@palettelab/sdk 0.1.7 → 0.1.9

package/README.md

@@ -12,12 +12,116 @@ npm install @palettelab/sdk react react-dom
 
 `react` and `react-dom` are peer dependencies. Plugin bundles should externalize React and `@palettelab/sdk`; the Palette CLI handles this for standard templates.
 
+## Recommended Developer Flow
+
+Create apps with the Palette CLI and use this SDK from the generated frontend.
+
+```bash
+npx --yes @palettelab/cli@latest init simple-todo --template database
+cd simple-todo
+npm install
+npx --yes @palettelab/cli@latest dev
+```
+
+`pltt dev` starts the local SDK simulator. It provides mock platform context,
+authenticated API helpers, local backend routing, and a local database when the
+app declares database support. This is the fastest loop for building UI,
+calling backend routes, and checking SDK behavior.
+
+For real Palette OS testing without Docker, configure a hosted sandbox and run:
+
+```bash
+npx --yes @palettelab/cli@latest login \
+  --env staging \
+  --url https://YOUR-PALETTE-STAGING-URL \
+  --token pltt_xxxxx
+
+npx --yes @palettelab/cli@latest dev --sandbox --env staging
+```
+
+The hosted sandbox publishes a preview into the configured Palette environment
+and returns an OS preview URL. Use that URL when the app must be tested with
+real login context, organization context, Data Room APIs, storage, install
+state, review/publish state, logs, permissions, and platform APIs.
+
+## Staging URL And Token
+
+The staging URL is the base URL of the Palette backend/API environment used by
+the CLI. It must serve backend API paths such as:
+
+```text
+/api/v1/health
+/api/v1/appstore/sign-upload
+/api/v1/appstore/publish
+/api/v1/developer/publish-tokens
+```
+
+Validate it before configuring the CLI:
+
+```bash
+curl https://YOUR-PALETTE-STAGING-URL/api/v1/health
+```
+
+If this returns backend health JSON, the URL is correct. If it returns the
+frontend app HTML, use the backend domain instead or configure your reverse
+proxy so `/api/v1/*` and `/api/superadmin/*` are routed to the backend.
+
+Publish tokens start with `pltt_`. Developers can create one after logging in:
+
+1. Open Palette OS.
+2. Open Settings.
+3. Open Developer.
+4. Create a developer publish token.
+5. Copy it immediately. The raw token is shown only once.
+
+Then save it locally:
+
+```bash
+npx --yes @palettelab/cli@latest login \
+  --env staging \
+  --url https://YOUR-PALETTE-STAGING-URL \
+  --token pltt_xxxxx
+```
+
+The CLI stores this in `~/.palette/config.json` with restricted file
+permissions. You can also use environment variables:
+
+```bash
+export PALETTE_STAGING_URL=https://YOUR-PALETTE-STAGING-URL
+export PALETTE_STAGING_TOKEN=pltt_xxxxx
+```
+
+## Local Simulator Versus Hosted OS
+
+Use the local simulator for everyday development:
+
+```bash
+npx --yes @palettelab/cli@latest dev
+```
+
+Use hosted sandbox for full OS behavior:
+
+```bash
+npx --yes @palettelab/cli@latest dev --sandbox --env staging
+```
+
+For internal sandbox environments where manual approval should not block app
+testing, run the Palette backend with:
+
+```bash
+APPSTORE_AUTO_APPROVE_SANDBOX_PREVIEWS=true
+```
+
+When enabled, passing sandbox preview publishes become active automatically, so
+the developer can immediately test the app inside the OS preview URL.
+
 ## Exports
 
 ```ts
 import {
   PluginProvider,
   usePlatform,
+  createPaletteClient,
   usePluginTasks,
   usePluginDataRooms,
   usePluginChat,
@@ -65,6 +169,53 @@ export default function PluginRoot(props: PluginComponentProps) {
 }
 ```
 
