@microsoft/power-apps-native-host 0.4.0 → 0.5.1

package/lib/typescript/module/platform/DataverseGlobalDiscoveryApi.d.ts

@@ -1,3 +1,13 @@
-/** Fetch the Dataverse instance URL from the Dataverse Global Discovery Service. */
-export declare function fetchInstanceUrl(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, _bearerToken?: string): Promise<string | undefined>;
+import type { TelemetryLocation } from '@microsoft/power-apps-native-common';
+import type { PowerPlatformTarget } from '../target/types.js';
+/** Enumerate enabled commercial-cloud Dataverse environments available to an authenticated tenant account. */
+export declare function fetchAccessibleEnvironments(tenantId: string, appDisplayName: string, appName: string, acquireToken: (scopes: string[]) => Promise<string | null>): Promise<PowerPlatformTarget[]>;
+export interface DataverseInstanceMetadata {
+    instanceUrl: string;
+    telemetryLocation?: TelemetryLocation;
+}
+/** Fetch Dataverse environment metadata from the Global Discovery Service. */
+export declare function fetchInstanceMetadata(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, _bearerToken?: string): Promise<DataverseInstanceMetadata | undefined>;
+/** Fetch only the Dataverse instance URL for callers that do not need region metadata. */
+export declare function fetchInstanceUrl(environmentId: string, region: string, acquireToken: (scopes: string[]) => Promise<string | null>, bearerToken?: string): Promise<string | undefined>;
 //# sourceMappingURL=DataverseGlobalDiscoveryApi.d.ts.map

package/lib/typescript/module/platform/GlobalDiscovery.d.ts

@@ -1,4 +1,16 @@
+import type { PowerPlatformTarget } from '../target/types.js';
+export type DiscoveryInstance = {
+    ApiUrl?: unknown;
+    EnvironmentId?: unknown;
+    FriendlyName?: unknown;
+    Region?: unknown;
+    State?: unknown;
+    TenantId?: unknown;
+};
+export declare function isEnabledDiscoveryState(state: unknown): boolean;
+export declare function parseDiscoveredEnvironments(instances: DiscoveryInstance[], tenantId: string, appDisplayName: string, appName: string): PowerPlatformTarget[];
 export declare function globalDiscoveryEndpoint(region: string): string;
 export declare function globalDiscoveryScope(region: string): string;
 export declare function buildGlobalDiscoveryUrl(environmentId: string, region: string): string;
+export declare function buildGlobalDiscoveryListUrl(region: string): string;
 //# sourceMappingURL=GlobalDiscovery.d.ts.map

package/lib/typescript/module/provider/PowerAppsHostProvider.d.ts

@@ -31,6 +31,7 @@ import type { ConnectorSchema } from '../connections/useConnectionRefs.js';
 import type { DatabaseReference } from '../platform/DataverseDataSources.js';
 import type { OnDisambiguationNeeded } from '../connections/types.js';
 import type { ConnectionReferenceConfig, ConnectionUsageInput, ResourceConsentRequirement } from '../connections/types.js';
+import type { TelemetryLocation } from '@microsoft/power-apps-native-common';
 export interface PowerAppsHostProviderProps {
     /**
      * Callback to acquire an access token for the given scopes.
@@ -104,6 +105,13 @@ export interface PowerAppsHostProviderProps {
      * appid at runtime (prevents 403 "missing connection ACL" for third-party tokens).
      */
     isvClientId: string;
+    targetGeneration?: number;
+    targetTenantId?: string;
+    targetAppName?: string;
+    targetAccountIdentifier?: string;
+    expectedDataverseOrigin?: string;
+    /** Receives geography resolved from API responses already used during startup. */
+    onTelemetryLocationResolved?: (location: TelemetryLocation) => void;
     /**
      * Called when multiple Connected connections exist for the same connector.
     * Present a native picker UI and return the chosen connectionId, or null to
@@ -130,5 +138,5 @@ export interface PowerAppsHostProviderProps {
  *
  * Children are never rendered until all required connections are resolved.
  */
-export declare function PowerAppsHostProvider({ acquireToken, isSignedIn, onSignOut, appId, environmentId, region, connectionReferences, schemaMap, databaseReferences, renderOAuthWebView, isvClientId, onDisambiguationNeeded, onConnectionConsent, onResourceConsent, onConnectionConsentDeclined, children, }: PowerAppsHostProviderProps): React.JSX.Element;
+export declare function PowerAppsHostProvider({ acquireToken, isSignedIn, onSignOut, appId, environmentId, region, connectionReferences, schemaMap, databaseReferences, renderOAuthWebView, isvClientId, onTelemetryLocationResolved, targetGeneration, targetTenantId, targetAppName, targetAccountIdentifier, expectedDataverseOrigin, onDisambiguationNeeded, onConnectionConsent, onResourceConsent, onConnectionConsentDeclined, children, }: PowerAppsHostProviderProps): React.JSX.Element;
 //# sourceMappingURL=PowerAppsHostProvider.d.ts.map

