@sanity/sdk 3.3.0-rc.0 → 3.3.0

package/dist/{authStore-BGoEGxOq.d.ts → applications-pRS8tuC2.d.ts}

@@ -386,309 +386,136 @@ type AccessResourceType = 'organization' | 'project' | 'media-library' | 'canvas
  */
 declare const checkPermissions: Fetcher<[resourceType: AccessResourceType, resourceId: string, permissions: string[]], Record<string, boolean>>;
 /**
- * A response field that the API embeds only when its `include` token was
- * requested. Given the full set of tokens `All`, the token `Key` this field
- * maps to, and the tokens actually `Requested`, it resolves to:
- *
- * - `unknown` (field absent) when nothing — or nothing matching `Key` — was requested
- * - `Field` (present, as declared) when a literal request list contains `Key`
- * - `Partial<Field>` (optional) when `Requested` is the wide `All` union, i.e.
- *   an `include` array whose members aren't known at the type level
- *
- * Absent arms return `unknown` so they vanish under intersection. Mirrors the
- * `boolean extends Flag` trick the organization/project types use, but for an
- * include-token union rather than a boolean flag.
+ * Represents the various states the authentication type can be in.
  *
- * @internal
+ * @public
  */
-type Included<All extends string, Key extends All, Requested extends All, Field> = [All] extends [Requested] ? Partial<Field> : [Key] extends [Requested] ? Field : unknown;
+declare enum AuthStateType {
+  LOGGED_IN = "logged-in",
+  LOGGING_IN = "logging-in",
+  ERROR = "error",
+  LOGGED_OUT = "logged-out"
+}
 /**
- * Whether the requested include tokens intersect a given set — used to decide
- * whether a parent field (e.g. an application's `activeDeployment`) is present,
- * when requesting any of several tokens forces it in.
+ * OAuth tokens issued by Sanity's OAuth token endpoint.
  *
- * @internal
+ * @public
  */
-type IncludesAny<Requested extends string, Set extends string> = [Requested & Set] extends [never] ? false : true;
+interface OAuthTokens {
+  accessToken: string;
+  tokenType: 'bearer';
+  expiresIn: number;
+  expiresAt: Date;
+  refreshToken?: string;
+}
 /**
- * Related data the Applications API can embed in a response. `interfaces`,
- * `workspaces` and `access` are children of the active deployment and are
- * embedded under {@link Application.activeDeployment}; `config.studio` and
- * `config.mfManifest` are embedded under {@link Application.config}.
+ * Represents the various states the authentication can be in.
  *
- * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type ApplicationInclude = 'interfaces' | 'workspaces' | 'access' | 'config.studio' | 'config.mfManifest' | 'activeDeployment';
-type ApplicationInterfaceBase = {
-  id: string;
-  name: string;
-  title: string;
-  version: string;
-  /** Module federation module ID; resolved from the host mf-manifest at runtime */
-  moduleId: string;
-};
+type AuthState = LoggedInAuthState | LoggedOutAuthState | LoggingInAuthState | ErrorAuthState;
 /**
- * Placement metadata for application and panel interfaces.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
+ * Logged-in state from the auth state.
  * @public
  */
-type ApplicationInterfacePlacementMetadata = {
-  dock?: {
-    group?: string;
-    order?: number;
-  };
+type LoggedInAuthState = {
+  type: AuthStateType.LOGGED_IN;
+  token: string;
+  currentUser: CurrentUser | null;
+  lastTokenRefresh?: number;
 };
 /**
- * An interface exposed by a deployment, embedded when `interfaces` is included.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
+ * Logged-out state from the auth state.
  * @public
  */
-type ApplicationInterface = ApplicationInterfaceBase & ({
-  type: 'app';
-  metadata: ApplicationInterfacePlacementMetadata | null;
-} | {
-  type: 'panel';
-  metadata: ApplicationInterfacePlacementMetadata | null;
-} | {
-  type: 'asset_source';
-  metadata: null;
-} | {
-  type: 'worker';
-  metadata: null;
-} | {
-  type: 'tile';
-  metadata: {
-    order?: number;
-    size: 'small' | 'large' | 'banner';
-  };
-});
+type LoggedOutAuthState = {
+  type: AuthStateType.LOGGED_OUT;
+  isDestroyingSession: boolean;
+};
 /**
- * A studio workspace of a deployment, embedded when `workspaces` is included.
- * Studio applications only.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
+ * Logging-in state from the auth state.
  * @public
  */
-interface ApplicationWorkspace {
-  id: string;
-  name: string;
-  title: string | null;
-  subtitle: string | null;
-  projectId: string;
-  dataset: string;
-  schemaDescriptorId: string | null;
-  basePath: string | null;
-  /** Sanitized SVG icon markup */
-  icon: string | null;
-}
+type LoggingInAuthState = {
+  type: AuthStateType.LOGGING_IN;
+  isExchangingToken: boolean;
+};
 /**
- * A resource an application accesses, embedded when `access` is included.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
+ * Error state from the auth state.
  * @public
  */
-interface ApplicationAccess {
-  id: string;
-  resourceType: 'datasets' | 'canvases' | 'dashboards' | 'media-libraries';
-  resourceId: string;
-}
+type ErrorAuthState = {
+  type: AuthStateType.ERROR;
+  error: unknown;
+};
 /**
- * Studio configuration, embedded under `config` when `config.studio` is included.
+ * Represents the various states the authentication can be in.
  *
- * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-interface ApplicationStudioConfig {
-  projectId: string;
-  /** Release channel (`next`, `stable`, `latest`) or a pinned semver; null if unset */
-  autoUpdatingVersion: string | null;
+interface DashboardContext {
+  mode?: string;
+  env?: string;
+  orgId?: string;
 }
 /**
- * The active deployment as embedded under {@link Application.activeDeployment}.
