@palettelab/sdk 0.1.8 → 0.1.10

package/README.md

@@ -121,6 +121,7 @@ the developer can immediately test the app inside the OS preview URL.
 import {
   PluginProvider,
   usePlatform,
+  createPaletteClient,
   usePluginTasks,
   usePluginDataRooms,
   usePluginChat,
@@ -168,6 +169,88 @@ export default function PluginRoot(props: PluginComponentProps) {
 }
 ```
 
+## Palette Client
+
+Use `createPaletteClient()` when an app needs common Palette OS services without
+remembering raw API routes.
+
+```tsx
+import { createPaletteClient, usePlatform } from "@palettelab/sdk"
+
+function App() {
+  const platform = usePlatform()
+  const palette = createPaletteClient(platform)
+
+  async function upload(file: File) {
+    const rooms = await palette.dataRooms.list()
+    await palette.dataRooms.uploadFile(rooms[0].id, file)
+    palette.toast.success("Uploaded")
+  }
+
+  return <button onClick={() => palette.user.current()}>Load profile</button>
+}
+```
+
+Included clients:
+
+- `palette.user.current()` and `palette.user.updateProfile()`
+- `palette.organization.currentId()`, `currentRole()`, and `listMine()`
+- `palette.dataRooms.list()`, `create()`, `get()`, `folder()`, `createFolder()`, `ensureFolder()`, `findRoomByName()`, `findFolderByName()`, `resolveFolderPath()`, `findFileByName()`, and `uploadFile()`
+- `palette.config.get()` and `palette.config.update(values)`, with optional plugin ID override
+- `palette.permissions.has()`, `hasAny()`, and `hasAll()`
+- `palette.storage.uploadToSignedUrl()`
+- `palette.toast.success()`, `error()`, and `info()`
+
+These helpers are intentionally thin wrappers over platform APIs. Apps can still
+use `apiFetch()` directly for custom backend routes.
+
+### Data Room Folders By Name
+
+Apps can create or reuse custom Data Room folders by name:
+
+```tsx
+const palette = createPaletteClient(usePlatform())
+
+const room = await palette.dataRooms.ensureRoom("Finance")
+const invoices = await palette.dataRooms.ensureFolder(room.id, "Invoices")
+
+await palette.dataRooms.uploadFile(room.id, file, {
+  folderId: invoices.id,
+})
+```
+
+Apps can also resolve nested folders:
+
+```tsx
+const folder = await palette.dataRooms.resolveFolderPath(
+  room.id,
+  "Clients/Acme/Invoices",
+  { create: true },
+)
+```
+
+To read existing files by name:
+
+```tsx
+const room = await palette.dataRooms.requireRoomByName("Finance")
+const folder = await palette.dataRooms.resolveFolderPath(room.id, "Clients/Acme/Invoices")
+const file = folder
+  ? await palette.dataRooms.findFileByName(room.id, "jan.pdf", { folderId: folder.id })
+  : null
+```
+
+## Permissions
+
+Use permission helpers to keep UI actions aligned with backend permission gates.
+
+```tsx
+const palette = createPaletteClient(usePlatform())
+const canWrite = palette.permissions.has("resources:write")
+```
+
+Backend routes should still enforce permissions with the Python SDK. Frontend
+permission checks are for UX only.
+
 ## API Helpers
 
 Use `apiFetch` for authenticated platform API calls. It includes credentials and performs the platform refresh flow for normal portal runtime.

package/dist/components/index.d.mts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import react__default from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.mjs';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.mjs';
 
 /**
  * Provider that wraps plugin components with the platform context.

package/dist/components/index.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import react__default from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.js';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.js';
 
 /**
  * Provider that wraps plugin components with the platform context.

