@fias/arche-sdk 2.32.0 → 2.33.0

package/dist/index.mjs

@@ -73,6 +73,24 @@ var LIGHT_THEME = {
 function getDefaultTheme(mode) {
   return mode === "light" ? LIGHT_THEME : DARK_THEME;
 }
+var BRAND_HEX = /^#[0-9a-fA-F]{6}$/;
+var BRAND_LOGO_URL_MAX = 256 * 1024;
+var BRAND_NAME_MAX = 200;
+function normalizeFiasBrand(input) {
+  if (!input || typeof input !== "object") return void 0;
+  const raw = input;
+  const color = (v) => typeof v === "string" && BRAND_HEX.test(v) ? v : null;
+  const name = typeof raw.displayName === "string" && raw.displayName.trim() !== "" ? raw.displayName.trim().slice(0, BRAND_NAME_MAX) : null;
+  const logo = typeof raw.logoUrl === "string" && raw.logoUrl.length <= BRAND_LOGO_URL_MAX && (raw.logoUrl.startsWith("data:image/") || raw.logoUrl.startsWith("https://")) ? raw.logoUrl : null;
+  const brand = {
+    displayName: name,
+    logoUrl: logo,
+    primaryColor: color(raw.primaryColor),
+    accentColor: color(raw.accentColor),
+    headerTextColor: color(raw.headerTextColor)
+  };
+  return Object.values(brand).some((v) => v !== null) ? brand : void 0;
+}
 
