@microsoft/power-apps-native-host 0.3.3 → 0.5.1

package/lib/typescript/commonjs/connections/PowerPlatformConnectionApi.d.ts

@@ -10,6 +10,7 @@
 import type { DatabaseReference } from '../platform/DataverseDataSources';
 import type { ConnectionInput, ConnectionParameterSet, ConnectionRequirement, ConnectionUsageInput, NativeConnectionInstance, ResourceConsentRequirement } from './types';
 import type { AppConnectionReference } from '../bridge/NativePowerAppsBridge';
+import type { TelemetryLocation } from '@microsoft/power-apps-native-common';
 export declare class AppLaunchAccessDeniedError extends Error {
     constructor();
 }
@@ -149,6 +150,8 @@ export interface AppLaunchResult {
      * has no linked Dataverse database).
      */
     dataverseOrgUrl: string;
+    /** Authoritative telemetry geography, or undefined when it cannot be resolved. */
+    telemetryLocation?: TelemetryLocation;
     /** Dataverse table metadata returned by the app launch endpoint. */
     databaseReferences: Record<string, DatabaseReference>;
     /**
@@ -202,9 +205,9 @@ export declare function reportScopeConsents(appId: string, usages: ConnectionUsa
  * @param environmentId - Environment GUID.
  * @param region        - Cluster region (default "prod").
  * @param token         - Bearer token for {@link powerPlatformScope}`(region)`.
- * @returns Processed launch data, or `null` when the app is not found.
+ * @returns Processed launch data. Missing or inaccessible apps throw a typed error.
  */
-export declare function fetchAppLaunchData(appId: string, environmentId: string, region: string, token: string): Promise<AppLaunchResult | null>;
+export declare function fetchAppLaunchData(appId: string, environmentId: string, region: string, token: string): Promise<AppLaunchResult>;
 /**
  * Grant the calling application's delegated access to a connection for the
  * signed-in user. The backend derives both identities from the token and

package/lib/typescript/commonjs/connections/connectionMetadata.d.ts

@@ -40,7 +40,7 @@ export declare function parseConnectionParameters(parameters: Record<string, Raw
 export declare function buildConnectionParameterSets(connectionParameters: Record<string, RawConnectionParameter> | undefined, parameterSets: RawConnectionParameterSet[] | undefined): ConnectionParameterSet[];
 export declare function hasOAuthParameter(parameters: Record<string, RawConnectionParameter> | undefined): boolean;
 export declare function buildConnectionUserConsentUrl(environmentEndpoint: string, connectorId: string, connectionId: string): string;
-export declare function getAppLaunchFailureMessage(status: number, statusText: string, responseText: string): string | null;
+export declare function getAppLaunchFailureMessage(status: number, _statusText: string, _responseText: string): string | null;
 export declare function isAppLaunchAccessDenied(status: number, responseText: string): boolean;
 export declare function buildConsentLinkDefinition(redirectUrl: string): ConsentLinkDefinition;
 export declare function serializeConnectionParameters(input?: ConnectionInput): SerializedConnectionParameters;

package/lib/typescript/commonjs/connections/types.d.ts

@@ -138,7 +138,13 @@ export declare function hasCompleteStaticConnectionConfig(connectionReferences:
         primaryRuntimeUrl: string;
     };
 }>): boolean;
-export declare function buildConnectionResolutionKey(appId: string | undefined, environmentId: string, connectionReferences: Record<string, ConnectionReferenceConfig>): string;
+export declare function buildConnectionResolutionKey(appId: string | undefined, environmentId: string, connectionReferences: Record<string, ConnectionReferenceConfig>, targetIdentity?: {
+    tenantId?: string;
+    appName?: string;
+    region?: string;
+    generation?: number;
+    accountIdentifier?: string;
+}): string;
 /** A single connection instance returned by the Power Platform connectivity API. */
 export interface NativeConnectionInstance {
     /** Terminal connection resource name exactly as returned by Power Platform. */