+## Palette Client
+
+Use `createPaletteClient()` when an app needs common Palette OS services without
+remembering raw API routes.
+
+```tsx
+import { createPaletteClient, usePlatform } from "@palettelab/sdk"
+
+function App() {
+  const platform = usePlatform()
+  const palette = createPaletteClient(platform)
+
+  async function upload(file: File) {
+    const rooms = await palette.dataRooms.list()
+    await palette.dataRooms.uploadFile(rooms[0].id, file)
+    palette.toast.success("Uploaded")
+  }
+
+  return <button onClick={() => palette.user.current()}>Load profile</button>
+}
+```
+
+Included clients:
+
+- `palette.user.current()` and `palette.user.updateProfile()`
+- `palette.organization.currentId()`, `currentRole()`, and `listMine()`
+- `palette.dataRooms.list()`, `create()`, `get()`, `folder()`, and `uploadFile()`
+- `palette.config.get()` and `palette.config.update(values)`, with optional plugin ID override
+- `palette.permissions.has()`, `hasAny()`, and `hasAll()`
+- `palette.storage.uploadToSignedUrl()`
+- `palette.toast.success()`, `error()`, and `info()`
+
+These helpers are intentionally thin wrappers over platform APIs. Apps can still
+use `apiFetch()` directly for custom backend routes.
+
+## Permissions
+
+Use permission helpers to keep UI actions aligned with backend permission gates.
+
+```tsx
+const palette = createPaletteClient(usePlatform())
+const canWrite = palette.permissions.has("resources:write")
+```
+
+Backend routes should still enforce permissions with the Python SDK. Frontend
+permission checks are for UX only.
+
 ## API Helpers
 
 Use `apiFetch` for authenticated platform API calls. It includes credentials and performs the platform refresh flow for normal portal runtime.

package/dist/components/index.d.mts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import react__default from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.mjs';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.mjs';
 
 /**
  * Provider that wraps plugin components with the platform context.

package/dist/components/index.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import react__default from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.js';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.js';
 
 /**
  * Provider that wraps plugin components with the platform context.

package/dist/{data-room-BP0PjYoe.d.mts → data-room-Dtd9LLHf.d.mts}

@@ -122,4 +122,4 @@ interface DataRoomFile {
     updated_at: string;
 }
 
-export type { ChatAttachment as C, DataRoom as D, Task as T, ChatMessage as a, ChatThread as b, DataRoomFile as c, DataRoomFolder as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };
+export type { ChatAttachment as C, DataRoom as D, Task as T, DataRoomFolder as a, DataRoomFile as b, ChatMessage as c, ChatThread as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };

package/dist/{data-room-BP0PjYoe.d.ts → data-room-Dtd9LLHf.d.ts}

@@ -122,4 +122,4 @@ interface DataRoomFile {
     updated_at: string;
 }
 
-export type { ChatAttachment as C, DataRoom as D, Task as T, ChatMessage as a, ChatThread as b, DataRoomFile as c, DataRoomFolder as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };
+export type { ChatAttachment as C, DataRoom as D, Task as T, DataRoomFolder as a, DataRoomFile as b, ChatMessage as c, ChatThread as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };

package/dist/hooks/index.d.mts

@@ -1,6 +1,6 @@
 import * as react from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.mjs';
-import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, d as DataRoomFolder, c as DataRoomFile, b as ChatThread, a as ChatMessage } from '../data-room-BP0PjYoe.mjs';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.mjs';
+import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, a as DataRoomFolder, b as DataRoomFile, d as ChatThread, c as ChatMessage } from '../data-room-Dtd9LLHf.mjs';
 
 /**
  * React context for platform services.

package/dist/hooks/index.d.ts

@@ -1,6 +1,6 @@
 import * as react from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.js';
-import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, d as DataRoomFolder, c as DataRoomFile, b as ChatThread, a as ChatMessage } from '../data-room-BP0PjYoe.js';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.js';
+import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, a as DataRoomFolder, b as DataRoomFile, d as ChatThread, c as ChatMessage } from '../data-room-Dtd9LLHf.js';
 
 /**
  * React context for platform services.

package/dist/index.d.mts

@@ -1,6 +1,7 @@
-import { P as PlatformContext } from './plugin-DzSTKgkz.mjs';
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from './plugin-DzSTKgkz.mjs';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-BP0PjYoe.mjs';
+import { P as PlatformContext, O as OrgSummary, U as User } from './plugin-o-qmdCBl.mjs';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition } from './plugin-o-qmdCBl.mjs';
+import { D as DataRoom, a as DataRoomFolder, b as DataRoomFile } from './data-room-Dtd9LLHf.mjs';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-Dtd9LLHf.mjs';
 export { AgentResource, ResourcesByGroup } from './types/index.mjs';
 import { ReactElement } from 'react';
 export { PlatformCtx, usePlatform, usePluginChat, usePluginDataRooms, usePluginTasks } from './hooks/index.mjs';
@@ -53,4 +54,81 @@ declare function updateInstallConfig(pluginId: string, config: InstallConfig): P
 declare function createMockPlatformContext(overrides?: Partial<PlatformContext>): PlatformContext;
 declare function withPluginProvider(element: ReactElement, platform?: Partial<PlatformContext>): ReactElement;
 
