@fias/arche-sdk 2.28.0 → 2.30.0

package/dist/index.mjs

@@ -273,9 +273,17 @@ var FiasBridge = class {
     this.vendoredAssets = null;
     this.textModels = null;
     this.textModelListeners = /* @__PURE__ */ new Set();
+    this.holder = null;
+    this.holderListeners = /* @__PURE__ */ new Set();
     this.currentPath = "";
+    // Host-chrome state (useFiasChrome). `null` until init, and from a host
+    // older than the chrome lane — `hasChrome` tells the two apart.
+    this.chrome = null;
+    this.hasChrome = false;
+    this.chromeListeners = /* @__PURE__ */ new Set();
     this.hostOrigin = "";
     this.themeListeners = /* @__PURE__ */ new Set();
+    this.accessListeners = /* @__PURE__ */ new Set();
     this.navigationListeners = /* @__PURE__ */ new Set();
     this.stepNavigationListeners = /* @__PURE__ */ new Set();
     // Preview-state preservation (preview mode only). Keyed so multiple
@@ -327,12 +335,21 @@ var FiasBridge = class {
         this.theme = mergeThemeWithDefaults(initMsg.payload.theme);
         this.vendoredAssets = initMsg.payload.vendoredAssets ?? null;
         this.textModels = initMsg.payload.textModels ?? null;
+        this.holder = initMsg.payload.holder ?? null;
         this.currentPath = initMsg.payload.currentPath;
+        this.hasChrome = "chrome" in initMsg.payload;
+        this.chrome = initMsg.payload.chrome ?? null;
         this.initialized = true;
         this.initResolve?.();
         for (const listener of this.navigationListeners) {
           listener(this.currentPath);
         }
+        for (const listener of this.holderListeners) {
+          listener(this.holder);
+        }
+        for (const listener of this.chromeListeners) {
+          listener(this.chrome);
+        }
         return;
       }
       if (this.hostOrigin && event.origin !== this.hostOrigin) return;
@@ -343,6 +360,10 @@ var FiasBridge = class {
         }
         return;
       }
+      if (data.type === "access_update") {
+        for (const listener of this.accessListeners) listener();
+        return;
+      }
       if (data.type === "text_models_update") {
         if (Array.isArray(data.payload)) {
           this.textModels = data.payload;
@@ -359,6 +380,16 @@ var FiasBridge = class {
         }
         return;
       }
+      if (data.type === "chrome_update") {
+        if (data.payload && typeof data.payload === "object") {
+          this.hasChrome = true;
+          this.chrome = data.payload;
+          for (const listener of this.chromeListeners) {
+            listener(this.chrome);
+          }
+        }
+        return;
+      }
       if (data.type === "step_navigate") {
         const { nodeId } = data.payload;
         if (typeof nodeId === "string") {
@@ -586,6 +617,37 @@ var FiasBridge = class {
   getCurrentPath() {
     return this.currentPath;
   }
+  /**
+   * The host-chrome state, or null before init / from a host without the
+   * chrome lane (`hasChromeSupport` tells the two apart). See `useFiasChrome`.
+   */
+  getChrome() {
+    return this.chrome;
+  }
+  /** True once a host has delivered chrome state (init or chrome_update). */
+  hasChromeSupport() {
+    return this.hasChrome;
+  }
+  /** Called on init and on every chrome_update. */
+  onChromeUpdate(listener) {
+    this.chromeListeners.add(listener);
+    return () => this.chromeListeners.delete(listener);
+  }
+  /**
+   * Set host-chrome state for this arche (fire-and-forget; the host echoes the
+   * result as chrome_update). Every present key must be a boolean — the host
+   * drops the whole message otherwise. See `useFiasChrome`.
+   */
+  setChrome(patch) {
+    this.send("chrome_set", patch);
+  }
+  /**
+   * Leave the arche for a host destination — a closed enum, never a URL.
+   * See `useFiasChrome`.
+   */
+  navigateHost(target) {
+    this.send("chrome_navigate", { target });
+  }
   /**
    * The live text-model catalog, or null until the host has delivered it (or
    * when the plugin lacks `entities:invoke`). See `useTextModels`.
@@ -593,6 +655,19 @@ var FiasBridge = class {
   getTextModels() {
     return this.textModels;
   }
+  /**
+   * The workspace the plugin was opened in, or null before init, without
+   * `user:profile:read` / `data:workspace`, or from an older host. Fixed for
+   * the life of the plugin. See `useFiasHolder`.
+   */
+  getHolder() {
+    return this.holder;
+  }
+  /** Called once, when init delivers the holder. */
+  onHolderReady(listener) {
+    this.holderListeners.add(listener);
+    return () => this.holderListeners.delete(listener);
+  }
   onTextModelsUpdate(listener) {
     this.textModelListeners.add(listener);
     return () => this.textModelListeners.delete(listener);
@@ -601,6 +676,14 @@ var FiasBridge = class {
     this.themeListeners.add(listener);
     return () => this.themeListeners.delete(listener);
   }
+  /**
+   * The host says the person's own access may have changed (ADR-034) — after
+   * its access sheet changed it. Carries nothing: ask `my_access` again.
+   */
+  onAccessUpdate(listener) {
+    this.accessListeners.add(listener);
+    return () => this.accessListeners.delete(listener);
+  }
   onNavigationUpdate(listener) {
     this.navigationListeners.add(listener);
     return () => this.navigationListeners.delete(listener);
@@ -724,7 +807,9 @@ var FiasBridge = class {
     }
     this.pendingRequests.clear();
     this.themeListeners.clear();
+    this.accessListeners.clear();
     this.textModelListeners.clear();
+    this.holderListeners.clear();
     this.navigationListeners.clear();
     this.stepNavigationListeners.clear();
     this.previewStateProviders.clear();
@@ -757,7 +842,7 @@ var FiasBridge = class {
   /**
    * Listens for the terminal ending of a logical realtime subscription.
