@palettelab/sdk 0.1.13 → 0.1.15

package/README.md

@@ -122,15 +122,30 @@ import {
   PluginProvider,
   usePlatform,
   createPaletteClient,
+  DataRoomClient,
+  StorageClient,
   usePluginTranslations,
+  translate,
+  normalizePaletteLanguage,
   usePluginTasks,
   usePluginDataRooms,
   usePluginChat,
   apiFetch,
   apiUpload,
+  setBaseUrl,
+  getBaseUrl,
   createSandboxBridge,
+  isSandboxRuntime,
   getInstallConfig,
   updateInstallConfig,
+  hasPermission,
+  hasAnyPermission,
+  hasAllPermissions,
+  PaletteApiError,
+  errorFromResponse,
+  isPaletteApiError,
+  createMockPlatformContext,
+  withPluginProvider,
 } from "@palettelab/sdk"
 ```
 
@@ -142,6 +157,25 @@ import type { PluginManifest } from "@palettelab/sdk/types"
 import { PluginProvider } from "@palettelab/sdk/components"
 ```
 
+## Helper Reference
+
+Public frontend helpers exported by `@palettelab/sdk`:
+
+- Provider/context: `PluginProvider`, `usePlatform`, `PlatformCtx`.
+- Client facade: `createPaletteClient(platform?)`.
+- API: `apiFetch(path, init?)`, `apiUpload(path, file, fieldName?, extraFields?)`, `setBaseUrl(url)`, `getBaseUrl()`.
+- Errors: `PaletteApiError`, `errorFromResponse(response)`, `isPaletteApiError(error)`.
+- Data Rooms: `DataRoomClient`, `dataRooms`, plus `list`, `create`, `get`, `folder`, `ensureRoom`, `requireRoomByName`, `findRoomByName`, `createFolder`, `ensureFolder`, `findFolderByName`, `resolveFolderPath`, `findFileByName`, `requestUpload`, `confirmUpload`, and `uploadFile`.
+- Storage: `StorageClient`, `upload(file, options)`, `resume(file, options)`, and `uploadToSignedUrl(uploadUrl, file, contentType?)`.
+- Install config: `getInstallConfig(pluginId)`, `updateInstallConfig(pluginId, values)`.
+- Organization/user: `UserClient`, `OrganizationClient`, including `current`, `updateProfile`, `listMine`, `listMembers`, `getMember`, `getMemberByEmail`, `inviteMember`, and `updateMemberRole`.
+- Permissions: `hasPermission(ctx, permission)`, `hasAnyPermission(ctx, permissions)`, `hasAllPermissions(ctx, permissions)`.
+- Translations: `normalizePaletteLanguage`, `translate`, `usePluginTranslations`.
+- Hooks: `usePluginTasks`, `usePluginDataRooms`, `usePluginChat`.
+- Sandbox: `createSandboxBridge`, `isSandboxRuntime`.
+- Testing: `createMockPlatformContext`, `withPluginProvider`.
+- Types: `PluginManifest`, `PluginComponentProps`, `PlatformContext`, `PaletteClient`, resource, task, chat, data-room, user, organization, translation, and sandbox bridge types.
+
 ## Plugin Root
 
 The platform passes plugin runtime context into your root component. Wrap your UI with `PluginProvider` so hooks can read it.
@@ -252,12 +286,30 @@ Included clients:
 - `palette.dataRooms.list()`, `create()`, `get()`, `folder()`, `createFolder()`, `ensureFolder()`, `findRoomByName()`, `findFolderByName()`, `resolveFolderPath()`, `findFileByName()`, and `uploadFile()`
 - `palette.config.get()` and `palette.config.update(values)`, with optional plugin ID override
 - `palette.permissions.has()`, `hasAny()`, and `hasAll()`
-- `palette.storage.uploadToSignedUrl()`
+- `palette.storage.upload(file, options)`, `resume(file, options)`, and `uploadToSignedUrl()`
 - `palette.toast.success()`, `error()`, and `info()`
 
 These helpers are intentionally thin wrappers over platform APIs. Apps can still
 use `apiFetch()` directly for custom backend routes.
 