 // src/protocol.ts
 var SDK_BRIDGE_PROTOCOL_VERSION = 1;
@@ -258,6 +276,12 @@ function mergeThemeWithDefaults(incoming) {
     components: { ...defaults.components, ...incoming.components ?? {} }
   };
 }
+function themeFromHost(incoming) {
+  const { brand: rawBrand, ...rest } = incoming;
+  const theme = mergeThemeWithDefaults(rest);
+  const brand = normalizeFiasBrand(rawBrand);
+  return brand ? { ...theme, brand } : theme;
+}
 var DEFAULT_TIMEOUT_MS = 3e4;
 var STREAM_IDLE_TIMEOUT_MS = 12e4;
 var STREAM_MAX_DURATION_MS = 15 * 6e4;
@@ -332,7 +356,7 @@ var FiasBridge = class {
         this.hostOrigin = event.origin;
         this.archId = initMsg.payload.archId;
         this.permissions = initMsg.payload.permissions;
-        this.theme = mergeThemeWithDefaults(initMsg.payload.theme);
+        this.theme = themeFromHost(initMsg.payload.theme);
         this.vendoredAssets = initMsg.payload.vendoredAssets ?? null;
         this.textModels = initMsg.payload.textModels ?? null;
         this.holder = initMsg.payload.holder ?? null;
@@ -354,7 +378,7 @@ var FiasBridge = class {
       }
       if (this.hostOrigin && event.origin !== this.hostOrigin) return;
       if (data.type === "theme_update") {
-        this.theme = mergeThemeWithDefaults(data.payload);
+        this.theme = themeFromHost(data.payload);
         for (const listener of this.themeListeners) {
           listener(this.theme);
         }
@@ -1867,23 +1891,19 @@ function useFiasDataStore() {
   );
   const put = useCallback(
     async (collection, key, data, options) => {
-      const res = await invokeEntityOp(
-        bridge,
-        PLUGIN_DATASTORE_ENTITY_ID,
-        "put",
-        {
-          collection,
-          // No key: the server makes one (collections with audiences, ADR-034).
-          ...key !== null ? { key } : {},
-          data,
-          workspaceId: options?.workspaceId,
-          ...options?.audience !== void 0 ? { audience: options.audience } : {}
-        }
-      );
+      const res = await invokeEntityOp(bridge, PLUGIN_DATASTORE_ENTITY_ID, "put", {
+        collection,
+        // No key: the server makes one (collections with audiences, ADR-034).
+        ...key !== null ? { key } : {},
+        data,
+        workspaceId: options?.workspaceId,
+        ...options?.audience !== void 0 ? { audience: options.audience } : {}
+      });
       return {
         version: res?.version,
         ...res?.key !== void 0 ? { key: res.key } : {},
-        ...res?.audience !== void 0 ? { audience: res.audience } : {}
+        ...res?.audience !== void 0 ? { audience: res.audience } : {},
+        ...res?.attestation !== void 0 ? { attestation: res.attestation } : {}
       };
     },
     [bridge]
@@ -1933,7 +1953,8 @@ function useFiasDataStore() {
         updatedAt: res.updatedAt ?? "",
         ...res.version !== void 0 ? { version: res.version } : {},
         ...res.authoredByCollaborator !== void 0 ? { authoredByCollaborator: res.authoredByCollaborator } : {},
-        ...res.audience !== void 0 ? { audience: res.audience } : {}
+        ...res.audience !== void 0 ? { audience: res.audience } : {},
+        ...res.attestation !== void 0 ? { attestation: res.attestation } : {}
       };
     },
     [bridge]
@@ -3698,7 +3719,8 @@ function useFiasWebSources() {
     async (request) => invokeEntityOp(bridge, WEB_SOURCES_ENTITY_ID, "extract", {
       url: request.url,
       form: request.form,
-      ...request.maxAgeSeconds !== void 0 ? { maxAgeSeconds: request.maxAgeSeconds } : {}
+      ...request.maxAgeSeconds !== void 0 ? { maxAgeSeconds: request.maxAgeSeconds } : {},
+      ...request.reads !== void 0 ? { reads: request.reads } : {}
     }),
     [bridge]
   );
@@ -4072,6 +4094,7 @@ var VALID_PLUGIN_PERMISSIONS = [
   "assets:read",
   "connections:use",
   "data:agents",
+  "data:attested",
   "data:search",
   "data:store",
   "data:workspace",
@@ -4115,6 +4138,7 @@ var PLUGIN_PERMISSION_DESCRIPTIONS = {
   "assets:read": "Show images and play sounds from this arche's published asset library.",
   "connections:use": "Use outside accounts (like X or LinkedIn) that you connect and let it use \u2014 you choose each account and each workspace, approve what it posts, and can take access away any time in Workspace Controls.",
   "data:agents": "Let Fias AI, and assistants you connect with an API key and allow here, read this arche's data \u2014 and change it where it says so \u2014 even while it is closed.",
+  "data:attested": "Keep a record of which members did what in this app, written by Fias so the app can't change who did it.",
   "data:search": "Search this arche's own data semantically \u2014 costs credits per search.",
   "data:store": "Save structured data in this arche's own private database.",
   "data:workspace": "Create team workspaces and manage their members.",
@@ -4211,7 +4235,10 @@ var fias = {
         "put",
         { collection, key, data }
       );
-      return { version: res?.version };
+      return {
+        version: res?.version,
+        ...res?.attestation !== void 0 ? { attestation: res.attestation } : {}
+      };
     },
     async get(collection, key) {
       const res = await invokeEntityOp(
@@ -4232,7 +4259,8 @@ var fias = {
         data: res.data,
         updatedAt: res.updatedAt ?? "",
         ...res.version !== void 0 ? { version: res.version } : {},
-        ...res.authoredByCollaborator !== void 0 ? { authoredByCollaborator: res.authoredByCollaborator } : {}
+        ...res.authoredByCollaborator !== void 0 ? { authoredByCollaborator: res.authoredByCollaborator } : {},
+        ...res.attestation !== void 0 ? { attestation: res.attestation } : {}
       };
     },
     async query(collection, options) {
@@ -6766,6 +6794,7 @@ export {
   getThemeById,
   invocationPayloadByteLimit,
   isValidPluginPermission,
+  normalizeFiasBrand,
   resetBridge,
   useArcheAssetBytes,
   useArcheAssets,

