@verentis/sdk 0.1.0 → 0.2.0

package/dist/index.d.ts

@@ -1,18 +1,131 @@
+interface HeaderAction {
+    id: string;
+    label: string;
+    icon?: string;
+    variant?: 'default' | 'outline' | 'destructive';
+    /** Empty for client-only actions; otherwise a subset of the delegated token scopes. */
+    scopes: string[];
+    enabled?: boolean;
+    visible?: boolean;
+    busy?: boolean;
+    disabledReason?: string;
+    /** Clipboard actions return text for the host to copy during its user gesture. */
+    kind?: 'clipboard';
+}
+interface HeaderActionResult {
+    clipboardText?: string;
+    navigate?: {
+        path: string;
+        newTab?: boolean;
+    };
+}
+interface HeaderActionRegistration {
+    update(action: HeaderAction): void;
+    dispose(): void;
+}
+type HeaderActionHandler = () => void | HeaderActionResult | Promise<void | HeaderActionResult>;
+declare function isHeaderAction(value: unknown): value is HeaderAction;
+
 interface VerentisMessage {
     type: `verentis:${string}`;
     version: 1;
     requestId?: string;
 }
+
 interface VerentisInitMessage extends VerentisMessage {
     type: 'verentis:init';
     context: AppContext;
     token: TokenInfo;
+    sessionId?: string;
+}
+interface VerentisActionsSetMessage extends VerentisMessage {
+    type: 'verentis:actions:set';
+    sessionId: string;
+    actions: HeaderAction[];
+}
+interface VerentisActionInvokeMessage extends VerentisMessage {
+    type: 'verentis:action:invoke';
+    sessionId: string;
+    requestId: string;
+    actionId: string;
+}
+interface VerentisActionResultMessage extends VerentisMessage {
+    type: 'verentis:action:result';
+    sessionId: string;
+    requestId: string;
+    actionId: string;
+    result?: HeaderActionResult;
+    error?: string;
 }
 interface VerentisTokenRefreshedMessage extends VerentisMessage {
     type: 'verentis:token:refreshed';
     requestId: string;
     token: TokenInfo;
 }
+/** Single-use credential for the installation's independently registered backend. */
+interface AppBackendCredential {
+    delegationId: string;
+    backendClientId: string;
+    launchCredential: string;
+    expiresAt: string;
+}
+interface VerentisBackendCredentialRequest extends VerentisMessage {
+    type: 'verentis:backend:request';
+    requestId: string;
+    sessionId: string;
+}
+interface VerentisBackendCredentialResponse extends VerentisMessage {
+    type: 'verentis:backend:response';
+    requestId: string;
+    sessionId: string;
+    credential?: AppBackendCredential;
+    error?: string;
+}
+/** Nonsecret active-document metadata. CODE already holds its own scoped credential. */
+interface WopiContinuation {
+    sessionId: string;
+    workspaceId: string;
+    branch: string;
+    nodeId: string;
+    accessTokenTtl: number;
+    fileId: string;
+    format: string;
+    readOnly: boolean;
+    name: string;
+}
+/** Initial document-scoped collaboration authority, never a platform OAuth credential. */
+interface WopiLaunch extends WopiContinuation {
+    action: string;
+    accessToken: string;
+    editorOrigin: string;
+    wopiSource: string;
+}
+interface WopiSaveCheckpoint {
+    generation: number;
+    correlation: string;
+    revision?: string | null;
+}
+interface WopiSaveStatus {
+    state: string;
+    revision: string;
+    readOnly: boolean;
+    receipt: WopiSaveCheckpoint | null;
+    continuationAvailable?: boolean;
+}
+interface VerentisWopiRequest extends VerentisMessage {
+    type: 'verentis:wopi:request';
+    requestId: string;
+    sessionId: string;
+    operation: 'launch' | 'status' | 'save' | 'close' | 'continue';
+    generation?: number;
+}
+interface VerentisWopiResponse extends VerentisMessage {
+    type: 'verentis:wopi:response';
+    requestId: string;
+    sessionId: string;
+    result?: WopiLaunch | WopiContinuation | WopiSaveCheckpoint | WopiSaveStatus | null;
+    error?: string;
+}
 interface VerentisFileChangedMessage extends VerentisMessage {
     type: 'verentis:file:changed';
     path: string;
@@ -50,13 +163,25 @@ interface VerentisDirtyMessage extends VerentisMessage {