+App storage uploads are scoped by Palette to:
+
+```text
+uploads/apps/{app_name}_{plugin_id}/{organisation_slug}_{organisation_id}/{file}
+```
+
+Declare `"storage"` in `platform_services`, then upload directly from the
+browser with resumable chunking and progress:
+
+```tsx
+const palette = createPaletteClient(usePlatform())
+
+await palette.storage.upload(file, {
+  key: `receipts/${file.name}`,
+  onProgress: (p) => setPercent(p.percentage),
+})
+```
+
 Member helpers operate on the active organisation. Use `members:read` for
 listing or looking up members, and `members:write` for invitations or role
 updates. When the runtime provides declared app permissions, these helpers check
@@ -364,8 +416,8 @@ Plugins can read and update their installation configuration through helper APIs
 ```ts
 import { getInstallConfig, updateInstallConfig } from "@palettelab/sdk"
 
-const config = await getInstallConfig()
-await updateInstallConfig({ ...config, enabled: true })
+const config = await getInstallConfig("my-plugin")
+await updateInstallConfig("my-plugin", { ...config, enabled: true })
 ```
 
 ## Sandbox Bridge

package/dist/index.d.mts

@@ -107,8 +107,41 @@ declare class DataRoomClient {
 }
 declare const dataRooms: DataRoomClient;
 
+type StorageUploadState = "starting" | "uploading" | "paused" | "complete";
+type StorageUploadProgress = {
+    loaded: number;
+    total: number;
+    percentage: number;
+    chunkIndex: number;
+    chunkCount: number;
+    state: StorageUploadState;
+};
+type StorageUploadOptions = {
+    pluginId?: string;
+    key?: string;
+    contentType?: string;
+    chunkSize?: number;
+    resumable?: boolean;
+    onProgress?: (progress: StorageUploadProgress) => void;
+    signal?: AbortSignal;
+};
+type StorageUploadResult = {
+    uploadId: string;
+    mode: "gcs_resumable" | "local_resumable" | string;
+    bucket: string;
+    objectPath: string;
+    fileUrl: string;
+    contentType: string;
+    size: number;
+};
 declare function uploadToSignedUrl(uploadUrl: string, file: Blob, contentType?: string): Promise<void>;
 declare class StorageClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    private pluginId;
+    private createSession;
+    upload(file: File, options?: StorageUploadOptions): Promise<StorageUploadResult>;
+    resume(file: File, options?: StorageUploadOptions): Promise<StorageUploadResult>;
     uploadToSignedUrl: typeof uploadToSignedUrl;
 }
 
@@ -179,4 +212,4 @@ declare function hasPermission(ctx: PlatformContext, permission: string): boolea
 declare function hasAnyPermission(ctx: PlatformContext, permissions: string[]): boolean;
 declare function hasAllPermissions(ctx: PlatformContext, permissions: string[]): boolean;
 
-export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, type OrgInviteMemberInput, type OrgInviteMemberResponse, type OrgMember, type OrgMemberRole, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };
+export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, type OrgInviteMemberInput, type OrgInviteMemberResponse, type OrgMember, type OrgMemberRole, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, type StorageUploadOptions, type StorageUploadProgress, type StorageUploadResult, type StorageUploadState, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };

package/dist/index.d.ts

@@ -107,8 +107,41 @@ declare class DataRoomClient {
 }
 declare const dataRooms: DataRoomClient;
 
+type StorageUploadState = "starting" | "uploading" | "paused" | "complete";
+type StorageUploadProgress = {
+    loaded: number;
+    total: number;
+    percentage: number;
+    chunkIndex: number;
+    chunkCount: number;
+    state: StorageUploadState;
+};
+type StorageUploadOptions = {
+    pluginId?: string;
+    key?: string;
+    contentType?: string;
+    chunkSize?: number;
+    resumable?: boolean;
+    onProgress?: (progress: StorageUploadProgress) => void;
+    signal?: AbortSignal;
+};
+type StorageUploadResult = {
+    uploadId: string;
+    mode: "gcs_resumable" | "local_resumable" | string;
+    bucket: string;
+    objectPath: string;
+    fileUrl: string;
+    contentType: string;
+    size: number;
+};
 declare function uploadToSignedUrl(uploadUrl: string, file: Blob, contentType?: string): Promise<void>;
 declare class StorageClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    private pluginId;
+    private createSession;
+    upload(file: File, options?: StorageUploadOptions): Promise<StorageUploadResult>;
+    resume(file: File, options?: StorageUploadOptions): Promise<StorageUploadResult>;
     uploadToSignedUrl: typeof uploadToSignedUrl;
 }
 