package/dist/{data-room-BP0PjYoe.d.mts → data-room-Dtd9LLHf.d.mts}

@@ -122,4 +122,4 @@ interface DataRoomFile {
     updated_at: string;
 }
 
-export type { ChatAttachment as C, DataRoom as D, Task as T, ChatMessage as a, ChatThread as b, DataRoomFile as c, DataRoomFolder as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };
+export type { ChatAttachment as C, DataRoom as D, Task as T, DataRoomFolder as a, DataRoomFile as b, ChatMessage as c, ChatThread as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };

package/dist/{data-room-BP0PjYoe.d.ts → data-room-Dtd9LLHf.d.ts}

@@ -122,4 +122,4 @@ interface DataRoomFile {
     updated_at: string;
 }
 
-export type { ChatAttachment as C, DataRoom as D, Task as T, ChatMessage as a, ChatThread as b, DataRoomFile as c, DataRoomFolder as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };
+export type { ChatAttachment as C, DataRoom as D, Task as T, DataRoomFolder as a, DataRoomFile as b, ChatMessage as c, ChatThread as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };

package/dist/hooks/index.d.mts

@@ -1,6 +1,6 @@
 import * as react from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.mjs';
-import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, d as DataRoomFolder, c as DataRoomFile, b as ChatThread, a as ChatMessage } from '../data-room-BP0PjYoe.mjs';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.mjs';
+import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, a as DataRoomFolder, b as DataRoomFile, d as ChatThread, c as ChatMessage } from '../data-room-Dtd9LLHf.mjs';
 
 /**
  * React context for platform services.

package/dist/hooks/index.d.ts

@@ -1,6 +1,6 @@
 import * as react from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.js';
-import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, d as DataRoomFolder, c as DataRoomFile, b as ChatThread, a as ChatMessage } from '../data-room-BP0PjYoe.js';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.js';
+import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, a as DataRoomFolder, b as DataRoomFile, d as ChatThread, c as ChatMessage } from '../data-room-Dtd9LLHf.js';
 
 /**
  * React context for platform services.

package/dist/index.d.mts

@@ -1,6 +1,7 @@
-import { P as PlatformContext } from './plugin-DzSTKgkz.mjs';
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from './plugin-DzSTKgkz.mjs';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-BP0PjYoe.mjs';
+import { P as PlatformContext, O as OrgSummary, U as User } from './plugin-o-qmdCBl.mjs';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition } from './plugin-o-qmdCBl.mjs';
+import { D as DataRoom, a as DataRoomFolder, b as DataRoomFile } from './data-room-Dtd9LLHf.mjs';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-Dtd9LLHf.mjs';
 export { AgentResource, ResourcesByGroup } from './types/index.mjs';
 import { ReactElement } from 'react';
 export { PlatformCtx, usePlatform, usePluginChat, usePluginDataRooms, usePluginTasks } from './hooks/index.mjs';
@@ -53,4 +54,103 @@ declare function updateInstallConfig(pluginId: string, config: InstallConfig): P
 declare function createMockPlatformContext(overrides?: Partial<PlatformContext>): PlatformContext;
 declare function withPluginProvider(element: ReactElement, platform?: Partial<PlatformContext>): ReactElement;
 
-export { type InstallConfig, PaletteApiError, PlatformContext, type SandboxBridge, apiFetch, apiUpload, createMockPlatformContext, createSandboxBridge, errorFromResponse, getBaseUrl, getInstallConfig, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, withPluginProvider };
+interface DataRoomContents {
+    room?: DataRoom;
+    folders: DataRoomFolder[];
+    files: DataRoomFile[];
+}
+interface DataRoomUploadOptions {
+    folderId?: number | null;
+    contentType?: string;
+}
+interface FindByNameOptions {
+    caseSensitive?: boolean;
+}
+interface EnsureFolderOptions extends FindByNameOptions {
+    parentFolderId?: number | null;
+}
+declare class DataRoomClient {
+    private matchesName;
+    list(): Promise<DataRoom[]>;
+    create(input: {
+        name: string;
+        description?: string | null;
+    }): Promise<DataRoom>;
+    get(roomId: number): Promise<DataRoomContents>;
+    folder(roomId: number, folderId: number): Promise<DataRoomContents>;
+    findRoomByName(name: string, options?: FindByNameOptions): Promise<DataRoom | null>;
+    requireRoomByName(name: string, options?: FindByNameOptions): Promise<DataRoom>;