-export { type InstallConfig, PaletteApiError, PlatformContext, type SandboxBridge, apiFetch, apiUpload, createMockPlatformContext, createSandboxBridge, errorFromResponse, getBaseUrl, getInstallConfig, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, withPluginProvider };
+interface DataRoomContents {
+    room?: DataRoom;
+    folders: DataRoomFolder[];
+    files: DataRoomFile[];
+}
+interface DataRoomUploadOptions {
+    folderId?: number | null;
+    contentType?: string;
+}
+declare class DataRoomClient {
+    list(): Promise<DataRoom[]>;
+    create(input: {
+        name: string;
+        description?: string | null;
+    }): Promise<DataRoom>;
+    get(roomId: number): Promise<DataRoomContents>;
+    folder(roomId: number, folderId: number): Promise<DataRoomContents>;
+    requestUpload(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<{
+        upload_url: string;
+        blob_path: string;
+        file_url: string;
+    }>;
+    confirmUpload(roomId: number, file: File, upload: {
+        blob_path: string;
+    }, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+    uploadFile(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+}
+declare const dataRooms: DataRoomClient;
+
+declare function uploadToSignedUrl(uploadUrl: string, file: Blob, contentType?: string): Promise<void>;
+declare class StorageClient {
+    uploadToSignedUrl: typeof uploadToSignedUrl;
+}
+
+declare class UserClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    current(): Promise<User>;
+    updateProfile(input: {
+        name?: string;
+        company_name?: string | null;
+    }): Promise<User>;
+}
+declare class OrganizationClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    currentId(): number | null;
+    currentRole(): string | null;
+    listMine(): Promise<OrgSummary[]>;
+}
+
+declare function createPaletteClient(ctx?: PlatformContext): {
+    user: UserClient;
+    organization: OrganizationClient;
+    dataRooms: DataRoomClient;
+    storage: StorageClient;
+    config: {
+        get: (pluginId?: string) => Promise<InstallConfig>;
+        update: (values: Record<string, unknown>, pluginId?: string) => Promise<InstallConfig>;
+    };
+    permissions: {
+        has: (permission: string) => boolean;
+        hasAny: (permissions: string[]) => boolean;
+        hasAll: (permissions: string[]) => boolean;
+    };
+    toast: {
+        success: (message: string) => void | undefined;
+        error: (message: string) => void | undefined;
+        info: (message: string) => void | undefined;
+    };
+};
+type PaletteClient = ReturnType<typeof createPaletteClient>;
+
+declare function hasPermission(ctx: PlatformContext, permission: string): boolean;
+declare function hasAnyPermission(ctx: PlatformContext, permissions: string[]): boolean;
+declare function hasAllPermissions(ctx: PlatformContext, permissions: string[]): boolean;
+
+export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };

package/dist/index.d.ts

@@ -1,6 +1,7 @@
-import { P as PlatformContext } from './plugin-DzSTKgkz.js';
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from './plugin-DzSTKgkz.js';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-BP0PjYoe.js';
+import { P as PlatformContext, O as OrgSummary, U as User } from './plugin-o-qmdCBl.js';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition } from './plugin-o-qmdCBl.js';
+import { D as DataRoom, a as DataRoomFolder, b as DataRoomFile } from './data-room-Dtd9LLHf.js';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-Dtd9LLHf.js';
 export { AgentResource, ResourcesByGroup } from './types/index.js';
 import { ReactElement } from 'react';
 export { PlatformCtx, usePlatform, usePluginChat, usePluginDataRooms, usePluginTasks } from './hooks/index.js';
@@ -53,4 +54,81 @@ declare function updateInstallConfig(pluginId: string, config: InstallConfig): P
 declare function createMockPlatformContext(overrides?: Partial<PlatformContext>): PlatformContext;
 declare function withPluginProvider(element: ReactElement, platform?: Partial<PlatformContext>): ReactElement;
 
