@objectstack/cloud-connection 9.3.0

package/dist/index.d.cts

@@ -0,0 +1,1694 @@
+import { Plugin as Plugin$1, PluginContext as PluginContext$1 } from '@objectstack/core';
+import * as _objectstack_spec_data from '@objectstack/spec/data';
+import { Page } from '@objectstack/spec/ui';
+
+/**
+ * Shared marketplace / cloud control-plane defaults.
+ *
+ * Centralised so every plugin + the CLI auto-inject path agree on
+ * "what cloud URL do we mean when the user didn't set OS_CLOUD_URL?".
+ * Until we have a competing public hosted cloud, this points at the
+ * ObjectStack-operated control plane so a vanilla `objectstack dev` can
+ * browse the marketplace out of the box.
+ */
+declare const DEFAULT_CLOUD_URL = "https://cloud.objectos.ai";
+/**
+ * Resolve the effective control-plane URL from an explicit constructor
+ * value, the OS_CLOUD_URL env var, or the default. Returns an empty
+ * string when the caller explicitly disabled cloud with
+ * `OS_CLOUD_URL=off` / `local` — callers should treat that as
+ * "marketplace unavailable on this runtime".
+ */
+declare function resolveCloudUrl(explicit?: string | null): string;
+
+/**
+ * Marketplace public R2 base URL — when set, points at a Cloudflare R2
+ * bucket (custom domain or `pub-*.r2.dev`) that serves pre-rendered
+ * marketplace browse + install JSON snapshots. The snapshots are
+ * written by ObjectStack Cloud (`packages/service-cloud/src/marketplace-snapshot.ts`).
+ *
+ * Architecture: cloud writes, tenants read directly from R2 → CDN.
+ * Marketplace browse + install never touch the cloud control plane,
+ * so Cloud cold-start (~12s) is bypassed entirely and the read path
+ * scales to CF's edge capacity for free.
+ *
+ * Default: when OS_MARKETPLACE_PUBLIC_BASE_URL is unset we skip the
+ * public fast-path and fall back to the legacy cloud proxy. Once the
+ * R2 bucket public domain is wired up in operations, set
+ * `OS_MARKETPLACE_PUBLIC_BASE_URL=https://marketplace.objectos.ai`
+ * (or your own custom domain) to enable. Set to "off" / "none" to
+ * explicitly disable even if a default is configured.
+ *
+ * Path layout under the base URL (matches the snapshot writer):
+ *   <base>/packages.json
+ *   <base>/packages/{id}.json
+ *   <base>/packages/{id}/versions/{versionId}/manifest.json
+ *   <base>/packages/{id}/versions/latest/manifest.json
+ *
+ * Each JSON file is already in the same `{ success: true, data: ... }`
+ * shape as the corresponding cloud API endpoint, so callers can
+ * substitute one for the other transparently.
+ */
+/**
+ * Resolve the effective public marketplace base URL. Returns an empty
+ * string when the public fast-path is disabled — callers should fall
+ * back to fetching via the cloud control plane.
+ */
+declare function resolveMarketplacePublicBaseUrl(explicit?: string | null): string;
+/**
+ * Map an incoming `/api/v1/marketplace/...` API path to a public R2
+ * object key (relative — caller prepends the base URL).
+ *
+ * Returns `null` when the path is not snapshot-backed. Today three
+ * paths are covered (list, detail, manifest); anything else (search
+ * with non-trivial filters, install actions, etc.) routes via cloud.
+ *
+ * Query strings are NOT included in the returned key — R2 is static.
+ * Callers that need filtering must fetch the full snapshot and filter
+ * client-side.
+ */
+declare function publicMarketplaceKeyForApiPath(pathname: string): string | null;
+
+/**
+ * MarketplaceProxyPlugin
+ *
+ * Forwards `GET /api/v1/marketplace/*` from a tenant ObjectOS runtime to
+ * the configured ObjectStack Cloud control-plane URL. The cloud endpoint
+ * is unauthenticated and only exposes packages whose owner has opted in
+ * to the public catalog (`sys_package.marketplace_listed = true`) — so the
+ * proxy passes through without any credentials.
+ *
+ * Why proxy instead of direct browser → cloud:
+ *   - The Console SPA stays on the tenant origin, so no CORS configuration
+ *     is required on the cloud side.
+ *   - Local-dev `os serve` works regardless of whether the developer's
+ *     browser has cookies for cloud.objectos.ai.