package/lib/typescript/commonjs/connections/useConnectionRefs.d.ts

@@ -30,6 +30,7 @@
  *     },
  *   });
  */
+import type { TelemetryLocation } from '@microsoft/power-apps-native-common';
 import type { DatabaseReference } from '../platform/DataverseDataSources';
 import type { OnDisambiguationNeeded, OnMissingConnection } from '../connections/types';
 import type { ConnectorSchema } from './resolveConnections';
@@ -88,6 +89,14 @@ export interface UseConnectionRefsOptions {
     * as missing so the setup screen can guide the user to create a new one.
      */
     isvClientId?: string;
+    /** Called when an existing environment response establishes telemetry geography. */
+    onTelemetryLocationResolved?: (location: TelemetryLocation) => void;
+    targetIdentity?: {
+        tenantId: string;
+        appName: string;
+        generation: number;
+        accountIdentifier: string;
+    };
 }
 export interface UseConnectionRefsResult {
     connectionRefs: Record<string, AppConnectionReference>;
@@ -122,7 +131,7 @@ export interface UseConnectionRefsResult {
     /** Database references resolved from the RP launch response. */
     databaseReferences: Record<string, DatabaseReference>;
 }
-export type ConnectionResolutionErrorKind = 'app-access-denied' | 'generic';
+export type ConnectionResolutionErrorKind = 'app-access-denied' | 'app-not-found' | 'generic';
 /**
  * Resolves Power Platform connection references for the current user, with
  * disambiguation support for environments where multiple connections exist for
@@ -133,5 +142,5 @@ export type ConnectionResolutionErrorKind = 'app-access-denied' | 'generic';
  * Both paths disambiguate candidates, pre-warm Dataverse authentication, and
  * return a fully populated bridge configuration.
  */
-export declare function useConnectionRefs({ isSignedIn, acquireToken, appId, environmentId, region, connectionReferences, hasDataverse, schemaMap, onDisambiguationNeeded, onMissingConnection, isvClientId, }: UseConnectionRefsOptions): UseConnectionRefsResult;
+export declare function useConnectionRefs({ isSignedIn, acquireToken, appId, environmentId, region, connectionReferences, hasDataverse, schemaMap, onDisambiguationNeeded, onMissingConnection, isvClientId, onTelemetryLocationResolved, targetIdentity, }: UseConnectionRefsOptions): UseConnectionRefsResult;
 //# sourceMappingURL=useConnectionRefs.d.ts.map

package/lib/typescript/commonjs/index.d.ts

@@ -9,7 +9,7 @@ export { PowerPagesBridge, setupPowerPagesHost } from './bridge/PowerPagesBridge
 export type { PowerPagesBridgeOptions } from './bridge/PowerPagesBridge';
 export type { NativeBridgeOptions, CdsDataSourceConfig, AppConnection, AppConnectionReference } from './bridge/NativePowerAppsBridge';
 export { buildConnectionReferences } from './bridge/NativePowerAppsBridge';
-export { setupNativeHost } from './bridge/setupNativeHost';
+export { invalidateNativeHostRuntime, setupNativeHost } from './bridge/setupNativeHost';
 export { updateBridgeOptionsInPlace } from './bridge/bridgeState';
 export { AuthProvider, useAuth } from './auth/AuthContext';
 export type { AuthState, AuthProviderProps } from './auth/AuthContext';
@@ -19,8 +19,12 @@ export { PowerAppsHostProvider } from './provider/PowerAppsHostProvider';
 export type { PowerAppsHostProviderProps } from './provider/PowerAppsHostProvider';
 export { PowerAppsProvider } from './provider/PowerAppsProvider';
 export type { AppInsightsConfig, PowerAppsAppConfig, PowerAppsProviderProps, PowerConfig, } from './provider/PowerAppsProvider';
+export { PowerAppsRuntimeGate, usePowerAppsExperience } from './target/PowerAppsExperience';
+export type { PowerAppsEnvironmentSummary, PowerAppsExperience, PowerAppsExperienceComponent, PowerAppsExperienceComponentProps, PowerAppsExperienceError, } from './target/PowerAppsExperience';
 export { buildEnvironmentEndpoint, POWER_PLATFORM_API_SCOPE } from './platform/PowerPlatformEnvironmentApi';
 export { fetchInstanceUrl } from './platform/DataverseGlobalDiscoveryApi';
+export { buildCanvasAppResolutionUrl, canonicalizeDataverseOrigin, } from './platform/CanvasAppResolution';
+export { resolveCanvasApp } from './platform/CanvasAppResolutionApi';
 export { buildCdsDataSources } from './platform/DataverseDataSources';
 export type { LinkedEnvironmentMetadata, DatabaseReference, DatabaseReferenceDataSource } from './platform/DataverseDataSources';
 export { useConnectionRefs } from './connections/useConnectionRefs';
@@ -47,7 +51,7 @@ export { ImagePicker } from './controls/ImagePicker';
 export type { ImagePickerProps, PickedImageInfo } from './controls/ImagePicker';
 export { isDevPlayer } from './utils/isDevPlayer';
 export { base64ToDataverseUploadFile, base64ToUint8Array, createDataverseUploadFile, } from './utils/dataverseUtils';
-export { getAppLogger, configureAppLogger, getCustomerTelemetryLogger, HostOperationNames, } from './telemetry';
-export type { ICustomerTelemetryLogger, ILogger, } from '@microsoft/power-apps-native-common';
+export { getAppLogger, configureAppLogger, getCustomEventsLogger, HostOperationNames, } from './telemetry';
+export type { ICustomEventsLogger, ILogger, } from '@microsoft/power-apps-native-common';
 export { ErrorBoundary } from './ErrorBoundary';
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/commonjs/platform/CanvasAppResolution.d.ts

