@palettelab/sdk 0.1.20 → 0.1.22

package/dist/index.js

@@ -20,8 +20,11 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  BrokerCallError: () => BrokerCallError,
+  CrossAppGrantError: () => CrossAppGrantError,
   DataRoomClient: () => DataRoomClient,
   Link: () => Link,
+  MissingDependencyError: () => MissingDependencyError,
   OrganizationClient: () => OrganizationClient,
   PaletteApiError: () => PaletteApiError,
   PaletteAppRouter: () => PaletteAppRouter,
@@ -31,12 +34,14 @@ __export(src_exports, {
   UserClient: () => UserClient,
   apiFetch: () => apiFetch,
   apiUpload: () => apiUpload,
+  broker: () => broker,
   createMockPlatformContext: () => createMockPlatformContext,
   createPaletteClient: () => createPaletteClient,
   createSandboxBridge: () => createSandboxBridge,
   dataRooms: () => dataRooms,
   disconnectConnection: () => disconnectConnection,
   errorFromResponse: () => errorFromResponse,
+  events: () => events,
   getBaseUrl: () => getBaseUrl,
   getConnections: () => getConnections,
   getInstallConfig: () => getInstallConfig,
@@ -47,7 +52,9 @@ __export(src_exports, {
   isSandboxRuntime: () => isSandboxRuntime,
   normalizePaletteLanguage: () => normalizePaletteLanguage,
   notFound: () => notFound,
+  palette: () => palette,
   requireConnection: () => requireConnection,
+  servicesProxy: () => servicesProxy,
   setBaseUrl: () => setBaseUrl,
   startConnection: () => startConnection,
   translate: () => translate,
@@ -385,6 +392,272 @@ var DataRoomClient = class {
 };
 var dataRooms = new DataRoomClient();
 
+// src/services.ts
+var BrokerCallError = class extends Error {
+  constructor(message, target, status) {
+    super(message);
+    this.target = target;
+    this.status = status;
+    this.name = "BrokerCallError";
+  }
+};
+var MissingDependencyError = class extends BrokerCallError {
+  constructor(message, target, status) {
+    super(message, target, status);
+    this.name = "MissingDependencyError";
+  }
+};
+var CrossAppGrantError = class extends BrokerCallError {
+  constructor(message, target, status) {
+    super(message, target, status);
+    this.name = "CrossAppGrantError";
+  }
+};
+function brokerError(message, target, status) {
+  const lower = message.toLowerCase();
+  if (status === 424 || lower.includes("not installed") || lower.includes("provider app")) {
+    return new MissingDependencyError(message, target, status);
+  }
+  if (status === 403 && (lower.includes("grant") || lower.includes("declared"))) {
+    return new CrossAppGrantError(message, target, status);
+  }
+  return new BrokerCallError(message, target, status);
+}
+var CALLER_HEADER = "X-Palette-Caller-App";
+function currentPluginId() {
+  if (typeof window === "undefined") return void 0;
+  const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+  return match ? decodeURIComponent(match[1]) : void 0;
+}
+async function brokerCallDirect(target, payload, options = {}) {
+  const callerAppId = options.callerAppId ?? currentPluginId();
+  const headers = {};
+  if (callerAppId) headers[CALLER_HEADER] = callerAppId;
+  let res;
+  try {
+    res = await apiFetch("/api/v1/os-broker/dispatch", {
+      method: "POST",
+      headers,
+      body: JSON.stringify({ target, payload: payload ?? {}, caller_app_id: callerAppId }),
+      signal: options.signal
+    });
+  } catch (error) {
+    const e = error;
+    throw brokerError(typeof e.detail === "string" ? e.detail : e.message, target, e.status);
+  }
+  if (!res.ok) {
+    let detail;
+    try {
+      detail = (await res.json()).detail;
+    } catch {
+      detail = res.statusText;
+    }
+    throw brokerError(detail ?? `broker dispatch failed: ${res.status}`, target, res.status);
+  }