- * Its `interfaces`, `workspaces` and `access` children are each present only
- * when the matching {@link ApplicationInclude} token was requested. `workspaces`
- * is omitted (not `null`) for non-studio applications even when requested.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
- * @public
+ * The method of authentication used.
+ * @internal
  */
-type ApplicationDeployment<Include extends ApplicationInclude = never> = {
-  id: string;
-  applicationId: string;
-  size: number | null;
-  version: string | null;
-  isAutoUpdating: boolean | null;
-  isActiveDeployment: boolean;
-  deployedBy: string | null;
-  createdAt: string;
-  updatedAt: string;
-} & Included<ApplicationInclude, 'interfaces', Include, {
-  interfaces: ApplicationInterface[];
-}> & Included<ApplicationInclude, 'workspaces', Include, {
-  workspaces?: ApplicationWorkspace[];
-}> & Included<ApplicationInclude, 'access', Include, {
-  access: ApplicationAccess[];
-}>;
+type AuthMethodOptions = 'localstorage' | 'cookie' | undefined;
 /**
- * The always-present fields of an org-owned application returned by the
- * Applications API (`/applications`), before any {@link ApplicationInclude}.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-interface ApplicationBase {
-  id: string;
-  type: 'studio' | 'coreApp';
-  title: string;
-  /** Stable, immutable identity, distinct from the mutable `slug` address. */
-  name: string;
-  /** Qualified, globally-unique handle: `sanity/<name>` for singletons, `<organizationId>/<name>` otherwise. */
-  reference: string;
-  icon: string | null;
-  isSingleton: boolean;
-  visibility: 'default' | 'unlisted' | 'disabled';
-  slug: string | null;
-  externalUrl: string | null;
-  organizationId: string;
-  createdAt: string;
-  updatedAt: string;
+interface AuthStoreState {
+  authState: AuthState;
+  providers?: AuthProvider[];
+  options: {
+    initialLocationHref: string;
+    clientFactory: (config: ClientConfig) => SanityClient;
+    customProviders: AuthConfig['providers'];
+    storageKey: string;
+    storageArea: Storage | undefined;
+    apiHost: string | undefined;
+    loginUrl: string;
+    callbackUrl: string | undefined;
+    providedToken: string | undefined;
+    authMethod: AuthMethodOptions;
+    oauth: AuthConfig['oauth'];
+  };
+  dashboardContext?: DashboardContext;
+  oauthTokens?: OAuthTokens;
 }
-type DeploymentToken = 'activeDeployment' | 'interfaces' | 'workspaces' | 'access';
-type ConfigToken = 'config.studio' | 'config.mfManifest';
-type ApplicationConfig<Include extends ApplicationInclude> = Included<ApplicationInclude, 'config.studio', Include, {
-  studio?: ApplicationStudioConfig;
-}> & Included<ApplicationInclude, 'config.mfManifest', Include, {
-  mfManifest?: unknown;
-}>;
-type ApplicationConfigShape<Include extends ApplicationInclude> = [ApplicationInclude] extends [Include] ? {
-  config?: ApplicationConfig<Include>;
-} : IncludesAny<Include, ConfigToken> extends true ? {
-  config: ApplicationConfig<Include>;
-} : unknown;
-type ApplicationDeploymentShape<Include extends ApplicationInclude> = [ApplicationInclude] extends [Include] ? {
-  activeDeployment?: ApplicationDeployment<Include> | null;
-} : IncludesAny<Include, DeploymentToken> extends true ? {
-  activeDeployment: ApplicationDeployment<Include> | null;
-} : unknown;
 /**
- * An org-owned application as returned by the Applications API
- * (`/applications`). `config` and `activeDeployment` (with its
- * `interfaces`/`workspaces`/`access` children) are present only when the
- * corresponding {@link ApplicationInclude} tokens were requested.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type Application<Include extends ApplicationInclude = never> = ApplicationBase & ApplicationConfigShape<Include> & ApplicationDeploymentShape<Include>;
+declare const getCurrentUserState: BoundStoreAction<AuthStoreState, [], StateSource<CurrentUser | null>>;
 /**
- * Options for listing an organization's applications.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-interface ApplicationsOptions<Include extends ApplicationInclude = ApplicationInclude> {
-  organizationId: string;
-  /** Filter by application type */
-  type?: string;
-  include?: Include[];
-  /** Page size (1-100, default 50), or `'none'` to disable pagination */
-  limit?: number | 'none';
-  /** Cursor from a previous response's `nextCursor` */
-  cursor?: string;
-}
+declare const getTokenState: BoundStoreAction<AuthStoreState, [], StateSource<string | null>>;
 /**
- * The cursor-paginated envelope returned by `GET /applications`.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-interface ApplicationsResponse<Include extends ApplicationInclude = never> {
-  nextCursor: string | null;
-  data: Application<Include>[];
-}
-/**
- * Fetcher for an organization's applications (`GET /applications`), on the
- * shared fetcher cache.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
- * @internal
- */
-declare const applications: Fetcher<[options: ApplicationsOptions<ApplicationInclude>], ApplicationsResponse<ApplicationInclude>>;
-/**
- * Fetcher for a single application (`GET /applications/:id`), on the shared
- * fetcher cache. No pre-seeding from {@link applications}: its list keys
- * include the organization, which this fetcher's params can't reconstruct.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
- * @internal
- */
-declare const application: Fetcher<[applicationId: string, options?: {
-  include?: ApplicationInclude[];
-} | undefined], Application<ApplicationInclude>>;
-/**
- * Confirmation returned by the API's soft-delete endpoints.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
- * @internal
- */
-interface DeletedResult {
-  deleted: boolean;
-}
-/**
- * Dashboard visibility for an application.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
- * @internal
- */
-type ApplicationVisibility = ApplicationBase['visibility'];
+declare const getLoginUrlState: BoundStoreAction<AuthStoreState, [], StateSource<string>>;
 /**
- * Mutable properties of an application (`PATCH /applications/:id`) — the
- * writable subset of {@link ApplicationBase}, each optional, keyed by id.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
- * @internal
+ * @public
  */
-type UpdateApplicationInput = {
-  applicationId: string;
-} & Partial<Pick<ApplicationBase, 'title' | 'icon' | 'visibility'>>;
+declare const getAuthState: BoundStoreAction<AuthStoreState, [], StateSource<AuthState>>;
 /**
- * Mutation to update an application (`PATCH /applications/:id`). Invalidates the
- * updated application and the list so active entries reconverge on server truth.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
- * @internal
+ * @public
  */
-declare const updateApplication: (instance: SanityInstance, input: UpdateApplicationInput) => Promise<MutationResult<ApplicationBase>>;
+declare const getDashboardOrganizationId: BoundStoreAction<AuthStoreState, [], StateSource<string | undefined>>;
 /**
- * Input for {@link deleteApplication}.