@@ -0,0 +1,4 @@
+export declare function canonicalizeDataverseOrigin(value: string): string;
+export declare function areDataverseOriginAliases(left: string, right: string): boolean;
+export declare function buildCanvasAppResolutionUrl(dataverseApiUrl: string, appName: string): string;
+//# sourceMappingURL=CanvasAppResolution.d.ts.map

package/lib/typescript/commonjs/platform/CanvasAppResolutionApi.d.ts

@@ -0,0 +1,6 @@
+import type { PowerPlatformTarget, ResolvedPowerPlatformTarget } from '../target/types';
+export declare function resolveCanvasApp(target: PowerPlatformTarget, dataverseApiUrl: string, acquireToken: (scopes: string[]) => Promise<string | null>, generation?: {
+    value: number;
+    isCurrent: (value: number) => boolean;
+}): Promise<ResolvedPowerPlatformTarget>;
+//# sourceMappingURL=CanvasAppResolutionApi.d.ts.map

package/lib/typescript/commonjs/platform/DataverseGlobalDiscoveryApi.d.ts

@@ -1,3 +1,13 @@
-/** Fetch the Dataverse instance URL from the Dataverse Global Discovery Service. */
-export declare function fetchInstanceUrl(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, _bearerToken?: string): Promise<string | undefined>;
+import type { TelemetryLocation } from '@microsoft/power-apps-native-common';
+import type { PowerPlatformTarget } from '../target/types';
+/** Enumerate enabled commercial-cloud Dataverse environments available to an authenticated tenant account. */
+export declare function fetchAccessibleEnvironments(tenantId: string, appDisplayName: string, appName: string, acquireToken: (scopes: string[]) => Promise<string | null>): Promise<PowerPlatformTarget[]>;
+export interface DataverseInstanceMetadata {
+    instanceUrl: string;
+    telemetryLocation?: TelemetryLocation;
+}
+/** Fetch Dataverse environment metadata from the Global Discovery Service. */
+export declare function fetchInstanceMetadata(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, _bearerToken?: string): Promise<DataverseInstanceMetadata | undefined>;
+/** Fetch only the Dataverse instance URL for callers that do not need region metadata. */
+export declare function fetchInstanceUrl(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, bearerToken?: string): Promise<string | undefined>;
 //# sourceMappingURL=DataverseGlobalDiscoveryApi.d.ts.map

package/lib/typescript/commonjs/platform/GlobalDiscovery.d.ts

@@ -1,4 +1,16 @@
+import type { PowerPlatformTarget } from '../target/types';
+export type DiscoveryInstance = {
+    ApiUrl?: unknown;
+    EnvironmentId?: unknown;
+    FriendlyName?: unknown;
+    Region?: unknown;
+    State?: unknown;
+    TenantId?: unknown;
+};
+export declare function isEnabledDiscoveryState(state: unknown): boolean;
+export declare function parseDiscoveredEnvironments(instances: DiscoveryInstance[], tenantId: string, appDisplayName: string, appName: string): PowerPlatformTarget[];
 export declare function globalDiscoveryEndpoint(region: string): string;
 export declare function globalDiscoveryScope(region: string): string;
 export declare function buildGlobalDiscoveryUrl(environmentId: string, region: string): string;
+export declare function buildGlobalDiscoveryListUrl(region: string): string;
 //# sourceMappingURL=GlobalDiscovery.d.ts.map