+  const body = await res.json();
+  return body.result;
+}
+async function brokerCallSandboxed(target, payload, options = {}) {
+  return sandboxRequest({
+    kind: "palette.broker.call",
+    target,
+    payload: payload ?? {},
+    callerAppId: options.callerAppId
+  });
+}
+async function brokerEmitDirect(target, payload, options = {}) {
+  const callerAppId = options.callerAppId ?? currentPluginId();
+  if (!callerAppId) {
+    throw new BrokerCallError(
+      "events.emit requires a caller app id \u2014 only plugins may emit declared events",
+      target
+    );
+  }
+  const res = await apiFetch("/api/v1/os-broker/events/emit", {
+    method: "POST",
+    headers: { [CALLER_HEADER]: callerAppId },
+    body: JSON.stringify({ target, payload: payload ?? {}, caller_app_id: callerAppId }),
+    signal: options.signal
+  });
+  if (!res.ok) {
+    let detail;
+    try {
+      detail = (await res.json()).detail;
+    } catch {
+      detail = res.statusText;
+    }
+    throw new BrokerCallError(detail ?? `event emit failed: ${res.status}`, target, res.status);
+  }
+}
+async function brokerEmitSandboxed(target, payload, options = {}) {
+  await sandboxRequest({
+    kind: "palette.broker.emit",
+    target,
+    payload: payload ?? {},
+    callerAppId: options.callerAppId
+  });
+}
+function sandboxRequest(message) {
+  if (typeof window === "undefined") {
+    return Promise.reject(new BrokerCallError("sandbox bridge unavailable", message.target));
+  }
+  return new Promise((resolve, reject) => {
+    const id = `${Date.now()}.${Math.random().toString(36).slice(2)}`;
+    const onMessage = (ev) => {
+      const data = ev.data;
+      if (!data || data.id !== id) return;
+      window.removeEventListener("message", onMessage);
+      if (data.error) {
+        reject(new BrokerCallError(data.error.message, message.target, data.error.status));
+      } else {
+        resolve(data.result);
+      }
+    };
+    window.addEventListener("message", onMessage);
+    window.parent?.postMessage({ ...message, id }, "*");
+  });
+}
+var broker = {
+  async call(target, payload, options) {
+    return isSandboxRuntime() ? brokerCallSandboxed(target, payload, options) : brokerCallDirect(target, payload, options);
+  },
+  async emit(target, payload, options) {
+    if (isSandboxRuntime()) return brokerEmitSandboxed(target, payload, options);
+    return brokerEmitDirect(target, payload, options);
+  }
+};
+function servicesProxy(namespaceVersion) {
+  if (!namespaceVersion.includes("/")) {
+    throw new BrokerCallError("namespaceVersion must look like 'org/v1'", namespaceVersion);
+  }
+  const buildProxy = (segments) => new Proxy(function() {
+  }, {
+    get(_target, prop) {
+      if (typeof prop !== "string") return void 0;
+      return buildProxy([...segments, prop]);
+    },
+    apply(_target, _thisArg, args) {
+      const method = segments.join(".");
+      if (!method) {
+        throw new BrokerCallError("missing method name", namespaceVersion);
+      }
+      const [payload, options] = args;
+      return broker.call(`${namespaceVersion}#${method}`, payload, options);
+    }
+  });
+  return buildProxy([]);
+}
+
+// src/events.ts
+var SUBSCRIBERS = /* @__PURE__ */ new Map();
+var activeStream = null;
+var activeStreamUrl = null;
+var sandboxBound = false;
+function currentPluginId2() {
+  if (typeof window === "undefined") return void 0;
+  const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+  return match ? decodeURIComponent(match[1]) : void 0;
+}
+function streamUrl() {
+  const params = new URLSearchParams();
+  const targets = Array.from(SUBSCRIBERS.keys());
+  if (targets.length) params.set("targets", targets.join(","));
+  const callerAppId = currentPluginId2();