     type: 'verentis:dirty';
     isDirty: boolean;
 }
-type HostToAppMessage = VerentisInitMessage | VerentisTokenRefreshedMessage | VerentisFileChangedMessage | VerentisThemeMessage;
-type AppToHostMessage = VerentisReadyMessage | VerentisTokenRefreshMessage | VerentisNavigateMessage | VerentisResizeMessage | VerentisTitleMessage | VerentisDirtyMessage;
+type HostToAppMessage = VerentisInitMessage | VerentisActionInvokeMessage | VerentisTokenRefreshedMessage | VerentisFileChangedMessage | VerentisThemeMessage | VerentisBackendCredentialResponse | VerentisWopiResponse;
+type AppToHostMessage = VerentisReadyMessage | VerentisActionsSetMessage | VerentisActionResultMessage | VerentisTokenRefreshMessage | VerentisNavigateMessage | VerentisResizeMessage | VerentisTitleMessage | VerentisDirtyMessage | VerentisBackendCredentialRequest | VerentisWopiRequest;
 type AppSurface = 'file' | 'workspace';
 interface AppContextBase {
+    application?: AppApplicationContext;
     workspace: WorkspaceInfo;
     entryPoint?: EntryPointInfo;
     apiUrl: string;
+    installation?: {
+        id: string;
+        backendClientId?: string;
+        authorizationGeneration?: string;
+        wopiEnabled?: boolean;
+    };
+}
+interface AppApplicationContext {
+    manifestPath: string;
+    manifestNodeId: string;
+    branch: string;
 }
 /** Context for an application opened against a workspace file. */
 interface FileAppContext extends AppContextBase {
@@ -89,6 +214,8 @@ interface WorkspaceInfo {
     name: string;
 }
 interface FileInfo {
+    nodeId?: string;
+    branch?: string;
     path: string;
     name: string;
     mimeType: string;
@@ -150,6 +277,33 @@ interface FileEntry {
     version?: string;
     etag?: string;
     children?: FileEntry[];
+    /** Stable node identity, when supplied by the path metadata API. */
+    nodeId?: string;
+}
+interface NodeFileMetadata {
+    nodeId: string;
+    path: string;
+    name: string;
+    mimeType: string;
+    size?: number | null;
+    /** Unquoted opaque content revision; distinct from a path delete head stamp. */
+    etag: string;
+    version: string;
+    children?: PagedResult<FileEntry>;
+}
+interface NodeFileOptions {
+    branch: string;
+}
+interface NodeFileContent {
+    content: Blob;
+    /** Strong quoted ETag returned by the node-content API. */
+    revision: string;
+}
+interface WriteNodeFileOptions extends NodeFileOptions {
+    content: Blob | string | ArrayBuffer;
+    /** Strong quoted revision, or the unquoted etag returned by getNode. */
+    revision: string;
+    idempotencyKey: string;
 }
 interface GetFileOptions {
     branch?: string;
@@ -171,6 +325,10 @@ interface MoveFileOptions {
 interface DeleteFileOptions {
     path: string;
     branch?: string;
+    /** Path-binding head stamp, not a node-content revision. */
+    headStamp?: string;
+    idempotencyKey?: string;
+    mode?: 'shallow' | 'deep';
 }
 type ArchiveFormat = 'zip' | 'tgz';
 interface ReadArchiveOptions {
@@ -205,6 +363,64 @@ interface InstalledPackageDescriptor {
     payloads: InstalledPackagePayload[];
 }
 type InstallationMode = 'Extracted' | 'Sealed';
+/** Required dependencies use immutable exact SemVer pins; optional packages are never implicit installs. */
+interface PackageDependency {
+    package: string;
+    version: string;
+    installPath?: string | null;
+    optional?: boolean;
+}
+interface InstallationGraphPackage {
+    packageId: string;
+    packageVersionId: string;
+    publisherId: string;
+    identity: string;
+    publisher: string;
+    version: string;
+    treeDigest: string;
+    artifactFingerprint: string;
+    manifestYaml: string;
+    verifiedSigningKeyKid?: string | null;
+    branch: string;
+    installPath: string;
+    installMode: InstallationMode;
+    reuseInstallationId?: string | null;
+    /** Only a previously Failed exact target can be recovered, after a fresh explicit preview. */
+    retryInstallationId?: string | null;
+    permissions: string[];
+    dependencies: PackageDependency[];
+    /** Conservative destination reservations, including external install-map/seed roots. */