+ *   - Adds a single, easily auditable network seam between tenant and
+ *     control plane.
+ *
+ * Install is NOT proxied here. Installing a package mutates control-plane
+ * state and requires a cloud session + active organization context — the
+ * Console SPA performs install by opening the cloud's install dialog in a
+ * new tab so the user authenticates against cloud directly. A future
+ * iteration may introduce a delegated install token; until then, browse
+ * here and install on cloud.
+ */
+
+interface MarketplaceProxyPluginConfig {
+    /**
+     * Control-plane base URL (e.g. https://cloud.objectos.ai). When the
+     * caller passes nothing AND the runtime has no OS_CLOUD_URL set, the
+     * plugin falls back to the public ObjectStack-operated cloud so that
+     * `objectstack dev` can browse the marketplace out of the box. Set
+     * OS_CLOUD_URL=off (or `local`) to opt out — the plugin then mounts
+     * a stub that responds 503 and the SPA renders an empty-state
+     * explaining marketplace is unavailable in this runtime.
+     */
+    controlPlaneUrl?: string;
+    /**
+     * Disable the in-memory response cache (testing / debugging).
+     * Defaults to the value of `OS_MARKETPLACE_CACHE` (anything in
+     * {"off","false","0","no"} disables).
+     */
+    cacheDisabled?: boolean;
+    /**
+     * Override the LRU upper bound. Defaults to 200 entries.
+     */
+    cacheMaxEntries?: number;
+    /**
+     * Public R2 base URL for marketplace snapshots. When set, GETs for
+     * snapshot-backed paths (`/packages`, `/packages/:id`,
+     * `/packages/:id/versions/:vid/manifest`) are fetched directly from
+     * R2 (CF edge) — bypassing the cloud control plane entirely.
+     * Defaults to the value of OS_MARKETPLACE_PUBLIC_BASE_URL. Empty
+     * string disables the public fast-path (legacy cloud-proxy only).
+     */
+    publicMarketplaceBaseUrl?: string;
+}
+declare class MarketplaceProxyPlugin implements Plugin$1 {
+    readonly name = "com.objectstack.runtime.marketplace-proxy";
+    readonly version = "1.1.0";
+    private readonly cloudUrl;
+    private readonly publicBaseUrl;
+    private readonly cache;
+    constructor(config?: MarketplaceProxyPluginConfig);
+    init: (_ctx: PluginContext$1) => Promise<void>;
+    start: (ctx: PluginContext$1) => Promise<void>;
+}
+
+/**
+ * MarketplaceInstallLocalPlugin
+ *
+ * Installs marketplace packages into THIS runtime's kernel as opposed to a
+ * remote cloud environment. Conceptually different from cloud install in
+ * three important ways:
+ *
+ *   1. Single target — the local kernel is the only install target; there
+ *      is no `sys_environment` picker.
+ *   2. Manifests are cached on disk — once installed, the package is
+ *      runnable offline. Cloud is only needed during the install action
+ *      itself (to fetch the manifest snapshot).
+ *   3. Coexists with user-authored apps — the local runtime usually has
+ *      its own `objectstack.config.ts` declared apps. Install refuses to
+ *      overwrite a manifest_id that's already registered to avoid silently
+ *      replacing user code.
+ *
+ * Endpoints (mounted by `start()` on the `kernel:ready` hook):
+ *
+ *   POST   /api/v1/marketplace/install-local
+ *          body: { packageId: string, versionId?: string }   (default: "latest")
+ *          → fetches manifest from cloud, caches to disk, registers via
+ *            the kernel's `manifest` service. Returns the installed entry.
+ *
+ *   GET    /api/v1/marketplace/install-local
+ *          → lists currently installed marketplace packages
+ *
+ *   DELETE /api/v1/marketplace/install-local/:manifestId
+ *          → removes the cached manifest. Kernel must be restarted to fully
+ *            unload — `engine.registerApp` is additive only. We document
+ *            this in the response message.
+ *
+ * Persistence layout:
+ *   <cwd>/.objectstack/installed-packages/<safe-manifest-id>.json
+ *   Each file: { packageId, versionId, manifestId, version, manifest, installedAt, installedBy }
+ *
+ * On `kernel:ready`, the plugin scans the directory and re-registers each
+ * cached manifest so installs survive process restarts without further
+ * cloud round-trips.