- *
- * @internal
+ * Returns a state source indicating if the SDK is running within a dashboard context.
+ * @public
  */
-interface DeleteApplicationInput {
-  applicationId: string;
-}
+declare const getIsInDashboardState: BoundStoreAction<AuthStoreState, [], StateSource<boolean>>;
 /**
- * Mutation to soft-delete an application (`DELETE /applications/:id`).
- * Invalidates the deleted application and the list.
- *
- * @see https://www.sanity.io/docs/http-reference/applications-api
+ * Action to explicitly set the authentication token.
+ * Used internally by the Comlink token refresh.
  * @internal
  */
-declare const deleteApplication: (instance: SanityInstance, input: DeleteApplicationInput) => Promise<MutationResult<DeletedResult>>;
-/**
- * Represents the various states the authentication type can be in.
- *
- * @public
- */
-declare enum AuthStateType {
-  LOGGED_IN = "logged-in",
-  LOGGING_IN = "logging-in",
-  ERROR = "error",
-  LOGGED_OUT = "logged-out"
-}
+declare const setAuthToken: BoundStoreAction<AuthStoreState, [token: string | null], void>;
 /**
  * Error message returned by the organization verification
  * @public
@@ -704,35 +531,13 @@ interface OrgVerificationResult {
  */
 declare function observeOrganizationVerificationState(instance: SanityInstance, projectIds: string[]): Observable<OrgVerificationResult>;
 /**
- * Handles the auth redirect callback. In OAuth mode this delegates to
- * {@link handleOAuthCallback}; otherwise it exchanges the legacy `sid` for a
- * long-lived token.
- *
  * @public
  */
 declare const handleAuthCallback: BoundStoreAction<AuthStoreState, [locationHref?: string | undefined], Promise<string | false>>;
 /**
- * Logs the current user out. In OAuth mode this revokes the OAuth tokens
- * instead of calling the legacy `/auth/logout` endpoint; revocation is
- * best-effort, so the OAuth path resolves even if the revoke request fails,
- * whereas the legacy path rejects when `/auth/logout` fails. Local state and
- * storage are cleared in both cases.
- *
  * @public
  */
 declare const logout: BoundStoreAction<AuthStoreState, [], Promise<void>>;
-/**
- * OAuth tokens issued by Sanity's OAuth token endpoint.
- *
- * @public
- */
-interface OAuthTokens {
-  accessToken: string;
-  tokenType: 'bearer';
-  expiresIn: number;
-  expiresAt: Date;
-  refreshToken?: string;
-}
 /**
  * Starts the OAuth authorization-code + PKCE flow: generates a `code_verifier`,
  * `code_challenge` and `state`, persists the verifier and state to
@@ -746,14 +551,9 @@ declare const startOAuthAuthorization: BoundStoreAction<AuthStoreState, [], Prom
  * responses, exchanges the authorization `code` for tokens, persists them, and
  * transitions to `LOGGED_IN`.
  *
- * Returns the URL for the caller to `history.replaceState` to when a callback
- * was processed: on success, the same-origin location the user was on when
- * the flow started (if any), otherwise the callback URL cleaned of OAuth
- * params. Returns `false` when there was nothing to handle (no code, or an
- * exchange already in progress). A callback that fails validation while a
- * session is already `LOGGED_IN` (e.g. a remount before the params were
- * stripped) is ignored with a warning and still returns the cleaned URL, so a
- * string result does not imply an exchange ran.
+ * Returns the callback URL cleaned of OAuth params (for the caller to
+ * `history.replaceState`) when a callback was processed, or `false` when there
+ * was nothing to handle (no code, or an exchange already in progress).
  *
  * @public
  */
@@ -2604,6 +2404,31 @@ type SetFavoriteInput = FavoriteDocumentContext & {
  * @internal
  */
 declare const setFavorite: (instance: SanityInstance, input: SetFavoriteInput) => Promise<MutationResult<FavoriteStatusResponse>>;
+/**
+ * A response field that the API embeds only when its `include` token was
+ * requested. Given the full set of tokens `All`, the token `Key` this field
+ * maps to, and the tokens actually `Requested`, it resolves to:
+ *
+ * - `unknown` (field absent) when nothing — or nothing matching `Key` — was requested
+ * - `Field` (present, as declared) when a literal request list contains `Key`
+ * - `Partial<Field>` (optional) when `Requested` is the wide `All` union, i.e.
+ *   an `include` array whose members aren't known at the type level
+ *
+ * Absent arms return `unknown` so they vanish under intersection. Mirrors the
+ * `boolean extends Flag` trick the organization/project types use, but for an
+ * include-token union rather than a boolean flag.