+  if (callerAppId) params.set("caller_app_id", callerAppId);
+  const query = params.toString();
+  return `${getBaseUrl()}/api/v1/os-broker/events/stream${query ? `?${query}` : ""}`;
+}
+function ensureStream() {
+  if (activeStream || typeof window === "undefined") return;
+  activeStreamUrl = streamUrl();
+  activeStream = new EventSource(activeStreamUrl, { withCredentials: true });
+  activeStream.onmessage = (ev) => {
+    try {
+      const data = JSON.parse(ev.data);
+      const handlers = SUBSCRIBERS.get(data.target);
+      if (!handlers) return;
+      for (const handler of handlers) {
+        try {
+          handler(data.payload, data.meta);
+        } catch (err) {
+          console.error("palette.events handler threw", err);
+        }
+      }
+    } catch (err) {
+      console.warn("palette.events: malformed event", err);
+    }
+  };
+  activeStream.onerror = () => {
+  };
+}
+function refreshStream() {
+  if (typeof window === "undefined" || isSandboxRuntime()) return;
+  const nextUrl = streamUrl();
+  if (activeStream && activeStreamUrl === nextUrl) return;
+  activeStream?.close();
+  activeStream = null;
+  activeStreamUrl = null;
+  if (SUBSCRIBERS.size > 0) ensureStream();
+}
+function ensureSandboxBound() {
+  if (sandboxBound || typeof window === "undefined") return;
+  sandboxBound = true;
+  window.addEventListener("message", (ev) => {
+    const data = ev.data;
+    if (!data || data.kind !== "palette.broker.event" || !data.target) return;
+    const handlers = SUBSCRIBERS.get(data.target);
+    if (!handlers) return;
+    const meta = data.meta ?? { target: data.target, organizationId: null, occurredAt: (/* @__PURE__ */ new Date()).toISOString() };
+    for (const handler of handlers) {
+      try {
+        handler(data.payload, meta);
+      } catch (err) {
+        console.error("palette.events handler threw", err);
+      }
+    }
+  });
+}
+var events = {
+  on(target, handler) {
+    let handlers = SUBSCRIBERS.get(target);
+    if (!handlers) {
+      handlers = /* @__PURE__ */ new Set();
+      SUBSCRIBERS.set(target, handlers);
+    }
+    handlers.add(handler);
+    if (isSandboxRuntime()) {
+      ensureSandboxBound();
+      window.parent?.postMessage({ kind: "palette.broker.subscribe", target }, "*");
+    } else {
+      refreshStream();
+    }
+    return () => {
+      handlers.delete(handler);
+      if (handlers.size === 0) {
+        SUBSCRIBERS.delete(target);
+        if (isSandboxRuntime()) {
+          window.parent?.postMessage({ kind: "palette.broker.unsubscribe", target }, "*");
+        } else {
+          refreshStream();
+        }
+      }
+    };
+  },
+  async emit(target, payload) {
+    await broker.emit(target, payload);
+  },
+  async publishDurable(target, payload) {
+    await broker.emit(target, payload);
+  },
+  async emitDurable(target, payload) {
+    await broker.emit(target, payload);
+  },
+  /** Diagnostic: list active subscriptions in this page. */
+  active() {
+    return Array.from(SUBSCRIBERS.keys());
+  }
+};
+
 // src/permissions.ts
 function hasPermission(ctx, permission) {
   return ctx.permissions?.includes(permission) ?? false;
@@ -714,9 +987,21 @@ function createPaletteClient(ctx) {
       success: (message) => ctx?.showToast(message, "success"),
       error: (message) => ctx?.showToast(message, "error"),
       info: (message) => ctx?.showToast(message, "info")
-    }
+    },
+    /**
+     * OS-broker RPC. Typed entry point: `palette.services("org/v1").members.list({...})`.
+     * The proxy resolves a dotted method chain into a qualified target string
+     * and dispatches via the broker (in-process for plugins on the host,
+     * postMessage for sandboxed iframe apps).