+    installPaths: string[];
+}
+interface InstallationGraphPreview {
+    operationId: string;
+    workspaceId: string;
+    expiresAt: string;
+    fingerprint: string;
+    /** Topological installation order: required dependencies before their dependents. */
+    packages: InstallationGraphPackage[];
+}
+type InstallationGraphOutcomeStatus = 'Pending' | 'Installing' | 'Reused' | 'Installed' | 'InstalledWithError' | 'Failed' | 'NotAttempted';
+interface InstallationGraphResult {
+    operationId: string;
+    status: 'Preview' | 'Accepted' | 'Completed' | 'Rejected' | 'Failed';
+    succeeded: boolean;
+    /** The exact durable preview baseline, also available after a lost preview/install response. */
+    packages: InstallationGraphPackage[];
+    outcomes: {
+        identity: string;
+        status: InstallationGraphOutcomeStatus;
+        installationId?: string | null;
+        error?: string | null;
+    }[];
+    error?: string | null;
+}
+interface PreviewInstallationOptions extends InstallationScopedOptions {
+    packageVersion?: string;
+    installPath?: string;
+    branch?: string;
+    installMode?: InstallationMode;
+}
 type InstallationStatus = 'Pending' | 'Installing' | 'Installed' | 'Updating' | 'Uninstalling' | 'Failed' | 'Uninstalled';
 interface Installation {
     id: string;
@@ -384,6 +600,9 @@ interface ApplicationEntryPoint {
     display?: ApplicationDisplayOptions;
 }
 interface ApplicationSpec {
+    dependencies?: PackageDependency[];
+    /** Publisher-qualified required engine dependency for script-bearing packages. */
+    engine?: string;
     /** Optional iframe UI surface URL. Omit for a headless / file-collection app. */
     entry?: string;
     /** Optional application splash URL. Relative values resolve against the selected iframe entry URL. */
@@ -710,7 +929,8 @@ declare class ApiError extends Error {
     readonly status: number;
     readonly detail: string;
     readonly title?: string | undefined;
-    constructor(status: number, detail: string, title?: string | undefined);
+    readonly code?: string | undefined;
+    constructor(status: number, detail: string, title?: string | undefined, code?: string | undefined);
 }
 
 /**
@@ -724,6 +944,8 @@ declare class ContextModule {
     private _file;
     private _entryPoint;
     private _apiUrl;
+    private _application;
+    private _installation;
     /** The current workspace */
     get workspace(): WorkspaceInfo;
     /** The host surface that launched the app */
@@ -738,6 +960,8 @@ declare class ContextModule {
     get entryPoint(): EntryPointInfo | null;
     /** Whether an entry point context is available */
     get hasEntryPoint(): boolean;
+    get application(): AppApplicationContext | null;
+    get installation(): AppContext['installation'] | null;
     /** Update context from the host's init message */
     setFromAppContext(ctx: AppContext): void;
     /** Set workspace info directly (standalone mode) */
@@ -760,6 +984,7 @@ declare class HttpTransport {
     constructor(baseUrl: string, auth: AuthStrategy, apiVersion?: string);
     request<T>(method: string, path: string, options?: RequestOptions): Promise<T>;
     requestRaw(method: string, path: string, options?: RequestOptions): Promise<Response>;
+    ensureSuccess(response: Response): Promise<void>;
     private buildUrl;
 }
 
@@ -829,6 +1054,12 @@ declare class FilesModule {
      * For directories: returns metadata with children array populated.
      */
     get(path: string, options?: GetFileOptions): Promise<FileEntry>;
+    /** Read metadata by stable node identity on an explicit branch. */
+    getNode(nodeId: string, options: NodeFileOptions): Promise<NodeFileMetadata>;
+    /** Read bytes and their matching content revision in the same response. */
+    readNodeContent(nodeId: string, options: NodeFileOptions): Promise<NodeFileContent>;
+    /** Replace existing node bytes conditionally; never creates or changes path/MIME. */
+    writeNodeContent(nodeId: string, options: WriteNodeFileOptions): Promise<NodeFileMetadata>;
     /**
      * Read the raw content of a file as a Blob.