-export { type InstallConfig, PaletteApiError, PlatformContext, type SandboxBridge, apiFetch, apiUpload, createMockPlatformContext, createSandboxBridge, errorFromResponse, getBaseUrl, getInstallConfig, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, withPluginProvider };
+interface DataRoomContents {
+    room?: DataRoom;
+    folders: DataRoomFolder[];
+    files: DataRoomFile[];
+}
+interface DataRoomUploadOptions {
+    folderId?: number | null;
+    contentType?: string;
+}
+declare class DataRoomClient {
+    list(): Promise<DataRoom[]>;
+    create(input: {
+        name: string;
+        description?: string | null;
+    }): Promise<DataRoom>;
+    get(roomId: number): Promise<DataRoomContents>;
+    folder(roomId: number, folderId: number): Promise<DataRoomContents>;
+    requestUpload(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<{
+        upload_url: string;
+        blob_path: string;
+        file_url: string;
+    }>;
+    confirmUpload(roomId: number, file: File, upload: {
+        blob_path: string;
+    }, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+    uploadFile(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+}
+declare const dataRooms: DataRoomClient;
+
+declare function uploadToSignedUrl(uploadUrl: string, file: Blob, contentType?: string): Promise<void>;
+declare class StorageClient {
+    uploadToSignedUrl: typeof uploadToSignedUrl;
+}
+
+declare class UserClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    current(): Promise<User>;
+    updateProfile(input: {
+        name?: string;
+        company_name?: string | null;
+    }): Promise<User>;
+}
+declare class OrganizationClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    currentId(): number | null;
+    currentRole(): string | null;
+    listMine(): Promise<OrgSummary[]>;
+}
+
+declare function createPaletteClient(ctx?: PlatformContext): {
+    user: UserClient;
+    organization: OrganizationClient;
+    dataRooms: DataRoomClient;
+    storage: StorageClient;
+    config: {
+        get: (pluginId?: string) => Promise<InstallConfig>;
+        update: (values: Record<string, unknown>, pluginId?: string) => Promise<InstallConfig>;
+    };
+    permissions: {
+        has: (permission: string) => boolean;
+        hasAny: (permissions: string[]) => boolean;
+        hasAll: (permissions: string[]) => boolean;
+    };
+    toast: {
+        success: (message: string) => void | undefined;
+        error: (message: string) => void | undefined;
+        info: (message: string) => void | undefined;
+    };
+};
+type PaletteClient = ReturnType<typeof createPaletteClient>;
+
+declare function hasPermission(ctx: PlatformContext, permission: string): boolean;
+declare function hasAnyPermission(ctx: PlatformContext, permissions: string[]): boolean;
+declare function hasAllPermissions(ctx: PlatformContext, permissions: string[]): boolean;
+
+export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };

package/dist/index.js

@@ -20,20 +20,30 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  DataRoomClient: () => DataRoomClient,
+  OrganizationClient: () => OrganizationClient,
   PaletteApiError: () => PaletteApiError,
   PlatformCtx: () => PlatformCtx,
   PluginProvider: () => PluginProvider,
+  StorageClient: () => StorageClient,
+  UserClient: () => UserClient,
   apiFetch: () => apiFetch,
   apiUpload: () => apiUpload,
   createMockPlatformContext: () => createMockPlatformContext,
+  createPaletteClient: () => createPaletteClient,
   createSandboxBridge: () => createSandboxBridge,
+  dataRooms: () => dataRooms,
   errorFromResponse: () => errorFromResponse,
   getBaseUrl: () => getBaseUrl,
   getInstallConfig: () => getInstallConfig,
+  hasAllPermissions: () => hasAllPermissions,
+  hasAnyPermission: () => hasAnyPermission,
+  hasPermission: () => hasPermission,
   isPaletteApiError: () => isPaletteApiError,
   isSandboxRuntime: () => isSandboxRuntime,
   setBaseUrl: () => setBaseUrl,
   updateInstallConfig: () => updateInstallConfig,
+  uploadToSignedUrl: () => uploadToSignedUrl,
   usePlatform: () => usePlatform,
   usePluginChat: () => usePluginChat,
   usePluginDataRooms: () => usePluginDataRooms,
@@ -203,6 +213,7 @@ function createMockPlatformContext(overrides = {}) {
     orgRole: "owner",
     orgs: [],
     agents: [],
+    permissions: [],
     apiFetch: async () => new Response(JSON.stringify({}), { status: 200 }),
     navigate: () => {
     },
@@ -218,6 +229,164 @@ function withPluginProvider(element, platform = {}) {
   );
 }
 