+ *
+ * @internal
+ */
+type Included<All extends string, Key extends All, Requested extends All, Field> = [All] extends [Requested] ? Partial<Field> : [Key] extends [Requested] ? Field : unknown;
+/**
+ * Whether the requested include tokens intersect a given set — used to decide
+ * whether a parent field (e.g. an application's `activeDeployment`) is present,
+ * when requesting any of several tokens forces it in.
+ *
+ * @internal
+ */
+type IncludesAny<Requested extends string, Set extends string> = [Requested & Set] extends [never] ? false : true;
 /**
  * Related data the Installations API can embed in a response. Each token adds
  * a top-level field to the {@link Installation} item.
@@ -2611,7 +2436,7 @@ declare const setFavorite: (instance: SanityInstance, input: SetFavoriteInput) =
  * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type InstallationInclude = 'activeConfig' | 'access' | 'interfaces';
+type InstallationInclude = 'activeConfig' | 'access' | 'interfaces' | 'config.mfManifest';
 /**
  * A resource an installation accesses, embedded when `access` is included.
  *
@@ -2670,7 +2495,9 @@ interface InstallationBase {
  * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type Installation<Include extends InstallationInclude = never> = InstallationBase & Included<InstallationInclude, 'activeConfig', Include, {
+type Installation<Include extends InstallationInclude = never> = InstallationBase & Included<InstallationInclude, 'config.mfManifest', Include, {
+  application: InstallationBase['application'] & ([InstallationInclude] extends [Include] ? Partial<Pick<Application<'config.mfManifest'>, 'config'>> : Pick<Application<'config.mfManifest'>, 'config'>);
+}> & Included<InstallationInclude, 'activeConfig', Include, {
   activeConfig: InstallationActiveConfig | null;
 }> & Included<InstallationInclude, 'access', Include, {
   access: InstallationAccess[];
@@ -3511,123 +3338,283 @@ declare function getCorsErrorProjectId(error: Error): string | null;
  *
  * @public
  */
-declare function isImportError(error: unknown): boolean;
-/**
- * This version is provided by pkg-utils at build time
- * @internal
- */
-declare const CORE_SDK_VERSION: {};
+declare function isImportError(error: unknown): boolean;
+/**
+ * This version is provided by pkg-utils at build time
+ * @internal
+ */
+declare const CORE_SDK_VERSION: {};
+/**
+ * @public
+ */
+type SanityProject$1 = SanityProject;
+/**
+ * Related data the Applications API can embed in a response. `interfaces`,
+ * `workspaces` and `access` are children of the active deployment and are
+ * embedded under {@link Application.activeDeployment}; `config.studio` and
+ * `config.mfManifest` are embedded under {@link Application.config}.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @public
+ */
+type ApplicationInclude = 'interfaces' | 'workspaces' | 'access' | 'config.studio' | 'config.mfManifest' | 'activeDeployment';
+type ApplicationInterfaceBase = {
+  id: string;
+  name: string;
+  title: string;
+  version: string;
+  /** Module federation module ID; resolved from the host mf-manifest at runtime */
+  moduleId: string;
+};
+/**
+ * Placement metadata for application and panel interfaces.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @public
+ */
+type ApplicationInterfacePlacementMetadata = {
+  dock?: {
+    group?: string;
+    order?: number;
+  };
+};
+/**
+ * An interface exposed by a deployment, embedded when `interfaces` is included.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @public
+ */
+type ApplicationInterface = ApplicationInterfaceBase & ({
+  type: 'app';
+  metadata: ApplicationInterfacePlacementMetadata | null;
+} | {
+  type: 'panel';
+  metadata: ApplicationInterfacePlacementMetadata | null;
+} | {
+  type: 'asset_source';
+  metadata: null;
+} | {
+  type: 'worker';
+  metadata: null;
+} | {
+  type: 'tile';
+  metadata: {
+    order?: number;
+    size: 'small' | 'large' | 'banner';
+  };
+});
+/**
+ * A studio workspace of a deployment, embedded when `workspaces` is included.
+ * Studio applications only.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @public
+ */
+interface ApplicationWorkspace {
+  id: string;
+  name: string;
+  title: string | null;
+  subtitle: string | null;
+  projectId: string;
+  dataset: string;
+  schemaDescriptorId: string | null;
+  basePath: string | null;
+  /** Sanitized SVG icon markup */
+  icon: string | null;
+}
 /**
+ * A resource an application accesses, embedded when `access` is included.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type SanityProject$1 = SanityProject;
+interface ApplicationAccess {
+  id: string;
+  resourceType: 'datasets' | 'canvases' | 'dashboards' | 'media-libraries';
+  resourceId: string;
+}
 /**
- * Represents the various states the authentication can be in.
+ * Studio configuration, embedded under `config` when `config.studio` is included.
  *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type AuthState = LoggedInAuthState | LoggedOutAuthState | LoggingInAuthState | ErrorAuthState;
+interface ApplicationStudioConfig {
+  projectId: string;
+  /** Release channel (`next`, `stable`, `latest`) or a pinned semver; null if unset */
+  autoUpdatingVersion: string | null;
+}
 /**
- * Logged-in state from the auth state.
+ * The active deployment as embedded under {@link Application.activeDeployment}.
