUserConsentScope(region: string): string;
 //# sourceMappingURL=PowerPlatformEnvironmentApi.d.ts.map

package/lib/typescript/commonjs/provider/PowerAppsHostProvider.d.ts

@@ -27,9 +27,10 @@
  *   </PowerAppsHostProvider>
  */
 import React from 'react';
-import type { ConnectorSchema } from '../platform/useConnectionRefs';
-import type { DatabaseReference } from '../platform/PowerPlatformEnvironmentApi';
+import type { ConnectorSchema } from '../connections/useConnectionRefs';
+import type { DatabaseReference } from '../platform/DataverseDataSources';
 import type { OnDisambiguationNeeded } from '../connections/types';
+import type { ConnectionReferenceConfig, ConnectionUsageInput, ResourceConsentRequirement } from '../connections/types';
 export interface PowerAppsHostProviderProps {
     /**
      * Callback to acquire an access token for the given scopes.
@@ -41,12 +42,12 @@ export interface PowerAppsHostProviderProps {
      * Connection resolution only runs when this is true.
      */
     isSignedIn: boolean;
+    /** Sign out the active account. Shown on blocking connection error screens. */
+    onSignOut?: () => void | Promise<void>;
     /**
      * PowerApps app GUID (from power.config.json `appId`).
-     * When set, connection references are fetched from the PowerApps RP
-     * `/apps/{appId}/launch` API at runtime instead of using the static
-     * `connectionReferences` prop.  Leave undefined during local development
-     * to fall back to the static `connectionReferences`.
+      * Outside Dev Player, app and connection metadata is fetched exclusively
+      * from the PowerApps RP `/apps/{appId}/launch` API.
      */
     appId?: string;
     /** Power Platform environment GUID (from power.config.json). */
@@ -58,6 +59,7 @@ export interface PowerAppsHostProviderProps {
     region?: string;
     /**
      * The connectionReferences map from power.config.json.
+      * Used only in Dev Player for unpublished local apps.
      * Shape: { [refId]: { id: string; dataSources: string[] } }
      *
      * NOTE: This prop must be referentially stable across renders (memoize it in
@@ -65,18 +67,16 @@ export interface PowerAppsHostProviderProps {
      * so passing a fresh object literal every render forces continuous
      * re-registration.
      */
-    connectionReferences: Record<string, {
-        id: string;
-        dataSources: string[];
-    }>;
+    connectionReferences: Record<string, ConnectionReferenceConfig>;
     /**
      * Connector schema map keyed by data source name.
+      * Used only in Dev Player for unpublished local apps.
      * Generated automatically by generate-connector-schemas.
      */
     schemaMap: Record<string, ConnectorSchema>;
     /**
      * The databaseReferences map from power.config.json.
-     * Used to build CDS data sources for the bridge.
+      * Used only in Dev Player. Production database references come from RP.
      *
      * NOTE: Like `connectionReferences`, pass a referentially stable value; an
      * unstable identity each render triggers redundant bridge re-registration.
@@ -84,8 +84,8 @@ export interface PowerAppsHostProviderProps {
     databaseReferences?: Record<string, DatabaseReference>;
     /**
      * Optional custom renderer for the OAuth consent WebView shown during
-     * connection creation.  If not provided, the system browser is used via
-     * Linking.openURL().
+    * connection creation. If not provided, the system authentication browser
+    * is used. Pass the final redirect URL to onDone when the custom view captures it.
      *
      * @example
      *   // Using react-native-webview:
@@ -96,20 +96,31 @@ export interface PowerAppsHostProviderProps {
      *     </Modal>
      *   )}
      */
-    renderOAuthWebView?: (url: string, onDone: () => void) => React.ReactNode;
+    renderOAuthWebView?: (url: string, onDone: (redirectUrl?: string) => void) => React.ReactNode;
     /**
      * The ISV/wrap-app AAD client ID (from auth.config.json `msal.clientId`).
      * When provided, the ISV's service principal is granted CanView access on
      * each newly created connection, allowing APIM to accept tokens with this
      * appid at runtime (prevents 403 "missing connection ACL" for third-party tokens).
      */
-    isvClientId?: string;
+    isvClientId: string;
     /**
      * Called when multiple Connected connections exist for the same connector.
-     * Present a native picker UI and return the chosen connectionId, or null to
-     * accept the first Connected connection as a fallback.
+    * Present a native picker UI and return the chosen connectionId, or null to
+    * leave the reference unresolved.
      */
     onDisambiguationNeeded?: OnDisambiguationNeeded;
+    /**
+     * Called after the user selects Allow and before the player launches.
+     * Use this to persist app-to-connection usage through an approved public RP endpoint.
+     * Rejecting keeps the app gated and shows the error in the consent screen.
+    * Not invoked in Power Apps Dev Player; local testing is intentionally non-persistent.
+     */
+    onConnectionConsent?: (usages: ConnectionUsageInput[]) => void | Promise<void>;
+    /** Persist protected resource approval in production. Not invoked in Dev Player. */
+    onResourceConsent?: (resources: ResourceConsentRequirement[]) => void | Promise<void>;
+    /** Called when the user selects Do not allow. */
+    onConnectionConsentDeclined?: () => void | Promise<void>;
     children: React.ReactNode;
 }
 /**
@@ -119,5 +130,5 @@ export interface PowerAppsHostProviderProps {
  *
  * Children are never rendered until all required connections are resolved.
  */
-export declare function PowerAppsHostProvider({ acquireToken, isSignedIn, appId, environmentId, region, connectionReferences, schemaMap, databaseReferences, renderOAuthWebView, isvClientId, onDisambiguationNeeded, children, }: PowerAppsHostProviderProps): React.JSX.Element;
+export declare function PowerAppsHostProvider({ acquireToken, isSignedIn, onSignOut, appId, environmentId, region, connectionReferences, schemaMap, databaseReferences, renderOAuthWebView, isvClientId, onDisambiguationNeeded, onConnectionConsent, onResourceConsent, onConnectionConsentDeclined, children, }: PowerAppsHostProviderProps): React.JSX.Element;
 //# sourceMappingURL=PowerAppsHostProvider.d.ts.map

