palbase 0.6.2 → 0.8.0

package/types/internal/src/modules/stores.d.ts

@@ -1,4 +1,8 @@
 import { type Reply, type Transport } from '../transport.js';
+/**
+ * An Android App Bundle (.aab).
+ */
+export type AABFile = Blob;
 /**
  * A step that changes something at Apple for good: planned, then run only when a person confirms it with its hash, within a day.
  */
@@ -12,7 +16,7 @@ export type Action = {
      */
     decided_at: string | null;
     /**
-     * Who confirmed or declined it.
+     * Who confirmed or declined it: `user:<id>`, the person who confirmed it (Studio's developer, as Studio vouches for them), or the key that declined it.
      */
     decided_by: string | null;
     /**
@@ -99,7 +103,7 @@ export type ActionPage = {
     next_cursor?: string;
 };
 /**
- * An app of the project linked to its store.
+ * An app of the project linked to its store: an iOS app to the App Store, an Android app to Google Play.
  */
 export type App = {
     /**
@@ -111,33 +115,35 @@ export type App = {
      */
     asc_app_id: string | null;
     /**
-     * Its bundle id.
+     * An iOS app's bundle id, an Android app's package name.
      */
     bundle_id: string;
     /**
-     * Apple's id of the bundle id.
+     * Apple's id of the bundle id (an iOS app's).
      */
-    bundle_resource_id: string;
+    bundle_resource_id?: string;
     /**
      * When it was first linked.
      */
     linked_at: string;
     /**
-     * Its name at Apple.
+     * Its name in the store.
      */
     name: string;
     /**
      * The platform.
      */
-    platform: "ios";
+    platform: "ios" | "android";
+    play?: GoogleAppCheck;
     /**
-     * Its Apple team.
+     * Its Apple team (an iOS app's).
      */
-    team_id: string;
+    team_id?: string;
     /**
      * When it was last linked.
      */
     updated_at: string;
+    upload_key?: UploadKey;
 };
 /**
  * stores.app.changed: an app was linked to its store.
@@ -152,13 +158,21 @@ export type AppChangedEvent = {
      */
     asc_app_id?: string | null;
     /**
-     * Its bundle id.
+     * Its bundle id, or package name.
      */
     bundle_id: string;
     /**
      * What happened.
      */
     change: "linked";
+    /**
+     * The platform (an Android app's link says it).
+     */
+    platform?: "ios" | "android";
+    /**
+     * An Android app's upload key fingerprint.
+     */
+    upload_key?: string;
 };
 /**
  * The project's linked apps.
@@ -252,6 +266,19 @@ export type AppleGrant = {
      */
     grant: string;
 };
+/**
+ * Where a Play delivery's signed bundle is downloaded from: the project's own address, with a token sealed for that bundle.
+ */
+export type BundleLink = {
+    /**
+     * Until when it works.
+     */
+    expires_at: string;
+    /**
+     * The link.
+     */
+    url: string;
+};
 /**
  * The sandbox testers whose purchases Apple forgets.
  */
@@ -330,11 +357,11 @@ export type CreatePackageRequest = {
  */
 export type DeliverRequest = {
     /**
-     * The channel.
+     * The channel: testflight for an iOS app, play_internal (Play's internal testing) for an Android app.
      */
-    channel: "testflight";
+    channel: "testflight" | "play_internal";
     /**
-     * The groups it goes to once ready.
+     * The groups it goes to once ready. TestFlight's alone: Play's internal testing reaches the testers its track lists in Play Console.
      */
     groups?: string[];
     what_to_test?: WhatToTest;
@@ -348,9 +375,9 @@ export type Delivery = {
      */
     asc_build_id: string | null;
     /**
-     * The channel.
+     * The channel: TestFlight, or Play's internal testing track.
      */
-    channel: "testflight";
+    channel: "testflight" | "play_internal";
     /**
      * When it was first sent.
      */
@@ -360,7 +387,7 @@ export type Delivery = {
      */
     error: string | null;
     /**
-     * Why it failed: apple_agreement, apple_key_refused, certificate_limit, app_record_missing, manual_step, capability_missing, not_an_ipa, apple_refused, upload_failed, processing_failed, build_changed (the kept build is not the one uploaded), build_gone (no longer kept: builds are kept 90 days), step_timed_out (signing or handing it over took more than 45 minutes), worker_stopped (it stopped the module's worker three times), gave_up.
