@microsoft/power-apps-native-host 0.2.25 → 0.3.3

package/lib/typescript/module/{platform → connections}/useConnectionRefs.d.ts

@@ -30,9 +30,12 @@
  *     },
  *   });
  */
-import { type OnDisambiguationNeeded, type OnMissingConnection } from '../connections/types.js';
+import type { DatabaseReference } from '../platform/DataverseDataSources.js';
+import type { OnDisambiguationNeeded, OnMissingConnection } from '../connections/types.js';
 import type { ConnectorSchema } from './resolveConnections.js';
 import type { AppConnectionReference } from '../bridge/NativePowerAppsBridge.js';
+import type { ConnectionRequirement, ResourceConsentRequirement } from './types.js';
+import type { ConnectionReferenceConfig } from './types.js';
 export type { ConnectorSchema } from './resolveConnections.js';
 export interface UseConnectionRefsOptions {
     isSignedIn: boolean;
@@ -46,23 +49,21 @@ export interface UseConnectionRefsOptions {
     region?: string;
     /**
      * PowerApps app GUID (from power.config.json `appId`).
-     * When provided (and not running inside the Dev Player), connection
-     * references are fetched at runtime from the PowerApps RP
-     * `/apps/{appId}/launch` endpoint and take precedence over the static
-     * `connectionReferences` object below.
-     * Leave undefined during local development to use the static fallback.
+      * Outside Dev Player, app and connection metadata is fetched exclusively
+      * from the PowerApps RP `/apps/{appId}/launch` endpoint.
      */
     appId?: string;
     /**
      * The connectionReferences map from power.config.json.
+      * Used only in Dev Player for unpublished local apps.
      * Shape: { [refId]: { id: string; dataSources: string[] } }
      */
-    connectionReferences: Record<string, {
-        id: string;
-        dataSources: string[];
-    }>;
+    connectionReferences: Record<string, ConnectionReferenceConfig>;
+    /** Whether power.config.json contains Dataverse database references. */
+    hasDataverse: boolean;
     /**
      * Connector schema map keyed by data source name.
+      * Used only in Dev Player for unpublished local apps.
      * Generated automatically by generate-connector-schemas.
      * Shape: { [dataSourceName]: ConnectorSchema }
      */
@@ -80,10 +81,11 @@ export interface UseConnectionRefsOptions {
      */
     onMissingConnection?: OnMissingConnection;
     /**
-     * The ISV's AAD application (client) ID.  When provided, each resolved
-     * `Connected` connection is checked via `addAadAppToConnectionAcl`.
+    * The ISV's AAD application (client) ID. When provided, each user-selected
+    * `Connected` connection is granted through delegated user consent. Fixed
+    * shared connections skip this grant in published apps.
      * Connections where the grant fails are marked `NeedsAclGrant` and treated
-     * as missing so the setup screen can guide the user to create a new one.
+    * as missing so the setup screen can guide the user to create a new one.
      */
     isvClientId?: string;
 }
@@ -91,12 +93,25 @@ export interface UseConnectionRefsResult {
     connectionRefs: Record<string, AppConnectionReference>;
     isReady: boolean;
     error: string | null;
+    errorKind: ConnectionResolutionErrorKind | null;
     /**
      * API IDs of connectors for which no connection was found (or the user did
      * not resolve during disambiguation).  Useful for surfacing a "Set up
      * connections" prompt in the app UI.
      */
     missingConnectors: string[];
+    /** Unresolved requirements keyed by the app's local connection-reference ID. */
+    missingConnectionReferences: ConnectionRequirement[];
+    /** Every connection reference required by the app. */
+    connectionRequirements: ConnectionRequirement[];
+    /** Non-connector protected resources returned by app launch metadata. */
+    resourceConsents: ResourceConsentRequirement[];
+    /** Blocking connection configuration errors. */
+    configurationErrors: string[];
+    /** Whether selected connection references still need durable app usage consent. */
+    requiresConnectionConsent: boolean;
+    /** Identity of the app/environment/config represented by this result. */
+    resolvedConfigKey: string | null;
     /**
      * The Dataverse org URL for this environment (e.g. "https://org12345.crm.dynamics.com").
      * Fetched from the Power Platform environment metadata independently of whether a
@@ -104,23 +119,19 @@ export interface UseConnectionRefsResult {
      * Empty string until isReady is true or if the environment has no linked Dataverse database.
      */
     dataverseOrgUrl: string;
+    /** Database references resolved from the RP launch response. */
+    databaseReferences: Record<string, DatabaseReference>;
 }
+export type ConnectionResolutionErrorKind = 'app-access-denied' | 'generic';
 /**
  * Resolves Power Platform connection references for the current user, with
  * disambiguation support for environments where multiple connections exist for
  * the same connector.
  *
- * On sign-in this hook:
- *  1. If `appId` is set (production template), fetches connection references
- *     from the PowerApps RP `/apps/{appId}/launch` endpoint and uses those
- *     in place of the static `connectionReferences` from power.config.json.
- *  2. Acquires a Power Platform API token.
- *  3. In parallel: fetches the Dataverse instanceUrl and ALL connections for
- *     each configured connector.
- *  4. Runs disambiguation: resolves single matches, invokes `onDisambiguationNeeded`
- *     for multiple matches, and invokes `onMissingConnection` for absent ones.
- *  5. Pre-warms the Dataverse token in the MSAL cache.
- *  6. Sets isReady=true with the fully-populated connections map.
+ * Outside Dev Player, the published app launch endpoint is authoritative.
+ * Dev Player resolves unpublished local references through per-connector APIs.
+ * Both paths disambiguate candidates, pre-warm Dataverse authentication, and
+ * return a fully populated bridge configuration.
  */
-export declare function useConnectionRefs({ isSignedIn, acquireToken, appId, environmentId, region, connectionReferences, schemaMap, onDisambiguationNeeded, onMissingConnection, isvClientId, }: UseConnectionRefsOptions): UseConnectionRefsResult;
+export declare function useConnectionRefs({ isSignedIn, acquireToken, appId, environmentId, region, connectionReferences, hasDataverse, schemaMap, onDisambiguationNeeded, onMissingConnection, isvClientId, }: UseConnectionRefsOptions): UseConnectionRefsResult;
 //# sourceMappingURL=useConnectionRefs.d.ts.map