+// src/data-rooms.ts
+var DataRoomClient = class {
+  async list() {
+    const res = await apiFetch("/api/v1/data-rooms");
+    return res.json();
+  }
+  async create(input) {
+    const res = await apiFetch("/api/v1/data-rooms", {
+      method: "POST",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+  async get(roomId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}`);
+    return res.json();
+  }
+  async folder(roomId, folderId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/folders/${folderId}`);
+    return res.json();
+  }
+  async requestUpload(roomId, file, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/request-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        filename: file.name,
+        content_type: options.contentType ?? file.type ?? "application/octet-stream",
+        file_size: file.size,
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async confirmUpload(roomId, file, upload, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/confirm-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        blob_path: upload.blob_path,
+        original_filename: file.name,
+        file_size: file.size,
+        mime_type: options.contentType ?? file.type ?? "application/octet-stream",
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async uploadFile(roomId, file, options = {}) {
+    const upload = await this.requestUpload(roomId, file, options);
+    const put = await fetch(upload.upload_url, {
+      method: "PUT",
+      headers: { "Content-Type": options.contentType ?? file.type ?? "application/octet-stream" },
+      body: file
+    });
+    if (!put.ok) throw new Error(`Upload failed: ${put.statusText}`);
+    return this.confirmUpload(roomId, file, upload, options);
+  }
+};
+var dataRooms = new DataRoomClient();
+
+// src/permissions.ts
+function hasPermission(ctx, permission) {
+  return ctx.permissions?.includes(permission) ?? false;
+}
+function hasAnyPermission(ctx, permissions) {
+  return permissions.some((permission) => hasPermission(ctx, permission));
+}
+function hasAllPermissions(ctx, permissions) {
+  return permissions.every((permission) => hasPermission(ctx, permission));
+}
+
+// src/storage.ts
+async function uploadToSignedUrl(uploadUrl, file, contentType = "application/octet-stream") {
+  const res = await fetch(uploadUrl, {
+    method: "PUT",
+    headers: { "Content-Type": contentType },
+    body: file
+  });
+  if (!res.ok) throw new Error(`Upload failed: ${res.statusText}`);
+}
+var StorageClient = class {
+  constructor() {
+    this.uploadToSignedUrl = uploadToSignedUrl;
+  }
+};
+
+// src/user-org.ts
+var UserClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  async current() {
+    if (this.ctx?.user) return this.ctx.user;
+    const res = await apiFetch("/api/v1/auth/me");
+    return res.json();
+  }
+  async updateProfile(input) {
+    const res = await apiFetch("/api/v1/auth/profile", {
+      method: "PATCH",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+};
+var OrganizationClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  currentId() {
+    return this.ctx?.organizationId ?? null;
+  }
+  currentRole() {
+    return this.ctx?.orgRole ?? null;
+  }
+  async listMine() {
+    if (this.ctx?.orgs?.length) return this.ctx.orgs;
+    const res = await apiFetch("/api/v1/auth/my-orgs");
+    return res.json();
+  }
+};
+
+// src/palette-client.ts
+function createPaletteClient(ctx) {
+  const defaultPluginId = () => {
+    if (ctx?.pluginId) return ctx.pluginId;
+    if (typeof window === "undefined") return "";
+    const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+    return match ? decodeURIComponent(match[1]) : "";
+  };
+  return {
+    user: new UserClient(ctx),
+    organization: new OrganizationClient(ctx),
+    dataRooms: new DataRoomClient(),
+    storage: new StorageClient(),
+    config: {
+      get: (pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to read install config");
+        return getInstallConfig(resolved);
+      },
+      update: (values, pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to update install config");
+        return updateInstallConfig(resolved, values);
+      }
+    },
+    permissions: {
+      has: (permission) => ctx ? hasPermission(ctx, permission) : false,
+      hasAny: (permissions) => ctx ? hasAnyPermission(ctx, permissions) : false,
+      hasAll: (permissions) => ctx ? hasAllPermissions(ctx, permissions) : false
+    },
+    toast: {
+      success: (message) => ctx?.showToast(message, "success"),
+      error: (message) => ctx?.showToast(message, "error"),
+      info: (message) => ctx?.showToast(message, "info")
+    }
+  };
+}
+
 // src/hooks/use-plugin-tasks.ts
 var import_react3 = require("react");
 function usePluginTasks(agentId) {
@@ -407,20 +576,30 @@ function usePluginChat(agentId) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  DataRoomClient,
+  OrganizationClient,
   PaletteApiError,
   PlatformCtx,
   PluginProvider,
+  StorageClient,
+  UserClient,
   apiFetch,
   apiUpload,
   createMockPlatformContext,
+  createPaletteClient,
   createSandboxBridge,
+  dataRooms,
   errorFromResponse,
   getBaseUrl,
   getInstallConfig,
+  hasAllPermissions,
+  hasAnyPermission,
+  hasPermission,
   isPaletteApiError,
   isSandboxRuntime,
   setBaseUrl,
   updateInstallConfig,
+  uploadToSignedUrl,
   usePlatform,
   usePluginChat,
   usePluginDataRooms,