+ * Its `interfaces`, `workspaces` and `access` children are each present only
+ * when the matching {@link ApplicationInclude} token was requested. `workspaces`
+ * is omitted (not `null`) for non-studio applications even when requested.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type LoggedInAuthState = {
-  type: AuthStateType.LOGGED_IN;
-  token: string;
-  currentUser: CurrentUser | null;
-  lastTokenRefresh?: number;
-};
+type ApplicationDeployment<Include extends ApplicationInclude = never> = {
+  id: string;
+  applicationId: string;
+  size: number | null;
+  version: string | null;
+  isAutoUpdating: boolean | null;
+  isActiveDeployment: boolean;
+  deployedBy: string | null;
+  createdAt: string;
+  updatedAt: string;
+} & Included<ApplicationInclude, 'interfaces', Include, {
+  interfaces: ApplicationInterface[];
+}> & Included<ApplicationInclude, 'workspaces', Include, {
+  workspaces?: ApplicationWorkspace[];
+}> & Included<ApplicationInclude, 'access', Include, {
+  access: ApplicationAccess[];
+}>;
 /**
- * Logged-out state from the auth state.
+ * The always-present fields of an org-owned application returned by the
+ * Applications API (`/applications`), before any {@link ApplicationInclude}.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type LoggedOutAuthState = {
-  type: AuthStateType.LOGGED_OUT;
-  isDestroyingSession: boolean;
-};
+interface ApplicationBase {
+  id: string;
+  type: 'studio' | 'coreApp';
+  title: string;
+  /** Stable, immutable identity, distinct from the mutable `slug` address. */
+  name: string;
+  /** Qualified, globally-unique handle: `sanity/<name>` for singletons, `<organizationId>/<name>` otherwise. */
+  reference: string;
+  icon: string | null;
+  isSingleton: boolean;
+  visibility: 'default' | 'unlisted' | 'disabled';
+  slug: string | null;
+  externalUrl: string | null;
+  organizationId: string;
+  createdAt: string;
+  updatedAt: string;
+}
+type DeploymentToken = 'activeDeployment' | 'interfaces' | 'workspaces' | 'access';
+type ConfigToken = 'config.studio' | 'config.mfManifest';
+type ApplicationConfig<Include extends ApplicationInclude> = Included<ApplicationInclude, 'config.studio', Include, {
+  studio?: ApplicationStudioConfig;
+}> & Included<ApplicationInclude, 'config.mfManifest', Include, {
+  mfManifest?: unknown;
+}>;
+type ApplicationConfigShape<Include extends ApplicationInclude> = [ApplicationInclude] extends [Include] ? {
+  config?: ApplicationConfig<Include>;
+} : IncludesAny<Include, ConfigToken> extends true ? {
+  config: ApplicationConfig<Include>;
+} : unknown;
+type ApplicationDeploymentShape<Include extends ApplicationInclude> = [ApplicationInclude] extends [Include] ? {
+  activeDeployment?: ApplicationDeployment<Include> | null;
+} : IncludesAny<Include, DeploymentToken> extends true ? {
+  activeDeployment: ApplicationDeployment<Include> | null;
+} : unknown;
 /**
- * Logging-in state from the auth state.
+ * An org-owned application as returned by the Applications API
+ * (`/applications`). `config` and `activeDeployment` (with its
+ * `interfaces`/`workspaces`/`access` children) are present only when the
+ * corresponding {@link ApplicationInclude} tokens were requested.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type LoggingInAuthState = {
-  type: AuthStateType.LOGGING_IN;
-  isExchangingToken: boolean;
-};
+type Application<Include extends ApplicationInclude = never> = ApplicationBase & ApplicationConfigShape<Include> & ApplicationDeploymentShape<Include>;
 /**
- * Error state from the auth state.
+ * Options for listing an organization's applications.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-type ErrorAuthState = {
-  type: AuthStateType.ERROR;
-  error: unknown;
-};
+interface ApplicationsOptions<Include extends ApplicationInclude = ApplicationInclude> {
+  organizationId: string;
+  /** Filter by application type */
+  type?: string;
+  include?: Include[];
+  /** Page size (1-100, default 50), or `'none'` to disable pagination */
+  limit?: number | 'none';
+  /** Cursor from a previous response's `nextCursor` */
+  cursor?: string;
+}
 /**
- * Represents the various states the authentication can be in.
+ * The cursor-paginated envelope returned by `GET /applications`.
  *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
  * @public
  */
-interface DashboardContext {
-  mode?: string;
-  env?: string;
-  orgId?: string;
+interface ApplicationsResponse<Include extends ApplicationInclude = never> {
+  nextCursor: string | null;
+  data: Application<Include>[];
 }
 /**
- * The method of authentication used.