+     * Why it failed: apple_agreement, apple_key_refused, certificate_limit, app_record_missing, manual_step, capability_missing, not_an_ipa, apple_refused, upload_failed, processing_failed, build_changed (the kept build is not the one uploaded), build_gone (no longer kept: builds are kept 90 days), step_timed_out (signing or handing it over took more than 45 minutes), worker_stopped (it stopped the module's worker three times), build_number_taken (App Store Connect has a build of this version and number this delivery did not upload: send a new package), gave_up (failed tries in a row; its error names the reference Palbase keeps the cause under). A Play delivery's: google_not_connected, google_no_access (Play Console has not invited the service account with the app), play_app_missing, first_release_manual (Play takes the app's first release only in Play Console: upload the signed bundle there, from its link), google_refused (Play's own words), no_upload_key, not_an_aab.
      */
     error_code: string | null;
     /**
@@ -371,6 +398,14 @@ export type Delivery = {
      * The package.
      */
     package_id: string;
+    /**
+     * The release's status on the Play track: completed — testers get it — or draft, on an app never published, which only Play Console rolls out.
+     */
+    play_release_status?: "completed" | "draft";
+    /**
+     * The version code Play took (a Play delivery, once ready).
+     */
+    play_version_code?: number;
     /**
      * Apple's processing state.
      */
@@ -416,6 +451,14 @@ export type DeliveryChangedEvent = {
      * The package.
      */
     package_id: string;
+    /**
+     * The release's status on the Play track (ready).
+     */
+    play_release_status?: "completed" | "draft";
+    /**
+     * The version code Play took (ready).
+     */
+    play_version_code?: number;
     /**
      * Where it is now.
      */
@@ -499,6 +542,93 @@ export type FeedbackPage = {
      */
     feedback: Feedback[];
 };
+/**
+ * The project's Play connection as the API shows it: the service account its Play Console invites, and what Play let it reach. There is no key: Palbase acts as the account.
+ */
+export type GoogleAccount = {
+    /**
+     * What the person has to do in Play Console.
+     */
+    action?: string;
+    /**
+     * What each Android app answered, when the connection was checked just now.
+     */
+    apps?: GoogleAppCheck[];
+    /**
+     * What it reached when it was last checked, over the project's apps.
+     */
+    capabilities?: ("releases" | "products")[];
+    /**
+     * When Play was last asked.
+     */
+    checked_at?: string | null;
+    /**
+     * Whether the project has a Play connection.
+     */
+    connected: boolean;
+    /**
+     * When it was connected.
+     */
+    connected_at?: string;
+    /**
+     * Who connected it.
+     */
+    connected_by?: string;
+    /**
+     * The service account its Play Console invites (Users and permissions).
+     */
+    service_account?: string;
+    /**
+     * invited: made, and no app answered it yet (Play Console has not invited it). active: Play answers it for an app. refused: it answered once, and no app does any more.
+     */
+    status?: "invited" | "active" | "refused";
+};
+/**
+ * One Android app's answer to a check of the Play connection.
+ */
+export type GoogleAppCheck = {
+    /**
+     * The app.
+     */
+    app_id: string;
+    /**
+     * What the account reached of it: releases (it opens an edit — uploads builds, changes tracks), products (it reads its subscriptions).
+     */
+    capabilities: ("releases" | "products")[];
+    /**
+     * Its package name.
+     */
+    package_name: string;
+    /**
+     * Why Play did not let the account reach it.
+     */
+    problem?: string;
+    /**
+     * Whether Play let the service account reach it.
+     */
+    reached: boolean;
+};
+/**
+ * stores.google.changed: the project's Play connection was made, checked (and Play's answer changed) or disconnected.
+ */
+export type GoogleChangedEvent = {
+    /**
+     * What it reaches (checked).
+     */
+    capabilities?: string[];
+    /**
+     * What happened.
+     */
+    change: "connected" | "checked" | "disconnected";
+    /**
+     * The service account.
+     */
+    service_account: string;
+    /**
+     * What Play said of it (connected, checked).