+ */
+
+interface MarketplaceInstallLocalPluginConfig {
+    /** Cloud control-plane base URL. When unset, falls back to OS_CLOUD_URL
+     *  and then to the public ObjectStack cloud so a fresh `objectstack dev`
+     *  can install from the marketplace without configuration. Set
+     *  OS_CLOUD_URL=off to disable (the install endpoint then returns 503). */
+    controlPlaneUrl?: string;
+    /** Override the on-disk cache directory. Defaults to
+     *  `<cwd>/.objectstack/installed-packages`. */
+    storageDir?: string;
+}
+declare class MarketplaceInstallLocalPlugin implements Plugin$1 {
+    readonly name = "com.objectstack.runtime.marketplace-install-local";
+    readonly version = "1.0.0";
+    private readonly cloudUrl;
+    private readonly ledger;
+    private readonly storageDir;
+    private readonly credentials;
+    constructor(config?: MarketplaceInstallLocalPluginConfig);
+    init: (_ctx: PluginContext$1) => Promise<void>;
+    start: (ctx: PluginContext$1) => Promise<void>;
+    /**
+     * Re-register every cached manifest with the kernel's manifest service.
+     * Safe to call on a kernel that already has the same manifest_id (the
+     * underlying ObjectQL registry overwrites by id, but we still warn so
+     * a developer can spot the dev-time clash between their config.ts and
+     * a marketplace package).
+     */
+    private rehydrate;
+    private handleInstall;
+    private handleList;
+    private handleUninstall;
+    /**
+     * Detect whether `manifestId` is already known to the kernel and classify
+     * the source so we can refuse vs upgrade gracefully.
+     *
+     *   'none'         — fresh install
+     *   'marketplace'  — previously installed by this plugin (allow upgrade)
+     *   'user-code'    — defined by AppPlugin from objectstack.config.ts
+     *                    (refuse to avoid silently overwriting authored code)
+     */
+    private findConflict;
+    /**
+     * Pull a userId out of the request's better-auth session, if any.
+     * Returns null when there is no signed-in user. v1 does not check
+     * admin role — UI gating + the auth requirement is sufficient for
+     * dev / single-tenant runtimes. Stricter checks can be layered on
+     * via a middleware in cloud-hosted multi-tenant deployments.
+     */
+    /**
+     * POST /api/v1/marketplace/install-local/:manifestId/reseed-sample-data
+     *
+     * Re-runs SeedLoaderService against the cached manifest's `data` arrays.
+     * Idempotent (upsert by id). Useful when:
+     *   • The user installed an app and skipped sample data
+     *   • A purge was undone
+     *   • The user wants a clean baseline back after editing demo rows
+     *
+     * Multi-tenant: requires an active organization on the session (same
+     * rule as install seed path).
+     */
+    private handleReseed;
+    /**
+     * POST /api/v1/marketplace/install-local/:manifestId/purge-sample-data
+     *
+     * Deletes every record whose id is declared in the cached manifest's
+     * seed datasets. Uses the `driver` service directly to bypass ACL /
+     * lifecycle hooks (same pattern as cloud purge). User-created records
+     * are never touched — only ids declared in the package's bundled
+     * datasets are removed. Already-deleted rows count as `skipped`.
+     */
+    private handlePurge;
+    /**
+     * Replicate the start-time side-effects that AppPlugin runs for
+     * statically-declared apps but the `manifest` service does NOT:
+     *
+     *   1. Load `manifest.translations` (array of `Record<locale, data>`)
+     *      into the i18n service — auto-creating an in-memory fallback if
+     *      none is registered, matching AppPlugin's behaviour.
+     *
+     *   2. Merge `manifest.data` (an array of seed datasets) into the
+     *      kernel's `seed-datasets` service so SecurityPlugin's per-org
+     *      replay middleware picks them up on every future
+     *      sys_organization insert.
+     *
+     *   3. When `seedNow=true`, also run the seed immediately so the user
+     *      sees demo data without having to create a new org:
+     *        • single-tenant: run SeedLoaderService inline (mirrors
+     *          AppPlugin single-tenant branch)
+     *        • multi-tenant: invoke `seed-replayer` for the caller's
+     *          active org (resolved from the request session)
+     *
+     * Errors are logged but never thrown — install succeeds even if
+     * post-register side-effects partially fail (the manifest itself is
+     * already registered + cached). Returns a small summary for the
+     * response envelope.
+     */
+    private applySideEffects;
+    /**
+     * Best-effort active-org resolution. Reads the better-auth session
+     * (same path as requireAuthenticatedUser) and returns
+     * `session.activeOrganizationId`, falling back to the user's first
+     * org membership.