+ * Fetcher for an organization's applications (`GET /applications`), on the
+ * shared fetcher cache.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
  * @internal
  */
-type AuthMethodOptions = 'localstorage' | 'cookie' | undefined;
-/**
- * @public
- */
-interface AuthStoreState {
-  authState: AuthState;
-  providers?: AuthProvider[];
-  options: {
-    initialLocationHref: string;
-    clientFactory: (config: ClientConfig) => SanityClient;
-    customProviders: AuthConfig['providers'];
-    storageKey: string;
-    storageArea: Storage | undefined;
-    apiHost: string | undefined;
-    loginUrl: string;
-    callbackUrl: string | undefined;
-    providedToken: string | undefined;
-    authMethod: AuthMethodOptions;
-    oauth: AuthConfig['oauth'];
-  };
-  dashboardContext?: DashboardContext;
-  oauthTokens?: OAuthTokens;
-}
+declare const applications: Fetcher<[options: ApplicationsOptions<ApplicationInclude>], ApplicationsResponse<ApplicationInclude>>;
 /**
- * @public
+ * Fetcher for a single application (`GET /applications/:id`), on the shared
+ * fetcher cache. No pre-seeding from {@link applications}: its list keys
+ * include the organization, which this fetcher's params can't reconstruct.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @internal
  */
-declare const getCurrentUserState: BoundStoreAction<AuthStoreState, [], StateSource<CurrentUser | null>>;
+declare const application: Fetcher<[applicationId: string, options?: {
+  include?: ApplicationInclude[];
+} | undefined], Application<ApplicationInclude>>;
 /**
- * @public
+ * Confirmation returned by the API's soft-delete endpoints.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @internal
  */
-declare const getTokenState: BoundStoreAction<AuthStoreState, [], StateSource<string | null>>;
+interface DeletedResult {
+  deleted: boolean;
+}
 /**
- * @public
+ * Dashboard visibility for an application.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @internal
  */
-declare const getLoginUrlState: BoundStoreAction<AuthStoreState, [], StateSource<string>>;
+type ApplicationVisibility = ApplicationBase['visibility'];
 /**
- * @public
+ * Mutable properties of an application (`PATCH /applications/:id`) — the
+ * writable subset of {@link ApplicationBase}, each optional, keyed by id.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @internal
  */
-declare const getAuthState: BoundStoreAction<AuthStoreState, [], StateSource<AuthState>>;
+type UpdateApplicationInput = {
+  applicationId: string;
+} & Partial<Pick<ApplicationBase, 'title' | 'icon' | 'visibility'>>;
 /**
- * @public
+ * Mutation to update an application (`PATCH /applications/:id`). Invalidates the
+ * updated application and the list so active entries reconverge on server truth.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
+ * @internal
  */
-declare const getDashboardOrganizationId: BoundStoreAction<AuthStoreState, [], StateSource<string | undefined>>;
+declare const updateApplication: (instance: SanityInstance, input: UpdateApplicationInput) => Promise<MutationResult<ApplicationBase>>;
 /**
- * Returns a state source indicating if the SDK is running within a dashboard context.
- * @public
+ * Input for {@link deleteApplication}.
+ *
+ * @internal
  */
-declare const getIsInDashboardState: BoundStoreAction<AuthStoreState, [], StateSource<boolean>>;
+interface DeleteApplicationInput {
+  applicationId: string;
+}
 /**
- * Action to explicitly set the authentication token.
- * Used internally by the Comlink token refresh.
+ * Mutation to soft-delete an application (`DELETE /applications/:id`).
+ * Invalidates the deleted application and the list.
+ *
+ * @see https://www.sanity.io/docs/http-reference/applications-api
  * @internal
  */
-declare const setAuthToken: BoundStoreAction<AuthStoreState, [token: string | null], void>;
-export { project as $, publishDocument as $n, refreshOAuthTokens as $r, ApplyDocumentActionsOptions as $t, loadMoreUsers as A, CacheWriter as Ai, CreateReleaseAction as An, RemoveCommentOptions as Ar, OrganizationsOptions as At, getQueryState as B, BoundStoreAction as Bi, ReleaseAction as Bn, CommentLocalState as Br, InstallationBase as Bt, slicePath$1 as C, application as Ci, ProcessMutationsOptions as Cn, getCommentThreadsState as Cr, ResolveUsersOptions as Ct, getCorsErrorProjectId as D, AccessResourceType as Di, Action as Dn, resolveCommentThreads as Dr, UsersGroupState as Dt, isImportError as E, updateApplication as Ei, JsonMatch as En, parseCommentsOptionsKey as Er, UserProfile as Et, ReleaseState as F, MutationResult as Fi, EditDocumentAction as Fn, removeComment as Fr, OrganizationOptions as Ft, resolveProjection as G, archiveRelease as Gn, CommentTextSelectionItem as Gr, installations as Gt, resolveQuery as H, UnarchiveReleaseAction as Hn, CommentReaction as Hr, InstallationsOptions as Ht, getActiveReleasesState as I, defineFetcher as Ii, EditDocumentOptions as In, replyToComment as Ir, organization as It, ProjectBase as J, deleteDocument as Jn, ClientStoreState as Jr, SetFavoriteInput as Jt, getProjectionState as K, createDocument as Kn, CommentThread as Kr, FavoriteDocumentContext as Kt, getAllReleasesState as L, defineMutation as Li, EditReleaseAction as Ln, setCommentStatus as Lr, Installation as Lt, resolveUsers as M, FetcherDefinition as Mi, DeleteReleaseAction as Mn, SetCommentStatusOptions as Mr, Organization as Mt, defineProjection as N, FetcherSnapshot as Ni, DiscardDocumentAction as