package/dist/theme-brand.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=theme-brand.test.d.ts.map

package/dist/theme-brand.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme-brand.test.d.ts","sourceRoot":"","sources":["../src/theme-brand.test.ts"],"names":[],"mappings":""}

package/dist/theme-brand.test.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const theme_1 = require("./theme");
+describe('normalizeFiasBrand', () => {
+    const full = {
+        displayName: 'Service Ventures',
+        logoUrl: 'data:image/png;base64,AAAA',
+        primaryColor: '#080B35',
+        accentColor: '#77A7F7',
+        headerTextColor: '#FFFFFF',
+    };
+    it('keeps a well-formed brand as it is', () => {
+        expect((0, theme_1.normalizeFiasBrand)(full)).toEqual(full);
+    });
+    it('accepts an https logo and nulls anything else', () => {
+        expect((0, theme_1.normalizeFiasBrand)({ ...full, logoUrl: 'https://cdn.example/logo.png' })?.logoUrl).toBe('https://cdn.example/logo.png');
+        for (const logoUrl of ['http://x/logo.png', 'javascript:alert(1)', 'data:text/html,<b>', 42]) {
+            expect((0, theme_1.normalizeFiasBrand)({ ...full, logoUrl })?.logoUrl).toBeNull();
+        }
+        expect((0, theme_1.normalizeFiasBrand)({ ...full, logoUrl: `data:image/png;base64,${'A'.repeat(300000)}` })
+            ?.logoUrl).toBeNull();
+    });
+    it('only passes #RRGGBB colours', () => {
+        const brand = (0, theme_1.normalizeFiasBrand)({
+            ...full,
+            primaryColor: '#fff',
+            accentColor: 'blue',
+            headerTextColor: '#00ff00',
+        });
+        expect(brand).toMatchObject({
+            primaryColor: null,
+            accentColor: null,
+            headerTextColor: '#00ff00',
+        });
+    });
+    it('trims and bounds the name, and treats a blank one as unset', () => {
+        expect((0, theme_1.normalizeFiasBrand)({ ...full, displayName: '   ' })?.displayName).toBeNull();
+        expect((0, theme_1.normalizeFiasBrand)({ ...full, displayName: 'x'.repeat(500) })?.displayName).toHaveLength(200);
+    });
+    it('returns undefined when nothing is left to show', () => {
+        expect((0, theme_1.normalizeFiasBrand)(null)).toBeUndefined();
+        expect((0, theme_1.normalizeFiasBrand)('brand')).toBeUndefined();
+        expect((0, theme_1.normalizeFiasBrand)({})).toBeUndefined();
+        expect((0, theme_1.normalizeFiasBrand)({ primaryColor: 'navy', displayName: '' })).toBeUndefined();
+    });
+});
+//# sourceMappingURL=theme-brand.test.js.map

package/dist/theme-brand.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme-brand.test.js","sourceRoot":"","sources":["../src/theme-brand.test.ts"],"names":[],"mappings":";;AAAA,mCAA6C;AAE7C,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,IAAI,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,4BAA4B;QACrC,YAAY,EAAE,SAAS;QACvB,WAAW,EAAE,SAAS;QACtB,eAAe,EAAE,SAAS;KAC3B,CAAC;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,IAAA,0BAAkB,EAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,IAAA,0BAAkB,EAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAC5F,8BAA8B,CAC/B,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC;YAC7F,MAAM,CAAC,IAAA,0BAAkB,EAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,CACJ,IAAA,0BAAkB,EAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,yBAAyB,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,EAAE,EAAE,CAAC;YACtF,EAAE,OAAO,CACZ,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,KAAK,GAAG,IAAA,0BAAkB,EAAC;YAC/B,GAAG,IAAI;YACP,YAAY,EAAE,MAAM;YACpB,WAAW,EAAE,MAAM;YACnB,eAAe,EAAE,SAAS;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC;YAC1B,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,IAAA,0BAAkB,EAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpF,MAAM,CAAC,IAAA,0BAAkB,EAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC,YAAY,CAC7F,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,IAAA,0BAAkB,EAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,CAAC,IAAA,0BAAkB,EAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,CAAC,IAAA,0BAAkB,EAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAA,0BAAkB,EAAC,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/theme.d.ts