    * Reasons are a closed union — `authorization_revoked` and
-   * `collection_deleted` are definitive; the rest may be worth a fresh
+   * `collection_deleted` (the resource is gone) are definitive; the rest may be worth a fresh
    * subscribe once conditions change.
    */
   onSubscriptionEnded(subscriptionId, listener) {
@@ -1068,17 +1153,46 @@ var PLUGIN_WORKSPACES_ENTITY_ID = "ent_intg_plugin_workspaces_00000";
 var PLUGIN_STORE_ENTITY_ID = "ent_intg_plugin_store_0000000000";
 var VAULT_USER_DOCUMENTS_ENTITY_ID = "ent_intg_vault_documents_0000000";
 var VAULT_ARCHE_DOCUMENTS_ENTITY_ID = "ent_intg_vault_arche_docs_000000";
+var VAULT_CREATIVE_ENTITY_ID = "ent_intg_vault_creative_00000000";
 var COMMUNITY_ASSETS_ENTITY_ID = "ent_intg_community_assets_000000";
 var DOCUMENT_SIGN_ENTITY_ID = "ent_intg_document_sign_000000000";
 var COMPANY_EMAIL_SEND_ENTITY_ID = "ent_intg_company_email_send_0000";
+var CONNECTIONS_ENTITY_ID = "ent_intg_connections_00000000000";
+var CONNECTIONS_CONNECT_ENTITY_ID = "ent_intg_connections_connect_000";
+var X_ENTITY_ID = "ent_intg_twitter_000000000000000";
+var LINKEDIN_ENTITY_ID = "ent_intg_linkedin_00000000000000";
+var ACTION_CONFIRMATION_ENTITY_ID = "ent_intg_action_confirmation_000";
+var APP_ACCESS_DIALOG_ENTITY_ID = "ent_intg_app_access_dialog_00000";
+var CREATIVE_PICKER_ENTITY_ID = "ent_intg_creative_picker_0000000";
+var SCHEDULED_INVOCATIONS_ENTITY_ID = "ent_intg_scheduled_invocations00";
+var CONFIRM_TIMEOUT_MS = 10 * 60 * 1e3;
+var APPROVED_CALL_TIMEOUT_MS = 2 * 60 * 1e3;
 var COMMUNITY_ASSET_MAX_URL_BATCH = 50;
 var COMMUNITY_ASSET_MAX_PUBLISH_BATCH = 20;
 async function invokeEntityOp(bridge, entityId, op, args = {}) {
-  const res = await bridge.request("entity_invoke", {
-    entityId,
-    payload: { op, ...args }
-  });
-  return res.output;
+  const payload = { op, ...args };
+  const res = await bridge.request("entity_invoke", { entityId, payload });
+  if (!res.confirmationRequired) return res.output;
+  return confirmAndResend(bridge, entityId, payload, res.confirmationRequired.pendingActionId);
+}
+async function confirmAndResend(bridge, entityId, payload, pendingActionId) {
+  const answer = await bridge.request(
+    "client_entity_invoke",
+    { entityId: ACTION_CONFIRMATION_ENTITY_ID, input: { pendingActionId } },
+    CONFIRM_TIMEOUT_MS
+  );
+  if (answer && "error" in answer) {
+    throw new FiasBridgeError(answer.error.message, answer.error.code);
+  }
+  if (!answer?.approved) {
+    throw new FiasBridgeError("The person declined this action", "USER_DECLINED");
+  }
+  const done = await bridge.request(
+    "entity_invoke",
+    { entityId, payload, pendingActionId },
+    APPROVED_CALL_TIMEOUT_MS
+  );
+  return done.output;
 }
 async function invokeStoreOp(bridge, op, args = {}) {
   return bridge.request("entity_invoke", {
@@ -1259,6 +1373,15 @@ function useTextModels() {
   }, [bridge]);
   return models;
 }
+function useFiasHolder() {
+  const bridge = useBridge();
+  const [holder, setHolder] = useState2(bridge.getHolder());
+  useEffect2(() => {
+    setHolder(bridge.getHolder());
+    return bridge.onHolderReady(setHolder);
+  }, [bridge]);
+  return holder;
+}
 var IMAGE_GENERATE_TIMEOUT_MS = 32e4;
 function useImageGeneration() {
   const bridge = useBridge();
@@ -1518,6 +1641,72 @@ function usePersistentState(key, initialValue) {
   );
   return [value, setValue];
 }
+var INERT_CHROME = {
+  focusMode: false,
+  focusModeAvailable: false,
+  sidebarAvailable: false,
+  sidebarCollapsed: false,
+  hostExpandedBar: true,
+  hostExpandButton: true
+};
+function useFiasChrome() {
+  const bridge = useBridge();
+  const [chrome, setChrome] = useState2(bridge.getChrome());
+  const [supported, setSupported] = useState2(bridge.hasChromeSupport());
+  useEffect2(() => {
+    let cancelled = false;
+    bridge.waitForInit().then(() => {
+      if (cancelled) return;
+      setChrome(bridge.getChrome());
+      setSupported(bridge.hasChromeSupport());
+    });
+    const unsubscribe = bridge.onChromeUpdate((next) => {
+      setChrome(next);
+      setSupported(bridge.hasChromeSupport());
+    });
+    return () => {
+      cancelled = true;
+      unsubscribe();
+    };
+  }, [bridge]);
+  useEffect2(() => {
+    bridge.setChrome({ hostExpandButton: false });
+  }, [bridge]);
+  const setFocusMode = useCallback((on) => bridge.setChrome({ focusMode: on }), [bridge]);
+  const setSidebarCollapsed = useCallback(
+    (collapsed) => bridge.setChrome({ sidebarCollapsed: collapsed }),
+    [bridge]
+  );
+  const setHostExpandedBar = useCallback(
+    (shown) => bridge.setChrome({ hostExpandedBar: shown }),
+    [bridge]
+  );
+  const goToFiasHome = useCallback(() => bridge.navigateHost("home"), [bridge]);
+  const goToWorktop = useCallback(() => bridge.navigateHost("worktop"), [bridge]);
+  const openAssistant = useCallback(() => bridge.openAssistant(), [bridge]);
+  return useMemo2(
+    () => ({
+      ...chrome ?? INERT_CHROME,
+      supported: supported && chrome !== null,
+      setFocusMode,
+      setSidebarCollapsed,
+      setHostExpandedBar,
+      goToFiasHome,
+      goToWorktop,
+      openAssistant
+    }),
+    [
+      chrome,
+      supported,
+      setFocusMode,
+      setSidebarCollapsed,
+      setHostExpandedBar,
+      goToFiasHome,
+      goToWorktop,
+      openAssistant
+    ]
+  );
+}
 function useStepNavigation(initialStep, options) {
   const bridge = useBridge();
   const persistKey = options?.persistKey;
@@ -1619,15 +1808,34 @@ function useFiasDataStore() {
         "put",
         {
           collection,
-          key,
+          // No key: the server makes one (collections with audiences, ADR-034).