      */
@@ -868,6 +1099,14 @@ declare class InstallationsModule {
     private readonly http;
     private readonly workspaceId?;
     constructor(http: HttpTransport, workspaceId?: string | undefined);
+    /** Resolve canonical publisher/package identity, never the installation's runtime display name. */
+    resolvePackageId(identity: string, options?: InstallationScopedOptions): Promise<string>;
+    /** Resolves the complete required graph without installing anything or granting capabilities. */
+    preview(packageId: string, options?: PreviewInstallationOptions): Promise<InstallationGraphPreview>;
+    /** Explicit, single-use consent to a displayed preview. Never automatically retries accepted installs. */
+    install(preview: InstallationGraphPreview, consent: true): Promise<InstallationGraphResult>;
+    /** Inspect durable outcomes after a failure or lost response instead of resubmitting consent. */
+    graphResult(operationId: string, options?: InstallationScopedOptions): Promise<InstallationGraphResult>;
     list(options?: InstallationListOptions): Promise<PagedResult<Installation>>;
     resolve(installPath: string, options?: ResolveInstallationOptions): Promise<InstallationDetail>;
     update(id: string, options?: UpdateInstallationOptions): Promise<InstallationLifecycleResult>;
@@ -937,6 +1176,259 @@ interface NamespacedSettings {
     reset(key: string, options?: SettingsScopedOptions): Promise<void>;
 }
 
+interface EmailScopedOptions {
+    workspaceId?: string;
+    branch?: 'main';
+}
+interface EmailHistoryOptions extends EmailScopedOptions {
+    recordId?: string;
+    installationId?: string;
+}
+interface EmailPurpose {
+    name: string;
+    templateId: string;
+    maximumRecipients: number;
+    maximumAttachmentBytes: number;
+    allowsOpenTracking: boolean;
+    allowsClickTracking: boolean;
+    senderRequirement: 'workspace-owned' | 'managed-or-workspace';
+}
+interface EmailSenderGrant {
+    purpose: string;
+    senderId: string;
+    senderIdentityDigest?: string;
+}
+interface EmailConsentPreview {
+    installationId: string;
+    workspaceId: string;
+    accountId: string;
+    packageId: string;
+    packageVersionId: string;
+    publisherId: string;
+    publisherName: string;
+    version: string;
+    treeDigest: string;
+    signingKeyId: string;
+    installPath: string;
+    branch: string;
+    candidateDigest: string;
+    declaration: {
+        purposes: EmailPurpose[];
+        maximumMessagesPerHour: number;
+        permissions: string[];
+        scopes: string[];
+        manifestDigest: string;
+    };
+}
+interface EmailConsent {
+    installationId: string;
+    candidateDigest: string;
+    enabled: boolean;
+    allowOpenTracking: boolean;
+    allowClickTracking: boolean;
+    approvedBy: string;
+    updatedAt: string;
+    senderGrants: EmailSenderGrant[] | null;
+}
+interface EmailConsentOptions {
+    senderGrants: EmailSenderGrant[];
+    allowOpenTracking?: boolean;
+    allowClickTracking?: boolean;
+}
+interface EmailSenderIdentity {
+    id: string;
+    mode: 'managed' | 'custom';
+    displayName: string;
+    address: string;
+}
+interface EmailArtifactOutcome {
+    artifactId: string;
+    sha256: string;
+    byteLength: number;
+    fileName: string;
+}
+interface EmailDispatchOptions extends EmailScopedOptions {
+    installationId: string;
+    recordId: string;
+    purpose: string;
+    templateId: string;
+    senderId: string;
+    recipients: string[];
+    artifactIds: string[];
+    idempotencyKey: string;
+    replyTo?: string;
+}
+interface EmailDispatchOutcome {
+    id: string;
+    status: 'accepted' | 'delivered' | 'failed' | 'unknown';
+    createdAt: string;
+    failureCode?: string | null;
+    recordId: string;
+    installationId: string;
+    branch: 'main';
+    purpose: string;
+    templateId: string;
+    events: EmailDeliveryEvidence[];
+}
+interface EmailDeliveryEvidence {
+    type: 'processed' | 'deferred' | 'delivered' | 'failed' | 'complaint' | 'unsubscribe' | 'open' | 'click';
+    occurredAt: string;
+}
+
+/** Signed-package transactional email. Dispatch never accepts HTML, From or a browser invoice snapshot. */
+declare class EmailModule {
+    private readonly http;
+    private readonly workspaceId?;