package/lib/typescript/module/connections/useConnectionSetup.d.ts

@@ -17,7 +17,7 @@
  *   // Call setup.startCreate() to trigger connection creation
  *   // Call setup.checkNow() to re-poll after WebView finishes
  */
-import type { NativeConnectionInstance } from '../connections/types.js';
+import type { ConnectionInput, NativeConnectionInstance } from './types.js';
 /**
  * The current phase of the connection setup flow for one connector.
  *
@@ -43,12 +43,12 @@ export interface UseConnectionSetupOptions {
     onConnected?: (instance: NativeConnectionInstance) => void;
     /**
      * The ISV/wrap-app AAD client ID (from auth.config.json `msal.clientId`).
-     * After connection creation, `addAadAppToConnectionAcl` is called to append
-     * the ISV's client ID to the connection ACE's AppIds list. This is required
-     * so that APIM accepts tokens bearing this appid at runtime (otherwise APIM
-     * returns 403 "missing connection ACL" for all third-party app tokens).
+      * After connection creation, delegated user consent adds the calling app ID
+      * to the most specific applicable connection ACL.
      */
-    isvClientId?: string;
+    isvClientId: string;
+    /** Fixed shared connection resource ID. */
+    sharedConnectionId?: string;
     /**
      * Redirect URL passed to the getConsentLink API call.
      * Defaults to the standard native-client redirect accepted by Power Platform.
@@ -71,7 +71,11 @@ export interface UseConnectionSetupResult {
      * Start the connection creation flow.
      * Transitions: idle/error → creating → (oauth | connected | error).
      */
-    startCreate: () => Promise<void>;
+    startCreate: (input?: ConnectionInput) => Promise<void>;
+    /** Update and re-consent an existing unauthenticated connection. */
+    startRepair: (instance: NativeConnectionInstance, input?: ConnectionInput, requiresApiConsent?: boolean) => Promise<void>;
+    /** Verify third-party ACL access before accepting an existing connection. */
+    useExisting: (instance: NativeConnectionInstance) => Promise<void>;
     /**
      * Call after the OAuth WebView is dismissed (or anytime during 'oauth' phase)
      * to immediately poll the connection status instead of waiting for the next
@@ -92,5 +96,5 @@ export interface UseConnectionSetupResult {
     /** Reset the flow back to idle (e.g., for a retry). */
     reset: () => void;
 }
-export declare function useConnectionSetup({ connectorId, environmentId, region, acquireToken, onConnected, isvClientId, oauthRedirectUrl, polling, }: UseConnectionSetupOptions): UseConnectionSetupResult;
+export declare function useConnectionSetup({ connectorId, environmentId, region, acquireToken, onConnected, sharedConnectionId, oauthRedirectUrl, polling, }: UseConnectionSetupOptions): UseConnectionSetupResult;
 //# sourceMappingURL=useConnectionSetup.d.ts.map