@@ -179,4 +212,4 @@ declare function hasPermission(ctx: PlatformContext, permission: string): boolea
 declare function hasAnyPermission(ctx: PlatformContext, permissions: string[]): boolean;
 declare function hasAllPermissions(ctx: PlatformContext, permissions: string[]): boolean;
 
-export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, type OrgInviteMemberInput, type OrgInviteMemberResponse, type OrgMember, type OrgMemberRole, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };
+export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, type OrgInviteMemberInput, type OrgInviteMemberResponse, type OrgMember, type OrgMemberRole, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, type StorageUploadOptions, type StorageUploadProgress, type StorageUploadResult, type StorageUploadState, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };

package/dist/index.js

@@ -359,6 +359,8 @@ function hasAllPermissions(ctx, permissions) {
 }
 
 // src/storage.ts
+var DEFAULT_CHUNK_SIZE = 8 * 1024 * 1024;
+var MIN_CHUNK_SIZE = 256 * 1024;
 async function uploadToSignedUrl(uploadUrl, file, contentType = "application/octet-stream") {
   const res = await fetch(uploadUrl, {
     method: "PUT",
@@ -367,10 +369,178 @@ async function uploadToSignedUrl(uploadUrl, file, contentType = "application/oct
   });
   if (!res.ok) throw new Error(`Upload failed: ${res.statusText}`);
 }
+function normalizeChunkSize(value) {
+  const raw = Math.max(value || DEFAULT_CHUNK_SIZE, MIN_CHUNK_SIZE);
+  return Math.ceil(raw / MIN_CHUNK_SIZE) * MIN_CHUNK_SIZE;
+}
+function defaultPluginId() {
+  if (typeof window === "undefined") return "";
+  const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+  return match ? decodeURIComponent(match[1]) : "";
+}
+function fileFingerprint(pluginId, file, key) {
+  return [pluginId, key || file.name, file.size, file.lastModified].join(":");
+}
+function sessionStorageKey(pluginId, fingerprint) {
+  return `palette:storage-upload:${pluginId}:${fingerprint}`;
+}
+function readStoredSession(pluginId, fingerprint) {
+  if (typeof window === "undefined") return null;
+  try {
+    const raw = window.localStorage.getItem(sessionStorageKey(pluginId, fingerprint));
+    if (!raw) return null;
+    const session = JSON.parse(raw);
+    return session.plugin_id === pluginId && session.fingerprint === fingerprint ? session : null;
+  } catch {
+    return null;
+  }
+}
+function writeStoredSession(pluginId, fingerprint, session) {
+  if (typeof window === "undefined") return;
+  const stored = { ...session, plugin_id: pluginId, fingerprint, updated_at: Date.now() };
+  window.localStorage.setItem(sessionStorageKey(pluginId, fingerprint), JSON.stringify(stored));
+}
+function clearStoredSession(pluginId, fingerprint) {
+  if (typeof window === "undefined") return;
+  window.localStorage.removeItem(sessionStorageKey(pluginId, fingerprint));
+}
+function absoluteApiUrl(pathOrUrl) {
+  return /^https?:\/\//i.test(pathOrUrl) ? pathOrUrl : `${getBaseUrl()}${pathOrUrl}`;
+}
+function isPaletteApiUpload(url) {
+  return url.startsWith(getBaseUrl()) || url.startsWith("/");
+}
+function report(loaded, total, chunkIndex, chunkCount, state, onProgress) {
+  onProgress?.({
+    loaded,
+    total,
+    percentage: total > 0 ? Math.min(100, Math.round(loaded / total * 1e4) / 100) : 100,
+    chunkIndex,
+    chunkCount,
+    state
+  });
+}
+function xhrPut(url, body, headers, signal, onUploadProgress) {
+  return new Promise((resolve, reject) => {
+    const xhr = new XMLHttpRequest();
+    xhr.open("PUT", absoluteApiUrl(url), true);
+    xhr.withCredentials = isPaletteApiUpload(url);
+    for (const [key, value] of Object.entries(headers)) xhr.setRequestHeader(key, value);
+    xhr.upload.onprogress = (event) => {
+      if (event.lengthComputable) onUploadProgress?.(event.loaded);
+    };
+    xhr.onload = () => {
+      const ok = [200, 201, 204, 308].includes(xhr.status);
+      if (!ok) reject(new Error(`Upload failed: ${xhr.status} ${xhr.statusText}`));
+      else resolve({ status: xhr.status, range: xhr.getResponseHeader("Range") });
+    };
+    xhr.onerror = () => reject(new Error("Upload failed"));