+    constructor(http: HttpTransport, workspaceId?: string | undefined);
+    preview(installationId: string, options?: EmailScopedOptions): Promise<EmailConsentPreview>;
+    consents(options?: EmailScopedOptions): Promise<EmailConsent[]>;
+    /** Approve exactly the reviewed signed candidate; tracking stays off unless explicitly opted in. */
+    consent(preview: EmailConsentPreview, approval: true, options: EmailConsentOptions): Promise<EmailConsent>;
+    revoke(consent: EmailConsent, options?: EmailScopedOptions): Promise<EmailConsent>;
+    senders(options?: EmailScopedOptions): Promise<EmailSenderIdentity[]>;
+    invoicePdf(recordId: string, installationId: string, options?: EmailScopedOptions): Promise<EmailArtifactOutcome>;
+    /** Authenticated immutable bytes; no public URL. The caller owns any local object URL it creates. */
+    artifactContent(artifactId: string, options?: EmailScopedOptions): Promise<Blob>;
+    /** A stable key binds this exact request. After a lost response inspect status; never automatically resend. */
+    dispatch(options: EmailDispatchOptions): Promise<EmailDispatchOutcome>;
+    outcome(id: string, options?: EmailScopedOptions): Promise<EmailDispatchOutcome>;
+    history(options?: EmailHistoryOptions): Promise<EmailDispatchOutcome[]>;
+    status(id: string, options?: EmailScopedOptions): Promise<EmailDispatchOutcome>;
+    private workspace;
+    private mainBranch;
+}
+
+type BusinessOperation = 'save-record' | 'archive-record' | 'delete-record' | 'restore-record' | 'close-period' | 'issue-invoice' | 'credit-invoice' | 'post-payment' | 'reverse-payment' | 'post-journal' | 'reverse-journal' | 'post-expense' | 'reverse-expense';
+interface BusinessParameters {
+    periodId?: string;
+    receivableAccountId?: string;
+    incomeAccountId?: string;
+    taxAccountId?: string;
+    date?: string;
+    reason?: string;
+}
+interface BusinessCommand {
+    operation: BusinessOperation;
+    idempotencyKey: string;
+    /** Omit only when creating; the server derives a stable ID from this operation key. */
+    recordId?: string;
+    /** Canonical kind, e.g. crm/company. Required for metadata-free creation. */
+    kind?: string;
+    expectedCatalogueRevision?: string;
+    /** Exact strong, quoted canonical revision; omit only for a new record. */
+    expectedRevision?: string;
+    record?: Record<string, unknown>;
+    parameters?: BusinessParameters;
+}
+interface BusinessSnapshot {
+    id: string;
+    kind: string;
+    json: string;
+    revision: string;
+}
+interface BusinessContext {
+    workspaceId: string;
+    branch: string;
+    catalogueRevision: string | null;
+    settings: BusinessSnapshot[];
+}
+interface BusinessCommitResult {
+    operationId: string;
+    committedAt: string;
+    records: BusinessSnapshot[];
+}
+interface BusinessOutcomeRequest {
+    operation: BusinessOperation;
+    idempotencyKey: string;
+    requestHash?: string;
+    command?: BusinessCommand;
+}
+type BusinessReportName = 'trial-balance' | 'general-ledger' | 'profit-and-loss' | 'balance-sheet' | 'receivables';
+interface BusinessReportLine {
+    accountId: string;
+    code: string;
+    name: string;
+    accountType: 'asset' | 'liability' | 'equity' | 'income' | 'expense';
+    debitMinor: string;
+    creditMinor: string;
+    balanceMinor: string;
+}
+interface BusinessReport {
+    report: BusinessReportName;
+    from: string | null;
+    to: string | null;
+    lines: BusinessReportLine[];
+    entries: BusinessLedgerEntry[];
+    /** Coherent catalogue revision and overdue evaluation date for receivables. */
+    revision?: string;
+    asOf?: string;
+    currency?: string;
+    minorDigits?: number;
+    receivables?: BusinessReceivable[];
+    totals?: BusinessReceivableTotals;
+}
+interface BusinessReceivable {
+    invoiceId: string;
+    revision: string;
+    invoiceNumber: string;
+    issueDate: string;
+    dueDate: string;
+    currency: string;
+    minorDigits: number;
+    customer: Record<string, unknown>;
+    customerReference?: Record<string, unknown>;
+    grossAmountMinor: string;
+    creditedAmountMinor: string;
+    paidAmountMinor: string;
+    outstandingAmountMinor: string;
+    overdueAmountMinor: string;
+    isOverdue: boolean;
+    daysOverdue: number;
+}