+     */
+    private resolveActiveOrgId;
+    private requireAuthenticatedUser;
+    private readAll;
+}
+
+/** One installed-package entry — desired state + provenance. */
+interface InstalledManifestEntry {
+    packageId: string;
+    versionId: string;
+    manifestId: string;
+    version: string;
+    manifest: any;
+    installedAt: string;
+    installedBy: string | null;
+    /** Whether the bundled seed datasets have been loaded into the kernel
+     *  database. True after install (seedNow=true) or an explicit reseed;
+     *  false after a purge. Persisted so the UI can show "Add" vs "Re-seed". */
+    withSampleData?: boolean;
+}
+/** Default ledger location, relative to the runtime's working directory. */
+declare const DEFAULT_INSTALLED_PACKAGES_DIR = ".objectstack/installed-packages";
+declare class LocalManifestSource {
+    /** Resolved ledger directory. */
+    readonly dir: string;
+    constructor(storageDir?: string);
+    /** Every valid entry in the ledger (corrupt files are skipped). */
+    list(): InstalledManifestEntry[];
+    /** Read one entry; null when absent or unreadable. */
+    read(manifestId: string): InstalledManifestEntry | null;
+    /** Whether the ledger holds an entry for this manifest id. */
+    has(manifestId: string): boolean;
+    /** Create or replace an entry (upsert by manifestId). */
+    write(entry: InstalledManifestEntry): void;
+    /** Remove an entry. Returns false when it was not present. */
+    remove(manifestId: string): boolean;
+    private fileFor;
+}
+
+/**
+ * CloudConnectionPlugin — the runtime-side client surface for a cloud
+ * control plane (ADR-0008 Phase 1).
+ *
+ * Mounts the same-origin `/api/v1/cloud-connection/*` routes the Console
+ * marketplace depends on:
+ *
+ *   GET  /api/v1/cloud-connection/status        — is this env bound to a cloud account?
+ *   POST /api/v1/cloud-connection/bind/start    — begin an RFC 8628 device-code bind
+ *   POST /api/v1/cloud-connection/bind/poll     — poll device token + persist the binding
+ *   POST /api/v1/cloud-connection/install       — install a package via the control plane
+ *   GET  /api/v1/cloud-connection/installation  — single-package installed-state probe
+ *   GET  /api/v1/cloud-connection/installed     — env's full installed list (Installed view)
+ *   GET  /api/v1/cloud-connection/org-packages  — owning org's own catalog ("Your organization")
+ *
+ * History: these routes started as app-level wiring in
+ * `apps/objectos/cloud-runtime-plugins.ts` (two ad-hoc plugins). ADR-0008
+ * Phase 1 consolidates them here as ONE plugin so both deployment shapes —
+ * `apps/objectos` (multi-tenant) and `apps/objectos-ee` (single-environment)
+ * — wire the same canonical implementation. ADR-0008 Phase 2 moves this
+ * surface into the open `@objectstack/cloud-connection` package; keep this
+ * file dependency-light (structural Plugin types, no @objectstack/core) so
+ * the move is mechanical.
+ *
+ * ## Environment & session resolution — two modes
+ *
+ * Multi-tenant (default): the request hostname is resolved to an environment
+ * via the host kernel's `env-registry` service, and the caller's session is
+ * validated against that environment's OWN per-env kernel (via
+ * `kernel-manager`) — auth is per-environment (ADR-0006).
+ *
+ * Single-environment (`singleEnvironment: true`, e.g. objectos-ee): there is
+ * no registry/manager; the environment id comes from config
+ * (`environmentId` / `OS_ENVIRONMENT_ID`, typically assigned when the
+ * runtime is bound to a control plane) and sessions are validated against
+ * the host kernel's own `auth` service. Routes degrade gracefully when the
+ * id is not (yet) configured: status reports `bound:false`; the others 404.
+ *
+ * ## Why a same-origin proxy at all
+ *
+ * The SPA cannot call the control plane from a tenant subdomain — that is a
+ * cross-origin, cross-site-cookie request the browser blocks. So the runtime
+ * answers on its own origin, authorizes against the environment's session,
+ * and talks to the control plane server-to-server (env→cloud service
+ * credential today; the device-code-bound `sys_cloud_connection` token for
+ * self-hosted runtimes).