+     */
+    status?: "invited" | "active" | "refused";
+};
 /**
  * A group of people who test an app: in TestFlight an internal group (the account's App Store Connect users, who get a build at once) and an external one (everyone else, after Beta App Review).
  */
@@ -618,15 +748,15 @@ export type GroupTester = {
     side: "internal" | "external";
 };
 /**
- * The unsigned .ipa, as the build machine made it.
+ * The build as the build machine made it: an unsigned .ipa, or an Android App Bundle (.aab) — unsigned, or signed with the app's upload key.
  */
 export type IPAFile = Blob;
 /**
- * How the app is called at Apple.
+ * How the app is called in its store.
  */
 export type LinkAppRequest = {
     /**
-     * Its name at Apple (folded to letters, digits and spaces); the bundle id when absent.
+     * Its name in the store (at Apple, folded to letters, digits and spaces); the bundle id or package name when absent.
      */
     name?: string;
 };
@@ -674,6 +804,10 @@ export type Package = {
      * The .ipa's SHA-256.
      */
     sha256: string | null;
+    /**
+     * The certificate an Android bundle came signed with by its maker; absent when Palbase signs it with the app's upload key.
+     */
+    signer_fingerprint?: string;
     /**
      * The .ipa's size in bytes.
      */
@@ -729,6 +863,10 @@ export type PackageChangedEvent = {
      * The package.
      */
     package_id: string;
+    /**
+     * An Android bundle's signer (uploaded): palbase, with the app's upload key, or its maker.
+     */
+    signed_by?: "palbase" | "maker";
     /**
      * Its version (uploaded).
      */
@@ -1011,6 +1149,23 @@ export type TestersRequest = {
      */
     testers: TesterInput[];
 };
+/**
+ * An Android app's upload key as the API shows it: its certificate, never its private key.
+ */
+export type UploadKey = {
+    /**
+     * The certificate (PEM).
+     */
+    certificate: string;
+    /**
+     * When Palbase made it.
+     */
+    created_at: string;
+    /**
+     * The certificate's SHA-256, as Play Console shows an upload key.
+     */
+    fingerprint: string;
+};
 /**
  * A build's note to testers.
  */
@@ -1046,6 +1201,10 @@ export interface Events {
      * stores.delivery.requested: a delivery was sent (or sent again); the stores module runs it.
      */
     "stores.delivery.requested": DeliveryRequestedEvent;
+    /**
+     * stores.google.changed: the project's Play connection was made, checked (and Play's answer changed) or disconnected.
+     */
+    "stores.google.changed": GoogleChangedEvent;
     /**
      * stores.group.changed: a group was made, renamed, deleted, its testers set, or a build given to it.
      */
@@ -1084,7 +1243,7 @@ export declare function client(t: Transport): {
     /**
      * Confirm an action
      *
-     * Runs a planned action: only with its hash, only once, only before it expires. Emits `stores.action.changed`.
+     * Runs a planned action: only a person's confirmation — Studio's call for its developer, signed in (it carries Studio's word for them, X-Palbase-Person) — only with its hash, only once, only before it expires. The project's secret key alone, an organization's access token or a CI job is refused (403 `person_required`), before the action is looked up. Emits `stores.action.changed`.
      */
     confirmAction(input: {
         path: {
@@ -1245,7 +1404,7 @@ export declare function client(t: Transport): {
     /**
      * Link an app to its store
      *
-     * Links one of the project's registered iOS apps (this environment's bundle and team) to the App Store: its bundle id is registered on the Apple account when it is not, and its App Store Connect record is looked up — Apple lets only a person make that, once, on the website. Linking again refreshes both. Emits `stores.app.changed`.
+     * Links one of the project's registered apps to its store. An iOS app (this environment's bundle and team): its bundle id is registered on the Apple account when it is not, and its App Store Connect record is looked up — Apple lets only a person make that, once, on the website. An Android app (its package): Palbase makes the app's upload key (its builds are signed with it, the first release in Play Console too) and asks Play, as the project's Play connection, what it reaches of the app. Linking again refreshes them and keeps the upload key. Emits `stores.app.changed`.