package/lib/typescript/commonjs/provider/PowerAppsHostProvider.d.ts

@@ -31,6 +31,7 @@ import type { ConnectorSchema } from '../connections/useConnectionRefs';
 import type { DatabaseReference } from '../platform/DataverseDataSources';
 import type { OnDisambiguationNeeded } from '../connections/types';
 import type { ConnectionReferenceConfig, ConnectionUsageInput, ResourceConsentRequirement } from '../connections/types';
+import type { TelemetryLocation } from '@microsoft/power-apps-native-common';
 export interface PowerAppsHostProviderProps {
     /**
      * Callback to acquire an access token for the given scopes.
@@ -104,6 +105,13 @@ export interface PowerAppsHostProviderProps {
      * appid at runtime (prevents 403 "missing connection ACL" for third-party tokens).
      */
     isvClientId: string;
+    targetGeneration?: number;
+    targetTenantId?: string;
+    targetAppName?: string;
+    targetAccountIdentifier?: string;
+    expectedDataverseOrigin?: string;
+    /** Receives geography resolved from API responses already used during startup. */
+    onTelemetryLocationResolved?: (location: TelemetryLocation) => void;
     /**
      * Called when multiple Connected connections exist for the same connector.
     * Present a native picker UI and return the chosen connectionId, or null to
@@ -130,5 +138,5 @@ export interface PowerAppsHostProviderProps {
  *
  * Children are never rendered until all required connections are resolved.
  */
-export declare function PowerAppsHostProvider({ acquireToken, isSignedIn, onSignOut, appId, environmentId, region, connectionReferences, schemaMap, databaseReferences, renderOAuthWebView, isvClientId, onDisambiguationNeeded, onConnectionConsent, onResourceConsent, onConnectionConsentDeclined, children, }: PowerAppsHostProviderProps): React.JSX.Element;
+export declare function PowerAppsHostProvider({ acquireToken, isSignedIn, onSignOut, appId, environmentId, region, connectionReferences, schemaMap, databaseReferences, renderOAuthWebView, isvClientId, onTelemetryLocationResolved, targetGeneration, targetTenantId, targetAppName, targetAccountIdentifier, expectedDataverseOrigin, onDisambiguationNeeded, onConnectionConsent, onResourceConsent, onConnectionConsentDeclined, children, }: PowerAppsHostProviderProps): React.JSX.Element;
 //# sourceMappingURL=PowerAppsHostProvider.d.ts.map

package/lib/typescript/commonjs/provider/PowerAppsProvider.d.ts

@@ -34,6 +34,7 @@ import type { ConnectionReferenceConfig, OnDisambiguationNeeded } from '../conne
 import type { ThemeTokens } from '../theme/tokens';
 import type { ILogger } from '@microsoft/power-apps-native-common';
 import type { ApplicationInsightsTelemetryProviderConfig } from '@microsoft/power-apps-native-common';
+import type { PowerAppsExperienceComponent } from '../target/PowerAppsExperience';
 /** Shape of power.config.json consumed by the provider. */
 export interface PowerConfig {
     /**
@@ -46,14 +47,6 @@ export interface PowerConfig {
     appId?: string | null;
     environmentId?: string;
     region?: string;
-    /**
-     * BAP environment `location` value (`environment.properties.location` from the
-     * Get Environments API). EU locations — `"europe"`, `"unitedkingdom"`,
-     * `"france"`, `"germany"`, `"italy"`, `"poland"`, `"norway"`, `"sweden"`,
-     * `"switzerland"` — route telemetry to the EU 1DS collector.
-     * Omit for the default global collector.
-     */
-    geoRegion?: string;
     connectionReferences?: Record<string, ConnectionReferenceConfig>;
     databaseReferences?: Record<string, DatabaseReference>;
     /**
@@ -79,7 +72,7 @@ export interface PowerAppsAppConfig {
     };
     [key: string]: unknown;
 }
-export interface PowerAppsProviderProps {
+interface PowerAppsProviderCommonProps {
     /**
      * Contents of the generated app.json.
      *
@@ -88,10 +81,6 @@ export interface PowerAppsProviderProps {
      * The provider falls back to `Constants.expoConfig` when omitted.
      */
     appConfig?: PowerAppsAppConfig;
-    /** MSAL configuration from auth.config.json (msal section). */
-    msalConfig: AuthProviderProps['msalConfig'];
-    /** Intune MAM configuration. Defaults to enabled in release builds. */
-    intuneConfig?: AuthProviderProps['intuneConfig'];
     /** Contents of power.config.json. */
     powerConfig: PowerConfig;
     /**
@@ -163,7 +152,7 @@ export interface PowerAppsProviderProps {
     /**
      * Optional customer-owned Application Insights destination.
      *
-     * Events are sent directly to the selected C1-owned Application Insights
+     * Events are sent directly to the selected customer-owned Application Insights
      * resource and fan out alongside the default Microsoft OneDS provider.
      * Defaults to `appConfig.expo.extra.appInsightsConfig`, then falls back to
      * `Constants.expoConfig.extra.appInsightsConfig`.
@@ -177,8 +166,18 @@ export interface PowerAppsProviderProps {
      * if you want to pass the profile programmatically (e.g., tests).
      */
     offlineProfile?: Record<string, unknown>;
+    /**
+     * Customer-owned UI for multi-tenant sign-in, discovery, environment
+     * selection, loading, and errors. The built-in experience is used when
+     * omitted. Ignored in single-tenant mode.
+     */
+    multiTenantExperience?: PowerAppsExperienceComponent;
     children: React.ReactNode;
 }
+export type PowerAppsProviderProps = PowerAppsProviderCommonProps & {
+    msalConfig: AuthProviderProps['msalConfig'];
+    intuneConfig?: AuthProviderProps['intuneConfig'];
+};
 /**
  * Top-level provider for Power Apps canvas apps running inside an Expo shell.
  *
@@ -187,7 +186,6 @@ export interface PowerAppsProviderProps {
  * component, eliminating all provider boilerplate from the consuming app's
  * root layout.
  */
-export declare function PowerAppsProvider({ appConfig, msalConfig, intuneConfig, powerConfig, schemaMap, tamaguiConfig, // override with app's tamagui.config.ts
-defaultTheme, theme, darkTheme, followSystemTheme, renderOAuthWebView, onDisambiguationNeeded, onConnectionConsent, onResourceConsent, onConnectionConsentDeclined, appName, logger: loggerProp, showSessionDetailsOnLongPress, showSessionDetailsOnSwipe, appInsightsConfig, offlineProfile, children, }: PowerAppsProviderProps): React.JSX.Element;
+export declare function PowerAppsProvider({ ...props }: PowerAppsProviderProps): React.JSX.Element;
 export {};
 //# sourceMappingURL=PowerAppsProvider.d.ts.map