+ */
+interface PluginContext {
+    hook(event: string, handler: (...args: any[]) => any): void;
+    getService<T = any>(name: string): T;
+    logger?: {
+        info?: (msg: string) => void;
+        warn?: (msg: string) => void;
+        error?: (msg: string, err?: unknown) => void;
+    };
+}
+interface Plugin {
+    readonly name: string;
+    readonly version: string;
+    init(ctx: PluginContext): Promise<void>;
+    start(ctx: PluginContext): Promise<void>;
+}
+interface CloudConnectionPluginConfig {
+    /** Control-plane base URL. Default: `OS_CLOUD_URL` (read lazily at kernel:ready). */
+    controlPlaneUrl?: string;
+    /** env→cloud service credential. Default: `OS_CLOUD_API_KEY`. */
+    controlPlaneApiKey?: string;
+    /** OAuth device-flow client id. Default: `OS_CLI_CLIENT_ID` → `objectstack-cli`. */
+    deviceClientId?: string;
+    /**
+     * Fixed environment id (single-environment runtimes). Default:
+     * `OS_ENVIRONMENT_ID`. In multi-tenant mode leave unset — the id is
+     * resolved per-request from the hostname via `env-registry`.
+     */
+    environmentId?: string;
+    /**
+     * Single-environment mode (objectos-ee shipped shape): skip the
+     * env-registry/kernel-manager lookups and validate sessions against the
+     * host kernel's own `auth` service.
+     */
+    singleEnvironment?: boolean;
+    /**
+     * Override the on-disk credential store location. Defaults to
+     * `<cwd>/.objectstack/cloud-connection.json` — where the bind flow
+     * persists the `oscc_…` runtime bearer for self-hosted runtimes.
+     */
+    credentialPath?: string;
+}
+declare class CloudConnectionPlugin implements Plugin {
+    readonly name = "com.objectstack.cloud.connection";
+    readonly version = "0.3.0";
+    private readonly cfg;
+    private readonly store;
+    constructor(config?: CloudConnectionPluginConfig);
+    init: (_ctx: PluginContext) => Promise<void>;
+    start: (ctx: PluginContext) => Promise<void>;
+}
+/** Factory mirroring the package's other plugins' construction style. */
+declare function createCloudConnectionPlugin(config?: CloudConnectionPluginConfig): CloudConnectionPlugin;
+
+/**
+ * RuntimeConfigPlugin
+ *
+ * Serves `GET /api/v1/runtime/config` (and the legacy alias
+ * `GET /api/v1/studio/runtime-config`) so the Console / Studio SPA can learn
+ * the upstream cloud URL and capability flags **at boot time**, instead of
+ * sniffing `window.location.hostname` or reading Vite-time env vars.
+ *
+ * Response shape:
+ *
+ *   {
+ *     cloudUrl: string,            // base URL of the upstream cloud ('' = same origin)
+ *     singleEnvironment: boolean,
+ *     defaultOrgId?, defaultEnvironmentId?,   // multi-tenant, per-hostname
+ *     features: { installLocal, marketplace, aiStudio, autoPublishAiBuilds },
+ *     branding: { productName, productShortName }
+ *   }
+ *
+ * ## Policy seam (ADR-0008 / open-mechanism-closed-intelligence)
+ *
+ * Which features a *plan* unlocks is distribution policy, not mechanism — it
+ * intentionally does NOT live in this open package. Hosts inject it via
+ * {@link RuntimeConfigPluginConfig.resolvePlanFeatures}: the cloud
+ * distribution passes its plan-entitlement rules there; a self-hosted or
+ * vanilla deployment omits it and gets static config-driven flags.
+ */
+
+/** Capability flags a host's plan policy can derive per request. */
+interface RuntimeConfigPlanFeatures {
+    /** Whether the SPA should surface AI-driven metadata authoring. */
+    aiStudio?: boolean;
+    /** Whether AI-built apps auto-publish in the author's own environment. */
+    autoPublishAiBuilds?: boolean;
+}
+interface RuntimeConfigPluginConfig {
+    /**
+     * Upstream cloud base URL. Falls back to `resolveCloudUrl()` (reads
+     * `OS_CLOUD_URL` / built-in default) when omitted. Pass an explicit
+     * empty string to declare "this runtime IS the cloud" (same-origin
+     * for marketplace + install).
+     */
+    controlPlaneUrl?: string;
+    /** Override the `features.installLocal` flag. Default: false. */
+    installLocal?: boolean;
+    /**
+     * Override the `features.aiStudio` flag — whether the SPA should surface
+     * AI-driven metadata authoring ("online development") affordances.