package/lib/typescript/module/controls/FilePicker.d.ts

@@ -11,6 +11,12 @@ export interface PickedFileInfo {
 }
 export interface FilePickerProps {
     label?: string;
+    /** Optional test ID for the outer container. */
+    testID?: string;
+    /** Optional test ID for the selected file row. */
+    fileRowTestID?: string;
+    /** Optional test ID for the pick/replace button. */
+    pickButtonTestID?: string;
     /**
      * The file name to display.
      * - In view mode: the name of the existing Dataverse file.
@@ -61,5 +67,5 @@ export interface FilePickerProps {
  * - Pass both to show the existing file name (tappable to download) alongside a
  *   replace button — useful when the edit screen should also allow previewing.
  */
-export declare function FilePicker({ label, fileName, onDownload, shareTitle, onChange, acceptedTypes, pickButtonLabel, replaceButtonLabel, readingLabel, containerStyle, labelStyle, fileRowStyle, fileNameStyle, buttonStyle, buttonTextStyle, accentColor, }: FilePickerProps): React.JSX.Element;
+export declare function FilePicker({ label, testID, fileRowTestID, pickButtonTestID, fileName, onDownload, shareTitle, onChange, acceptedTypes, pickButtonLabel, replaceButtonLabel, readingLabel, containerStyle, labelStyle, fileRowStyle, fileNameStyle, buttonStyle, buttonTextStyle, accentColor, }: FilePickerProps): React.JSX.Element;
 //# sourceMappingURL=FilePicker.d.ts.map

package/lib/typescript/module/controls/ImagePicker.d.ts

@@ -13,6 +13,14 @@ export interface PickedImageInfo {
 }
 export interface ImagePickerProps {
     label?: string;
+    /** Optional test ID for the outer container. */
+    testID?: string;
+    /** Optional test ID for the camera button. */
+    cameraButtonTestID?: string;
+    /** Optional test ID for the image-library button. */
+    selectButtonTestID?: string;
+    /** Optional test ID for the selected image preview. */
+    previewTestID?: string;
     /**
      * Base64 string from Dataverse (the `cr_assetimage` thumbnail).
      * The component builds the preview data URI internally.
@@ -72,5 +80,5 @@ export interface ImagePickerProps {
  * - On pick, the image is returned as base64 for legacy callers and as a
  *   File-compatible object for generated Dataverse upload methods.
  */
-export declare function ImagePicker({ label, initialBase64, onChange, containerStyle, labelStyle, buttonRowStyle, buttonStyle, buttonTextStyle, previewStyle, accentColor, onImageChange, imageFileName, quality, allowsEditing, aspect, cropShape, exif, legacy, cameraButtonLabel, selectButtonLabel, changeButtonLabel, readingLabel, }: ImagePickerProps): React.JSX.Element;
+export declare function ImagePicker({ label, testID, cameraButtonTestID, selectButtonTestID, previewTestID, initialBase64, onChange, containerStyle, labelStyle, buttonRowStyle, buttonStyle, buttonTextStyle, previewStyle, accentColor, onImageChange, imageFileName, quality, allowsEditing, aspect, cropShape, exif, legacy, cameraButtonLabel, selectButtonLabel, changeButtonLabel, readingLabel, }: ImagePickerProps): React.JSX.Element;
 //# sourceMappingURL=ImagePicker.d.ts.map