+    xhr.onabort = () => reject(new DOMException("Upload aborted", "AbortError"));
+    if (signal) {
+      if (signal.aborted) {
+        xhr.abort();
+        return;
+      }
+      signal.addEventListener("abort", () => xhr.abort(), { once: true });
+    }
+    xhr.send(body);
+  });
+}
+function uploadedFromRange(range) {
+  if (!range) return 0;
+  const match = range.match(/bytes=0-(\d+)/);
+  return match ? Number(match[1]) + 1 : 0;
+}
+async function queryGcsOffset(session) {
+  try {
+    const result = await xhrPut(session.upload_url, new Blob([]), {
+      "Content-Range": `bytes */${session.size}`
+    });
+    if ([200, 201, 204].includes(result.status)) return session.size;
+    return uploadedFromRange(result.range);
+  } catch {
+    return 0;
+  }
+}
+async function queryLocalOffset(session) {
+  const res = await fetch(absoluteApiUrl(session.status_url), { credentials: "include" });
+  if (!res.ok) return 0;
+  const body = await res.json();
+  return Number(body.uploaded_bytes || 0);
+}
+async function queryOffset(session) {
+  if (session.mode === "local_resumable") return queryLocalOffset(session);
+  return queryGcsOffset(session);
+}
 var StorageClient = class {
-  constructor() {
+  constructor(ctx) {
+    this.ctx = ctx;
     this.uploadToSignedUrl = uploadToSignedUrl;
   }
+  pluginId(explicit) {
+    const resolved = explicit || this.ctx?.pluginId || defaultPluginId();
+    if (!resolved) throw new Error("pluginId is required for app storage uploads");
+    return resolved;
+  }
+  async createSession(pluginId, file, options) {
+    const res = await (this.ctx?.apiFetch || apiFetch)(`/api/v1/app-storage/${encodeURIComponent(pluginId)}/uploads`, {
+      method: "POST",
+      body: JSON.stringify({
+        filename: file.name,
+        content_type: options.contentType || file.type || "application/octet-stream",
+        size: file.size,
+        key: options.key || null,
+        resumable: options.resumable ?? true,
+        chunk_size: normalizeChunkSize(options.chunkSize)
+      })
+    });
+    return res.json();
+  }
+  async upload(file, options = {}) {
+    const pluginId = this.pluginId(options.pluginId);
+    const fingerprint = fileFingerprint(pluginId, file, options.key);
+    const stored = options.resumable === false ? null : readStoredSession(pluginId, fingerprint);
+    const session = stored || await this.createSession(pluginId, file, options);
+    writeStoredSession(pluginId, fingerprint, session);
+    const chunkSize = normalizeChunkSize(options.chunkSize || session.chunk_size);
+    const chunkCount = Math.max(1, Math.ceil(file.size / chunkSize));
+    let offset = stored ? await queryOffset(session) : 0;
+    report(offset, file.size, Math.floor(offset / chunkSize), chunkCount, "starting", options.onProgress);
+    while (offset < file.size) {
+      if (options.signal?.aborted) throw new DOMException("Upload aborted", "AbortError");
+      const start = offset;
+      const end = Math.min(file.size, start + chunkSize) - 1;
+      const chunk = file.slice(start, end + 1);
+      const chunkIndex = Math.floor(start / chunkSize) + 1;
+      const lastReportedBase = start;
+      await xhrPut(
+        session.upload_url,
+        chunk,
+        {
+          "Content-Type": session.content_type,
+          "Content-Range": `bytes ${start}-${end}/${file.size}`
+        },
+        options.signal,
+        (loaded) => report(lastReportedBase + loaded, file.size, chunkIndex, chunkCount, "uploading", options.onProgress)
+      );
+      offset = end + 1;
+      report(offset, file.size, chunkIndex, chunkCount, offset >= file.size ? "complete" : "uploading", options.onProgress);
+      writeStoredSession(pluginId, fingerprint, session);
+    }
+    clearStoredSession(pluginId, fingerprint);
+    return {
+      uploadId: session.upload_id,
+      mode: session.mode,
+      bucket: session.bucket,
+      objectPath: session.object_path,
+      fileUrl: session.file_url,
+      contentType: session.content_type,
+      size: session.size
+    };
+  }
+  async resume(file, options = {}) {
+    return this.upload(file, { ...options, resumable: true });
+  }
 };
 