+     * Default: true (the actual authoring capability is still gated
+     * server-side; set false to force-hide the authoring UI).
+     */
+    aiStudio?: boolean;
+    /**
+     * Report this runtime as a single-environment deployment (CLI
+     * `objectstack dev` / `os serve`). Defaults to `false` for
+     * multi-tenant deployments.
+     */
+    singleEnvironment?: boolean;
+    /**
+     * Product name shown in browser title, splash screen, and other
+     * client chrome. Operators can override per-deployment (white-label,
+     * regional rebrands). Falls back to `OS_PRODUCT_NAME` env var, then
+     * to the default `'ObjectOS'`.
+     */
+    productName?: string;
+    /** Short product name (PWA shortName, compact spots). Defaults to productName. */
+    productShortName?: string;
+    /**
+     * Plan → feature policy hook. Called with `undefined` for the static
+     * default (no environment resolved / no plan known) and with the
+     * environment's plan string once hostname resolution provides one.
+     * Returned flags override the static config defaults; omitted keys keep
+     * them. When the hook itself is omitted, flags are purely config-driven.
+     */
+    resolvePlanFeatures?: (plan: string | undefined) => RuntimeConfigPlanFeatures;
+}
+declare class RuntimeConfigPlugin implements Plugin$1 {
+    readonly name = "com.objectstack.runtime.runtime-config";
+    readonly version = "1.0.0";
+    private readonly cloudUrl;
+    private readonly installLocal;
+    private readonly aiStudio;
+    private readonly singleEnvironment;
+    private readonly productName;
+    private readonly productShortName;
+    private readonly resolvePlanFeatures?;
+    constructor(config?: RuntimeConfigPluginConfig);
+    init: (_ctx: PluginContext$1) => Promise<void>;
+    start: (ctx: PluginContext$1) => Promise<void>;
+    destroy: () => Promise<void>;
+}
+
+/** Persisted binding credential + context. */
+interface StoredConnectionCredential {
+    /** The `oscc_…` runtime bearer returned ONCE by the bind route. */
+    runtimeToken: string;
+    /**
+     * Cloud-minted durable runtime identity (ADR runtime-identity-binding).
+     * Presented as a claim on re-bind so the registration survives token
+     * rotation. Absent on stores written before v2.
+     */
+    runtimeId?: string;
+    /**
+     * Control-plane environment id — set only when the binding targeted a
+     * cloud-hosted environment. Self-hosted v2 registrations have none.
+     */
+    environmentId?: string;
+    /** Control-plane base URL the binding was made against. */
+    controlPlaneUrl?: string;
+    organizationId?: string;
+    accountEmail?: string;
+    boundAt?: string;
+}
+/** Default store location, relative to the runtime's working directory. */
+declare const DEFAULT_CONNECTION_CREDENTIAL_PATH = ".objectstack/cloud-connection.json";
+declare class ConnectionCredentialStore {
+    /** Resolved file path. */
+    readonly path: string;
+    constructor(path?: string);
+    /**
+     * Read the stored credential; null when absent or unreadable.
+     *
+     * An IDENTITY RESIDUAL — `runtimeToken: ''` with a `runtimeId` — is a
+     * valid record: unbind leaves one behind so a later re-bind to the same
+     * org claims the same registration (ADR runtime-identity-binding §2.1).
+     * Callers already treat the empty token as "no credential".