@@ -11,8 +11,16 @@
  *   - bridge routes (server-side fallback)
  *   - arche-sdk tests
  */
-import type { FiasTheme } from './types';
+import type { FiasBrand, FiasTheme } from './types';
 export declare const DARK_THEME: FiasTheme;
 export declare const LIGHT_THEME: FiasTheme;
 export declare function getDefaultTheme(mode: 'light' | 'dark'): FiasTheme;
+/**
+ * A Company brand in the shape apps receive it (`FiasTheme.brand`), or
+ * `undefined` when there is nothing to show. Used by every host — the
+ * platform, the builder preview and the dev harness — and again by the SDK on
+ * what arrives, so an app can rely on the shape whoever sent it: colours are
+ * `#RRGGBB` or null, the logo is a `data:image/` or `https:` URL or null.
+ */
+export declare function normalizeFiasBrand(input: unknown): FiasBrand | undefined;
 //# sourceMappingURL=theme.d.ts.map

package/dist/theme.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../src/theme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAkBzC,eAAO,MAAM,UAAU,EAAE,SAwBxB,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,SAwBzB,CAAC;AAEF,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAEjE"}
+{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../src/theme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAkBpD,eAAO,MAAM,UAAU,EAAE,SAwBxB,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,SAwBzB,CAAC;AAEF,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAEjE;AAOD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAsBxE"}

package/dist/theme.js

@@ -15,6 +15,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LIGHT_THEME = exports.DARK_THEME = void 0;
 exports.getDefaultTheme = getDefaultTheme;
+exports.normalizeFiasBrand = normalizeFiasBrand;
 const SYSTEM_FONTS = '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif';
 const MONO_FONTS = '"SFMono-Regular", Consolas, "Liberation Mono", Menlo, monospace';
 const SHARED_SPACING = { xs: '4px', sm: '8px', md: '16px', lg: '24px', xl: '32px' };
@@ -82,4 +83,37 @@ exports.LIGHT_THEME = {
 function getDefaultTheme(mode) {
     return mode === 'light' ? exports.LIGHT_THEME : exports.DARK_THEME;
 }
+const BRAND_HEX = /^#[0-9a-fA-F]{6}$/;
+/** Well above the platform's stored-logo cap (64 KB data URL); refuses a value nobody should draw. */
+const BRAND_LOGO_URL_MAX = 256 * 1024;
+const BRAND_NAME_MAX = 200;
+/**
+ * A Company brand in the shape apps receive it (`FiasTheme.brand`), or
+ * `undefined` when there is nothing to show. Used by every host — the
+ * platform, the builder preview and the dev harness — and again by the SDK on
+ * what arrives, so an app can rely on the shape whoever sent it: colours are
+ * `#RRGGBB` or null, the logo is a `data:image/` or `https:` URL or null.
+ */
+function normalizeFiasBrand(input) {
+    if (!input || typeof input !== 'object')
+        return undefined;
+    const raw = input;
+    const color = (v) => (typeof v === 'string' && BRAND_HEX.test(v) ? v : null);
+    const name = typeof raw.displayName === 'string' && raw.displayName.trim() !== ''
+        ? raw.displayName.trim().slice(0, BRAND_NAME_MAX)
+        : null;
+    const logo = typeof raw.logoUrl === 'string' &&
+        raw.logoUrl.length <= BRAND_LOGO_URL_MAX &&
+        (raw.logoUrl.startsWith('data:image/') || raw.logoUrl.startsWith('https://'))
+        ? raw.logoUrl
+        : null;
+    const brand = {
+        displayName: name,
+        logoUrl: logo,
+        primaryColor: color(raw.primaryColor),
+        accentColor: color(raw.accentColor),
+        headerTextColor: color(raw.headerTextColor),
+    };
+    return Object.values(brand).some((v) => v !== null) ? brand : undefined;
+}
 //# sourceMappingURL=theme.js.map