+    ensureRoom(name: string, description?: string | null): Promise<DataRoom>;
+    createFolder(roomId: number, input: {
+        name: string;
+        parentFolderId?: number | null;
+    }): Promise<DataRoomFolder>;
+    findFolderByName(roomId: number, name: string, options?: EnsureFolderOptions): Promise<DataRoomFolder | null>;
+    ensureFolder(roomId: number, name: string, options?: EnsureFolderOptions): Promise<DataRoomFolder>;
+    resolveFolderPath(roomId: number, path: string | string[], options?: FindByNameOptions & {
+        create?: boolean;
+    }): Promise<DataRoomFolder | null>;
+    findFileByName(roomId: number, name: string, options?: FindByNameOptions & {
+        folderId?: number | null;
+    }): Promise<DataRoomFile | null>;
+    requestUpload(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<{
+        upload_url: string;
+        blob_path: string;
+        file_url: string;
+    }>;
+    confirmUpload(roomId: number, file: File, upload: {
+        blob_path: string;
+    }, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+    uploadFile(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+}
+declare const dataRooms: DataRoomClient;
+
+declare function uploadToSignedUrl(uploadUrl: string, file: Blob, contentType?: string): Promise<void>;
+declare class StorageClient {
+    uploadToSignedUrl: typeof uploadToSignedUrl;
+}
+
+declare class UserClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    current(): Promise<User>;
+    updateProfile(input: {
+        name?: string;
+        company_name?: string | null;
+    }): Promise<User>;
+}
+declare class OrganizationClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    currentId(): number | null;
+    currentRole(): string | null;
+    listMine(): Promise<OrgSummary[]>;
+}
+
+declare function createPaletteClient(ctx?: PlatformContext): {
+    user: UserClient;
+    organization: OrganizationClient;
+    dataRooms: DataRoomClient;
+    storage: StorageClient;
+    config: {
+        get: (pluginId?: string) => Promise<InstallConfig>;
+        update: (values: Record<string, unknown>, pluginId?: string) => Promise<InstallConfig>;
+    };
+    permissions: {
+        has: (permission: string) => boolean;
+        hasAny: (permissions: string[]) => boolean;
+        hasAll: (permissions: string[]) => boolean;
+    };
+    toast: {
+        success: (message: string) => void | undefined;
+        error: (message: string) => void | undefined;
+        info: (message: string) => void | undefined;
+    };
+};
+type PaletteClient = ReturnType<typeof createPaletteClient>;
+
+declare function hasPermission(ctx: PlatformContext, permission: string): boolean;
+declare function hasAnyPermission(ctx: PlatformContext, permissions: string[]): boolean;
+declare function hasAllPermissions(ctx: PlatformContext, permissions: string[]): boolean;
+
+export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };

package/dist/index.d.ts

@@ -1,6 +1,7 @@
-import { P as PlatformContext } from './plugin-DzSTKgkz.js';
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from './plugin-DzSTKgkz.js';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-BP0PjYoe.js';
+import { P as PlatformContext, O as OrgSummary, U as User } from './plugin-o-qmdCBl.js';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition } from './plugin-o-qmdCBl.js';
+import { D as DataRoom, a as DataRoomFolder, b as DataRoomFile } from './data-room-Dtd9LLHf.js';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-Dtd9LLHf.js';
 export { AgentResource, ResourcesByGroup } from './types/index.js';
 import { ReactElement } from 'react';
 export { PlatformCtx, usePlatform, usePluginChat, usePluginDataRooms, usePluginTasks } from './hooks/index.js';
@@ -53,4 +54,103 @@ declare function updateInstallConfig(pluginId: string, config: InstallConfig): P
 declare function createMockPlatformContext(overrides?: Partial<PlatformContext>): PlatformContext;
 declare function withPluginProvider(element: ReactElement, platform?: Partial<PlatformContext>): ReactElement;
 
-export { type InstallConfig, PaletteApiError, PlatformContext, type SandboxBridge, apiFetch, apiUpload, createMockPlatformContext, createSandboxBridge, errorFromResponse, getBaseUrl, getInstallConfig, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, withPluginProvider };
+interface DataRoomContents {
+    room?: DataRoom;
+    folders: DataRoomFolder[];