+     */
+    read(): StoredConnectionCredential | null;
+    /** Persist (replace) the credential. Written 0600 — it is a secret. */
+    write(credential: StoredConnectionCredential): void;
+    /** Remove the credential (unbind). Returns false when nothing was stored. */
+    clear(): boolean;
+}
+
+/** Setup page hosting the binding panel widget. */
+declare const CloudConnectionSettingsPage: Page;
+/** Manifest bundle the plugin registers so the page + nav reach the kernel. */
+declare const CLOUD_CONNECTION_UI_BUNDLE: {
+    id: string;
+    namespace: string;
+    version: string;
+    type: string;
+    scope: string;
+    name: string;
+    description: string;
+    pages: {
+        name: string;
+        label: string;
+        type: "app" | "record" | "dashboard" | "grid" | "form" | "utility" | "kanban" | "gallery" | "calendar" | "timeline" | "list" | "home" | "record_detail" | "record_review" | "overview" | "blank";
+        template: string;
+        regions: {
+            name: string;
+            components: {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            }[];
+            width?: "full" | "large" | "small" | "medium" | undefined;
+        }[];
+        isDefault: boolean;
+        kind: "full" | "slotted";
+        description?: string | undefined;
+        icon?: string | undefined;
+        variables?: {
+            name: string;
+            type: "string" | "number" | "boolean" | "object" | "array" | "record_id";
+            defaultValue?: unknown;
+            source?: string | undefined;
+        }[] | undefined;
+        object?: string | undefined;
+        recordReview?: {
+            object: string;
+            actions: {
+                label: string;
+                type: "custom" | "approve" | "reject" | "skip";
+                nextRecord: boolean;
+                field?: string | undefined;
+                value?: string | number | boolean | undefined;
+            }[];
+            navigation: "sequential" | "random" | "filtered";
+            showProgress: boolean;
+            filter?: _objectstack_spec_data.FilterCondition | undefined;
+            sort?: {
+                field: string;
+                order: "asc" | "desc";
+            }[] | undefined;
+            displayFields?: string[] | undefined;
+        } | undefined;
+        blankLayout?: {
+            columns: number;
+            rowHeight: number;
+            gap: number;
+            items: {
+                componentId: string;
+                x: number;
+                y: number;
+                width: number;
+                height: number;
+            }[];
+        } | undefined;
+        assignedProfiles?: string[] | undefined;
+        interfaceConfig?: {
+            source?: string | undefined;
+            sourceView?: string | undefined;
+            levels?: number | undefined;
+            filterBy?: {
+                field: string;
+                operator: string;
+                value?: string | number | boolean | (string | number)[] | null | undefined;
+            }[] | undefined;
+            appearance?: {
+                showDescription: boolean;
+                allowedVisualizations?: ("grid" | "kanban" | "gallery" | "calendar" | "timeline" | "map" | "gantt" | "chart")[] | undefined;
+            } | undefined;
+            userFilters?: {
+                element: "tabs" | "toggle" | "dropdown";
+                fields?: {
+                    field: string;
+                    label?: string | undefined;
+                    type?: "boolean" | "text" | "select" | "multi-select" | "date-range" | undefined;
+                    options?: {
+                        value: string | number | boolean;
+                        label: string;
+                        color?: string | undefined;
+                    }[] | undefined;
+                    showCount?: boolean | undefined;
+                    defaultValues?: (string | number | boolean)[] | undefined;
+                }[] | undefined;
+                tabs?: {
+                    name: string;
+                    pinned: boolean;
+                    isDefault: boolean;
+                    visible: boolean;
+                    label?: string | undefined;
+                    icon?: string | undefined;
+                    view?: string | undefined;
+                    filter?: {
+                        field: string;
+                        operator: string;
+                        value?: string | number | boolean | (string | number)[] | null | undefined;
+                    }[] | undefined;
+                    order?: number | undefined;
+                }[] | undefined;
+                showAllRecords?: boolean | undefined;
+            } | undefined;
+            userActions?: {
+                sort: boolean;
+                search: boolean;
+                filter: boolean;
+                rowHeight: boolean;
+                addRecordForm: boolean;
+                buttons?: string[] | undefined;
+            } | undefined;
+            addRecord?: {
+                enabled: boolean;
+                position: "top" | "bottom" | "both";
+                mode: "inline" | "form" | "modal";
+                formView?: string | undefined;
+            } | undefined;
+            showRecordCount?: boolean | undefined;
+            allowPrinting?: boolean | undefined;
+        } | undefined;
+        aria?: {
+            ariaLabel?: string | undefined;
+            ariaDescribedBy?: string | undefined;
+            role?: string | undefined;
+        } | undefined;
+        slots?: {
+            header?: {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            } | {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            }[] | undefined;
+            actions?: {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            } | {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            }[] | undefined;
+            alerts?: {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            } | {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            }[] | undefined;
+            highlights?: {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            } | {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            }[] | undefined;
+            details?: {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            } | {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            }[] | undefined;
+            tabs?: {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            } | {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            }[] | undefined;
+            discussion?: {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            } | {
+                type: string;
+                properties: Record<string, unknown>;
+                id?: string | undefined;
+                label?: string | undefined;
+                events?: Record<string, string> | undefined;
+                style?: Record<string, string> | undefined;
+                className?: string | undefined;
+                visibility?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | {
+                    dialect: "template" | "cel" | "js" | "cron";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+                dataSource?: {
+                    object: string;
+                    view?: string | undefined;
+                    filter?: _objectstack_spec_data.FilterCondition | undefined;
+                    sort?: {
+                        field: string;
+                        order: "asc" | "desc";
+                    }[] | undefined;
+                    limit?: number | undefined;
+                } | undefined;
+                responsive?: {
+                    breakpoint?: "md" | "xs" | "sm" | "lg" | "xl" | "2xl" | undefined;
+                    hiddenOn?: ("md" | "xs" | "sm" | "lg" | "xl" | "2xl")[] | undefined;
+                    columns?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                    order?: {
+                        xs?: number | undefined;
+                        sm?: number | undefined;
+                        md?: number | undefined;
+                        lg?: number | undefined;
+                        xl?: number | undefined;
+                        '2xl'?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                aria?: {
+                    ariaLabel?: string | undefined;
+                    ariaDescribedBy?: string | undefined;
+                    role?: string | undefined;
+                } | undefined;
+            }[] | undefined;
+        } | undefined;
+    }[];
+    navigationContributions: {
+        app: string;
+        group: string;
+        priority: number;
+        items: {
+            id: string;
+            type: string;
+            pageName: string;
+            label: string;
+            icon: string;
+        }[];
+    }[];
+};
+
+/**
+ * Marketplace — plugin-owned Setup navigation (cloud ADR-0009: cloud
+ * functionality ships as plugins carrying their FULL UI surface).