package/lib/typescript/commonjs/provider/PowerAppsHostProvider.web.d.ts

@@ -0,0 +1,5 @@
+import React from 'react';
+import type { PowerAppsHostProviderProps } from './PowerAppsHostProvider';
+export type { PowerAppsHostProviderProps } from './PowerAppsHostProvider';
+export declare function PowerAppsHostProvider({ connectionReferences, databaseReferences, children, }: PowerAppsHostProviderProps): React.JSX.Element;
+//# sourceMappingURL=PowerAppsHostProvider.web.d.ts.map

package/lib/typescript/commonjs/provider/PowerAppsProvider.d.ts

@@ -5,7 +5,7 @@
  * Power Apps canvas app inside an Expo shell:
  *
  *   GestureHandlerRootView
- *   └── TamaguiProvider  (defaults to @tamagui/config/v3)
+ *   └── TamaguiProvider  (defaults to @tamagui/config/v5)
  *       └── PortalProvider  (required by ToastViewport)
  *           └── ToastProvider + ToastViewport
  *               └── QueryClientProvider  (own QueryClient, wired to NetInfo + AppState)
@@ -28,11 +28,12 @@ import React from 'react';
 import { createTamagui } from '@tamagui/core';
 import type { AuthProviderProps } from '../auth/AuthContext';
 import type { PowerAppsHostProviderProps } from './PowerAppsHostProvider';
-import type { ConnectorSchema } from '../platform/useConnectionRefs';
-import type { DatabaseReference } from '../platform/PowerPlatformEnvironmentApi';
-import type { OnDisambiguationNeeded } from '../connections/types';
+import type { ConnectorSchema } from '../connections/useConnectionRefs';
+import type { DatabaseReference } from '../platform/DataverseDataSources';
+import type { ConnectionReferenceConfig, OnDisambiguationNeeded } from '../connections/types';
 import type { ThemeTokens } from '../theme/tokens';
 import type { ILogger } from '@microsoft/power-apps-native-common';
+import type { ApplicationInsightsTelemetryProviderConfig } from '@microsoft/power-apps-native-common';
 /** Shape of power.config.json consumed by the provider. */
 export interface PowerConfig {
     /**
@@ -53,10 +54,7 @@ export interface PowerConfig {
      * Omit for the default global collector.
      */
     geoRegion?: string;
-    connectionReferences?: Record<string, {
-        id: string;
-        dataSources: string[];
-    }>;
+    connectionReferences?: Record<string, ConnectionReferenceConfig>;
     databaseReferences?: Record<string, DatabaseReference>;
     /**
      * Allow additional keys — the offline SDK reads arbitrary fields from
@@ -67,6 +65,10 @@ export interface PowerConfig {
     [key: string]: unknown;
 }
 type TamaguiConfig = ReturnType<typeof createTamagui>;
+export interface AppInsightsConfig extends Omit<ApplicationInsightsTelemetryProviderConfig, 'deviceId' | 'sessionId'> {
+    /** Explicit opt-in. Application Insights telemetry is disabled unless this is true. */
+    enabled: boolean;
+}
 export interface PowerAppsProviderProps {
     /** MSAL configuration from auth.config.json (msal section). */
     msalConfig: AuthProviderProps['msalConfig'];
@@ -81,7 +83,7 @@ export interface PowerAppsProviderProps {
     schemaMap: Record<string, ConnectorSchema>;
     /**
      * Tamagui design-system config.
-     * Defaults to the standard @tamagui/config/v3 preset.
+      * Defaults to the standard @tamagui/config/v5 preset.
      */
     tamaguiConfig?: TamaguiConfig;
     /** Tamagui default colour theme. @default 'light' */
@@ -106,6 +108,12 @@ export interface PowerAppsProviderProps {
     renderOAuthWebView?: PowerAppsHostProviderProps['renderOAuthWebView'];
     /** See PowerAppsHostProviderProps.onDisambiguationNeeded. */
     onDisambiguationNeeded?: OnDisambiguationNeeded;
+    /** See PowerAppsHostProviderProps.onConnectionConsent. */
+    onConnectionConsent?: PowerAppsHostProviderProps['onConnectionConsent'];
+    /** See PowerAppsHostProviderProps.onResourceConsent. */