package/lib/typescript/module/index.d.ts

@@ -3,12 +3,14 @@
  * React Native host integration for @microsoft/power-apps
  *
  */
+import '@microsoft/power-apps-native-assets';
 export { NativePowerAppsBridge } from './bridge/NativePowerAppsBridge.js';
 export { PowerPagesBridge, setupPowerPagesHost } from './bridge/PowerPagesBridge.js';
 export type { PowerPagesBridgeOptions } from './bridge/PowerPagesBridge.js';
 export type { NativeBridgeOptions, CdsDataSourceConfig, AppConnection, AppConnectionReference } from './bridge/NativePowerAppsBridge.js';
 export { buildConnectionReferences } from './bridge/NativePowerAppsBridge.js';
 export { setupNativeHost } from './bridge/setupNativeHost.js';
+export { updateBridgeOptionsInPlace } from './bridge/bridgeState.js';
 export { AuthProvider, useAuth } from './auth/AuthContext';
 export type { AuthState, AuthProviderProps } from './auth/AuthContext';
 export { completePowerAppsAuthSession } from './auth/completePowerAppsAuthSession.js';
@@ -16,15 +18,21 @@ export type { AuthConfig, MsalAuthConfig, IntuneConfig } from '@microsoft/power-
 export { PowerAppsHostProvider } from './provider/PowerAppsHostProvider';
 export type { PowerAppsHostProviderProps } from './provider/PowerAppsHostProvider';
 export { PowerAppsProvider } from './provider/PowerAppsProvider.js';
-export type { PowerAppsProviderProps, PowerConfig } from './provider/PowerAppsProvider.js';
-export { fetchInstanceUrl, buildCdsDataSources, buildEnvironmentEndpoint, POWER_PLATFORM_API_SCOPE } from './platform/PowerPlatformEnvironmentApi.js';
-export type { LinkedEnvironmentMetadata, DatabaseReference, DatabaseReferenceDataSource } from './platform/PowerPlatformEnvironmentApi.js';
-export { useConnectionRefs } from './platform/useConnectionRefs.js';
-export type { UseConnectionRefsOptions, UseConnectionRefsResult, ConnectorSchema } from './platform/useConnectionRefs.js';
-export { fetchConnectorMetadata, fetchConnectionsForConnector, createConnection, pollConnectionStatus, confirmConsentCode, fetchAppLaunchData, } from './platform/PowerPlatformConnectionApi.js';
-export type { ConnectorMetadata, CreateConnectionResult, AppLaunchResult, } from './platform/PowerPlatformConnectionApi.js';
+export type { AppInsightsConfig, PowerAppsAppConfig, PowerAppsProviderProps, PowerConfig, } from './provider/PowerAppsProvider.js';
+export { buildEnvironmentEndpoint, POWER_PLATFORM_API_SCOPE } from './platform/PowerPlatformEnvironmentApi.js';
+export { fetchInstanceUrl } from './platform/DataverseGlobalDiscoveryApi.js';
+export { buildCdsDataSources } from './platform/DataverseDataSources.js';
+export type { LinkedEnvironmentMetadata, DatabaseReference, DatabaseReferenceDataSource } from './platform/DataverseDataSources.js';
+export { useConnectionRefs } from './connections/useConnectionRefs.js';
+export type { UseConnectionRefsOptions, UseConnectionRefsResult, ConnectorSchema } from './connections/useConnectionRefs.js';
+export { fetchConnectorMetadata, fetchConnectionsForConnector, deleteConnection, createConnection, pollConnectionStatus, confirmConsentCode, repairConnection, fetchAppLaunchData, fetchAppConnectionUsages, postConnectionUsage, reportScopeConsents, } from './connections/PowerPlatformConnectionApi.js';
+export type { ConnectorMetadata, CreateConnectionResult, AppLaunchResult, RegisteredConnectionUsage, } from './connections/PowerPlatformConnectionApi.js';
 export { disambiguateConnections, extractConnectionId } from './connections/disambiguate.js';
-export type { NativeConnectionInstance, NativeConnectionResolution, NativeDisambiguationResult, OnDisambiguationNeeded, OnMissingConnection, } from './connections/types.js';
+export { shouldPersistConnectionUsages, shouldShowConnectionReview, } from './connections/connectionState.js';
+export { buildConnectionRequirements, buildConnectionResolutionKey, findConnectionDataSourceConflicts, hasCompleteStaticConnectionConfig, isCompositeConnectionApiId, getConnectorId, normalizeApiId, } from './connections/types.js';
+export { buildConnectionUserConsentUrl, buildConsentLinkDefinition, buildConnectionParameterSets, buildConnectionUsageRequest, buildConnectionUsageUrl, buildScopeConsentRequest, buildScopeConsentUrl, hasOAuthParameter, parseConnectionParameters, serializeConnectionParameters, } from './connections/connectionMetadata.js';
+export type { ConsentLinkDefinition, RawConnectionParameter, RawConnectionParameterSet, SerializedConnectionParameters, } from './connections/connectionMetadata.js';
+export type { ConnectionConsentDetails, ConnectionInput, ConnectionParameterDefinition, ConnectionParameterSet, ConnectionParameterType, ConnectionParameterValue, ConnectionReferenceConfig, ConnectionRequirement, ConnectionUsageInput, ResourceConsentRequirement, NativeConnectionInstance, NativeConnectionResolution, NativeDisambiguationResult, OnDisambiguationNeeded, OnMissingConnection, } from './connections/types.js';
 export { useConnectionSetup } from './connections/useConnectionSetup.js';
 export type { ConnectionSetupPhase, UseConnectionSetupOptions, UseConnectionSetupResult, } from './connections/useConnectionSetup.js';
 export { ConnectionSetupScreen } from './connections/ConnectionSetupScreen.js';
@@ -39,7 +47,7 @@ export { ImagePicker } from './controls/ImagePicker.js';
 export type { ImagePickerProps, PickedImageInfo } from './controls/ImagePicker.js';
 export { isDevPlayer } from './utils/isDevPlayer.js';
 export { base64ToDataverseUploadFile, base64ToUint8Array, createDataverseUploadFile, } from './utils/dataverseUtils.js';
-export { getAppLogger, configureAppLogger, HostOperationNames } from './telemetry/index.js';
-export type { ILogger } from '@microsoft/power-apps-native-common';
+export { getAppLogger, configureAppLogger, getCustomerTelemetryLogger, HostOperationNames, } from './telemetry/index.js';
+export type { ICustomerTelemetryLogger, ILogger, } from '@microsoft/power-apps-native-common';
 export { ErrorBoundary } from './ErrorBoundary.js';
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/logger.d.ts