 // src/user-org.ts
@@ -448,7 +618,7 @@ var OrganizationClient = class {
 
 // src/palette-client.ts
 function createPaletteClient(ctx) {
-  const defaultPluginId = () => {
+  const defaultPluginId2 = () => {
     if (ctx?.pluginId) return ctx.pluginId;
     if (typeof window === "undefined") return "";
     const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
@@ -458,15 +628,15 @@ function createPaletteClient(ctx) {
     user: new UserClient(ctx),
     organization: new OrganizationClient(ctx),
     dataRooms: new DataRoomClient(),
-    storage: new StorageClient(),
+    storage: new StorageClient(ctx),
     config: {
       get: (pluginId = ctx?.pluginId ?? "") => {
-        const resolved = pluginId || defaultPluginId();
+        const resolved = pluginId || defaultPluginId2();
         if (!resolved) throw new Error("pluginId is required to read install config");
         return getInstallConfig(resolved);
       },
       update: (values, pluginId = ctx?.pluginId ?? "") => {
-        const resolved = pluginId || defaultPluginId();
+        const resolved = pluginId || defaultPluginId2();
         if (!resolved) throw new Error("pluginId is required to update install config");
         return updateInstallConfig(resolved, values);
       }

package/dist/index.mjs

@@ -302,6 +302,8 @@ function hasAllPermissions(ctx, permissions) {
 }
 
 // src/storage.ts
+var DEFAULT_CHUNK_SIZE = 8 * 1024 * 1024;
+var MIN_CHUNK_SIZE = 256 * 1024;
 async function uploadToSignedUrl(uploadUrl, file, contentType = "application/octet-stream") {
   const res = await fetch(uploadUrl, {
     method: "PUT",
@@ -310,10 +312,178 @@ async function uploadToSignedUrl(uploadUrl, file, contentType = "application/oct
   });
   if (!res.ok) throw new Error(`Upload failed: ${res.statusText}`);
 }
+function normalizeChunkSize(value) {
+  const raw = Math.max(value || DEFAULT_CHUNK_SIZE, MIN_CHUNK_SIZE);
+  return Math.ceil(raw / MIN_CHUNK_SIZE) * MIN_CHUNK_SIZE;
+}
+function defaultPluginId() {
+  if (typeof window === "undefined") return "";
+  const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+  return match ? decodeURIComponent(match[1]) : "";
+}
+function fileFingerprint(pluginId, file, key) {
+  return [pluginId, key || file.name, file.size, file.lastModified].join(":");
+}
+function sessionStorageKey(pluginId, fingerprint) {
+  return `palette:storage-upload:${pluginId}:${fingerprint}`;
+}
+function readStoredSession(pluginId, fingerprint) {
+  if (typeof window === "undefined") return null;
+  try {
+    const raw = window.localStorage.getItem(sessionStorageKey(pluginId, fingerprint));
+    if (!raw) return null;
+    const session = JSON.parse(raw);
+    return session.plugin_id === pluginId && session.fingerprint === fingerprint ? session : null;
+  } catch {
+    return null;
+  }
+}
+function writeStoredSession(pluginId, fingerprint, session) {
+  if (typeof window === "undefined") return;
+  const stored = { ...session, plugin_id: pluginId, fingerprint, updated_at: Date.now() };
+  window.localStorage.setItem(sessionStorageKey(pluginId, fingerprint), JSON.stringify(stored));
+}
+function clearStoredSession(pluginId, fingerprint) {
+  if (typeof window === "undefined") return;
+  window.localStorage.removeItem(sessionStorageKey(pluginId, fingerprint));
+}
+function absoluteApiUrl(pathOrUrl) {
+  return /^https?:\/\//i.test(pathOrUrl) ? pathOrUrl : `${getBaseUrl()}${pathOrUrl}`;
+}
+function isPaletteApiUpload(url) {
+  return url.startsWith(getBaseUrl()) || url.startsWith("/");
+}
+function report(loaded, total, chunkIndex, chunkCount, state, onProgress) {
+  onProgress?.({
+    loaded,
+    total,
+    percentage: total > 0 ? Math.min(100, Math.round(loaded / total * 1e4) / 100) : 100,
+    chunkIndex,
+    chunkCount,
+    state
+  });
+}
+function xhrPut(url, body, headers, signal, onUploadProgress) {
+  return new Promise((resolve, reject) => {
+    const xhr = new XMLHttpRequest();
+    xhr.open("PUT", absoluteApiUrl(url), true);
+    xhr.withCredentials = isPaletteApiUpload(url);
+    for (const [key, value] of Object.entries(headers)) xhr.setRequestHeader(key, value);
+    xhr.upload.onprogress = (event) => {
+      if (event.lengthComputable) onUploadProgress?.(event.loaded);
+    };
+    xhr.onload = () => {
+      const ok = [200, 201, 204, 308].includes(xhr.status);