      */
     linkApp(input: {
         path: {
@@ -1301,6 +1460,28 @@ export declare function client(t: Transport): {
         body: ReviewInfo; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
         signal?: AbortSignal;
     }): Promise<Reply<200, ReviewInfoAnswer>>;
+    /**
+     * Read an Android app's upload key
+     *
+     * The certificate of the upload key Palbase signs the app's builds with — never its private key: what Play Console shows of an app's upload key, and asks for when it is changed to Palbase's.
+     */
+    getUploadKey(input: {
+        path: {
+            app_id: string;
+        }; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
+        signal?: AbortSignal;
+    }): Promise<Reply<200, UploadKey>>;
+    /**
+     * Download a signed bundle with its link
+     *
+     * The signed bundle a link names (POST …/bundle-link). The token in the link is the authorization: sealed for this project's bundle, until it expires.
+     */
+    downloadSignedBundle(input: {
+        query: {
+            token: string;
+        }; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
+        signal?: AbortSignal;
+    }): Promise<Reply<200, Response>>;
     /**
      * The connect page
      *
@@ -1318,6 +1499,47 @@ export declare function client(t: Transport): {
         body: ConnectAppleKeyRequest; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
         signal?: AbortSignal;
     }): Promise<Reply<200, AppleAccount>>;
+    /**
+     * Read the project's Play connection
+     *
+     * The project's Play connection: the service account its Play Console invites, its status and what Play let it reach.
+     */
+    getGoogleAccount(input?: {
+        signal?: AbortSignal;
+    }): Promise<Reply<200, GoogleAccount>>;
+    /**
+     * Connect Google Play
+     *
+     * Makes the project's service account in Palbase's Google Cloud project and answers it, with what to do next: invite it in Play Console (Users and permissions) with the app. It holds no key — Palbase acts as it. Connecting again answers the same account. Emits `stores.google.changed` (connected).
+     */
+    connectGoogle(input?: {
+        headers?: {
+            "Idempotency-Key"?: string;
+        }; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
+        signal?: AbortSignal;
+    }): Promise<Reply<200, GoogleAccount> | Reply<201, GoogleAccount>>;
+    /**
+     * Disconnect Google Play
+     *
+     * Deletes the project's service account at Google, then forgets it: Play Console's invite of it reaches nothing any more. Emits `stores.google.changed` (disconnected).
+     */
+    disconnectGoogle(input?: {
+        headers?: {
+            "Idempotency-Key"?: string;
+        }; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
+        signal?: AbortSignal;
+    }): Promise<Reply<204, undefined>>;
+    /**
+     * Check the Play connection
+     *
+     * Asks Play, as the project's service account, what it reaches of each of the project's Android apps: after Play Console invited it, or changed what it may do. Emits `stores.google.changed` (checked) when Play's answer changed.
+     */
+    checkGoogleAccount(input?: {
+        headers?: {
+            "Idempotency-Key"?: string;
+        }; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
+        signal?: AbortSignal;
+    }): Promise<Reply<200, GoogleAccount>>;
     /**
      * Delete a group
      *
@@ -1415,7 +1637,7 @@ export declare function client(t: Transport): {
     /**
      * Hand over a package's build
      *
-     * A build machine hands over the unsigned .ipa with the package's upload token (Palbase-Upload-Token header) and its Content-Length. It must be the app's — its bundle id, and the build number the package was given — or it is refused and the package keeps waiting for the right file. One upload of a package at a time, two of a project's at once (409 `upload_in_progress`); an upload ends within an hour and waits a minute at most for its next bytes. Sent again after it arrived, the same token answers 409 `package_uploaded`. Emits `stores.package.changed` (uploaded).
+     * A build machine hands over the unsigned .ipa with the package's upload token (Palbase-Upload-Token header) and its Content-Length. It must be the app's — its bundle id, and the build number the package was given — or it is refused and the package keeps waiting for the right file. One upload of a package at a time, two of a project's at once (409 `upload_in_progress`); an upload ends within an hour, waits a minute at most for its next bytes and, after its first minute, keeps up 256 KiB a second on average (400 `upload_too_slow`). Sent again after it arrived, the same token answers 409 `package_uploaded`. Emits `stores.package.changed` (uploaded).