+ *
+ * Ownership moved here from `@objectstack/platform-objects`'
+ * setup-nav.contributions.ts (ADR-0029 K2's standing direction): the nav
+ * entry now lives and dies with the capability —
+ *
+ *   - no MarketplaceProxyPlugin mounted (`OS_CLOUD_URL=off`) → no
+ *     "Browse Marketplace" entry → no dead page.
+ *   - no MarketplaceInstallLocalPlugin → no "Installed Apps" entry.
+ *
+ * The URLs still point at the console's existing marketplace routes; the
+ * pages themselves migrate to plugin-carried metadata in later ADR-0009
+ * stages (Installed Apps first).
+ */
+/** "Browse Marketplace" — owned by the browse capability (the proxy). */
+declare const MARKETPLACE_BROWSE_UI_BUNDLE: {
+    id: string;
+    namespace: string;
+    version: string;
+    type: string;
+    scope: string;
+    name: string;
+    description: string;
+    navigationContributions: {
+        app: string;
+        group: string;
+        priority: number;
+        items: {
+            id: string;
+            type: string;
+            label: string;
+            url: string;
+            icon: string;
+        }[];
+    }[];
+};
+declare const MARKETPLACE_INSTALLED_UI_BUNDLE: {
+    id: string;
+    namespace: string;
+    version: string;
+    type: string;
+    scope: string;
+    name: string;
+    description: string;
+    pages: {
+        name: string;
+        label: string;
+        type: "app";
+        template: string;
+        kind: "full";
+        isDefault: boolean;
+        regions: ({
+            name: string;
+            width: "full";
+            components: {
+                type: string;
+                properties: {
+                    title: string;
+                    subtitle: string;
+                    icon: string;
+                };
+            }[];
+        } | {
+            name: string;
+            width: "large";
+            components: {
+                type: string;
+                properties: {};
+            }[];
+        })[];
+    }[];
+    navigationContributions: {
+        app: string;
+        group: string;
+        priority: number;
+        items: {
+            id: string;
+            type: string;
+            pageName: string;
+            label: string;
+            icon: string;
+        }[];
+    }[];
+};
+
+export { CLOUD_CONNECTION_UI_BUNDLE, CloudConnectionPlugin, type CloudConnectionPluginConfig, CloudConnectionSettingsPage, ConnectionCredentialStore, DEFAULT_CLOUD_URL, DEFAULT_CONNECTION_CREDENTIAL_PATH, DEFAULT_INSTALLED_PACKAGES_DIR, type InstalledManifestEntry, LocalManifestSource, MARKETPLACE_BROWSE_UI_BUNDLE, MARKETPLACE_INSTALLED_UI_BUNDLE, MarketplaceInstallLocalPlugin, type MarketplaceInstallLocalPluginConfig, MarketplaceProxyPlugin, type MarketplaceProxyPluginConfig, type RuntimeConfigPlanFeatures, RuntimeConfigPlugin, type RuntimeConfigPluginConfig, type StoredConnectionCredential, createCloudConnectionPlugin, publicMarketplaceKeyForApiPath, resolveCloudUrl, resolveMarketplacePublicBaseUrl };