@fias/create-fias-plugin 1.4.2 → 1.4.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fias/create-fias-plugin",
-  "version": "1.4.2",
+  "version": "1.4.3",
   "publishConfig": {
     "access": "public"
   },

package/templates/default/AGENTS.md

@@ -528,22 +528,6 @@ const { entities, isLoading } = useImageEntities({
 
 Each entry is scrubbed — only fields a UI legitimately needs (no provider model strings, no endpoints, no execution config).
 
-### `useBackgroundRemoval()` — Client-side background removal
-
-**Permission:** `entities:image_remove_background`
-**Returns:** `BackgroundRemovalApi`
-
-Runs the imgly WASM model inside the host page — bytes never leave the user's device. Returns a transparent PNG.
-
-```tsx
-import { useBackgroundRemoval } from '@fias/arche-sdk';
-
-const { removeBackground, isLoading } = useBackgroundRemoval();
-const transparentPng = await removeBackground(jpegBlob);
-```
-
-**Limits:** input ≤ 25 MiB, PNG/JPEG only, rate-limited to 10/min per arche per user. Throws on size violation rather than returning a result.
-
 ### Image-editing capability hooks (auto-generated)
 
 **Permission:** `entities:image_edit`
@@ -1002,7 +986,7 @@ The SDK also exports the following for advanced use cases. Most plugins don't ne
 
 Other optional sub-fields: `currency: "usd"` (only USD supported today), `platformFeePercent` (override the default platform cut — non-standard).
 
-**Permissions:** `theme:read`, `user:profile:read`, `storage:sandbox`, `data:store`, `data:search`, `entities:invoke`, `entities:client_invoke`, `entities:image_generate`, `entities:image_edit`, `entities:image_remove_background`, `entities:audio_generate`, `entities:web_search`, `store:purchase`, `vault:documents:read`, `vault:documents:write`, `assets:read`, `navigation:open_arche`, `sandbox:vendored-libraries`
+**Permissions:** `theme:read`, `user:profile:read`, `storage:sandbox`, `data:store`, `data:search`, `entities:invoke`, `entities:client_invoke`, `entities:image_generate`, `entities:image_edit`, `entities:audio_generate`, `entities:web_search`, `store:purchase`, `vault:documents:read`, `vault:documents:write`, `assets:read`, `navigation:open_arche`, `sandbox:vendored-libraries`
 
 **Using AI:** Add `"entities:invoke"` to permissions, then use `useEntityInvocation()` with a model entity ID and your own `systemPrompt`. Browse available models with `npx fias-dev entities`.
 
@@ -1053,6 +1037,7 @@ When you hit a constraint, say so AND tell the user: file an Entity request on t
 ### Sandboxing
 
 - Plugins run in an iframe with `sandbox="allow-scripts allow-forms allow-downloads allow-popups allow-popups-to-escape-sandbox"` (note: **no** `allow-same-origin` — the plugin has an opaque origin)
+- **`window.alert()` / `confirm()` / `prompt()` do nothing** (no `allow-modals`): they don't throw — `confirm()` silently returns `false`, so gated actions never run. Build confirmation into your UI (a two-step button or an inline dialog) instead
 - **No `fetch()` or `XMLHttpRequest`** — all network access is blocked
 - **You _can_ open external links in a new tab** (e.g. `window.open('https://…', '_blank')`) — see "Opening external links" above
 - **No access** to parent DOM, cookies, or localStorage

package/templates/default/CLAUDE.md

@@ -528,22 +528,6 @@ const { entities, isLoading } = useImageEntities({
 
 Each entry is scrubbed — only fields a UI legitimately needs (no provider model strings, no endpoints, no execution config).
 
-### `useBackgroundRemoval()` — Client-side background removal
-
-**Permission:** `entities:image_remove_background`
-**Returns:** `BackgroundRemovalApi`
-
-Runs the imgly WASM model inside the host page — bytes never leave the user's device. Returns a transparent PNG.
-
-```tsx
-import { useBackgroundRemoval } from '@fias/arche-sdk';
-
-const { removeBackground, isLoading } = useBackgroundRemoval();
-const transparentPng = await removeBackground(jpegBlob);
-```
-
-**Limits:** input ≤ 25 MiB, PNG/JPEG only, rate-limited to 10/min per arche per user. Throws on size violation rather than returning a result.
-
 ### Image-editing capability hooks (auto-generated)
 
 **Permission:** `entities:image_edit`
@@ -1002,7 +986,7 @@ The SDK also exports the following for advanced use cases. Most plugins don't ne
 
 Other optional sub-fields: `currency: "usd"` (only USD supported today), `platformFeePercent` (override the default platform cut — non-standard).
 
-**Permissions:** `theme:read`, `user:profile:read`, `storage:sandbox`, `data:store`, `data:search`, `entities:invoke`, `entities:client_invoke`, `entities:image_generate`, `entities:image_edit`, `entities:image_remove_background`, `entities:audio_generate`, `entities:web_search`, `store:purchase`, `vault:documents:read`, `vault:documents:write`, `assets:read`, `navigation:open_arche`, `sandbox:vendored-libraries`
+**Permissions:** `theme:read`, `user:profile:read`, `storage:sandbox`, `data:store`, `data:search`, `entities:invoke`, `entities:client_invoke`, `entities:image_generate`, `entities:image_edit`, `entities:audio_generate`, `entities:web_search`, `store:purchase`, `vault:documents:read`, `vault:documents:write`, `assets:read`, `navigation:open_arche`, `sandbox:vendored-libraries`
 
 **Using AI:** Add `"entities:invoke"` to permissions, then use `useEntityInvocation()` with a model entity ID and your own `systemPrompt`. Browse available models with `npx fias-dev entities`.
 
@@ -1053,6 +1037,7 @@ When you hit a constraint, say so AND tell the user: file an Entity request on t
 ### Sandboxing
 
 - Plugins run in an iframe with `sandbox="allow-scripts allow-forms allow-downloads allow-popups allow-popups-to-escape-sandbox"` (note: **no** `allow-same-origin` — the plugin has an opaque origin)
+- **`window.alert()` / `confirm()` / `prompt()` do nothing** (no `allow-modals`): they don't throw — `confirm()` silently returns `false`, so gated actions never run. Build confirmation into your UI (a two-step button or an inline dialog) instead
 - **No `fetch()` or `XMLHttpRequest`** — all network access is blocked
 - **You _can_ open external links in a new tab** (e.g. `window.open('https://…', '_blank')`) — see "Opening external links" above
 - **No access** to parent DOM, cookies, or localStorage