+          ...key !== null ? { key } : {},
           data,
-          workspaceId: options?.workspaceId
+          workspaceId: options?.workspaceId,
+          ...options?.audience !== void 0 ? { audience: options.audience } : {}
         }
       );
-      return { version: res?.version };
+      return {
+        version: res?.version,
+        ...res?.key !== void 0 ? { key: res.key } : {},
+        ...res?.audience !== void 0 ? { audience: res.audience } : {}
+      };
     },
     [bridge]
   );
+  const create = useCallback(
+    async (collection, data, options) => {
+      const result = await put(collection, null, data, options);
+      if (result.key === void 0) {
+        throw new FiasBridgeError(
+          "This Fias does not support creating documents in audiences yet",
+          "AUDIENCES_UNAVAILABLE"
+        );
+      }
+      return { ...result, key: result.key };
+    },
+    [put]
+  );
   const get = useCallback(
     async (collection, key, options) => {
       const res = await invokeEntityOp(
@@ -1637,7 +1845,8 @@ function useFiasDataStore() {
         {
           collection,
           key,
-          workspaceId: options?.workspaceId
+          workspaceId: options?.workspaceId,
+          ...options?.audience !== void 0 ? { audience: options.audience } : {}
         }
       );
       return res.data;
@@ -1649,7 +1858,8 @@ function useFiasDataStore() {
       const res = await invokeEntityOp(bridge, PLUGIN_DATASTORE_ENTITY_ID, "get", {
         collection,
         key,
-        workspaceId: options?.workspaceId
+        workspaceId: options?.workspaceId,
+        ...options?.audience !== void 0 ? { audience: options.audience } : {}
       });
       if (res.data === null || res.data === void 0) return null;
       return {
@@ -1657,7 +1867,8 @@ function useFiasDataStore() {
         data: res.data,
         updatedAt: res.updatedAt ?? "",
         ...res.version !== void 0 ? { version: res.version } : {},
-        ...res.authoredByCollaborator !== void 0 ? { authoredByCollaborator: res.authoredByCollaborator } : {}
+        ...res.authoredByCollaborator !== void 0 ? { authoredByCollaborator: res.authoredByCollaborator } : {},
+        ...res.audience !== void 0 ? { audience: res.audience } : {}
       };
     },
     [bridge]
@@ -1674,7 +1885,8 @@ function useFiasDataStore() {
         // answered WORKSPACE_REQUIRED, pointing the author at the collection
         // rather than at the call. Take the scope arg when it carries one and
         // otherwise leave whatever the spread put there.
-        ...scope?.workspaceId !== void 0 ? { workspaceId: scope.workspaceId } : {}
+        ...scope?.workspaceId !== void 0 ? { workspaceId: scope.workspaceId } : {},
+        ...scope?.audience !== void 0 ? { audience: scope.audience } : {}
       });
     },
     [bridge]
@@ -1690,7 +1902,8 @@ function useFiasDataStore() {
           query: queryText,
           ...options,
           // See `query` above — never blank a caller-supplied workspaceId.
-          ...scope?.workspaceId !== void 0 ? { workspaceId: scope.workspaceId } : {}
+          ...scope?.workspaceId !== void 0 ? { workspaceId: scope.workspaceId } : {},
+          ...scope?.audience !== void 0 ? { audience: scope.audience } : {}
         }
       );
       return res.matches;
@@ -1728,6 +1941,7 @@ function useFiasDataStore() {
       listCollections,
       deleteCollection,
       put,
+      create,
       get,
       getDocument,
       query,
@@ -1740,6 +1954,7 @@ function useFiasDataStore() {
       listCollections,
       deleteCollection,
       put,
+      create,
       get,
       getDocument,
       query,
@@ -1763,6 +1978,15 @@ function useFiasWorkspaces() {
     },
     [bridge]
   );
+  const openForWorkspace = useCallback(async () => {
+    const res = await invokeEntityOp(
+      bridge,
+      PLUGIN_WORKSPACES_ENTITY_ID,
+      "create",
+      { forActingHolder: true }
+    );
+    return res.workspace;
+  }, [bridge]);
   const list = useCallback(async () => {
     const res = await invokeEntityOp(
       bridge,
@@ -1840,10 +2064,237 @@ function useFiasWorkspaces() {
     [bridge]
   );
   return useMemo2(
-    () => ({ create, list, get, archive, listMembers, addMember, updateMember, removeMember }),
-    [create, list, get, archive, listMembers, addMember, updateMember, removeMember]
+    () => ({
+      create,
+      openForWorkspace,
+      list,
+      get,
+      archive,
+      listMembers,
+      addMember,
+      updateMember,
+      removeMember
+    }),
+    [
+      create,
+      openForWorkspace,
+      list,
+      get,
+      archive,
+      listMembers,
+      addMember,
+      updateMember,
+      removeMember
+    ]
   );
 }
+var NO_WORKSPACE_ACCESS_CODES = /* @__PURE__ */ new Set([
+  "NOT_A_MEMBER",
+  "WORKSPACE_NOT_FOUND"
+]);
+function useFiasAccess(workspaceId) {
+  const bridge = useBridge();
+  const known = workspaceId ? peekSharedAccess(bridge, workspaceId) : void 0;
+  const [settled, setSettled] = useState2(known?.settled ?? null);
+  const [fetching, setFetching] = useState2(known ? known.fetching : !!workspaceId);