@@ -1,11 +1,11 @@
 /**
  * Conditional debug logger for power-apps-native-host.
  *
- * Debug logs (debugLog / debugWarn) are only emitted when the JS bundle
- * is running inside the Power Apps Dev Player (detected via
- * `Constants.expoConfig.extra.isDevPlayer`).  They are silenced in release
- * APKs generated from the template so the production log stream stays clean.
+ * Debug logs (debugLog / debugWarn) are emitted in development bundles or when
+ * running inside Power Apps Dev Player. They remain silent in wrapped release
+ * apps so the production log stream stays clean.
  */
+export declare function isDebugLoggingEnabled(): boolean;
 export declare function debugLog(...args: unknown[]): void;
 export declare function debugWarn(...args: unknown[]): void;
 //# sourceMappingURL=logger.d.ts.map

package/lib/typescript/module/offline/createOfflineHostActivationCallbacks.d.ts

@@ -0,0 +1,12 @@
+import { QueryClient } from '@tanstack/react-query';
+export declare function createHostQueryClient(): QueryClient;
+export declare function createOfflineHostActivationCallbacks(queryClient: QueryClient): {
+    prepareForOfflineActivation: () => Promise<void>;
+    completeOfflineActivation: () => Promise<void>;
+    rollbackOfflineActivation: () => Promise<void>;
+};
+export declare function resolveSdkMountDecision(value: unknown): {
+    shouldMountChildren: boolean;
+    contractSupported: boolean;
+};
+//# sourceMappingURL=createOfflineHostActivationCallbacks.d.ts.map

package/lib/typescript/module/offline/useOfflineIntegrationWithStartupGate.d.ts

@@ -0,0 +1,15 @@
+import { useOfflineIntegration } from './useOfflineIntegration';
+type Options = {
+    powerConfig: Parameters<typeof useOfflineIntegration>[0]['powerConfig'];
+    offlineProfile?: Record<string, unknown>;
+    acquireToken: (scopes: string[]) => Promise<string | null>;
+    hasRealAccount: boolean;
+    isAuthReady: boolean;
+};
+export declare function useOfflineIntegrationWithStartupGate({ powerConfig, offlineProfile, acquireToken, hasRealAccount, isAuthReady, }: Options): {
+    isEnabled: boolean;
+    StatusOverlay: import("react").ComponentType<Record<string, never>> | null;
+    shouldMountChildren: boolean;
+};
+export {};
+//# sourceMappingURL=useOfflineIntegrationWithStartupGate.d.ts.map

package/lib/typescript/module/offline/useOfflineIntegrationWithStartupGate.web.d.ts