+interface BusinessReceivableTotals {
+    grossAmountMinor: string;
+    creditedAmountMinor: string;
+    paidAmountMinor: string;
+    outstandingAmountMinor: string;
+    overdueAmountMinor: string;
+}
+interface BusinessLedgerEntry {
+    journalId: string;
+    date: string;
+    description: string;
+    accountId: string;
+    direction: 'debit' | 'credit';
+    amountMinor: string;
+    runningBalanceMinor: string;
+}
+
+/**
+ * Trusted workspace business records, independent of app scripts or generic file writes.
+ * Never automatically retries a command: resolve a lost response with outcome() or
+ * resubmit the exact same command/key to obtain the original durable result.
+ */
+declare class BusinessModule {
+    private readonly http;
+    private readonly branch;
+    constructor(http: HttpTransport, branch?: string);
+    withBranch(branch: string): BusinessModule;
+    context(): Promise<BusinessContext>;
+    command(command: BusinessCommand): Promise<BusinessCommitResult>;
+    read(id: string): Promise<BusinessSnapshot | null>;
+    list(kind?: string): Promise<BusinessSnapshot[]>;
+    /** null means unresolved, not success; do not invent a new operation key. */
+    outcome(request: BusinessOutcomeRequest): Promise<BusinessCommitResult | null>;
+    /** Recover using the exact original command, without reproducing server fingerprint encoding. */
+    outcomeFor(command: BusinessCommand): Promise<BusinessCommitResult | null>;
+    report(report: BusinessReportName, range?: {
+        from?: string;
+        to?: string;
+    }): Promise<BusinessReport>;
+    /** Retained historical expense receipt bytes, even after the original native file is removed. */
+    receipt(nodeId: string, revision: string): Promise<Blob>;
+    private headers;
+}
+
 type BridgeEventType = HostToAppMessage['type'];
 type BridgeListener = (data: HostToAppMessage) => void;
 /**
@@ -945,13 +1437,21 @@ type BridgeListener = (data: HostToAppMessage) => void;
  * and app-to-host events (navigate, resize, dirty, etc.).
  */
 declare class Bridge {
+    private readonly expectedHostOrigin?;
     private listeners;
     private _initResolve;
+    private _initReject;
+    private _initTimer;
     private _initPromise;
     private _hostOrigin;
     private _messageHandler;
     private _destroyed;
-    constructor();
+    private sessionId;
+    private actions;
+    private requests;
+    private backendRequests;
+    private wopiRequests;
+    constructor(expectedHostOrigin?: string | undefined);
     /** Post `verentis:ready` to the host to start the handshake */
     sendReady(capabilities?: string[]): void;
     /** Wait for the host to send `verentis:init` with context and token */
@@ -979,6 +1479,19 @@ declare class Bridge {
     setTitle(title: string): void;
     /** Signal unsaved changes to the host */
     setDirty(isDirty: boolean): void;
+    /** The host, not the app, selects the installation, file, branch and permission ceiling. */
+    requestBackendCredential(): Promise<AppBackendCredential>;
+    /** The trusted parent selects the approved installation, document and action. */
+    requestWopiLaunch(): Promise<WopiLaunch>;
+    /** Recover only the target selected by a completed server-owned derived operation. */
+    requestWopiContinuation(): Promise<WopiContinuation>;
+    getWopiStatus(): Promise<WopiSaveStatus>;
+    requestWopiSave(generation: number): Promise<WopiSaveCheckpoint>;
+    closeWopiSession(): Promise<void>;
+    private requestWopi;
+    registerAction(descriptor: HeaderAction, handler: HeaderActionHandler): HeaderActionRegistration;
+    private publishActions;
+    private invokeAction;
     /** Subscribe to a specific message type from the host */
     on(type: BridgeEventType, listener: BridgeListener): () => void;
     /** Clean up event listeners */
@@ -998,6 +1511,8 @@ declare class VerentisClient {
     installations: InstallationsModule;
     resources: ResourcesModule;
     settings: SettingsModule;
+    email: EmailModule;
+    business: BusinessModule;
     readonly context: ContextModule;
     readonly bridge: Bridge | null;
     private readonly _auth;
@@ -1064,13 +1579,18 @@ declare class TokenAuth implements AuthStrategy {
  * by requesting a new token from the host when nearing expiry.