+  useEffect2(() => {
+    if (!workspaceId) return;
+    const shared = sharedAccessFor(bridge, workspaceId);
+    const sync = () => {
+      setSettled(shared.settled);
+      setFetching(shared.fetching);
+    };
+    const unsubscribe = subscribeSharedAccess(shared, sync);
+    askSharedAccess(shared, "ensure");
+    sync();
+    return unsubscribe;
+  }, [bridge, workspaceId]);
+  const refetch = useCallback(() => {
+    if (workspaceId) askSharedAccess(sharedAccessFor(bridge, workspaceId), "again");
+  }, [bridge, workspaceId]);
+  const openAccessDialog = useCallback(async () => {
+    let answer;
+    try {
+      answer = await bridge.request(
+        "client_entity_invoke",
+        { entityId: APP_ACCESS_DIALOG_ENTITY_ID, input: {} },
+        ACCESS_SHEET_TIMEOUT_MS
+      );
+    } catch (err) {
+      if (err instanceof FiasBridgeError && err.code === "BRIDGE_ERROR" && err.message.includes("no client-side executor")) {
+        throw new FiasBridgeError("Managing access is not available here", "ACCESS_UNAVAILABLE");
+      }
+      throw err;
+    }
+    if (answer && "error" in answer) {
+      throw new FiasBridgeError(answer.error.message, answer.error.code);
+    }
+    const changed = answer?.changed === true;
+    if (changed) refetch();
+    return { changed };
+  }, [bridge, refetch]);
+  const own = workspaceId && settled?.workspaceId === workspaceId ? settled : null;
+  const current = known ? known.settled : own;
+  const access = current?.access ?? null;
+  const error = current?.error ?? null;
+  const isLoading = !!workspaceId && (current === null || (known ? known.fetching : fetching));
+  const can = useCallback(
+    (permission) => access?.mode === "roles" && access.permissions.includes(permission),
+    [access]
+  );
+  const canReadAudience = useCallback(
+    (audience) => access?.mode === "roles" && (access.audiences?.readable.includes(audience) ?? false),
+    [access]
+  );
+  const canDiscloseTo = useCallback(
+    (audience) => access?.mode === "roles" && (access.audiences?.disclosable.includes(audience) ?? false),
+    [access]
+  );
+  return useMemo2(
+    () => ({
+      access,
+      isLoading,
+      error,
+      refetch,
+      can,
+      canReadAudience,
+      canDiscloseTo,
+      openAccessDialog
+    }),
+    [access, isLoading, error, refetch, can, canReadAudience, canDiscloseTo, openAccessDialog]
+  );
+}
+var lastAccessAnswers = /* @__PURE__ */ new Map();
+var FOCUS_REFETCH_MIN_MS = 3e4;
+var ACCESS_SHEET_TIMEOUT_MS = 30 * 60 * 1e3;
+var sharedAccessByBridge = /* @__PURE__ */ new WeakMap();
+function peekSharedAccess(bridge, workspaceId) {
+  return sharedAccessByBridge.get(bridge)?.get(workspaceId);
+}
+function sharedAccessFor(bridge, workspaceId) {
+  let byWorkspace = sharedAccessByBridge.get(bridge);
+  if (!byWorkspace) {
+    byWorkspace = /* @__PURE__ */ new Map();
+    sharedAccessByBridge.set(bridge, byWorkspace);
+  }
+  let shared = byWorkspace.get(workspaceId);
+  if (!shared) {
+    shared = {
+      bridge,
+      workspaceId,
+      settled: null,
+      fetching: false,
+      answered: false,
+      answeredAt: 0,
+      inFlight: null,
+      scheduled: false,
+      again: false,
+      listeners: /* @__PURE__ */ new Set(),
+      stopListening: null
+    };
+    byWorkspace.set(workspaceId, shared);
+  }
+  return shared;
+}
+function releaseSharedAccess(shared) {
+  if (shared.listeners.size > 0 || shared.inFlight || shared.scheduled) return;
+  const byWorkspace = sharedAccessByBridge.get(shared.bridge);
+  if (byWorkspace?.get(shared.workspaceId) === shared) byWorkspace.delete(shared.workspaceId);
+}
+function notifySharedAccess(shared) {
+  for (const listener of Array.from(shared.listeners)) listener();
+}
+function subscribeSharedAccess(shared, listener) {
+  shared.listeners.add(listener);
+  if (!shared.stopListening) {
+    const unsubscribe = shared.bridge.onAccessUpdate(() => askSharedAccess(shared, "again"));
+    const onFocus = () => {
+      if (Date.now() - shared.answeredAt >= FOCUS_REFETCH_MIN_MS) {
+        askSharedAccess(shared, "join");
+      }
+    };
+    const win = typeof window === "undefined" ? null : window;
+    win?.addEventListener("focus", onFocus);
+    shared.stopListening = () => {
+      unsubscribe();
+      win?.removeEventListener("focus", onFocus);
+    };
+  }
+  return () => {
+    shared.listeners.delete(listener);
+    if (shared.listeners.size === 0 && shared.stopListening) {
+      shared.stopListening();
+      shared.stopListening = null;
+    }
+    releaseSharedAccess(shared);
+  };
+}
+function askSharedAccess(shared, demand) {
+  if (shared.inFlight) {
+    if (demand === "again") shared.again = true;
+    return;
+  }
+  if (shared.scheduled) return;
+  if (demand === "ensure" && shared.answered) return;
+  shared.scheduled = true;
+  void Promise.resolve().then(() => {
+    shared.scheduled = false;
+    startSharedAccess(shared);
+  });
+}
+function settleSharedAccess(shared, access) {
+  const answer = JSON.stringify(access);
+  const before = lastAccessAnswers.get(shared.workspaceId);