@@ -0,0 +1,6 @@
+export declare function useOfflineIntegrationWithStartupGate(_options: unknown): {
+    isEnabled: false;
+    StatusOverlay: null;
+    shouldMountChildren: true;
+};
+//# sourceMappingURL=useOfflineIntegrationWithStartupGate.web.d.ts.map

package/lib/typescript/module/platform/DataverseDataSources.d.ts

@@ -0,0 +1,28 @@
+export interface LinkedEnvironmentMetadata {
+    resourceId?: string;
+    friendlyName?: string;
+    uniqueName?: string;
+    domainName?: string;
+    version?: string;
+    instanceUrl?: string;
+    instanceApiUrl?: string;
+    baseLanguage?: number;
+    instanceState?: string;
+    createdTime?: string;
+    platformSku?: string;
+}
+export interface DatabaseReferenceDataSource {
+    entitySetName?: string;
+    logicalName?: string;
+}
+export interface DatabaseReference {
+    dataSources?: Record<string, DatabaseReferenceDataSource>;
+}
+export declare function hasDataverseDatabaseReferences<T>(databaseReferences?: Record<string, T>): boolean;
+export declare function buildCdsDataSources(databaseReferences: Record<string, DatabaseReference>, dataverseOrgUrl: string): Array<{
+    runtimeUrl: string;
+    entitySetName: string;
+    logicalName: string;
+    version: string;
+}>;
+//# sourceMappingURL=DataverseDataSources.d.ts.map

package/lib/typescript/module/platform/DataverseGlobalDiscoveryApi.d.ts

@@ -0,0 +1,3 @@
+/** Fetch the Dataverse instance URL from the Dataverse Global Discovery Service. */
+export declare function fetchInstanceUrl(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, _bearerToken?: string): Promise<string | undefined>;
+//# sourceMappingURL=DataverseGlobalDiscoveryApi.d.ts.map

package/lib/typescript/module/platform/GlobalDiscovery.d.ts

@@ -0,0 +1,4 @@
+export declare function globalDiscoveryEndpoint(region: string): string;
+export declare function globalDiscoveryScope(region: string): string;
+export declare function buildGlobalDiscoveryUrl(environmentId: string, region: string): string;
+//# sourceMappingURL=GlobalDiscovery.d.ts.map