package/dist/theme.js.map

@@ -1 +1 @@
-{"version":3,"file":"theme.js","sourceRoot":"","sources":["../src/theme.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAwEH,0CAEC;AAtED,MAAM,YAAY,GAAG,mEAAmE,CAAC;AACzF,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAErF,MAAM,cAAc,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACpF,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACrF,MAAM,iBAAiB,GAA4B;IACjD,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,UAAU;IACvB,QAAQ,EAAE,iCAAiC;IAC3C,QAAQ,EAAE,sEAAsE;IAChF,QAAQ,EAAE,wEAAwE;IAClF,WAAW,EAAE,KAAK;CACnB,CAAC;AAEW,QAAA,UAAU,GAAc;IACnC,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE;QACN,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,SAAS;QACtB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,SAAS;QACxB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;KAChB;IACD,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,YAAY;IACnB,UAAU,EAAE,iBAAiB;CAC9B,CAAC;AAEW,QAAA,WAAW,GAAc;IACpC,IAAI,EAAE,OAAO;IACb,MAAM,EAAE;QACN,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,SAAS;QACtB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,SAAS;QACxB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;KAChB;IACD,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,YAAY;IACnB,UAAU,EAAE,iBAAiB;CAC9B,CAAC;AAEF,SAAgB,eAAe,CAAC,IAAsB;IACpD,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAW,CAAC,CAAC,CAAC,kBAAU,CAAC;AACrD,CAAC"}
+{"version":3,"file":"theme.js","sourceRoot":"","sources":["../src/theme.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAwEH,0CAEC;AAcD,gDAsBC;AA1GD,MAAM,YAAY,GAAG,mEAAmE,CAAC;AACzF,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAErF,MAAM,cAAc,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACpF,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACrF,MAAM,iBAAiB,GAA4B;IACjD,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,UAAU;IACvB,QAAQ,EAAE,iCAAiC;IAC3C,QAAQ,EAAE,sEAAsE;IAChF,QAAQ,EAAE,wEAAwE;IAClF,WAAW,EAAE,KAAK;CACnB,CAAC;AAEW,QAAA,UAAU,GAAc;IACnC,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE;QACN,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,SAAS;QACtB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,SAAS;QACxB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;KAChB;IACD,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,YAAY;IACnB,UAAU,EAAE,iBAAiB;CAC9B,CAAC;AAEW,QAAA,WAAW,GAAc;IACpC,IAAI,EAAE,OAAO;IACb,MAAM,EAAE;QACN,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,SAAS;QACtB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,SAAS;QACxB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;KAChB;IACD,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,YAAY;IACnB,UAAU,EAAE,iBAAiB;CAC9B,CAAC;AAEF,SAAgB,eAAe,CAAC,IAAsB;IACpD,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAW,CAAC,CAAC,CAAC,kBAAU,CAAC;AACrD,CAAC;AAED,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,sGAAsG;AACtG,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AACtC,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;QAClE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC/B,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,kBAAkB;QACxC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC3E,CAAC,CAAC,GAAG,CAAC,OAAO;QACb,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,KAAK,GAAc;QACvB,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;QACrC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;QACnC,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC;KAC5C,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC"}