+      if (!ok) reject(new Error(`Upload failed: ${xhr.status} ${xhr.statusText}`));
+      else resolve({ status: xhr.status, range: xhr.getResponseHeader("Range") });
+    };
+    xhr.onerror = () => reject(new Error("Upload failed"));
+    xhr.onabort = () => reject(new DOMException("Upload aborted", "AbortError"));
+    if (signal) {
+      if (signal.aborted) {
+        xhr.abort();
+        return;
+      }
+      signal.addEventListener("abort", () => xhr.abort(), { once: true });
+    }
+    xhr.send(body);
+  });
+}
+function uploadedFromRange(range) {
+  if (!range) return 0;
+  const match = range.match(/bytes=0-(\d+)/);
+  return match ? Number(match[1]) + 1 : 0;
+}
+async function queryGcsOffset(session) {
+  try {
+    const result = await xhrPut(session.upload_url, new Blob([]), {
+      "Content-Range": `bytes */${session.size}`
+    });
+    if ([200, 201, 204].includes(result.status)) return session.size;
+    return uploadedFromRange(result.range);
+  } catch {
+    return 0;
+  }
+}
+async function queryLocalOffset(session) {
+  const res = await fetch(absoluteApiUrl(session.status_url), { credentials: "include" });
+  if (!res.ok) return 0;
+  const body = await res.json();
+  return Number(body.uploaded_bytes || 0);
+}
+async function queryOffset(session) {
+  if (session.mode === "local_resumable") return queryLocalOffset(session);
+  return queryGcsOffset(session);
+}
 var StorageClient = class {
-  constructor() {
+  constructor(ctx) {
+    this.ctx = ctx;
     this.uploadToSignedUrl = uploadToSignedUrl;
   }
+  pluginId(explicit) {
+    const resolved = explicit || this.ctx?.pluginId || defaultPluginId();
+    if (!resolved) throw new Error("pluginId is required for app storage uploads");
+    return resolved;
+  }
+  async createSession(pluginId, file, options) {
+    const res = await (this.ctx?.apiFetch || apiFetch)(`/api/v1/app-storage/${encodeURIComponent(pluginId)}/uploads`, {
+      method: "POST",
+      body: JSON.stringify({
+        filename: file.name,
+        content_type: options.contentType || file.type || "application/octet-stream",
+        size: file.size,
+        key: options.key || null,
+        resumable: options.resumable ?? true,
+        chunk_size: normalizeChunkSize(options.chunkSize)
+      })
+    });
+    return res.json();
+  }
+  async upload(file, options = {}) {
+    const pluginId = this.pluginId(options.pluginId);
+    const fingerprint = fileFingerprint(pluginId, file, options.key);
+    const stored = options.resumable === false ? null : readStoredSession(pluginId, fingerprint);
+    const session = stored || await this.createSession(pluginId, file, options);
+    writeStoredSession(pluginId, fingerprint, session);
+    const chunkSize = normalizeChunkSize(options.chunkSize || session.chunk_size);
+    const chunkCount = Math.max(1, Math.ceil(file.size / chunkSize));
+    let offset = stored ? await queryOffset(session) : 0;
+    report(offset, file.size, Math.floor(offset / chunkSize), chunkCount, "starting", options.onProgress);
+    while (offset < file.size) {
+      if (options.signal?.aborted) throw new DOMException("Upload aborted", "AbortError");
+      const start = offset;
+      const end = Math.min(file.size, start + chunkSize) - 1;
+      const chunk = file.slice(start, end + 1);
+      const chunkIndex = Math.floor(start / chunkSize) + 1;
+      const lastReportedBase = start;
+      await xhrPut(
+        session.upload_url,
+        chunk,
+        {
+          "Content-Type": session.content_type,
+          "Content-Range": `bytes ${start}-${end}/${file.size}`
+        },
+        options.signal,
+        (loaded) => report(lastReportedBase + loaded, file.size, chunkIndex, chunkCount, "uploading", options.onProgress)
+      );
+      offset = end + 1;
+      report(offset, file.size, chunkIndex, chunkCount, offset >= file.size ? "complete" : "uploading", options.onProgress);
+      writeStoredSession(pluginId, fingerprint, session);
+    }
+    clearStoredSession(pluginId, fingerprint);
+    return {
+      uploadId: session.upload_id,
+      mode: session.mode,
+      bucket: session.bucket,
+      objectPath: session.object_path,
+      fileUrl: session.file_url,
+      contentType: session.content_type,
+      size: session.size
+    };
+  }
+  async resume(file, options = {}) {
+    return this.upload(file, { ...options, resumable: true });
+  }
 };
 