package/lib/typescript/module/platform/PowerPlatformEnvironmentApi.d.ts

@@ -1,14 +1,7 @@
 /*!
  * power-apps-native-host — PowerPlatformEnvironmentApi
  *
- * Mirrors the Host SDK's DefaultAppMetadataProvider.fetchAppMetadataFromPowerConfig
- * pattern: resolves the Power Platform environment-scoped API endpoint from the
- * environment GUID and region, then fetches linkedEnvironmentMetadata to obtain
- * the Dataverse instanceUrl.
- *
- * Reference (Host SDK):
- *   packages/power-apps-host/src/providers/defaults/DefaultAppMetadataProvider.ts
- *   packages/power-apps-common/src/services/PowerPlatformApiDiscovery.ts
+ * Resolves Power Platform RP endpoints and scopes.
  */
 /**
  * Build the Power Platform environment-scoped API base URL.
@@ -26,19 +19,6 @@
  *   → "d909aac059d0e5b1900dc082ef5774.d7.environment.api.powerplatform.com"
  */
 export declare function buildEnvironmentEndpoint(environmentId: string, region: string): string;
-export interface LinkedEnvironmentMetadata {
-    resourceId?: string;
-    friendlyName?: string;
-    uniqueName?: string;
-    domainName?: string;
-    version?: string;
-    instanceUrl?: string;
-    instanceApiUrl?: string;
-    baseLanguage?: number;
-    instanceState?: string;
-    createdTime?: string;
-    platformSku?: string;
-}
 /**
  * Token scope for the Power Platform management API (prod cluster).
  * Non-prod clusters (test, gov, high, dev, mooncake, etc.) host the management
@@ -52,57 +32,6 @@ export declare const POWER_PLATFORM_API_SCOPE = "https://api.powerplatform.com/.
  * {@link buildEnvironmentEndpoint}.
  */
 export declare function powerPlatformScope(region: string): string;
-/**
- * Fetch the Dataverse instanceUrl for a Power Platform environment by calling
- * the environment-scoped Power Platform management API — the same call that
- * the Host SDK's DefaultAppMetadataProvider makes to populate
- * `databaseReferences[*].databaseDetails.linkedEnvironmentMetadata`.
- *
- * @param environmentId - Environment GUID (from power.config.json `environmentId`).
- * @param region        - Cluster region string (from power.config.json `region`, default "prod").
- * @param acquireToken  - Callback to obtain a bearer token for the given scopes.
- *                        Scope will be {@link powerPlatformScope}`(region)`.
- * @param bearerToken   - Optional pre-fetched bearer token for {@link powerPlatformScope}`(region)`.
- *                        Pass this to avoid a redundant `acquireToken` round-trip when the
- *                        caller has already obtained a token for the same audience.
- * @returns The Dataverse org URL (e.g. "https://org12345.crm.dynamics.com"), or
- *          `undefined` if the environment has no linked CDS database.
- */
-export declare function fetchInstanceUrl(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, bearerToken?: string): Promise<string | undefined>;
-/**
- * Shape of a single Dataverse table entry inside power.config.json
- * `databaseReferences[*].dataSources[*]`.
- */
-export interface DatabaseReferenceDataSource {
-    entitySetName?: string;
-    logicalName?: string;
-}
-/**
- * Shape of a single database reference entry inside power.config.json
- * `databaseReferences`.
- */
-export interface DatabaseReference {
-    dataSources?: Record<string, DatabaseReferenceDataSource>;
-}
-/**
- * Build the CDS data source config array that the SDK reads via
- * AppPowerAppsClientPlugin.getAppCdsDataSourceConfigsAsync.
- *
- * Pass the resolved Dataverse org URL (from useConnectionRefs) and the
- * databaseReferences map from power.config.json.  The resulting array is
- * passed directly to <PowerAppsHostProvider dataSources={...} />.
- *
- * @param databaseReferences - The `databaseReferences` map from power.config.json.
- * @param dataverseOrgUrl    - The resolved Dataverse org URL
- *                             (connectionRefs['commondataserviceforapps']?.datasetName).
- *                             Pass an empty string before the org URL is known;
- *                             the host provider will receive empty runtimeUrl entries
- *                             and the SDK will not attempt Dataverse calls.
- */
-export declare function buildCdsDataSources(databaseReferences: Record<string, DatabaseReference>, dataverseOrgUrl: string): Array<{
-    runtimeUrl: string;
-    entitySetName: string;
-    logicalName: string;
-    version: string;
-}>;
+/** Delegated permission required by the connection user-consent endpoint. */
+export declare function connectionUserConsentScope(region: string): string;
 //# sourceMappingURL=PowerPlatformEnvironmentApi.d.ts.map