package/dist/index.mjs

@@ -159,6 +159,7 @@ function createMockPlatformContext(overrides = {}) {
     orgRole: "owner",
     orgs: [],
     agents: [],
+    permissions: [],
     apiFetch: async () => new Response(JSON.stringify({}), { status: 200 }),
     navigate: () => {
     },
@@ -174,6 +175,164 @@ function withPluginProvider(element, platform = {}) {
   );
 }
 
+// src/data-rooms.ts
+var DataRoomClient = class {
+  async list() {
+    const res = await apiFetch("/api/v1/data-rooms");
+    return res.json();
+  }
+  async create(input) {
+    const res = await apiFetch("/api/v1/data-rooms", {
+      method: "POST",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+  async get(roomId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}`);
+    return res.json();
+  }
+  async folder(roomId, folderId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/folders/${folderId}`);
+    return res.json();
+  }
+  async requestUpload(roomId, file, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/request-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        filename: file.name,
+        content_type: options.contentType ?? file.type ?? "application/octet-stream",
+        file_size: file.size,
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async confirmUpload(roomId, file, upload, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/confirm-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        blob_path: upload.blob_path,
+        original_filename: file.name,
+        file_size: file.size,
+        mime_type: options.contentType ?? file.type ?? "application/octet-stream",
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async uploadFile(roomId, file, options = {}) {
+    const upload = await this.requestUpload(roomId, file, options);
+    const put = await fetch(upload.upload_url, {
+      method: "PUT",
+      headers: { "Content-Type": options.contentType ?? file.type ?? "application/octet-stream" },
+      body: file
+    });
+    if (!put.ok) throw new Error(`Upload failed: ${put.statusText}`);
+    return this.confirmUpload(roomId, file, upload, options);
+  }
+};
+var dataRooms = new DataRoomClient();
+
+// src/permissions.ts
+function hasPermission(ctx, permission) {
+  return ctx.permissions?.includes(permission) ?? false;
+}
+function hasAnyPermission(ctx, permissions) {
+  return permissions.some((permission) => hasPermission(ctx, permission));
+}
+function hasAllPermissions(ctx, permissions) {
+  return permissions.every((permission) => hasPermission(ctx, permission));
+}
+
+// src/storage.ts
+async function uploadToSignedUrl(uploadUrl, file, contentType = "application/octet-stream") {
+  const res = await fetch(uploadUrl, {
+    method: "PUT",
+    headers: { "Content-Type": contentType },
+    body: file
+  });
+  if (!res.ok) throw new Error(`Upload failed: ${res.statusText}`);
+}
+var StorageClient = class {
+  constructor() {
+    this.uploadToSignedUrl = uploadToSignedUrl;
+  }
+};
+
+// src/user-org.ts
+var UserClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  async current() {
+    if (this.ctx?.user) return this.ctx.user;
+    const res = await apiFetch("/api/v1/auth/me");
+    return res.json();
+  }
+  async updateProfile(input) {
+    const res = await apiFetch("/api/v1/auth/profile", {
+      method: "PATCH",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+};
+var OrganizationClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  currentId() {
+    return this.ctx?.organizationId ?? null;
+  }
+  currentRole() {
+    return this.ctx?.orgRole ?? null;
+  }
+  async listMine() {
+    if (this.ctx?.orgs?.length) return this.ctx.orgs;
+    const res = await apiFetch("/api/v1/auth/my-orgs");
+    return res.json();
+  }
+};
+
+// src/palette-client.ts
+function createPaletteClient(ctx) {
+  const defaultPluginId = () => {
+    if (ctx?.pluginId) return ctx.pluginId;
+    if (typeof window === "undefined") return "";
+    const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+    return match ? decodeURIComponent(match[1]) : "";
+  };
+  return {
+    user: new UserClient(ctx),
+    organization: new OrganizationClient(ctx),
+    dataRooms: new DataRoomClient(),
+    storage: new StorageClient(),
+    config: {
+      get: (pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to read install config");
+        return getInstallConfig(resolved);
+      },
+      update: (values, pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to update install config");
+        return updateInstallConfig(resolved, values);
+      }
+    },
+    permissions: {
+      has: (permission) => ctx ? hasPermission(ctx, permission) : false,
+      hasAny: (permissions) => ctx ? hasAnyPermission(ctx, permissions) : false,
+      hasAll: (permissions) => ctx ? hasAllPermissions(ctx, permissions) : false
+    },
+    toast: {
+      success: (message) => ctx?.showToast(message, "success"),
+      error: (message) => ctx?.showToast(message, "error"),
+      info: (message) => ctx?.showToast(message, "info")
+    }
+  };
+}
+
 // src/hooks/use-plugin-tasks.ts
 import { useCallback, useEffect, useState } from "react";
 function usePluginTasks(agentId) {
@@ -362,20 +521,30 @@ function usePluginChat(agentId) {
   };
 }
 export {
+  DataRoomClient,
+  OrganizationClient,
   PaletteApiError,
   PlatformCtx,
   PluginProvider,
+  StorageClient,
+  UserClient,
   apiFetch,
   apiUpload,
   createMockPlatformContext,
+  createPaletteClient,
   createSandboxBridge,
+  dataRooms,
   errorFromResponse,
   getBaseUrl,
   getInstallConfig,
+  hasAllPermissions,
+  hasAnyPermission,
+  hasPermission,
   isPaletteApiError,
   isSandboxRuntime,
   setBaseUrl,
   updateInstallConfig,
+  uploadToSignedUrl,
   usePlatform,
   usePluginChat,
   usePluginDataRooms,