+     */
+    services: (namespaceVersion) => servicesProxy(namespaceVersion),
+    /** Low-level broker accessor when you don't want the typed proxy. */
+    broker,
+    /** OS-broker pub/sub. `events.on(target, fn)` returns an unsubscribe function. */
+    events
   };
 }
+var palette = createPaletteClient();
 
 // src/i18n.ts
 var import_react3 = require("react");
@@ -1179,8 +1464,11 @@ function usePluginChat(agentId) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  BrokerCallError,
+  CrossAppGrantError,
   DataRoomClient,
   Link,
+  MissingDependencyError,
   OrganizationClient,
   PaletteApiError,
   PaletteAppRouter,
@@ -1190,12 +1478,14 @@ function usePluginChat(agentId) {
   UserClient,
   apiFetch,
   apiUpload,
+  broker,
   createMockPlatformContext,
   createPaletteClient,
   createSandboxBridge,
   dataRooms,
   disconnectConnection,
   errorFromResponse,
+  events,
   getBaseUrl,
   getConnections,
   getInstallConfig,
@@ -1206,7 +1496,9 @@ function usePluginChat(agentId) {
   isSandboxRuntime,
   normalizePaletteLanguage,
   notFound,
+  palette,
   requireConnection,
+  servicesProxy,
   setBaseUrl,
   startConnection,
   translate,

package/dist/index.mjs

@@ -317,6 +317,272 @@ var DataRoomClient = class {
 };
 var dataRooms = new DataRoomClient();
 
+// src/services.ts
+var BrokerCallError = class extends Error {
+  constructor(message, target, status) {
+    super(message);
+    this.target = target;
+    this.status = status;
+    this.name = "BrokerCallError";
+  }
+};
+var MissingDependencyError = class extends BrokerCallError {
+  constructor(message, target, status) {
+    super(message, target, status);
+    this.name = "MissingDependencyError";
+  }
+};
+var CrossAppGrantError = class extends BrokerCallError {
+  constructor(message, target, status) {
+    super(message, target, status);
+    this.name = "CrossAppGrantError";
+  }
+};
+function brokerError(message, target, status) {
+  const lower = message.toLowerCase();
+  if (status === 424 || lower.includes("not installed") || lower.includes("provider app")) {
+    return new MissingDependencyError(message, target, status);
+  }
+  if (status === 403 && (lower.includes("grant") || lower.includes("declared"))) {
+    return new CrossAppGrantError(message, target, status);
+  }
+  return new BrokerCallError(message, target, status);
+}
+var CALLER_HEADER = "X-Palette-Caller-App";
+function currentPluginId() {
+  if (typeof window === "undefined") return void 0;
+  const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+  return match ? decodeURIComponent(match[1]) : void 0;
+}
+async function brokerCallDirect(target, payload, options = {}) {
+  const callerAppId = options.callerAppId ?? currentPluginId();
+  const headers = {};
+  if (callerAppId) headers[CALLER_HEADER] = callerAppId;
+  let res;
+  try {
+    res = await apiFetch("/api/v1/os-broker/dispatch", {
+      method: "POST",
+      headers,
+      body: JSON.stringify({ target, payload: payload ?? {}, caller_app_id: callerAppId }),
+      signal: options.signal
+    });
+  } catch (error) {
+    const e = error;
+    throw brokerError(typeof e.detail === "string" ? e.detail : e.message, target, e.status);
+  }
+  if (!res.ok) {
+    let detail;
+    try {
+      detail = (await res.json()).detail;
+    } catch {
+      detail = res.statusText;
+    }
+    throw brokerError(detail ?? `broker dispatch failed: ${res.status}`, target, res.status);
+  }
+  const body = await res.json();
+  return body.result;
+}
+async function brokerCallSandboxed(target, payload, options = {}) {
+  return sandboxRequest({
+    kind: "palette.broker.call",
+    target,
+    payload: payload ?? {},
+    callerAppId: options.callerAppId
+  });
+}
+async function brokerEmitDirect(target, payload, options = {}) {
+  const callerAppId = options.callerAppId ?? currentPluginId();
+  if (!callerAppId) {
+    throw new BrokerCallError(
+      "events.emit requires a caller app id \u2014 only plugins may emit declared events",