+  const noAccess = access.mode === "tier" && access.tier === null;
+  if (noAccess || before !== void 0 && before !== answer) clearSdkReadCaches();
+  lastAccessAnswers.set(shared.workspaceId, answer);
+  shared.answered = true;
+  shared.answeredAt = Date.now();
+  shared.settled = { workspaceId: shared.workspaceId, access, error: null };
+}
+function startSharedAccess(shared) {
+  if (shared.listeners.size === 0) {
+    releaseSharedAccess(shared);
+    return;
+  }
+  const { bridge, workspaceId } = shared;
+  const background = shared.answered;
+  if (!background) {
+    shared.fetching = true;
+    notifySharedAccess(shared);
+  }
+  shared.inFlight = (async () => {
+    try {
+      const res = await invokeEntityOp(
+        bridge,
+        PLUGIN_WORKSPACES_ENTITY_ID,
+        "my_access",
+        { workspaceId }
+      );
+      if (shared.listeners.size > 0) settleSharedAccess(shared, res.access);
+    } catch (err) {
+      if (shared.listeners.size === 0) {
+      } else if (err instanceof FiasBridgeError && NO_WORKSPACE_ACCESS_CODES.has(err.code)) {
+        settleSharedAccess(shared, { mode: "tier", workspaceId, tier: null, expiresAt: null });
+      } else if (!background) {
+        shared.settled = {
+          workspaceId,
+          access: null,
+          error: err instanceof Error ? err : new Error(String(err))
+        };
+      }
+    } finally {
+      shared.fetching = false;
+      shared.inFlight = null;
+      if (shared.again) {
+        shared.again = false;
+        askSharedAccess(shared, "again");
+      }
+      notifySharedAccess(shared);
+      releaseSharedAccess(shared);
+    }
+  })();
+}
 function useFiasStore() {
   const bridge = useBridge();
   const [products, setProducts] = useState2([]);
@@ -1929,6 +2380,12 @@ function useFiasStore() {
 var DOWNLOAD_URL_REFRESH_BUFFER_MS = 6e4;
 var downloadUrlCache = /* @__PURE__ */ new Map();
 var downloadUrlInflight = /* @__PURE__ */ new Map();
+function clearSdkReadCaches() {
+  downloadUrlGeneration += 1;
+  downloadUrlCache.clear();
+  downloadUrlInflight.clear();
+}
+var downloadUrlGeneration = 0;
 async function fetchVaultDocumentDownloadUrl(documentId) {
   const now = Date.now();
   const cached = downloadUrlCache.get(documentId);
@@ -1938,6 +2395,7 @@ async function fetchVaultDocumentDownloadUrl(documentId) {
   const inflight = downloadUrlInflight.get(documentId);
   if (inflight) return inflight;
   const bridge = getBridge();
+  const generation = downloadUrlGeneration;
   const promise = bridge.request(
     "vault_documents_download_url",
     { documentId }
@@ -1947,14 +2405,16 @@ async function fetchVaultDocumentDownloadUrl(documentId) {
       expiresAt: new Date(result.expiresAt).getTime(),
       contentType: result.contentType
     };
-    downloadUrlCache.set(documentId, {
-      url: normalized.url,
-      expiresAt: normalized.expiresAt,
-      contentType: normalized.contentType
-    });
+    if (generation === downloadUrlGeneration) {
+      downloadUrlCache.set(documentId, {
+        url: normalized.url,
+        expiresAt: normalized.expiresAt,
+        contentType: normalized.contentType
+      });
+    }
     return normalized;
   }).finally(() => {
-    downloadUrlInflight.delete(documentId);
+    if (downloadUrlInflight.get(documentId) === promise) downloadUrlInflight.delete(documentId);
   });
   downloadUrlInflight.set(documentId, promise);
   return promise;
@@ -2715,13 +3175,22 @@ function useFiasPreviewState(key, getState, onRestore) {
     );
   }, [bridge, key]);
 }
-function useDataSubscription(collection, onInvalidate, options) {
+function stableStringify(value) {
+  return JSON.stringify(
+    value,
+    (_key, v) => v && typeof v === "object" && !Array.isArray(v) ? Object.fromEntries(
+      Object.keys(v).sort().map((k) => [k, v[k]])
+    ) : v
+  );
+}
+function useEntitySubscription(entityId, payload, onInvalidate, options) {
   const bridge = useBridge();
   const [state, setState] = useState2({ status: "subscribing" });
   const onInvalidateRef = useRef(onInvalidate);
   onInvalidateRef.current = onInvalidate;
   const enabled = options?.enabled ?? true;
-  const workspaceId = options?.workspaceId;
+  const minRefetchIntervalMs = Math.max(0, options?.minRefetchIntervalMs ?? 0);
+  const payloadKey = stableStringify(payload);
   useEffect2(() => {
     if (!enabled) {
       setState({ status: "ended", endedReason: "unsubscribed" });
@@ -2733,12 +3202,27 @@ function useDataSubscription(collection, onInvalidate, options) {
     let unsubscribeEnded = null;
     let refetching = false;
     let trailing = false;
+    let lastRunAt = -Infinity;
+    let intervalTimer = null;
     const runInvalidate = async () => {
-      if (refetching) {
+      if (refetching || intervalTimer) {
+        trailing = true;
+        return;
+      }
+      const wait = lastRunAt + minRefetchIntervalMs - Date.now();
+      if (wait > 0) {
         trailing = true;
+        intervalTimer = setTimeout(() => {
+          intervalTimer = null;
+          if (trailing && !cancelled) {
+            trailing = false;