Nn, UpdateCommentOptions as Nr, OrganizationBase as Nt, getUserState as O, checkPermissions as Oi, ArchiveReleaseAction as On, resolveComments as Or, UsersStoreState as Ot, getPerspectiveState as P, MutationDefinition as Pi, DocumentAction as Pn, createComment as Pr, OrganizationMember as Pt, ProjectOptions as Q, editRelease as Qn, handleOAuthCallback as Qr, ActionsResult as Qt, QueryOptions as R, Selector as Ri, PublishDocumentAction as Rn, updateComment as Rr, InstallationAccess as Rt, jsonMatch$1 as S, UpdateApplicationInput as Si, DocumentSet as Sn, ResolveCommentsOptions as Sr, ResolveUserOptions as St, CORE_SDK_VERSION as T, deleteApplication as Ti, processMutations as Tn, getCommentsState as Tr, SanityUserResponse as Tt, ProjectsOptions as U, UnpublishDocumentAction as Un, CommentStatus as Ur, InstallationsResponse as Ut, parseQueryKey as V, ScheduleReleaseAction as Vn, CommentMessage as Vr, InstallationInclude as Vt, projects as W, UnscheduleReleaseAction as Wn, CommentTextSelection as Wr, installation as Wt, ProjectMemberRole as X, discardDocument as Xn, getClientState as Xr, setFavorite as Xt, ProjectMember as Y, deleteRelease as Yn, getClient as Yr, favorites as Yt, ProjectMetadata as Z, editDocument as Zn, getOAuthTokensState as Zr, getReleaseDocumentId as Zt, SanityDocument$3 as _, ApplicationWorkspace as _i, resolveDocument as _n, createDatasetHandle as _r, TransportEvent as _t, LoggedOutAuthState as a, observeOrganizationVerificationState as ai, DocumentEditedEvent as an, ResolveDocument as ar, getPresence as at, getPathDepth as b, DeleteApplicationInput as bi, DocumentPermissionsResult as bn, createProjectHandle as br, GetUsersOptions as bt, getCurrentUserState as c, Application as ci, DocumentRemotePatchesEvent as cn, datasets as cr, DocumentPresence as ct, getLoginUrlState as d, ApplicationDeployment as di, TransactionAcceptedEvent as dn, LogContext as dr, PresencePerspectiveOptions as dt, revokeOAuthTokens as ei, applyDocumentActions as en, publishRelease as er, PreviewMedia as et, getTokenState as f, ApplicationInclude as fi, TransactionRevertedEvent as fn, LogLevel as fr, PresenceSelection as ft, Role as g, ApplicationVisibility as gi, getPermissionsState as gn, createLogger as gr, StateEvent as gt, ReleaseDocument$1 as h, ApplicationStudioConfig as hi, getDocumentSyncStatus as hn, LoggerConfig as hr, RollCallEvent as ht, LoggedInAuthState as i, handleAuthCallback as ii, DocumentDiscardedEvent as in, unscheduleRelease as ir, getDocumentPresence as it, resolveUser as j, Fetcher as ji, DeleteDocumentAction as jn, ReplyToCommentOptions as jr, organizations as jt, getUsersState as k, CacheTag as ki, CreateDocumentAction as kn, CreateCommentOptions as kr, Organizations as kt, getDashboardOrganizationId as l, ApplicationAccess as li, DocumentTransactionSubmissionResult as ln, configureLogging as lr, DocumentPresenceOptions as lt, CurrentUser$1 as m, ApplicationInterfacePlacementMetadata as mi, getDocumentState as mn, Logger as mr, ReportPresenceOptions as mt, AuthStoreState as n, OAuthTokens as ni, DocumentCreatedEvent as nn, unarchiveRelease as nr, PreviewValue as nt, LoggingInAuthState as o, OrgVerificationResult as oi, DocumentEvent as on, ResolveProjectionResult as or, reportPresence as ot, setAuthToken as p, ApplicationInterface as pi, DocumentOptions as pn, LogNamespace as pr, PresenceSelectionPoint as pt, Project as q, createRelease as qn, ClientOptions as qr, FavoriteStatusResponse as qt, ErrorAuthState as r, logout as ri, DocumentDeletedEvent as rn, unpublishDocument as rr, ProjectionValuePending as rt, getAuthState as s, AuthStateType as si, DocumentPublishedEvent as sn, ResolveQueryResult as sr, DisconnectEvent as st, AuthState as t, startOAuthAuthorization as ti, ActionErrorEvent as tn, scheduleRelease as tr, PreviewQueryResult as tt, getIsInDashboardState as u, ApplicationBase as ui, DocumentUnpublishedEvent as un, InstanceContext as ur, PresenceLocation as ut, SanityProject$1 as v, ApplicationsOptions as vi, resolvePermissions as vn, createDocumentHandle as vr, UserPresence as vt, stringifyPath$1 as w, applications as wi, patchOperations as wn, getCommentsOptionsKey as wr, SanityUser as wt, joinPaths as x, DeletedResult as xi, PermissionDeniedReason as xn, CommentsOptions as xr, Membership as xt, getIndexForKey$1 as y, ApplicationsResponse as yi, subscribeDocumentEvents as yn, createDocumentTypeHandle as yr, GetUserOptions as yt, getQueryKey as z, StateSource as zi, PublishReleaseAction as zn, Comment as zr, InstallationActiveConfig as zt };
-//# sourceMappingURL=authStore-BGoEGxOq.d.ts.map
+declare const deleteApplication: (instance: SanityInstance, input: DeleteApplicationInput) => Promise<MutationResult<DeletedResult>>;