package/lib/typescript/module/provider/PowerAppsHostProvider.d.ts

@@ -27,9 +27,10 @@
  *   </PowerAppsHostProvider>
  */
 import React from 'react';
-import type { ConnectorSchema } from '../platform/useConnectionRefs.js';
-import type { DatabaseReference } from '../platform/PowerPlatformEnvironmentApi.js';
+import type { ConnectorSchema } from '../connections/useConnectionRefs.js';
+import type { DatabaseReference } from '../platform/DataverseDataSources.js';
 import type { OnDisambiguationNeeded } from '../connections/types.js';
+import type { ConnectionReferenceConfig, ConnectionUsageInput, ResourceConsentRequirement } from '../connections/types.js';
 export interface PowerAppsHostProviderProps {
     /**
      * Callback to acquire an access token for the given scopes.
@@ -41,12 +42,12 @@ export interface PowerAppsHostProviderProps {
      * Connection resolution only runs when this is true.
      */
     isSignedIn: boolean;
+    /** Sign out the active account. Shown on blocking connection error screens. */
+    onSignOut?: () => void | Promise<void>;
     /**
      * PowerApps app GUID (from power.config.json `appId`).
-     * When set, connection references are fetched from the PowerApps RP
-     * `/apps/{appId}/launch` API at runtime instead of using the static
-     * `connectionReferences` prop.  Leave undefined during local development
-     * to fall back to the static `connectionReferences`.
+      * Outside Dev Player, app and connection metadata is fetched exclusively
+      * from the PowerApps RP `/apps/{appId}/launch` API.
      */
     appId?: string;
     /** Power Platform environment GUID (from power.config.json). */
@@ -58,6 +59,7 @@ export interface PowerAppsHostProviderProps {
     region?: string;
     /**
      * The connectionReferences map from power.config.json.
+      * Used only in Dev Player for unpublished local apps.
      * Shape: { [refId]: { id: string; dataSources: string[] } }
      *
      * NOTE: This prop must be referentially stable across renders (memoize it in
@@ -65,18 +67,16 @@ export interface PowerAppsHostProviderProps {
      * so passing a fresh object literal every render forces continuous
      * re-registration.
      */
-    connectionReferences: Record<string, {
-        id: string;
-        dataSources: string[];
-    }>;
+    connectionReferences: Record<string, ConnectionReferenceConfig>;
     /**
      * Connector schema map keyed by data source name.
+      * Used only in Dev Player for unpublished local apps.
      * Generated automatically by generate-connector-schemas.
      */
     schemaMap: Record<string, ConnectorSchema>;
     /**
      * The databaseReferences map from power.config.json.
-     * Used to build CDS data sources for the bridge.
+      * Used only in Dev Player. Production database references come from RP.
      *
      * NOTE: Like `connectionReferences`, pass a referentially stable value; an
      * unstable identity each render triggers redundant bridge re-registration.
@@ -84,8 +84,8 @@ export interface PowerAppsHostProviderProps {
     databaseReferences?: Record<string, DatabaseReference>;
     /**
      * Optional custom renderer for the OAuth consent WebView shown during
-     * connection creation.  If not provided, the system browser is used via
-     * Linking.openURL().
+    * connection creation. If not provided, the system authentication browser
+    * is used. Pass the final redirect URL to onDone when the custom view captures it.
      *
      * @example
      *   // Using react-native-webview:
@@ -96,20 +96,31 @@ export interface PowerAppsHostProviderProps {
      *     </Modal>
      *   )}
      */
-    renderOAuthWebView?: (url: string, onDone: () => void) => React.ReactNode;
+    renderOAuthWebView?: (url: string, onDone: (redirectUrl?: string) => void) => React.ReactNode;
     /**
      * The ISV/wrap-app AAD client ID (from auth.config.json `msal.clientId`).
      * When provided, the ISV's service principal is granted CanView access on
      * each newly created connection, allowing APIM to accept tokens with this
      * appid at runtime (prevents 403 "missing connection ACL" for third-party tokens).
      */
-    isvClientId?: string;
+    isvClientId: string;
     /**
      * Called when multiple Connected connections exist for the same connector.
-     * Present a native picker UI and return the chosen connectionId, or null to
-     * accept the first Connected connection as a fallback.
+    * Present a native picker UI and return the chosen connectionId, or null to
+    * leave the reference unresolved.
      */
     onDisambiguationNeeded?: OnDisambiguationNeeded;
+    /**
+     * Called after the user selects Allow and before the player launches.
+     * Use this to persist app-to-connection usage through an approved public RP endpoint.
+     * Rejecting keeps the app gated and shows the error in the consent screen.
+    * Not invoked in Power Apps Dev Player; local testing is intentionally non-persistent.
+     */
+    onConnectionConsent?: (usages: ConnectionUsageInput[]) => void | Promise<void>;
+    /** Persist protected resource approval in production. Not invoked in Dev Player. */
+    onResourceConsent?: (resources: ResourceConsentRequirement[]) => void | Promise<void>;
+    /** Called when the user selects Do not allow. */
+    onConnectionConsentDeclined?: () => void | Promise<void>;
     children: React.ReactNode;
 }
 /**
@@ -119,5 +130,5 @@ export interface PowerAppsHostProviderProps {
  *
  * Children are never rendered until all required connections are resolved.
  */
-export declare function PowerAppsHostProvider({ acquireToken, isSignedIn, appId, environmentId, region, connectionReferences, schemaMap, databaseReferences, renderOAuthWebView, isvClientId, onDisambiguationNeeded, children, }: PowerAppsHostProviderProps): React.JSX.Element;
+export declare function PowerAppsHostProvider({ acquireToken, isSignedIn, onSignOut, appId, environmentId, region, connectionReferences, schemaMap, databaseReferences, renderOAuthWebView, isvClientId, onDisambiguationNeeded, onConnectionConsent, onResourceConsent, onConnectionConsentDeclined, children, }: PowerAppsHostProviderProps): React.JSX.Element;
 //# sourceMappingURL=PowerAppsHostProvider.d.ts.map