+    files: DataRoomFile[];
+}
+interface DataRoomUploadOptions {
+    folderId?: number | null;
+    contentType?: string;
+}
+interface FindByNameOptions {
+    caseSensitive?: boolean;
+}
+interface EnsureFolderOptions extends FindByNameOptions {
+    parentFolderId?: number | null;
+}
+declare class DataRoomClient {
+    private matchesName;
+    list(): Promise<DataRoom[]>;
+    create(input: {
+        name: string;
+        description?: string | null;
+    }): Promise<DataRoom>;
+    get(roomId: number): Promise<DataRoomContents>;
+    folder(roomId: number, folderId: number): Promise<DataRoomContents>;
+    findRoomByName(name: string, options?: FindByNameOptions): Promise<DataRoom | null>;
+    requireRoomByName(name: string, options?: FindByNameOptions): Promise<DataRoom>;
+    ensureRoom(name: string, description?: string | null): Promise<DataRoom>;
+    createFolder(roomId: number, input: {
+        name: string;
+        parentFolderId?: number | null;
+    }): Promise<DataRoomFolder>;
+    findFolderByName(roomId: number, name: string, options?: EnsureFolderOptions): Promise<DataRoomFolder | null>;
+    ensureFolder(roomId: number, name: string, options?: EnsureFolderOptions): Promise<DataRoomFolder>;
+    resolveFolderPath(roomId: number, path: string | string[], options?: FindByNameOptions & {
+        create?: boolean;
+    }): Promise<DataRoomFolder | null>;
+    findFileByName(roomId: number, name: string, options?: FindByNameOptions & {
+        folderId?: number | null;
+    }): Promise<DataRoomFile | null>;
+    requestUpload(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<{
+        upload_url: string;
+        blob_path: string;
+        file_url: string;
+    }>;
+    confirmUpload(roomId: number, file: File, upload: {
+        blob_path: string;
+    }, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+    uploadFile(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+}
+declare const dataRooms: DataRoomClient;
+
+declare function uploadToSignedUrl(uploadUrl: string, file: Blob, contentType?: string): Promise<void>;
+declare class StorageClient {
+    uploadToSignedUrl: typeof uploadToSignedUrl;
+}
+
+declare class UserClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    current(): Promise<User>;
+    updateProfile(input: {
+        name?: string;
+        company_name?: string | null;
+    }): Promise<User>;
+}
+declare class OrganizationClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    currentId(): number | null;
+    currentRole(): string | null;
+    listMine(): Promise<OrgSummary[]>;
+}
+
+declare function createPaletteClient(ctx?: PlatformContext): {
+    user: UserClient;
+    organization: OrganizationClient;
+    dataRooms: DataRoomClient;
+    storage: StorageClient;
+    config: {
+        get: (pluginId?: string) => Promise<InstallConfig>;
+        update: (values: Record<string, unknown>, pluginId?: string) => Promise<InstallConfig>;
+    };
+    permissions: {
+        has: (permission: string) => boolean;
+        hasAny: (permissions: string[]) => boolean;
+        hasAll: (permissions: string[]) => boolean;
+    };
+    toast: {
+        success: (message: string) => void | undefined;
+        error: (message: string) => void | undefined;
+        info: (message: string) => void | undefined;
+    };
+};
+type PaletteClient = ReturnType<typeof createPaletteClient>;
+
+declare function hasPermission(ctx: PlatformContext, permission: string): boolean;
+declare function hasAnyPermission(ctx: PlatformContext, permissions: string[]): boolean;
+declare function hasAllPermissions(ctx: PlatformContext, permissions: string[]): boolean;
+
+export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };

package/dist/index.js

@@ -20,20 +20,30 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  DataRoomClient: () => DataRoomClient,
+  OrganizationClient: () => OrganizationClient,
   PaletteApiError: () => PaletteApiError,
   PlatformCtx: () => PlatformCtx,
   PluginProvider: () => PluginProvider,
+  StorageClient: () => StorageClient,
+  UserClient: () => UserClient,
   apiFetch: () => apiFetch,
   apiUpload: () => apiUpload,
   createMockPlatformContext: () => createMockPlatformContext,
+  createPaletteClient: () => createPaletteClient,
   createSandboxBridge: () => createSandboxBridge,
+  dataRooms: () => dataRooms,
   errorFromResponse: () => errorFromResponse,
   getBaseUrl: () => getBaseUrl,
   getInstallConfig: () => getInstallConfig,