package/lib/typescript/commonjs/target/DefaultPowerAppsExperience.d.ts

@@ -0,0 +1,6 @@
+import React from 'react';
+import type { PropsWithChildren } from 'react';
+export declare function DefaultPowerAppsExperience({ appDisplayName, children, }: PropsWithChildren<{
+    appDisplayName: string;
+}>): React.JSX.Element;
+//# sourceMappingURL=DefaultPowerAppsExperience.d.ts.map

package/lib/typescript/commonjs/target/PowerAppsExperience.d.ts

@@ -0,0 +1,61 @@
+import React from 'react';
+export interface PowerAppsEnvironmentSummary {
+    id: string;
+    label: string;
+}
+export interface PowerAppsExperienceError {
+    code: string;
+    message: string;
+    retryable: boolean;
+}
+export type PowerAppsExperience = {
+    status: 'preparing';
+} | {
+    status: 'signIn';
+    error?: string;
+    signIn: () => Promise<void>;
+    goBack?: () => void;
+} | {
+    status: 'discovering';
+} | {
+    status: 'selectEnvironment';
+    environments: readonly PowerAppsEnvironmentSummary[];
+    selectEnvironment: (environmentId: string) => void;
+    signOut: () => Promise<void>;
+} | {
+    status: 'connecting';
+    environment: PowerAppsEnvironmentSummary;
+} | {
+    status: 'resolvingApp';
+    environment: PowerAppsEnvironmentSummary;
+} | {
+    status: 'empty';
+    retry: () => void;
+    signOut: () => Promise<void>;
+} | {
+    status: 'error';
+    error: PowerAppsExperienceError;
+    retry?: () => void;
+    goBack?: () => void;
+    signOut?: () => Promise<void>;
+} | {
+    status: 'ready';
+    environment: PowerAppsEnvironmentSummary;
+};
+export interface PowerAppsExperienceComponentProps {
+    appDisplayName: string;
+    children: React.ReactNode;
+}
+export type PowerAppsExperienceComponent = React.ComponentType<PowerAppsExperienceComponentProps>;
+export declare function usePowerAppsExperience(): PowerAppsExperience;
+export declare function PowerAppsRuntimeGate({ children }: {
+    children: React.ReactNode;
+}): React.JSX.Element | null;
+export declare function PowerAppsExperienceBoundary({ experience, appDisplayName, component: Component, children, fallback, }: {
+    experience: PowerAppsExperience;
+    appDisplayName: string;
+    component?: PowerAppsExperienceComponent;
+    children?: React.ReactNode;
+    fallback: React.ReactNode;
+}): React.JSX.Element;
+//# sourceMappingURL=PowerAppsExperience.d.ts.map

package/lib/typescript/commonjs/target/PowerAppsTargetBootstrap.d.ts

@@ -0,0 +1,15 @@
+import React from 'react';
+import type { MsalAuthConfig } from '@microsoft/power-apps-native-auth';
+import { type PowerAppsTenantPolicy } from '../config/tenantMode';
+import { type PowerAppsExperienceComponent } from './PowerAppsExperience';
+import type { ResolvedPowerPlatformTarget, TargetAuthSession } from './types';
+export interface PowerAppsTargetBootstrapProps {
+    msalConfig: MsalAuthConfig;
+    appDisplayName: string;
+    appName: string;
+    tenantPolicy: PowerAppsTenantPolicy;
+    experienceComponent?: PowerAppsExperienceComponent;
+    children: (target: ResolvedPowerPlatformTarget, authSession: TargetAuthSession) => React.ReactNode;
+}
+export declare function PowerAppsTargetBootstrap({ msalConfig, appDisplayName, appName, tenantPolicy, experienceComponent, children }: PowerAppsTargetBootstrapProps): React.JSX.Element;
+//# sourceMappingURL=PowerAppsTargetBootstrap.d.ts.map