+      target
+    );
+  }
+  const res = await apiFetch("/api/v1/os-broker/events/emit", {
+    method: "POST",
+    headers: { [CALLER_HEADER]: callerAppId },
+    body: JSON.stringify({ target, payload: payload ?? {}, caller_app_id: callerAppId }),
+    signal: options.signal
+  });
+  if (!res.ok) {
+    let detail;
+    try {
+      detail = (await res.json()).detail;
+    } catch {
+      detail = res.statusText;
+    }
+    throw new BrokerCallError(detail ?? `event emit failed: ${res.status}`, target, res.status);
+  }
+}
+async function brokerEmitSandboxed(target, payload, options = {}) {
+  await sandboxRequest({
+    kind: "palette.broker.emit",
+    target,
+    payload: payload ?? {},
+    callerAppId: options.callerAppId
+  });
+}
+function sandboxRequest(message) {
+  if (typeof window === "undefined") {
+    return Promise.reject(new BrokerCallError("sandbox bridge unavailable", message.target));
+  }
+  return new Promise((resolve, reject) => {
+    const id = `${Date.now()}.${Math.random().toString(36).slice(2)}`;
+    const onMessage = (ev) => {
+      const data = ev.data;
+      if (!data || data.id !== id) return;
+      window.removeEventListener("message", onMessage);
+      if (data.error) {
+        reject(new BrokerCallError(data.error.message, message.target, data.error.status));
+      } else {
+        resolve(data.result);
+      }
+    };
+    window.addEventListener("message", onMessage);
+    window.parent?.postMessage({ ...message, id }, "*");
+  });
+}
+var broker = {
+  async call(target, payload, options) {
+    return isSandboxRuntime() ? brokerCallSandboxed(target, payload, options) : brokerCallDirect(target, payload, options);
+  },
+  async emit(target, payload, options) {
+    if (isSandboxRuntime()) return brokerEmitSandboxed(target, payload, options);
+    return brokerEmitDirect(target, payload, options);
+  }
+};
+function servicesProxy(namespaceVersion) {
+  if (!namespaceVersion.includes("/")) {
+    throw new BrokerCallError("namespaceVersion must look like 'org/v1'", namespaceVersion);
+  }
+  const buildProxy = (segments) => new Proxy(function() {
+  }, {
+    get(_target, prop) {
+      if (typeof prop !== "string") return void 0;
+      return buildProxy([...segments, prop]);
+    },
+    apply(_target, _thisArg, args) {
+      const method = segments.join(".");
+      if (!method) {
+        throw new BrokerCallError("missing method name", namespaceVersion);
+      }
+      const [payload, options] = args;
+      return broker.call(`${namespaceVersion}#${method}`, payload, options);
+    }
+  });
+  return buildProxy([]);
+}
+
+// src/events.ts
+var SUBSCRIBERS = /* @__PURE__ */ new Map();
+var activeStream = null;
+var activeStreamUrl = null;
+var sandboxBound = false;
+function currentPluginId2() {
+  if (typeof window === "undefined") return void 0;
+  const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+  return match ? decodeURIComponent(match[1]) : void 0;
+}
+function streamUrl() {
+  const params = new URLSearchParams();
+  const targets = Array.from(SUBSCRIBERS.keys());
+  if (targets.length) params.set("targets", targets.join(","));
+  const callerAppId = currentPluginId2();
+  if (callerAppId) params.set("caller_app_id", callerAppId);
+  const query = params.toString();
+  return `${getBaseUrl()}/api/v1/os-broker/events/stream${query ? `?${query}` : ""}`;
+}
+function ensureStream() {
+  if (activeStream || typeof window === "undefined") return;
+  activeStreamUrl = streamUrl();
+  activeStream = new EventSource(activeStreamUrl, { withCredentials: true });
+  activeStream.onmessage = (ev) => {
+    try {
+      const data = JSON.parse(ev.data);
+      const handlers = SUBSCRIBERS.get(data.target);
+      if (!handlers) return;
+      for (const handler of handlers) {
+        try {
+          handler(data.payload, data.meta);
+        } catch (err) {
+          console.error("palette.events handler threw", err);
+        }
+      }
+    } catch (err) {