package/dist/{plugin-DzSTKgkz.d.mts → plugin-o-qmdCBl.d.mts}

@@ -141,6 +141,8 @@ interface PlatformContext {
     user: User;
     /** Current organization ID */
     organizationId: number;
+    /** Current plugin ID */
+    pluginId?: string;
     /** User's org role */
     orgRole: string | null;
     /** Available orgs */
@@ -153,6 +155,8 @@ interface PlatformContext {
     navigate: (path: string) => void;
     /** Show a toast notification */
     showToast: (message: string, type?: "success" | "error" | "info") => void;
+    /** Permissions declared for the current plugin install/runtime */
+    permissions?: string[];
 }
 /** Props passed to a plugin's root component */
 interface PluginComponentProps {

package/dist/{plugin-DzSTKgkz.d.ts → plugin-o-qmdCBl.d.ts}

@@ -141,6 +141,8 @@ interface PlatformContext {
     user: User;
     /** Current organization ID */
     organizationId: number;
+    /** Current plugin ID */
+    pluginId?: string;
     /** User's org role */
     orgRole: string | null;
     /** Available orgs */
@@ -153,6 +155,8 @@ interface PlatformContext {
     navigate: (path: string) => void;
     /** Show a toast notification */
     showToast: (message: string, type?: "success" | "error" | "info") => void;
+    /** Permissions declared for the current plugin install/runtime */
+    permissions?: string[];
 }
 /** Props passed to a plugin's root component */
 interface PluginComponentProps {

package/dist/types/index.d.mts

@@ -1,5 +1,5 @@
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-DzSTKgkz.mjs';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-BP0PjYoe.mjs';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-o-qmdCBl.mjs';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, D as DataRoom, b as DataRoomFile, a as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-Dtd9LLHf.mjs';
 
 interface AgentResource {
     id: number;

package/dist/types/index.d.ts

@@ -1,5 +1,5 @@
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-DzSTKgkz.js';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-BP0PjYoe.js';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-o-qmdCBl.js';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, D as DataRoom, b as DataRoomFile, a as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-Dtd9LLHf.js';
 
 interface AgentResource {
     id: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@palettelab/sdk",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Palette Platform SDK for building plugins and apps",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",