package/lib/typescript/module/provider/PowerAppsProvider.d.ts

@@ -34,6 +34,7 @@ import type { ConnectionReferenceConfig, OnDisambiguationNeeded } from '../conne
 import type { ThemeTokens } from '../theme/tokens.js';
 import type { ILogger } from '@microsoft/power-apps-native-common';
 import type { ApplicationInsightsTelemetryProviderConfig } from '@microsoft/power-apps-native-common';
+import type { PowerAppsExperienceComponent } from '../target/PowerAppsExperience.js';
 /** Shape of power.config.json consumed by the provider. */
 export interface PowerConfig {
     /**
@@ -46,14 +47,6 @@ export interface PowerConfig {
     appId?: string | null;
     environmentId?: string;
     region?: string;
-    /**
-     * BAP environment `location` value (`environment.properties.location` from the
-     * Get Environments API). EU locations — `"europe"`, `"unitedkingdom"`,
-     * `"france"`, `"germany"`, `"italy"`, `"poland"`, `"norway"`, `"sweden"`,
-     * `"switzerland"` — route telemetry to the EU 1DS collector.
-     * Omit for the default global collector.
-     */
-    geoRegion?: string;
     connectionReferences?: Record<string, ConnectionReferenceConfig>;
     databaseReferences?: Record<string, DatabaseReference>;
     /**
@@ -79,7 +72,7 @@ export interface PowerAppsAppConfig {
     };
     [key: string]: unknown;
 }
-export interface PowerAppsProviderProps {
+interface PowerAppsProviderCommonProps {
     /**
      * Contents of the generated app.json.
      *
@@ -88,10 +81,6 @@ export interface PowerAppsProviderProps {
      * The provider falls back to `Constants.expoConfig` when omitted.
      */
     appConfig?: PowerAppsAppConfig;
-    /** MSAL configuration from auth.config.json (msal section). */
-    msalConfig: AuthProviderProps['msalConfig'];
-    /** Intune MAM configuration. Defaults to enabled in release builds. */
-    intuneConfig?: AuthProviderProps['intuneConfig'];
     /** Contents of power.config.json. */
     powerConfig: PowerConfig;
     /**
@@ -177,8 +166,18 @@ export interface PowerAppsProviderProps {
      * if you want to pass the profile programmatically (e.g., tests).
      */
     offlineProfile?: Record<string, unknown>;
+    /**
+     * Customer-owned UI for multi-tenant sign-in, discovery, environment
+     * selection, loading, and errors. The built-in experience is used when
+     * omitted. Ignored in single-tenant mode.
+     */
+    multiTenantExperience?: PowerAppsExperienceComponent;
     children: React.ReactNode;
 }
+export type PowerAppsProviderProps = PowerAppsProviderCommonProps & {
+    msalConfig: AuthProviderProps['msalConfig'];
+    intuneConfig?: AuthProviderProps['intuneConfig'];
+};
 /**
  * Top-level provider for Power Apps canvas apps running inside an Expo shell.
  *
@@ -187,7 +186,6 @@ export interface PowerAppsProviderProps {
  * component, eliminating all provider boilerplate from the consuming app's
  * root layout.
  */
-export declare function PowerAppsProvider({ appConfig, msalConfig, intuneConfig, powerConfig, schemaMap, tamaguiConfig, // override with app's tamagui.config.ts
-defaultTheme, theme, darkTheme, followSystemTheme, renderOAuthWebView, onDisambiguationNeeded, onConnectionConsent, onResourceConsent, onConnectionConsentDeclined, appName, logger: loggerProp, showSessionDetailsOnLongPress, showSessionDetailsOnSwipe, appInsightsConfig, offlineProfile, children, }: PowerAppsProviderProps): React.JSX.Element;
+export declare function PowerAppsProvider({ ...props }: PowerAppsProviderProps): React.JSX.Element;
 export {};
 //# sourceMappingURL=PowerAppsProvider.d.ts.map