+            void runInvalidate();
+          }
+        }, wait);
         return;
       }
       refetching = true;
+      lastRunAt = Date.now();
       try {
         await onInvalidateRef.current();
       } catch {
@@ -2753,8 +3237,8 @@ function useDataSubscription(collection, onInvalidate, options) {
     void (async () => {
       try {
         const res = await bridge.request("entity_invoke", {
-          entityId: PLUGIN_DATASTORE_ENTITY_ID,
-          payload: { op: "subscribe", collection, workspaceId }
+          entityId,
+          payload: JSON.parse(payloadKey)
         });
         const subscription = res?.output;
         if (!subscription || subscription.kind !== "subscription" || typeof subscription.subscriptionId !== "string") {
@@ -2778,13 +3262,28 @@ function useDataSubscription(collection, onInvalidate, options) {
     })();
     return () => {
       cancelled = true;
+      if (intervalTimer) clearTimeout(intervalTimer);
       unsubscribeEvent?.();
       unsubscribeEnded?.();
       if (subscriptionId) bridge.releaseSubscription(subscriptionId);
     };
-  }, [bridge, collection, workspaceId, enabled]);
+  }, [bridge, entityId, payloadKey, enabled, minRefetchIntervalMs]);
   return state;
 }
+function useDataSubscription(collection, onInvalidate, options) {
+  const audience = options?.audience;
+  return useEntitySubscription(
+    PLUGIN_DATASTORE_ENTITY_ID,
+    {
+      op: "subscribe",
+      collection,
+      workspaceId: options?.workspaceId,
+      ...audience !== void 0 ? { audience } : {}
+    },
+    onInvalidate,
+    { enabled: options?.enabled }
+  );
+}
 function useVaultUserDocuments() {
   const bridge = useBridge();
   const pick = useCallback(
@@ -2984,6 +3483,162 @@ async function fetchCommunityAssetUrls(bridge, assetIds) {
   }
   return hits;
 }
+var CREATIVE_PICKER_TIMEOUT_MS = 30 * 60 * 1e3;
+function useCreativeLibrary() {
+  const bridge = useBridge();
+  return useMemo2(() => {
+    const item = async (op, args) => (await invokeEntityOp(bridge, VAULT_CREATIVE_ENTITY_ID, op, args)).item;
+    return {
+      list: async (options = {}) => (await invokeEntityOp(
+        bridge,
+        VAULT_CREATIVE_ENTITY_ID,
+        "list_items",
+        { ...options }
+      )).items,
+      get: (itemId, version) => item("get_item", { itemId, ...version !== void 0 ? { version } : {} }),
+      create: (fields) => item("create_item", { referenceDocumentIds: [], ...fields }),
+      update: (itemId, fields) => item("update_item", { itemId, ...fields }),
+      remove: (itemId) => item("delete_item", { itemId }),
+      restore: (itemId) => item("restore_item", { itemId }),
+      pick: async (options = {}) => {
+        let answer;
+        try {
+          answer = await bridge.request(
+            "client_entity_invoke",
+            {
+              entityId: CREATIVE_PICKER_ENTITY_ID,
+              input: options.kind ? { kind: options.kind } : {}
+            },
+            CREATIVE_PICKER_TIMEOUT_MS
+          );
+        } catch (err) {
+          if (err instanceof FiasBridgeError && err.code === "BRIDGE_ERROR" && err.message.includes("no client-side executor")) {
+            throw new FiasBridgeError(
+              "The Creative Library picker is not available here",
+              "PICKER_UNAVAILABLE"
+            );
+          }
+          throw err;
+        }
+        if (answer && "error" in answer) {
+          throw new FiasBridgeError(answer.error.message, answer.error.code);
+        }
+        return answer;
+      }
+    };
+  }, [bridge]);
+}
+var CONNECT_TIMEOUT_MS = 10 * 60 * 1e3;
+function useFiasConnections() {
+  const bridge = useBridge();
+  const list = useCallback(async () => {
+    const res = await invokeEntityOp(
+      bridge,
+      CONNECTIONS_ENTITY_ID,
+      "list"
+    );
+    return res.connections;
+  }, [bridge]);
+  const connect = useCallback(
+    async (provider) => {
+      const result = await bridge.request(
+        "client_entity_invoke",
+        { entityId: CONNECTIONS_CONNECT_ENTITY_ID, input: { provider } },
+        CONNECT_TIMEOUT_MS
+      );
+      if (result && "error" in result) {
+        throw new FiasBridgeError(result.error.message, result.error.code);
+      }
+      return result;
+    },
+    [bridge]
+  );
+  const release = useCallback(
+    async (connectionId) => {
+      await invokeEntityOp(bridge, CONNECTIONS_ENTITY_ID, "release", { connectionId });
+    },
+    [bridge]
+  );
+  return useMemo2(() => ({ list, connect, release }), [list, connect, release]);
+}
+function useFiasX() {
+  const bridge = useBridge();
+  return useMemo2(
+    () => ({
+      publishPost: (params) => invokeEntityOp(bridge, X_ENTITY_ID, "publish_post", { ...params }),
+      searchUsers: async (connectionId, query, options) => (await invokeEntityOp(bridge, X_ENTITY_ID, "search_users", {
+        connectionId,
+        query,
+        ...options
+      })).users,
+      getUserPosts: async (connectionId, options) => (await invokeEntityOp(bridge, X_ENTITY_ID, "get_user_posts", {
+        connectionId,
+        ...options
+      })).posts,