package/lib/typescript/commonjs/target/errors.d.ts

@@ -0,0 +1,13 @@
+export type TargetErrorCode = 'invalid-build-config' | 'catalog-invalid' | 'stored-target-invalid' | 'authentication-cancelled' | 'authentication-failed' | 'tenant-mismatch' | 'environment-unavailable' | 'discovery-failed' | 'dataverse-access-denied' | 'app-metadata-missing' | 'app-metadata-ambiguous' | 'app-metadata-access-denied' | 'app-not-found' | 'app-access-denied' | 'launch-target-mismatch' | 'connection-setup-failed' | 'offline-switch-unsupported' | 'switch-blocked' | 'stale-operation' | 'service-unavailable';
+export type TargetErrorStage = 'configuration' | 'authentication' | 'discovery' | 'app-resolution' | 'launch' | 'connections' | 'switching';
+export declare class TargetRuntimeError extends Error {
+    readonly code: TargetErrorCode;
+    readonly stage: TargetErrorStage;
+    readonly retryable: boolean;
+    readonly userMessage: string;
+    readonly targetId?: string | undefined;
+    readonly name = "TargetRuntimeError";
+    readonly cause?: unknown;
+    constructor(code: TargetErrorCode, stage: TargetErrorStage, retryable: boolean, userMessage: string, targetId?: string | undefined, cause?: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/lib/typescript/commonjs/target/types.d.ts

@@ -0,0 +1,34 @@
+export type PowerPlatformTarget = {
+    id: string;
+    label: string;
+    tenantId: string;
+    environmentId: string;
+    appDisplayName: string;
+    appName: string;
+    region: string;
+    cloud?: 'commercial';
+    dataverseApiUrl: string;
+};
+export type ResolvedPowerPlatformTarget = PowerPlatformTarget & {
+    appId: string;
+    dataverseApiUrl: string;
+};
+export type TargetRuntimeState = 'bootstrapping' | 'selecting' | 'switching' | 'authenticating' | 'resolving' | 'configuring-connections' | 'ready' | 'error';
+export interface TargetTokenBroker {
+    readonly tenantId: string;
+    readonly generation: number;
+    acquireGlobalDiscoveryToken(): Promise<string>;
+    acquireDataverseToken(apiUrl: string): Promise<string>;
+    acquirePowerPlatformToken(region: string): Promise<string>;
+    acquireConnectionUserConsentToken(region: string): Promise<string>;
+    acquireApiHubToken(): Promise<string>;
+}
+export interface TargetAuthSession {
+    readonly clientId: string;
+    readonly accountIdentifier: string;
+    readonly accountTenantId: string;
+    readonly generation: number;
+    readonly tokenBroker: TargetTokenBroker;
+    signOut(): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/commonjs/telemetry/index.d.ts

@@ -8,8 +8,8 @@
  * alongside the canonical host operation-name constants.
  */
 import { HttpClient } from '@microsoft/power-apps-native-common/http';
-export { getAppLogger, configureAppLogger, getCustomerTelemetryLogger } from '@microsoft/power-apps-native-common';
-export type { ICustomerTelemetryLogger } from '@microsoft/power-apps-native-common';
+export { getAppLogger, configureAppLogger, getCustomEventsLogger } from '@microsoft/power-apps-native-common';
+export type { ICustomEventsLogger } from '@microsoft/power-apps-native-common';
 /**
  * Canonical operation names for host package telemetry.
  * Follow the `PowerAppsHost.<Subsystem>.<Action>` convention so events are