+      console.warn("palette.events: malformed event", err);
+    }
+  };
+  activeStream.onerror = () => {
+  };
+}
+function refreshStream() {
+  if (typeof window === "undefined" || isSandboxRuntime()) return;
+  const nextUrl = streamUrl();
+  if (activeStream && activeStreamUrl === nextUrl) return;
+  activeStream?.close();
+  activeStream = null;
+  activeStreamUrl = null;
+  if (SUBSCRIBERS.size > 0) ensureStream();
+}
+function ensureSandboxBound() {
+  if (sandboxBound || typeof window === "undefined") return;
+  sandboxBound = true;
+  window.addEventListener("message", (ev) => {
+    const data = ev.data;
+    if (!data || data.kind !== "palette.broker.event" || !data.target) return;
+    const handlers = SUBSCRIBERS.get(data.target);
+    if (!handlers) return;
+    const meta = data.meta ?? { target: data.target, organizationId: null, occurredAt: (/* @__PURE__ */ new Date()).toISOString() };
+    for (const handler of handlers) {
+      try {
+        handler(data.payload, meta);
+      } catch (err) {
+        console.error("palette.events handler threw", err);
+      }
+    }
+  });
+}
+var events = {
+  on(target, handler) {
+    let handlers = SUBSCRIBERS.get(target);
+    if (!handlers) {
+      handlers = /* @__PURE__ */ new Set();
+      SUBSCRIBERS.set(target, handlers);
+    }
+    handlers.add(handler);
+    if (isSandboxRuntime()) {
+      ensureSandboxBound();
+      window.parent?.postMessage({ kind: "palette.broker.subscribe", target }, "*");
+    } else {
+      refreshStream();
+    }
+    return () => {
+      handlers.delete(handler);
+      if (handlers.size === 0) {
+        SUBSCRIBERS.delete(target);
+        if (isSandboxRuntime()) {
+          window.parent?.postMessage({ kind: "palette.broker.unsubscribe", target }, "*");
+        } else {
+          refreshStream();
+        }
+      }
+    };
+  },
+  async emit(target, payload) {
+    await broker.emit(target, payload);
+  },
+  async publishDurable(target, payload) {
+    await broker.emit(target, payload);
+  },
+  async emitDurable(target, payload) {
+    await broker.emit(target, payload);
+  },
+  /** Diagnostic: list active subscriptions in this page. */
+  active() {
+    return Array.from(SUBSCRIBERS.keys());
+  }
+};
+
 // src/permissions.ts
 function hasPermission(ctx, permission) {
   return ctx.permissions?.includes(permission) ?? false;
@@ -646,9 +912,21 @@ function createPaletteClient(ctx) {
       success: (message) => ctx?.showToast(message, "success"),
       error: (message) => ctx?.showToast(message, "error"),
       info: (message) => ctx?.showToast(message, "info")
-    }
+    },
+    /**
+     * OS-broker RPC. Typed entry point: `palette.services("org/v1").members.list({...})`.
+     * The proxy resolves a dotted method chain into a qualified target string
+     * and dispatches via the broker (in-process for plugins on the host,
+     * postMessage for sandboxed iframe apps).
+     */
+    services: (namespaceVersion) => servicesProxy(namespaceVersion),
+    /** Low-level broker accessor when you don't want the typed proxy. */
+    broker,
+    /** OS-broker pub/sub. `events.on(target, fn)` returns an unsubscribe function. */
+    events
   };
 }
+var palette = createPaletteClient();
 
 // src/i18n.ts
 import { useCallback } from "react";
@@ -1119,8 +1397,11 @@ function usePluginChat(agentId) {
   };
 }
 export {
+  BrokerCallError,
+  CrossAppGrantError,
   DataRoomClient,
   Link,
+  MissingDependencyError,
   OrganizationClient,
   PaletteApiError,
   PaletteAppRouter,
@@ -1130,12 +1411,14 @@ export {
   UserClient,
   apiFetch,
   apiUpload,
+  broker,
   createMockPlatformContext,
   createPaletteClient,
   createSandboxBridge,
   dataRooms,
   disconnectConnection,
   errorFromResponse,
+  events,
   getBaseUrl,
   getConnections,
   getInstallConfig,
@@ -1146,7 +1429,9 @@ export {
   isSandboxRuntime,
   normalizePaletteLanguage,
   notFound,
+  palette,
   requireConnection,
+  servicesProxy,
   setBaseUrl,
   startConnection,
   translate,