package/lib/typescript/module/target/DefaultPowerAppsExperience.d.ts

@@ -0,0 +1,6 @@
+import React from 'react';
+import type { PropsWithChildren } from 'react';
+export declare function DefaultPowerAppsExperience({ appDisplayName, children, }: PropsWithChildren<{
+    appDisplayName: string;
+}>): React.JSX.Element;
+//# sourceMappingURL=DefaultPowerAppsExperience.d.ts.map

package/lib/typescript/module/target/PowerAppsExperience.d.ts

@@ -0,0 +1,61 @@
+import React from 'react';
+export interface PowerAppsEnvironmentSummary {
+    id: string;
+    label: string;
+}
+export interface PowerAppsExperienceError {
+    code: string;
+    message: string;
+    retryable: boolean;
+}
+export type PowerAppsExperience = {
+    status: 'preparing';
+} | {
+    status: 'signIn';
+    error?: string;
+    signIn: () => Promise<void>;
+    goBack?: () => void;
+} | {
+    status: 'discovering';
+} | {
+    status: 'selectEnvironment';
+    environments: readonly PowerAppsEnvironmentSummary[];
+    selectEnvironment: (environmentId: string) => void;
+    signOut: () => Promise<void>;
+} | {
+    status: 'connecting';
+    environment: PowerAppsEnvironmentSummary;
+} | {
+    status: 'resolvingApp';
+    environment: PowerAppsEnvironmentSummary;
+} | {
+    status: 'empty';
+    retry: () => void;
+    signOut: () => Promise<void>;
+} | {
+    status: 'error';
+    error: PowerAppsExperienceError;
+    retry?: () => void;
+    goBack?: () => void;
+    signOut?: () => Promise<void>;
+} | {
+    status: 'ready';
+    environment: PowerAppsEnvironmentSummary;
+};
+export interface PowerAppsExperienceComponentProps {
+    appDisplayName: string;
+    children: React.ReactNode;
+}
+export type PowerAppsExperienceComponent = React.ComponentType<PowerAppsExperienceComponentProps>;
+export declare function usePowerAppsExperience(): PowerAppsExperience;
+export declare function PowerAppsRuntimeGate({ children }: {
+    children: React.ReactNode;
+}): React.JSX.Element | null;
+export declare function PowerAppsExperienceBoundary({ experience, appDisplayName, component: Component, children, fallback, }: {
+    experience: PowerAppsExperience;
+    appDisplayName: string;
+    component?: PowerAppsExperienceComponent;
+    children?: React.ReactNode;
+    fallback: React.ReactNode;
+}): React.JSX.Element;
+//# sourceMappingURL=PowerAppsExperience.d.ts.map

package/lib/typescript/module/target/PowerAppsTargetBootstrap.d.ts

@@ -0,0 +1,15 @@
+import React from 'react';
+import type { MsalAuthConfig } from '@microsoft/power-apps-native-auth';
+import { type PowerAppsTenantPolicy } from '../config/tenantMode.js';
+import { type PowerAppsExperienceComponent } from './PowerAppsExperience.js';
+import type { ResolvedPowerPlatformTarget, TargetAuthSession } from './types.js';
+export interface PowerAppsTargetBootstrapProps {
+    msalConfig: MsalAuthConfig;
+    appDisplayName: string;
+    appName: string;
+    tenantPolicy: PowerAppsTenantPolicy;
+    experienceComponent?: PowerAppsExperienceComponent;
+    children: (target: ResolvedPowerPlatformTarget, authSession: TargetAuthSession) => React.ReactNode;
+}
+export declare function PowerAppsTargetBootstrap({ msalConfig, appDisplayName, appName, tenantPolicy, experienceComponent, children }: PowerAppsTargetBootstrapProps): React.JSX.Element;
+//# sourceMappingURL=PowerAppsTargetBootstrap.d.ts.map