package/lib/typescript/module/auth/AuthContext.d.ts

@@ -14,7 +14,7 @@
  *   </AuthProvider>
  */
 import React from 'react';
-import type { MsalAuthConfig, IntuneConfig } from '@microsoft/power-apps-native-auth';
+import type { MSALAccount, MsalAuthConfig, IntuneConfig } from '@microsoft/power-apps-native-auth';
 export interface AuthState {
     isLoading: boolean;
     isAuthReady: boolean;
@@ -28,6 +28,7 @@ export interface AuthState {
      * in a perpetual "waiting-for-auth" retry loop.
      */
     hasRealAccount: boolean;
+    account: MSALAccount | null;
     error: Error | null;
     acquireToken: (scopes: string[]) => Promise<string | null>;
     signIn: () => Promise<void>;
@@ -48,9 +49,17 @@ export interface AuthProviderProps {
     intuneConfig?: IntuneConfig;
     /** Token audiences that must be available before the account is considered signed in. */
     requiredScopes?: string[];
+    /** Tenant that every cached and newly acquired account must belong to. */
+    expectedTenantId?: string;
+    /** Authority segment used to initialize MSAL, such as `organizations` or a tenant GUID. */
+    authorityTenant?: string;
+    /** Cached account to restore when moving between authority-specific providers. */
+    preferredAccountIdentifier?: string;
+    /** Automatically request missing consent for the preferred cached account. */
+    autoAuthorizeMissingScopes?: boolean;
     children: React.ReactNode;
 }
-export declare function AuthProvider({ msalConfig, intuneConfig, requiredScopes, children, }: AuthProviderProps): React.JSX.Element;
+export declare function AuthProvider({ msalConfig, intuneConfig, requiredScopes, expectedTenantId, authorityTenant, preferredAccountIdentifier, autoAuthorizeMissingScopes, children, }: AuthProviderProps): React.JSX.Element;
 /**
  * Returns the current auth state from the nearest <AuthProvider>.
  * Must be called within the AuthProvider tree.

package/lib/typescript/module/auth/targetAuthorization.d.ts

@@ -0,0 +1,15 @@
+import type { MSALAccount, MSALResult } from '@microsoft/power-apps-native-auth';
+interface TargetAuthorizationClient {
+    acquireToken(params: {
+        scopes: string[];
+        loginHint?: string;
+    }): Promise<MSALResult>;
+    acquireTokenSilent(params: {
+        scopes: string[];
+        account: MSALAccount;
+    }): Promise<MSALResult>;
+}
+export declare function isInteractionRequired(error: unknown): boolean;
+export declare function authorizeRequiredScopes(client: TargetAuthorizationClient, account: MSALAccount, scopes: string[], expectedTenantId?: string): Promise<MSALAccount>;
+export {};
+//# sourceMappingURL=targetAuthorization.d.ts.map

package/lib/typescript/module/bridge/NativePowerAppsBridge.d.ts

@@ -53,6 +53,10 @@ export declare function buildConnectionReferences(powerConfigConnectionReference
     [key: string]: unknown;
 }>): Record<string, AppConnectionReference>;
 export type NativeBridgeOptions = {
+    /** Active target generation. Changes invalidate in-flight bridge requests. */
+    targetGeneration?: number;
+    /** Target and account identity represented by the current bridge options. */
+    runtimeIdentity?: string;
     /**
      * Return an auth token scoped to a connector API endpoint.
      * @param apiId - Connection API identifier (e.g. "shared_sharepointonline").
@@ -76,6 +80,7 @@ export type NativeBridgeOptions = {
 };
 export declare class NativePowerAppsBridge {
     private _options;
+    private _runtimeEpoch;
     constructor(_options: NativeBridgeOptions);
     /**
      * Updates the bridge's options in-place.
@@ -86,6 +91,7 @@ export declare class NativePowerAppsBridge {
      * via globalThis would have no effect — mutating options is the correct path.
      */
     updateOptions(options: NativeBridgeOptions): void;
+    invalidateRuntime(): void;
     initialize(): Promise<void>;
     /**
      * Hermes-safe body construction. Returns the raw body value so that