  */
 declare class BridgeAuth implements AuthStrategy {
-    private readonly hostOrigin;
+    private hostOrigin;
     private _token;
     private _expiresAt;
     private _refreshTimer;
     private _pendingRefresh;
     private _messageHandler;
+    private _requestId;
+    private _refreshReject;
+    private _requestTimer;
+    private _destroyed;
     constructor(hostOrigin: string);
+    setHostOrigin(origin: string): void;
     /** Set the initial token received from the host's `verentis:init` message */
     setToken(info: TokenInfo): void;
     getAuthHeader(): Promise<string | null>;
@@ -1080,6 +1600,7 @@ declare class BridgeAuth implements AuthStrategy {
     private requestRefresh;
     private handleMessage;
     private scheduleRefresh;
+    private failRefresh;
 }
 
 /**
@@ -1109,4 +1630,4 @@ declare class BridgeAuth implements AuthStrategy {
  */
 declare function createVerentisClient(options?: VerentisClientOptions): VerentisClient;
 
-export { ApiError, ApiKeyAuth, type AppContext, type AppSurface, type AppToHostMessage, type ApplicationDisplayOptions, type ApplicationEntryPoint, type ApplicationFileType, type ApplicationLaunchConfig, type ApplicationManifest, type ApplicationSpec, type ArchiveFormat, type AuthOptions, type AuthStrategy, Bridge, BridgeAuth, type CatalogImage, ContextModule, type DeleteFileOptions, type EngineFileType, type EngineRuntime, type EngineTool, EnginesModule, type EntryPointInfo, type ExecuteEngineOptions, type Execution, type ExecutionEngine, type ExecutionEngineListOptions, type ExecutionListOptions, type ExecutionLogs, type ExecutionMode, type ExecutionResult, type ExecutionScopedOptions, type ExecutionStatus, type ExecutionTrigger, ExecutionsModule, type ExtractUploadOptions, type FileAppContext, type FileEntry, type FileInfo, FilesModule, type GetFileOptions, type HostToAppMessage, HttpTransport, type Installation, type InstallationDetail, type InstallationLifecycleResult, type InstallationListOptions, type InstallationMode, type InstallationScopedOptions, type InstallationStatus, InstallationsModule, type InstalledPackageDescriptor, type InstalledPackagePayload, type ManifestMetadata, type MimeTypeBinding, type MoveFileOptions, type NamespacedSettings, type NavigateOptions, type OAuthConfig, type PagedResult, type ReadArchiveOptions, type RequestOptions, type ResolveInstallationOptions, type ResourceMimeTypeBinding, type ResourceRegistration, type ResourceScopedOptions, ResourcesModule, type RunFileOptions, type SandboxOptions, type SettingDeclaration, type SettingDeclarationType, type SettingGroup, type SettingItem, type SettingOption, type SettingPresence, SettingsModule, type SettingsScopedOptions, TokenAuth, type TokenInfo, type UpdateInstallationOptions, VerentisClient, type VerentisClientOptions, type VerentisDirtyMessage, type VerentisFileChangedMessage, type VerentisInitMessage, type VerentisMessage, type VerentisNavigateMessage, type VerentisReadyMessage, type VerentisResizeMessage, type VerentisThemeMessage, type VerentisTitleMessage, type VerentisTokenRefreshMessage, type VerentisTokenRefreshedMessage, type WaitOptions, type WorkspaceAppContext, type WorkspaceInfo, type WriteFileOptions, createVerentisClient, findBestMatch, isTerminalStatus, matchMimeType };