      */
     uploadArtifact(input: {
         path: {
@@ -1468,6 +1690,21 @@ export declare function client(t: Transport): {
         body: DeliverRequest; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
         signal?: AbortSignal;
     }): Promise<Reply<200, Delivery> | Reply<202, Delivery>>;
+    /**
+     * Link to a Play delivery's signed bundle
+     *
+     * A link, on the project's own address and valid 15 minutes, to the package's bundle as signed for the channel with the app's upload key: the file a person uploads in Play Console when Play takes an app's first release only there. Its bytes go from the project's address straight to whoever downloads it.
+     */
+    getSignedBundleLink(input: {
+        path: {
+            package_id: string; /** The Play channel. */
+            channel: "play_internal";
+        };
+        headers?: {
+            "Idempotency-Key"?: string;
+        }; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
+        signal?: AbortSignal;
+    }): Promise<Reply<201, BundleLink>>;
     /**
      * Plan expiring a build
      *

package/types/internal/src/transport.d.ts

@@ -57,6 +57,11 @@ export declare class PalbaseError extends Error {
     /** The refusal's body as sent, for the answers that are not the envelope (OAuth errors, proof-of-work). */
     readonly body?: unknown;
     readonly op: string;
+    /**
+     * The request was never answered — no network, the host unreachable — and may be tried again. A refusal made on
+     * the device has status 0 too, and is not one: ask this, not `status === 0`.
+     */
+    get isNetworkError(): boolean;
     constructor(init: {
         op: string;
         status: number;

package/types/server/src/auth/jwt.d.ts

@@ -30,11 +30,6 @@ export declare class AuthUnavailable extends Error {
 }
 /** Whether the session the token belongs to still stands: true, false, or a throw when that cannot be told now. */
 export type SessionStanding = (token: string, sessionId: string) => Promise<boolean>;
-/**
- * The platform's answer to whether a token's session stands: GET /auth/user
- * with the token and the project's secret key — the edge answers it from the
- * session's standing; a 401 is a session that has ended.
- */
 export declare function sessionStanding(opts: {
     url: string;
     secretKey: string;
@@ -60,7 +55,7 @@ export interface VerifierOptions {
     refetchIntervalMs?: number;
     /** How long the key set is waited for, ms (default 5000). */
     fetchTimeoutMs?: number;
-    /** The platform's answer to "does this token's session stand" (bootstrap asks GET /auth/user). */
+    /** The platform's answer to "does this token's session stand" (bootstrap asks the edge: GET /auth/session/standing). */
     standing: SessionStanding;
     /** How long a session's standing is kept, ms (default 1000): a session that ended is refused within it. */
     standingTtlMs?: number;

package/types/web/src/auth.d.ts

@@ -1,6 +1,6 @@
 import { auth as authModule } from '../../internal/src/modules/index.js';
 import type { Transport } from '../../internal/src/transport.js';
-import type { AuthEvent, Session, SessionManager } from './session.js';
+import type { AuthEvent, Session, SessionEndReason, SessionManager } from './session.js';
 type A = typeof authModule;
 export type User = authModule.User;
 export type SignupRequest = authModule.SignupRequest;
@@ -83,7 +83,10 @@ export declare class Auth {
         remove: (id: string) => Promise<void>;
     };
     readonly magicLink: {
-        send: (email: string) => Promise<void>;
+        /** Sends the link; redirectTo is where it lands instead of the site URL — on the allow-list, or one of the project's web apps' redirects. */
+        send: (email: string, options?: {
+            redirectTo?: string;
+        }) => Promise<void>;
         /** The token from the link the email carried. */
         verify: (token: string) => Promise<User>;
     };
@@ -92,8 +95,10 @@ export declare class Auth {
         verifyCode: (phone: string, code: string) => Promise<SignInResult>;
     };
     readonly password: {
-        /** Sends the reset link; finish with confirmReset(token, newPassword). */
-        requestReset: (email: string) => Promise<void>;
+        /** Sends the reset link; finish with confirmReset(token, newPassword). redirectTo is where it lands instead of the site URL — on the allow-list, or one of the project's web apps' redirects. */
+        requestReset: (email: string, options?: {
+            redirectTo?: string;
+        }) => Promise<void>;
         confirmReset: (token: string, newPassword: string) => Promise<void>;
         change: (body: authModule.PasswordChangeRequest) => Promise<authModule.SuccessResponse>;
         set: (body: authModule.PasswordSetRequest) => Promise<authModule.SuccessResponse>;
@@ -113,6 +118,12 @@ export declare class Auth {
     onAuthStateChange(listener: (event: AuthEvent, session: Session | null) => void): () => void;
     /** The current session, or null when no one is signed in. */
     currentSession(): Promise<Session | null>;
+    /**
+     * Why the last session ended without the app signing out — set before SESSION_EXPIRED is told, so a listener
+     * reads it: the account deleted ('userDeleted') or suspended ('userBanned'), the session revoked ('revoked') or
+     * run out ('expired'). Null once someone signs in or the app signs out.