package/dist/types.d.ts

@@ -74,6 +74,30 @@ export interface FiasTheme {
         shadowLg: string;
         borderWidth: string;
     };
+    /**
+     * The Company's brand (ADR-023), present only while the app runs on that
+     * Company's portal (ADR-024) and the Company has set one. Absent on fias.io
+     * and on a portal without a brand — keep your own palette then. Each field
+     * is null when the Company left it unset.
+     */
+    brand?: FiasBrand;
+}
+/**
+ * A Company's brand as an app receives it in {@link FiasTheme.brand}. The same
+ * tokens the portal's own shell is drawn with, and already public on the
+ * portal: nothing here is about the person using the app.
+ */
+export interface FiasBrand {
+    /** The name the Company shows people, e.g. on its sign-in page. */
+    displayName: string | null;
+    /** The Company's logo, as an image URL (today a `data:` URL) for an `<img src>`. */
+    logoUrl: string | null;
+    /** `#RRGGBB`. The Company's main colour — headers, primary buttons. */
+    primaryColor: string | null;
+    /** `#RRGGBB`. A second colour for highlights and links. */
+    accentColor: string | null;
+    /** `#RRGGBB`. Text drawn on `primaryColor`. */
+    headerTextColor: string | null;
 }
 /**
  * Storage API available via useFiasStorage() hook.
@@ -2200,6 +2224,17 @@ export interface FiasWebSourceExtractRequest {
      * whole platform, so anything under 3600 is treated as 3600.
      */
     maxAgeSeconds?: number;
+    /**
+     * How many independent readings the page gets (default 1). With `2`, the
+     * page is read twice and only a value both readings agree on is returned;
+     * a field they disagree on comes back `null` and is named in `disagreed`,
+     * so you can put it in front of a person instead of publishing one
+     * reading's guess. Agreement says a value was stable across two readings,
+     * not that it is right. Two readings are two reader charges. Use it
+     * wherever a wrong number matters, such as money. The platform may raise
+     * the floor for every app.
+     */
+    reads?: 1 | 2;
 }
 export interface FiasWebSourceExtraction<T extends FiasWebSourceData = FiasWebSourceData> {
     url: string;
@@ -2218,8 +2253,24 @@ export interface FiasWebSourceExtraction<T extends FiasWebSourceData = FiasWebSo
     fromCache: boolean;
     /** The page's values, in the form's shape. */
     data: T;
-    /** Fields (and list rows) whose values broke the form's rules and became null or were dropped. */
+    /**
+     * Fields (and list rows) whose values broke the form's rules and became
+     * null or were dropped: `rates[3].apy`, `rates[50..]`. With two readings a
+     * list is named whole (`rates`): a row index belongs to one reading's rows,
+     * and the agreed list no longer has them in that order.
+     */
     discarded: string[];
+    /**
+     * Fields the two readings disagreed on: `null` instead of one reading's
+     * value, or for a list only the rows both readings produced. Check it
+     * whatever you asked for: the platform may require two readings of every
+     * app, and a one-reading call is answered from a two-reading result when
+     * one is already stored for the page and form. A list named here may be missing rows the page
+     * prints: never conclude "absent on the page" (not offered, no such term)
+     * from a field in `disagreed`; treat it as unknown and confirm with a
+     * person.
+     */
+    disagreed: string[];
     /** The page was longer than the reader reads; values past the cut are missing. */
     pageTruncated: boolean;
     /**
@@ -2233,8 +2284,11 @@ export interface FiasWebSourcesApi {
     listSites: (options?: FiasWebSourceListOptions) => Promise<FiasWebSourceSiteList>;
     /**
      * A page on an approved site, read into `form`. A fresh fetch (about a
-     * tenth of a cent) and the reading (a fast model's tokens) are charged to
-     * the user; a cached result is free. Never returns the page's text.
+     * tenth of a cent) and each reading (the reader model's tokens; two with
+     * `reads: 2`) are charged to the user; a cached result is free. The reader's