+export { ApiError, ApiKeyAuth, type AppApplicationContext, type AppBackendCredential, type AppContext, type AppSurface, type AppToHostMessage, type ApplicationDisplayOptions, type ApplicationEntryPoint, type ApplicationFileType, type ApplicationLaunchConfig, type ApplicationManifest, type ApplicationSpec, type ArchiveFormat, type AuthOptions, type AuthStrategy, Bridge, BridgeAuth, type BusinessCommand, type BusinessCommitResult, type BusinessContext, type BusinessLedgerEntry, BusinessModule, type BusinessOperation, type BusinessOutcomeRequest, type BusinessParameters, type BusinessReceivable, type BusinessReceivableTotals, type BusinessReport, type BusinessReportLine, type BusinessReportName, type BusinessSnapshot, type CatalogImage, ContextModule, type DeleteFileOptions, type EmailArtifactOutcome, type EmailConsent, type EmailConsentOptions, type EmailConsentPreview, type EmailDeliveryEvidence, type EmailDispatchOptions, type EmailDispatchOutcome, type EmailHistoryOptions, EmailModule, type EmailPurpose, type EmailScopedOptions, type EmailSenderGrant, type EmailSenderIdentity, type EngineFileType, type EngineRuntime, type EngineTool, EnginesModule, type EntryPointInfo, type ExecuteEngineOptions, type Execution, type ExecutionEngine, type ExecutionEngineListOptions, type ExecutionListOptions, type ExecutionLogs, type ExecutionMode, type ExecutionResult, type ExecutionScopedOptions, type ExecutionStatus, type ExecutionTrigger, ExecutionsModule, type ExtractUploadOptions, type FileAppContext, type FileEntry, type FileInfo, FilesModule, type GetFileOptions, type HeaderAction, type HeaderActionHandler, type HeaderActionRegistration, type HeaderActionResult, type HostToAppMessage, HttpTransport, type Installation, type InstallationDetail, type InstallationGraphOutcomeStatus, type InstallationGraphPackage, type InstallationGraphPreview, type InstallationGraphResult, type InstallationLifecycleResult, type InstallationListOptions, type InstallationMode, type InstallationScopedOptions, type InstallationStatus, InstallationsModule, type InstalledPackageDescriptor, type InstalledPackagePayload, type ManifestMetadata, type MimeTypeBinding, type MoveFileOptions, type NamespacedSettings, type NavigateOptions, type NodeFileContent, type NodeFileMetadata, type NodeFileOptions, type OAuthConfig, type PackageDependency, type PagedResult, type PreviewInstallationOptions, type ReadArchiveOptions, type RequestOptions, type ResolveInstallationOptions, type ResourceMimeTypeBinding, type ResourceRegistration, type ResourceScopedOptions, ResourcesModule, type RunFileOptions, type SandboxOptions, type SettingDeclaration, type SettingDeclarationType, type SettingGroup, type SettingItem, type SettingOption, type SettingPresence, SettingsModule, type SettingsScopedOptions, TokenAuth, type TokenInfo, type UpdateInstallationOptions, type VerentisActionInvokeMessage, type VerentisActionResultMessage, type VerentisActionsSetMessage, type VerentisBackendCredentialRequest, type VerentisBackendCredentialResponse, VerentisClient, type VerentisClientOptions, type VerentisDirtyMessage, type VerentisFileChangedMessage, type VerentisInitMessage, type VerentisMessage, type VerentisNavigateMessage, type VerentisReadyMessage, type VerentisResizeMessage, type VerentisThemeMessage, type VerentisTitleMessage, type VerentisTokenRefreshMessage, type VerentisTokenRefreshedMessage, type VerentisWopiRequest, type VerentisWopiResponse, type WaitOptions, type WopiContinuation, type WopiLaunch, type WopiSaveCheckpoint, type WopiSaveStatus, type WorkspaceAppContext, type WorkspaceInfo, type WriteFileOptions, type WriteNodeFileOptions, createVerentisClient, findBestMatch, isHeaderAction, isTerminalStatus, matchMimeType };