package/lib/typescript/module/target/errors.d.ts

@@ -0,0 +1,13 @@
+export type TargetErrorCode = 'invalid-build-config' | 'catalog-invalid' | 'stored-target-invalid' | 'authentication-cancelled' | 'authentication-failed' | 'tenant-mismatch' | 'environment-unavailable' | 'discovery-failed' | 'dataverse-access-denied' | 'app-metadata-missing' | 'app-metadata-ambiguous' | 'app-metadata-access-denied' | 'app-not-found' | 'app-access-denied' | 'launch-target-mismatch' | 'connection-setup-failed' | 'offline-switch-unsupported' | 'switch-blocked' | 'stale-operation' | 'service-unavailable';
+export type TargetErrorStage = 'configuration' | 'authentication' | 'discovery' | 'app-resolution' | 'launch' | 'connections' | 'switching';
+export declare class TargetRuntimeError extends Error {
+    readonly code: TargetErrorCode;
+    readonly stage: TargetErrorStage;
+    readonly retryable: boolean;
+    readonly userMessage: string;
+    readonly targetId?: string | undefined;
+    readonly name = "TargetRuntimeError";
+    readonly cause?: unknown;
+    constructor(code: TargetErrorCode, stage: TargetErrorStage, retryable: boolean, userMessage: string, targetId?: string | undefined, cause?: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/lib/typescript/module/target/types.d.ts

@@ -0,0 +1,34 @@
+export type PowerPlatformTarget = {
+    id: string;
+    label: string;
+    tenantId: string;
+    environmentId: string;
+    appDisplayName: string;
+    appName: string;
+    region: string;
+    cloud?: 'commercial';
+    dataverseApiUrl: string;
+};
+export type ResolvedPowerPlatformTarget = PowerPlatformTarget & {
+    appId: string;
+    dataverseApiUrl: string;
+};
+export type TargetRuntimeState = 'bootstrapping' | 'selecting' | 'switching' | 'authenticating' | 'resolving' | 'configuring-connections' | 'ready' | 'error';
+export interface TargetTokenBroker {
+    readonly tenantId: string;
+    readonly generation: number;
+    acquireGlobalDiscoveryToken(): Promise<string>;
+    acquireDataverseToken(apiUrl: string): Promise<string>;
+    acquirePowerPlatformToken(region: string): Promise<string>;
+    acquireConnectionUserConsentToken(region: string): Promise<string>;
+    acquireApiHubToken(): Promise<string>;
+}
+export interface TargetAuthSession {
+    readonly clientId: string;
+    readonly accountIdentifier: string;
+    readonly accountTenantId: string;
+    readonly generation: number;
+    readonly tokenBroker: TargetTokenBroker;
+    signOut(): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/power-apps-native-host",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "description": "React Native host integration for @microsoft/power-apps",
   "author": "Microsoft Corporation",
   "license": "SEE LICENSE IN LICENSE",
@@ -47,6 +47,7 @@
     "./app.plugin.js": "./app.plugin.js"
   },
   "bin": {
+    "power-apps-dev": "scripts/dev.js",
     "generate-connector-schemas": "scripts/generate-connector-schemas.js",
     "js-bundle": "scripts/bundle.js",
     "build-codegen-package": "scripts/build-codegen-package.js",
@@ -74,10 +75,14 @@
     "test:offline-compatibility": "bob build && node --test test/OfflineSdkCompatibility.test.js"
   },
   "dependencies": {
+    "@azure/identity": "^4.13.3",
     "@expo/config-plugins": "55.0.11",
+    "@microsoft/dev-tunnels-connections": "^1.3.60",
+    "@microsoft/dev-tunnels-contracts": "^1.3.60",
+    "@microsoft/dev-tunnels-management": "^1.3.60",
     "@microsoft/power-apps-native-assets": "^0.3.0",
-    "@microsoft/power-apps-native-auth": "^0.3.8",
-    "@microsoft/power-apps-native-common": "^0.3.0",
+    "@microsoft/power-apps-native-auth": "^0.4.0",
+    "@microsoft/power-apps-native-common": "^0.3.2",
     "@ster5/global-mutex": "3.3.0",
     "@tamagui/config": "2.4.5",
     "@tamagui/core": "2.4.5",
@@ -85,6 +90,8 @@
     "@tamagui/toast": "2.4.5",
     "@tanstack/react-query": "5.62.0",
     "diff": "9.0.0",
+    "lan-network": "0.2.1",
+    "qrcode-terminal": "^0.12.0",
     "resolve-workspace-root": "2.0.1",
     "write-file-atomic": "7.0.1"
   },
@@ -95,14 +102,14 @@
     "@react-native-community/netinfo": ">=11.0.0",
     "burnt": ">=0.12.2",
     "expo-application": ">=55.0.0 <56",
-    "expo-constants": ">=55.0.0 <56",
     "expo-clipboard": ">=55.0.0 <56",
+    "expo-constants": ">=55.0.0 <56",
     "expo-document-picker": ">=55.0.13 <56",
     "expo-file-system": ">=55.0.19 <56",
     "expo-image-picker": ">=55.0.20 <56",
     "expo-linking": ">=55.0.14 <56",
-    "expo-sharing": ">=55.0.18 <56",
     "expo-secure-store": ">=55.0.0 <56",
+    "expo-sharing": ">=55.0.18 <56",
     "expo-web-browser": ">=55.0.14 <56",
     "react": ">=19.2.0 <20",
     "react-dom": ">=19.2.0 <19.3.0",