+      getPostMetrics: async (connectionId, postIds) => (await invokeEntityOp(
+        bridge,
+        X_ENTITY_ID,
+        "get_post_metrics",
+        { connectionId, postIds }
+      )).metrics,
+      getAccountStats: (connectionId) => invokeEntityOp(bridge, X_ENTITY_ID, "get_account_stats", {
+        connectionId
+      })
+    }),
+    [bridge]
+  );
+}
+function useFiasSchedules() {
+  const bridge = useBridge();
+  return useMemo2(
+    () => ({
+      schedule: (params) => invokeEntityOp(
+        bridge,
+        SCHEDULED_INVOCATIONS_ENTITY_ID,
+        "schedule",
+        {
+          entityId: params.entityId,
+          verb: params.verb,
+          payload: params.payload,
+          fireAt: params.fireAt instanceof Date ? params.fireAt.toISOString() : params.fireAt
+        }
+      ),
+      list: async (options) => (await invokeEntityOp(
+        bridge,
+        SCHEDULED_INVOCATIONS_ENTITY_ID,
+        "list",
+        {
+          ...options?.limit !== void 0 ? { limit: options.limit } : {},
+          ...options?.scheduleIds ? { scheduleIds: options.scheduleIds } : {}
+        }
+      )).schedules,
+      cancel: async (scheduleId) => {
+        await invokeEntityOp(bridge, SCHEDULED_INVOCATIONS_ENTITY_ID, "cancel", { scheduleId });
+      }
+    }),
+    [bridge]
+  );
+}
+function useFiasLinkedIn() {
+  const bridge = useBridge();
+  return useMemo2(
+    () => ({
+      publishPost: (params) => invokeEntityOp(
+        bridge,
+        LINKEDIN_ENTITY_ID,
+        "publish_post",
+        { ...params }
+      ),
+      searchOrganizations: async (connectionId, vanityName) => (await invokeEntityOp(
+        bridge,
+        LINKEDIN_ENTITY_ID,
+        "search_organizations",
+        { connectionId, query: vanityName }
+      )).organizations
+    }),
+    [bridge]
+  );
+}
 function useCompanyEmail() {
   const bridge = useBridge();
   const send = useCallback(
@@ -3227,6 +3882,8 @@ var AUDIO_VOICE_DESIGN_SURFACE_KEY = "audio.voice-design";
 var useElevenLabsVoiceDesign = () => useSurface(
   AUDIO_VOICE_DESIGN_SURFACE_KEY
 );
+var IMAGE_CREATE_ASSET_SURFACE_KEY = "image.create-asset";
+var useCreateAsset = () => useSurface(IMAGE_CREATE_ASSET_SURFACE_KEY);
 var IMAGE_SMART_CONTROL_SURFACE_KEY = "image.smart-control";
 var useSmartControl = () => useSurface(IMAGE_SMART_CONTROL_SURFACE_KEY);
 var IMAGE_SMART_ERASE_SURFACE_KEY = "image.smart-erase";
@@ -3270,6 +3927,7 @@ var VALID_PLUGIN_PERMISSIONS = [
   "assets:community:publish",
   "assets:community:read",
   "assets:read",
+  "connections:use",
   "data:agents",
   "data:search",
   "data:store",
@@ -3282,14 +3940,18 @@ var VALID_PLUGIN_PERMISSIONS = [
   "entities:image_generate",
   "entities:invoke",
   "entities:web_search",
+  "litcraft:hub",
   "navigation:open_arche",
   "sandbox:vendored-libraries",
+  "schedule:invoke",
   "storage:local",
   "storage:sandbox",
   "store:purchase",
   "theme:read",
   "user:profile:read",
   "vault:arche-saves:write",
+  "vault:creative:read",
+  "vault:creative:write",
   "vault:documents:read",
   "vault:documents:write",
   "vault:user-documents:edit",
@@ -3305,6 +3967,7 @@ var PLUGIN_PERMISSION_DESCRIPTIONS = {
   "assets:community:publish": "Share images you made here so other people using this arche can see them, and manage what you have shared.",
   "assets:community:read": "Show you images that other people using this arche have shared. Everything shared is checked before anyone can see it.",
   "assets:read": "Show images and play sounds from this arche's published asset library.",
+  "connections:use": "Use outside accounts (like X or LinkedIn) that you connect and let it use \u2014 you choose each account and each workspace, approve what it posts, and can take access away any time in Workspace Controls.",
   "data:agents": "Let Fias AI, and assistants you connect with an API key and allow here, read this arche's data \u2014 and change it where it says so \u2014 even while it is closed.",
   "data:search": "Search this arche's own data semantically \u2014 costs credits per search.",
   "data:store": "Save structured data in this arche's own private database.",
@@ -3317,14 +3980,18 @@ var PLUGIN_PERMISSION_DESCRIPTIONS = {
   "entities:image_generate": "Generate images with platform AI \u2014 costs credits.",
   "entities:invoke": "Use platform AI (text) on your behalf \u2014 costs credits.",
   "entities:web_search": "Search the live web on your behalf \u2014 costs credits.",
+  "litcraft:hub": "See your LitCraft profile, stats and inventory, and the LitCraft community leaderboards, play time and activity. It can hide your name on leaderboards, but only you can show it again.",
   "navigation:open_arche": "Open other arches for you (navigation only).",
   "sandbox:vendored-libraries": "Load platform-hosted libraries (like the PDF renderer) from the trusted CDN.",
+  "schedule:invoke": "Schedule an action for later \u2014 like a post at 9 AM tomorrow. You approve exactly what will be sent and when, and can see or cancel what it scheduled.",