 // src/user-org.ts
@@ -391,7 +561,7 @@ var OrganizationClient = class {
 
 // src/palette-client.ts
 function createPaletteClient(ctx) {
-  const defaultPluginId = () => {
+  const defaultPluginId2 = () => {
     if (ctx?.pluginId) return ctx.pluginId;
     if (typeof window === "undefined") return "";
     const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
@@ -401,15 +571,15 @@ function createPaletteClient(ctx) {
     user: new UserClient(ctx),
     organization: new OrganizationClient(ctx),
     dataRooms: new DataRoomClient(),
-    storage: new StorageClient(),
+    storage: new StorageClient(ctx),
     config: {
       get: (pluginId = ctx?.pluginId ?? "") => {
-        const resolved = pluginId || defaultPluginId();
+        const resolved = pluginId || defaultPluginId2();
         if (!resolved) throw new Error("pluginId is required to read install config");
         return getInstallConfig(resolved);
       },
       update: (values, pluginId = ctx?.pluginId ?? "") => {
-        const resolved = pluginId || defaultPluginId();
+        const resolved = pluginId || defaultPluginId2();
         if (!resolved) throw new Error("pluginId is required to update install config");
         return updateInstallConfig(resolved, values);
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@palettelab/sdk",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Palette Platform SDK for building plugins and apps",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",