+    onResourceConsent?: PowerAppsHostProviderProps['onResourceConsent'];
+    /** See PowerAppsHostProviderProps.onConnectionConsentDeclined. */
+    onConnectionConsentDeclined?: PowerAppsHostProviderProps['onConnectionConsentDeclined'];
     /**
      * App name used as `clientType` in the auto-wired 1DS telemetry provider.
      * Appears in Kusto as the `clientType` column — use a stable
@@ -125,6 +133,20 @@ export interface PowerAppsProviderProps {
      *   logger becomes a no-op regardless of build variant.
      */
     logger?: ILogger | null;
+    /**
+     * Show app and telemetry session details after a three-finger downward swipe.
+     * Available in both development and published native apps. @default true
+     */
+    showSessionDetailsOnSwipe?: boolean;
+    /**
+     * Optional customer-owned Application Insights destination.
+     *
+     * Events are sent directly to the selected C1-owned Application Insights
+     * resource and fan out alongside the default Microsoft OneDS provider.
+     * Defaults to `expo.extra.appInsightsConfig` from app.json.
+     * Ignored when `logger` is provided or `null`.
+     */
+    appInsightsConfig?: AppInsightsConfig;
     /**
      * Offline profile JSON — optional override.
      * Primary source: SDK config plugin embeds offline-profile.json into the app
@@ -143,6 +165,6 @@ export interface PowerAppsProviderProps {
  * root layout.
  */
 export declare function PowerAppsProvider({ msalConfig, intuneConfig, powerConfig, schemaMap, tamaguiConfig, // override with app's tamagui.config.ts
-defaultTheme, theme, darkTheme, followSystemTheme, renderOAuthWebView, onDisambiguationNeeded, appName, logger: loggerProp, offlineProfile, children, }: PowerAppsProviderProps): React.JSX.Element;
+defaultTheme, theme, darkTheme, followSystemTheme, renderOAuthWebView, onDisambiguationNeeded, onConnectionConsent, onResourceConsent, onConnectionConsentDeclined, appName, logger: loggerProp, showSessionDetailsOnSwipe, appInsightsConfig, offlineProfile, children, }: PowerAppsProviderProps): React.JSX.Element;
 export {};
 //# sourceMappingURL=PowerAppsProvider.d.ts.map

package/lib/typescript/commonjs/provider/SessionDetailsGesture.d.ts

@@ -0,0 +1,13 @@
+import React from 'react';
+interface SessionDetailsGestureProps {
+    enabled: boolean;
+    appName: string;
+    appId?: string;
+    environmentId?: string;
+    region: string;
+    appVersion?: string;
+    children: React.ReactNode;
+}
+export declare function SessionDetailsGesture({ enabled, appName, appId, environmentId, region, appVersion, children, }: SessionDetailsGestureProps): React.JSX.Element;
+export {};
+//# sourceMappingURL=SessionDetailsGesture.d.ts.map

package/lib/typescript/commonjs/telemetry/OfflineSdkTelemetry.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Forwards the privacy-safe Offline SDK transport through the host's existing
+ * app logger so offline events carry the same session, device, and user data.
+ *
+ * The host owns exactly one thing here: binding the SDK transport to this
+ * host's logger. Buffering and teardown semantics live in the SDK.
+ *
+ * Setup and teardown are fail-open but not silent. This runs from an effect in
+ * the provider that roots the app, so an unguarded throw would take down the
+ * whole tree — telemetry is never worth an app that will not start. An
+ * unexpected failure is therefore downgraded to a logged diagnostic rather than
+ * swallowed, so broken wiring stays observable.
+ */
+export declare function configureOfflineSdkTelemetry(forwardEvents: boolean): () => void;
+//# sourceMappingURL=OfflineSdkTelemetry.d.ts.map

package/lib/typescript/commonjs/telemetry/OfflineSdkTelemetry.web.d.ts

@@ -0,0 +1,2 @@
+export declare function configureOfflineSdkTelemetry(_forwardEvents: boolean): () => void;
+//# sourceMappingURL=OfflineSdkTelemetry.web.d.ts.map