   "storage:local": "Keep its working files on this device, so a refresh or crash does not lose your work. Nothing leaves your device; cleared when you sign out or when someone else signs in here.",
   "storage:sandbox": "Save files in this arche's own private storage.",
   "store:purchase": "Offer purchases inside the arche (you approve each purchase).",
   "theme:read": "Match your platform theme.",
   "user:profile:read": "See your display name and avatar.",
   "vault:arche-saves:write": "Saves files to your Arche Saves automatically.",
+  "vault:creative:read": "See and use your styles and characters, including their reference pictures \u2014 in a team workspace only after its owner or admin approves it there.",
+  "vault:creative:write": "Create and change your styles and characters. Earlier versions are kept.",
   "vault:documents:read": "Read files this arche itself created, in its own folders of your Vault.",
   "vault:documents:write": "Create and manage its own files, in its own folder of your Vault.",
   "vault:user-documents:edit": "Save changes to files of yours that you let it edit \u2014 you choose each file, earlier versions are kept unless you turned version history off, and you can remove access any time in Vault \u2192 Arche Access.",
@@ -5416,6 +6083,63 @@ function useFiasFonts() {
   return useMemo3(() => ({ fonts: FONT_CATALOG, ensureFontLoaded }), []);
 }
 
+// src/limits.ts
+var X_PUBLISH_LIMITS = {
+  MAX_TEXT_CHARACTERS: 25e3,
+  MAX_IMAGES_PER_POST: 4,
+  MAX_IMAGES_PER_PUBLISH: 4,
+  MAX_THREAD_POSTS: 10,
+  MIN_POLL_OPTIONS: 2,
+  MAX_POLL_OPTIONS: 4,
+  MAX_POLL_OPTION_CHARACTERS: 25,
+  MIN_POLL_MINUTES: 5,
+  MAX_POLL_MINUTES: 10080,
+  IMAGE_MIME_TYPES: ["image/png", "image/jpeg", "image/webp", "image/gif"],
+  MAX_IMAGE_BYTES: 5 * 1024 * 1024
+};
+var LINKEDIN_PUBLISH_LIMITS = {
+  MAX_TEXT_CHARACTERS: 3e3,
+  MAX_IMAGES: 9,
+  IMAGE_MIME_TYPES: ["image/png", "image/jpeg", "image/gif"],
+  MAX_IMAGE_BYTES: 8 * 1024 * 1024
+};
+var SCHEDULE_LIMITS = {
+  /** Waiting at once, per person, per app. */
+  MAX_ACTIVE_PER_USER_ARCHE: 25,
+  /** The earliest a call may be scheduled, from now. */
+  MIN_LEAD_SECONDS: 5 * 60,
+  /** The latest, from now. */
+  MAX_LEAD_DAYS: 60
+};
+var DATA_STORE_LIMITS = {
+  /** One document's `data`, serialized. */
+  MAX_DOCUMENT_SIZE_BYTES: 100 * 1024,
+  /** Per owner — one user, one workspace, or the app's shared data — per collection. */
+  MAX_DOCUMENTS_PER_OWNER_PER_COLLECTION: 1e4,
+  /** Writes in one atomic `batch`. */
+  MAX_BATCH_OPERATIONS: 100
+};
+var DATA_STORE_RATE_LIMITS_PER_MINUTE = {
+  put: 120,
+  get: 300,
+  query: 60,
+  delete: 60,
+  /** Counted in units of 25 operations: a full 100-op batch is 4. */
+  batch: 30
+};
+var FIAS_AI_MANIFEST_LIMITS = {
+  MAX_ACTIONS: 30,
+  MAX_ID_LENGTH: 100,
+  MAX_DESCRIPTION_LENGTH: 1e3,
+  MAX_CATEGORY_LENGTH: 100,
+  MAX_BLOCK_DESCRIPTION_LENGTH: 2e3,
+  MAX_PARAMETER_SCHEMA_BYTES: 4096,
+  MAX_AVAILABLE_WHEN_KEYS: 8,
+  MAX_AVAILABLE_WHEN_KEY_LENGTH: 64,
+  MAX_AVAILABLE_WHEN_STRING_LENGTH: 100,
+  MAX_BLOCK_SERIALIZED_BYTES: 32 * 1024
+};
+
 // src/panels.ts
 var PANEL_MIN_ELEMENTS = 1;
 var PANEL_MAX_ELEMENTS = 24;
@@ -5823,8 +6547,11 @@ export {
   AUDIO_VOICE_DESIGN_SURFACE_KEY,
   ArcheAssetError,
   DARK_THEME,
+  DATA_STORE_LIMITS,
+  DATA_STORE_RATE_LIMITS_PER_MINUTE,
   ENTITY_INVOCATION_HISTORY_LIMITS,
   ENTITY_INVOCATION_REQUEST_LIMITS,
+  FIAS_AI_MANIFEST_LIMITS,
   FONT_CATALOG,
   FONT_PAIRINGS,
   FiasBridge,
@@ -5833,6 +6560,7 @@ export {
   FiasLocalStoreError,
   FiasProvider,
   GRAMMAR_CHECK_ENTITY_ID,
+  IMAGE_CREATE_ASSET_SURFACE_KEY,
   IMAGE_SMART_CONTROL_SURFACE_KEY,
   IMAGE_SMART_ERASE_SURFACE_KEY,
   IMAGE_SMART_IMAGE_TO_IMAGE_SURFACE_KEY,
@@ -5846,6 +6574,8 @@ export {
   IMAGE_SMART_VECTORIZE_SURFACE_KEY,
   INTEGRATION_WEB_SEARCH_SURFACE_KEY,
   LIGHT_THEME,
+  LINKEDIN_ENTITY_ID,
+  LINKEDIN_PUBLISH_LIMITS,
   NLLB_LANGUAGES,
   NLLB_TRANSLATION_ENTITY_ID,
   PANEL_BUTTON_LABEL_MAX_LENGTH,
@@ -5867,10 +6597,13 @@ export {
   PLUGIN_LOCAL_STORE_ENTITY_ID,
   PLUGIN_PERMISSION_DESCRIPTIONS,
   REASONING_EFFORTS,
+  SCHEDULE_LIMITS,
   SDK_BRIDGE_PROTOCOL_VERSION,
   SDK_REQUIRES_HOST_PROTOCOL_VERSION,
   THEME_CATALOG,
   VALID_PLUGIN_PERMISSIONS,
+  X_ENTITY_ID,
+  X_PUBLISH_LIMITS,
   checkInvocationHistory,
   checkInvocationRequestSize,
   checkReasoningParameter,
@@ -5892,6 +6625,8 @@ export {
   useClientEntity,
   useCommunityAssets,
   useCompanyEmail,
+  useCreateAsset,
+  useCreativeLibrary,
   useDataSubscription,
   useDocumentSign,
   useElevenLabsAudioIsolation,
@@ -5903,18 +6638,26 @@ export {
   useElevenLabsVoiceChanger,
   useElevenLabsVoiceDesign,
   useEntityInvocation,
+  useEntitySubscription,
   useFiasAIActions,
+  useFiasAccess,
+  useFiasChrome,
+  useFiasConnections,
   useFiasContent,
   useFiasDataStore,
   useFiasFonts,
+  useFiasHolder,
+  useFiasLinkedIn,
   useFiasNavigation,
   useFiasPreviewState,
+  useFiasSchedules,
   useFiasStorage,
   useFiasStore,
   useFiasTheme,
   useFiasUser,
   useFiasVendoredAssets,
   useFiasWorkspaces,
+  useFiasX,
   useGeminiTranscribe,
   useGeminiTts,
   useImageEntities,