package/lib/typescript/module/bridge/setupNativeHost.d.ts

@@ -36,4 +36,6 @@ import type { NativeBridgeOptions } from './NativePowerAppsBridge.js';
  * ```
  */
 export declare function setupNativeHost(options: NativeBridgeOptions): void;
+/** Invalidates in-flight work without replacing the SDK-cached bridge singleton. */
+export declare function invalidateNativeHostRuntime(): void;
 //# sourceMappingURL=setupNativeHost.d.ts.map

package/lib/typescript/module/config/runtimeTenantMode.d.ts

@@ -0,0 +1,3 @@
+import type { PowerAppsTenantMode } from './tenantMode.js';
+export declare function assertNativeTenantMode(tenantMode: PowerAppsTenantMode): void;
+//# sourceMappingURL=runtimeTenantMode.d.ts.map

package/lib/typescript/module/config/runtimeTenantMode.web.d.ts

@@ -0,0 +1,3 @@
+import type { PowerAppsTenantMode } from './tenantMode.js';
+export declare function assertNativeTenantMode(_tenantMode: PowerAppsTenantMode): void;
+//# sourceMappingURL=runtimeTenantMode.web.d.ts.map

package/lib/typescript/module/config/tenantMode.d.ts

@@ -0,0 +1,14 @@
+export type PowerAppsTenantMode = 'single' | 'multi';
+export type PowerAppsTenantPolicy = 'organizations' | {
+    allowedTenantIds: string[];
+};
+export declare const MULTI_TENANT_AUTHORITY = "common";
+export type PowerAppsMultiTenantConfig = {
+    appDisplayName: string;
+    appName: string;
+    tenantPolicy: PowerAppsTenantPolicy;
+};
+export declare function resolveTenantMode(appConfig: unknown): PowerAppsTenantMode;
+export declare function resolveMultiTenantConfig(appConfig: unknown): PowerAppsMultiTenantConfig;
+export declare function isTenantAllowed(tenantId: string, policy: PowerAppsTenantPolicy): boolean;
+//# sourceMappingURL=tenantMode.d.ts.map

package/lib/typescript/module/connections/PowerPlatformConnectionApi.d.ts

@@ -10,6 +10,7 @@
 import type { DatabaseReference } from '../platform/DataverseDataSources.js';
 import type { ConnectionInput, ConnectionParameterSet, ConnectionRequirement, ConnectionUsageInput, NativeConnectionInstance, ResourceConsentRequirement } from './types.js';
 import type { AppConnectionReference } from '../bridge/NativePowerAppsBridge.js';
+import type { TelemetryLocation } from '@microsoft/power-apps-native-common';
 export declare class AppLaunchAccessDeniedError extends Error {
     constructor();
 }
@@ -149,6 +150,8 @@ export interface AppLaunchResult {
      * has no linked Dataverse database).
      */
     dataverseOrgUrl: string;
+    /** Authoritative telemetry geography, or undefined when it cannot be resolved. */
+    telemetryLocation?: TelemetryLocation;
     /** Dataverse table metadata returned by the app launch endpoint. */
     databaseReferences: Record<string, DatabaseReference>;
     /**
@@ -202,9 +205,9 @@ export declare function reportScopeConsents(appId: string, usages: ConnectionUsa
  * @param environmentId - Environment GUID.
  * @param region        - Cluster region (default "prod").
  * @param token         - Bearer token for {@link powerPlatformScope}`(region)`.
- * @returns Processed launch data, or `null` when the app is not found.
+ * @returns Processed launch data. Missing or inaccessible apps throw a typed error.
  */
-export declare function fetchAppLaunchData(appId: string, environmentId: string, region: string, token: string): Promise<AppLaunchResult | null>;
+export declare function fetchAppLaunchData(appId: string, environmentId: string, region: string, token: string): Promise<AppLaunchResult>;
 /**
  * Grant the calling application's delegated access to a connection for the
  * signed-in user. The backend derives both identities from the token and

package/lib/typescript/module/connections/connectionMetadata.d.ts

@@ -40,7 +40,7 @@ export declare function parseConnectionParameters(parameters: Record<string, Raw
 export declare function buildConnectionParameterSets(connectionParameters: Record<string, RawConnectionParameter> | undefined, parameterSets: RawConnectionParameterSet[] | undefined): ConnectionParameterSet[];
 export declare function hasOAuthParameter(parameters: Record<string, RawConnectionParameter> | undefined): boolean;
 export declare function buildConnectionUserConsentUrl(environmentEndpoint: string, connectorId: string, connectionId: string): string;
-export declare function getAppLaunchFailureMessage(status: number, statusText: string, responseText: string): string | null;
+export declare function getAppLaunchFailureMessage(status: number, _statusText: string, _responseText: string): string | null;
 export declare function isAppLaunchAccessDenied(status: number, responseText: string): boolean;
 export declare function buildConsentLinkDefinition(redirectUrl: string): ConsentLinkDefinition;
 export declare function serializeConnectionParameters(input?: ConnectionInput): SerializedConnectionParameters;

package/lib/typescript/module/connections/types.d.ts

@@ -138,7 +138,13 @@ export declare function hasCompleteStaticConnectionConfig(connectionReferences:
         primaryRuntimeUrl: string;
     };
 }>): boolean;
-export declare function buildConnectionResolutionKey(appId: string | undefined, environmentId: string, connectionReferences: Record<string, ConnectionReferenceConfig>): string;
+export declare function buildConnectionResolutionKey(appId: string | undefined, environmentId: string, connectionReferences: Record<string, ConnectionReferenceConfig>, targetIdentity?: {
+    tenantId?: string;
+    appName?: string;
+    region?: string;
+    generation?: number;
+    accountIdentifier?: string;
+}): string;
 /** A single connection instance returned by the Power Platform connectivity API. */
 export interface NativeConnectionInstance {
     /** Terminal connection resource name exactly as returned by Power Platform. */