+     */
+    get sessionEndReason(): SessionEndReason | null;
     /** Creates the account. When the project signs new users in at once, the session starts too. */
     signUp(body: SignupRequest): Promise<authModule.SignupResult>;
     /** Email and password. A second factor, when the account has one, is asked for in mfaRequired. */

package/types/web/src/backends.d.ts

@@ -1,6 +1,6 @@
-import type { Transport } from '../../internal/src/transport.js';
+import { type Transport } from '../../internal/src/transport.js';
 import { BackendError } from './backend-error.js';
-import { type RoomDescriptor, type RoomEvent, type RoomHandle } from './rooms.js';
+import { type GatewayDescriptor, type GatewayEvent, type JoinedGateway, type JoinOptions } from './gateways.js';
 import type { RealtimeSocket } from './socket.js';
 export interface CallOptions {
     headers?: Record<string, string>;
@@ -59,22 +59,29 @@ export interface BackendBase {
      */
     call<O = unknown>(name: string, input?: unknown, options?: CallOptions): Promise<O>;
     /**
-     * Joins a room the backend declared with `@Room` — `room` is the generated
-     * module's, `params` its pattern's `{param}` values: resolves once the
-     * backend let the user in, with the handle its events arrive on and its
-     * messages go through; rejects with a RoomError (its reason) when it did not.
+     * Joins a gateway the backend declared with `@Gateway` — `gateway` is the
+     * generated module's, `params` its pattern's `{param}` values: resolves once
+     * the backend let the user in, with the handle its events arrive on and its
+     * messages go through (each answered with its ack); rejects with a
+     * GatewayError (its reason) when it did not. A durable gateway's handle is
+     * sent what it keeps first, unless `{ history: false }`; a chat gateway's
+     * holds the chat its server piped there (`handle.chat`).
      *
-     *     const room = await pb.api.join(AiSessionIdRoom, { sessionId });
-     *     room.on('token', (t) => transcript.push(t.text));
-     *     await room.send('say', { text: 'hello' });
-     *     room.leave();
+     *     const chat = await pb.api.join(ChatGateway, { chatId });
+     *     chat.chat.subscribe((s) => render(s.items));
+     *     const { id } = await chat.send('say', { text: 'hello' });
+     *     chat.leave();
      */
-    join<E extends RoomEvent, S, P extends readonly string[]>(room: RoomDescriptor<E, S, P>, params: Record<P[number], string>): Promise<RoomHandle<E, S>>;
+    join<E extends GatewayEvent, S, R, P extends readonly string[], C extends boolean = false>(gateway: GatewayDescriptor<E, S, R, P, C>, params: Record<P[number], string>, options?: JoinOptions): Promise<JoinedGateway<E, S, R, C>>;
 }
 /** What every client createClient makes inherits: one getter per registered backend name. */
 export declare const clientBase: object;
-/** Gives a client made by createClient its project's origin, its way to the machines, its project's transport (an upload's way, through storage) and its socket (a room's). */
-export declare function bindMachines(client: object, project: string, machine: (url: string) => Transport, storage: Transport, socket: RealtimeSocket): void;
+/**
+ * Gives a client made by createClient its project's origin, its way to the
+ * machines, its project's transport (an upload's way, through storage), its
+ * socket (a gateway's) and its signed-in user (a chat gateway's own turns).
+ */
+export declare function bindMachines(client: object, project: string, machine: (url: string) => Transport, storage: Transport, socket: RealtimeSocket, me?: () => string | undefined): void;
 /**
  * Registers a backend under `client` for the clients of `project` (the
  * address createClient is given) — the machine `machine`, at `url` — called