+     * model, and so a reading's price, is chosen by the platform (a fast model
+     * today, well under a cent for a typical page). Never returns the page's
+     * text.
      */
     extract: <T extends FiasWebSourceData = FiasWebSourceData>(request: FiasWebSourceExtractRequest) => Promise<FiasWebSourceExtraction<T>>;
 }
@@ -2939,6 +2993,44 @@ export interface DataStoreCollectionConstraints {
      * relate your records to people and carry refs safely between apps.
      */
     personFields?: string[];
+    /**
+     * An attested log (ADR-042): Fias stamps every row with who wrote it — see
+     * {@link DataStoreAttestation} — and no app code, user, agent or
+     * contributor can change a row or delete one on its own. The log ends with
+     * your app: no workspace holding one can be archived (`WORKSPACE_ATTESTED`).
+     * Requires `appendOnly: true` and
+     * the `data:attested` permission; declared only in `fias-plugin.json`, and
+     * only on a NEW collection (never added to one that exists). Not allowed on
+     * `shared` scope.
+     */
+    attested?: true;
+}
+/**
+ * What Fias records beside a row of an attested collection (ADR-042). Never
+ * part of `data`, never writable by your code.
+ *
+ * It proves which person (or agent key acting for them, or Fias AI) wrote the
+ * row, through which channel, when, and under which release of your app. It
+ * does not prove intent or that `data` is true: your code wrote `data`.
+ * Describe it as "platform-attested", never "tamper-evident".
+ */
+export interface DataStoreAttestation {
+    /** The app user ref of the person accountable for the write. Name it with `resolvePeople`. */
+    personRef: string;
+    /** The agent key that wrote it, for `channel: 'agent'` only. Never resolves to a name. */
+    agentRef?: string;
+    /**
+     * How the write arrived: a fias.io session, a Company portal session, Fias
+     * AI, an external agent key, or a dev / test / preview sandbox
+     * (`non_production` — never present such a row as real).
+     */
+    channel: 'session' | 'portal' | 'assistant' | 'agent' | 'non_production';
+    /** When Fias stored the row: the database clock at the insert (ISO 8601). */
+    recordedAt: string;
+    /** Your app's manifest version live when the write was accepted. On every production row; never on a test row. */
+    appVersion?: string;
+    /** The hash of that release's bundle. On every production row; never on a test row. */
+    buildHash?: string;
 }
 /**
  * Counter-follows-ledger: `field` on this collection's documents may only
@@ -3041,6 +3133,8 @@ export interface DataStoreBatchResult {
         key: string;
         version?: number;
         audience?: string;
+        /** The row's attestation, for a row of an attested collection (ADR-042). */
+        attestation?: DataStoreAttestation;
     }[];
 }
 /**
@@ -3059,6 +3153,8 @@ export interface DataStorePutResult {
     key?: string;
     /** The audience the document sits in, in a collection with audiences. */
     audience?: string;
+    /** What Fias recorded about the write, for a row of an attested collection (ADR-042). */
+    attestation?: DataStoreAttestation;
 }
 /**
  * A document returned from the data store.
@@ -3090,6 +3186,8 @@ export interface DataStoreDocument<T = Record<string, unknown>> {
      * audience's readers, never by your code. Absent elsewhere.
      */
     audience?: string;
+    /** Present on rows of an attested collection (ADR-042): see {@link DataStoreAttestation}. */
+    attestation?: DataStoreAttestation;
 }
 /**
  * Filter condition for querying documents.
@@ -3180,6 +3278,8 @@ export interface DataStoreSearchMatch<T = Record<string, unknown>> {
     authoredByCollaborator?: boolean;
     /** The match's audience, in a collection with audiences — see {@link DataStoreDocument.audience}. */
     audience?: string;
+    /** Present on rows of an attested collection — see {@link DataStoreDocument.attestation}. */
+    attestation?: DataStoreAttestation;
 }
 /**
  * Data Store API available via useFiasDataStore() hook.