package/scripts/build-codegen-package.js

@@ -23,10 +23,12 @@
  * under the neutral name `powerapps-customer-assets/`, which the native module
  * reads at runtime.
  *
- * manifest.json shape (schemaVersion 1):
+ * manifest.json shape (schemaVersion 2):
  *   {
- *     "schemaVersion": 1,
+ *     "schemaVersion": 2,
  *     "platform": "android" | "ios",
+ *     "tenantMode": "single" | "multi",
+ *     "multiTenantConfig": null | { "appDisplayName": "...", "appName": "...", "tenantPolicy": ... },
  *     "bundle": { "path": "index.android.bundle.hbc" },
  *     "assets": [
  *       { "fileHash": "<md5>", "type": "png", "path": "assets/<md5>.png",
@@ -46,6 +48,10 @@ const path = require('path');
 const fs = require('fs');
 const os = require('os');
 const crypto = require('crypto');
+const {
+  resolveMultiTenantConfig,
+  resolveTenantMode,
+} = require('../lib/commonjs/config/tenantMode.js');
 
 const platform = process.argv[2];
 if (platform !== 'android' && platform !== 'ios') {
@@ -104,6 +110,29 @@ function sha256File(filePath) {
     .digest('hex');
 }
 
+function canonicalizeJson(value) {
+  if (Array.isArray(value)) return value.map(canonicalizeJson);
+  if (value && typeof value === 'object') {
+    return Object.fromEntries(
+      Object.keys(value).sort().map((key) => [key, canonicalizeJson(value[key])]),
+    );
+  }
+  return value;
+}
+
+function resolveBuildContract() {
+  const appConfigPath = path.join(projectRoot, 'app.json');
+  if (!fs.existsSync(appConfigPath)) throw new Error('app.json not found');
+  const appConfig = JSON.parse(fs.readFileSync(appConfigPath, 'utf8'));
+  const tenantMode = resolveTenantMode(appConfig);
+  return {
+    tenantMode,
+    multiTenantConfig: tenantMode === 'multi'
+      ? canonicalizeJson(resolveMultiTenantConfig(appConfig))
+      : null,
+  };
+}
+
 function isHermesBytecode(filePath) {
   const fd = fs.openSync(filePath, 'r');
   try {
@@ -194,9 +223,11 @@ function buildAssetPackage(exportDir, distDir, bundlePath) {
   const assetsOutDir = path.join(distDir, ASSET_DIR_NAME, 'assets');
   const manifestPath = path.join(distDir, ASSET_DIR_NAME, 'manifest.json');
 
+  const buildContract = resolveBuildContract();
   const manifest = {
-    schemaVersion: 1,
+    schemaVersion: 2,
     platform,
+    ...buildContract,
     // BIN-3: sha256 pins every artifact the wrap pipeline injects. The wrap
     // recomputes these before use, so a truncated or swapped blob fails the
     // build instead of shipping inside a signed app.