+export { Project as $, createRelease as $n, ClientOptions as $r, FavoriteStatusResponse as $t, stringifyPath$1 as A, CacheWriter as Ai, patchOperations as An, getCommentsOptionsKey as Ar, SanityUser as At, getPerspectiveState as B, BoundStoreAction as Bi, DocumentAction as Bn, createComment as Br, OrganizationMember as Bt, SanityDocument$3 as C, getTokenState as Ci, resolveDocument as Cn, createDatasetHandle as Cr, TransportEvent as Ct, joinPaths as D, AccessResourceType as Di, PermissionDeniedReason as Dn, CommentsOptions as Dr, Membership as Dt, getPathDepth as E, AuthStateType as Ei, DocumentPermissionsResult as En, createProjectHandle as Er, GetUsersOptions as Et, getUsersState as F, MutationResult as Fi, CreateDocumentAction as Fn, CreateCommentOptions as Fr, Organizations as Ft, getQueryKey as G, PublishReleaseAction as Gn, Comment as Gr, InstallationActiveConfig as Gt, getActiveReleasesState as H, EditDocumentOptions as Hn, replyToComment as Hr, organization as Ht, loadMoreUsers as I, defineFetcher as Ii, CreateReleaseAction as In, RemoveCommentOptions as Ir, OrganizationsOptions as It, resolveQuery as J, UnarchiveReleaseAction as Jn, CommentReaction as Jr, InstallationsOptions as Jt, getQueryState as K, ReleaseAction as Kn, CommentLocalState as Kr, InstallationBase as Kt, resolveUser as L, defineMutation as Li, DeleteDocumentAction as Ln, ReplyToCommentOptions as Lr, organizations as Lt, isImportError as M, FetcherDefinition as Mi, JsonMatch as Mn, parseCommentsOptionsKey as Mr, UserProfile as Mt, getCorsErrorProjectId as N, FetcherSnapshot as Ni, Action as Nn, resolveCommentThreads as Nr, UsersGroupState as Nt, jsonMatch$1 as O, checkPermissions as Oi, DocumentSet as On, ResolveCommentsOptions as Or, ResolveUserOptions as Ot, getUserState as P, MutationDefinition as Pi, ArchiveReleaseAction as Pn, resolveComments as Pr, UsersStoreState as Pt, getProjectionState as Q, createDocument as Qn, CommentThread as Qr, FavoriteDocumentContext as Qt, resolveUsers as R, Selector as Ri, DeleteReleaseAction as Rn, SetCommentStatusOptions as Rr, Organization as Rt, Role as S, getLoginUrlState as Si, getPermissionsState as Sn, createLogger as Sr, StateEvent as St, getIndexForKey$1 as T, OAuthTokens as Ti, subscribeDocumentEvents as Tn, createDocumentTypeHandle as Tr, GetUserOptions as Tt, getAllReleasesState as U, EditReleaseAction as Un, setCommentStatus as Ur, Installation as Ut, ReleaseState as V, EditDocumentAction as Vn, removeComment as Vr, OrganizationOptions as Vt, QueryOptions as W, PublishDocumentAction as Wn, updateComment as Wr, InstallationAccess as Wt, projects as X, UnscheduleReleaseAction as Xn, CommentTextSelection as Xr, installation as Xt, ProjectsOptions as Y, UnpublishDocumentAction as Yn, CommentStatus as Yr, InstallationsResponse as Yt, resolveProjection as Z, archiveRelease as Zn, CommentTextSelectionItem as Zr, installations as Zt, applications as _, LoggingInAuthState as _i, TransactionAcceptedEvent as _n, LogContext as _r, PresencePerspectiveOptions as _t, ApplicationInclude as a, refreshOAuthTokens as ai, ApplyDocumentActionsOptions as an, publishDocument as ar, project as at, CurrentUser$1 as b, getDashboardOrganizationId as bi, getDocumentState as bn, Logger as br, ReportPresenceOptions as bt, ApplicationStudioConfig as c, logout as ci, DocumentCreatedEvent as cn, unarchiveRelease as cr, PreviewValue as ct, ApplicationsOptions as d, OrgVerificationResult as di, DocumentEditedEvent as dn, ResolveDocument as dr, getPresence as dt, ClientStoreState as ei, SetFavoriteInput as en, deleteDocument as er, ProjectBase as et, ApplicationsResponse as f, AuthState as fi, DocumentEvent as fn, ResolveProjectionResult as fr, reportPresence as ft, application as g, LoggedOutAuthState as gi, DocumentUnpublishedEvent as gn, InstanceContext as gr, PresenceLocation as gt, UpdateApplicationInput as h, LoggedInAuthState as hi, DocumentTransactionSubmissionResult as hn, configureLogging as hr, DocumentPresenceOptions as ht, ApplicationDeployment as i, handleOAuthCallback as ii, ActionsResult as in, editRelease as ir, ProjectOptions as it, CORE_SDK_VERSION as j, Fetcher as ji, processMutations as jn, getCommentsState as jr, SanityUserResponse as jt, slicePath$1 as k, CacheTag as ki, ProcessMutationsOptions as kn, getCommentThreadsState as kr, ResolveUsersOptions as kt, ApplicationVisibility as l, handleAuthCallback as li, DocumentDeletedEvent as ln, unpublishDocument as lr, ProjectionValuePending as lt, DeletedResult as m, ErrorAuthState as mi, DocumentRemotePatchesEvent as mn, datasets as mr, DocumentPresence as mt, ApplicationAccess as n, getClientState as ni, setFavorite as nn, discardDocument as nr, ProjectMemberRole as nt, ApplicationInterface as o, revokeOAuthTokens as oi, applyDocumentActions as on, publishRelease as or, PreviewMedia as ot, DeleteApplicationInput as p, AuthStoreState as pi, DocumentPublishedEvent as pn, ResolveQueryResult as pr, DisconnectEvent as pt, parseQueryKey as q, ScheduleReleaseAction as qn, CommentMessage as qr, InstallationInclude as qt, ApplicationBase as r, getOAuthTokensState as ri, getReleaseDocumentId as rn, editDocument as rr, ProjectMetadata as rt, ApplicationInterfacePlacementMetadata as s, startOAuthAuthorization as si, ActionErrorEvent as sn, scheduleRelease as sr, PreviewQueryResult as st, Application as t, getClient as ti, favorites as tn, deleteRelease as tr, ProjectMember as tt, ApplicationWorkspace as u, observeOrganizationVerificationState as ui, DocumentDiscardedEvent as un, unscheduleRelease as ur, getDocumentPresence as ut, deleteApplication as v, getAuthState as vi, TransactionRevertedEvent as vn, LogLevel as vr, PresenceSelection as vt, SanityProject$1 as w, setAuthToken as wi, resolvePermissions as wn, createDocumentHandle as wr, UserPresence as wt, ReleaseDocument$1 as x, getIsInDashboardState as xi, getDocumentSyncStatus as xn, LoggerConfig as xr, RollCallEvent as xt, updateApplication as y, getCurrentUserState as yi, DocumentOptions as yn, LogNamespace as yr, PresenceSelectionPoint as yt, defineProjection as z, StateSource as zi, DiscardDocumentAction as zn, UpdateCommentOptions as zr, OrganizationBase as zt };
+//# sourceMappingURL=applications-pRS8tuC2.d.ts.map