+  hasAllPermissions: () => hasAllPermissions,
+  hasAnyPermission: () => hasAnyPermission,
+  hasPermission: () => hasPermission,
   isPaletteApiError: () => isPaletteApiError,
   isSandboxRuntime: () => isSandboxRuntime,
   setBaseUrl: () => setBaseUrl,
   updateInstallConfig: () => updateInstallConfig,
+  uploadToSignedUrl: () => uploadToSignedUrl,
   usePlatform: () => usePlatform,
   usePluginChat: () => usePluginChat,
   usePluginDataRooms: () => usePluginDataRooms,
@@ -203,6 +213,7 @@ function createMockPlatformContext(overrides = {}) {
     orgRole: "owner",
     orgs: [],
     agents: [],
+    permissions: [],
     apiFetch: async () => new Response(JSON.stringify({}), { status: 200 }),
     navigate: () => {
     },
@@ -218,6 +229,212 @@ function withPluginProvider(element, platform = {}) {
   );
 }
 
+// src/data-rooms.ts
+var DataRoomClient = class {
+  matchesName(actual, expected, options = {}) {
+    if (options.caseSensitive) return actual === expected;
+    return actual.localeCompare(expected, void 0, { sensitivity: "accent" }) === 0;
+  }
+  async list() {
+    const res = await apiFetch("/api/v1/data-rooms");
+    return res.json();
+  }
+  async create(input) {
+    const res = await apiFetch("/api/v1/data-rooms", {
+      method: "POST",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+  async get(roomId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}`);
+    return res.json();
+  }
+  async folder(roomId, folderId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/folders/${folderId}`);
+    return res.json();
+  }
+  async findRoomByName(name, options = {}) {
+    const rooms = await this.list();
+    return rooms.find((room) => this.matchesName(room.name, name, options)) ?? null;
+  }
+  async requireRoomByName(name, options = {}) {
+    const room = await this.findRoomByName(name, options);
+    if (!room) throw new Error(`Data Room not found: ${name}`);
+    return room;
+  }
+  async ensureRoom(name, description) {
+    return await this.findRoomByName(name) ?? this.create({ name, description });
+  }
+  async createFolder(roomId, input) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/folders`, {
+      method: "POST",
+      body: JSON.stringify({
+        name: input.name,
+        parent_folder_id: input.parentFolderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async findFolderByName(roomId, name, options = {}) {
+    const contents = options.parentFolderId ? await this.folder(roomId, options.parentFolderId) : await this.get(roomId);
+    return contents.folders.find((folder) => this.matchesName(folder.name, name, options)) ?? null;
+  }
+  async ensureFolder(roomId, name, options = {}) {
+    return await this.findFolderByName(roomId, name, options) ?? this.createFolder(roomId, { name, parentFolderId: options.parentFolderId ?? null });
+  }
+  async resolveFolderPath(roomId, path, options = {}) {
+    const parts = Array.isArray(path) ? path : path.split("/").map((part) => part.trim()).filter(Boolean);
+    let parentFolderId = null;
+    let current = null;
+    for (const part of parts) {
+      current = options.create ? await this.ensureFolder(roomId, part, { ...options, parentFolderId }) : await this.findFolderByName(roomId, part, { ...options, parentFolderId });
+      if (!current) return null;
+      parentFolderId = current.id;
+    }
+    return current;
+  }
+  async findFileByName(roomId, name, options = {}) {
+    const contents = options.folderId ? await this.folder(roomId, options.folderId) : await this.get(roomId);
+    return contents.files.find((file) => this.matchesName(file.original_filename, name, options)) ?? null;
+  }
+  async requestUpload(roomId, file, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/request-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        filename: file.name,
+        content_type: options.contentType ?? file.type ?? "application/octet-stream",
+        file_size: file.size,
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async confirmUpload(roomId, file, upload, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/confirm-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        blob_path: upload.blob_path,
+        original_filename: file.name,
+        file_size: file.size,
+        mime_type: options.contentType ?? file.type ?? "application/octet-stream",
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async uploadFile(roomId, file, options = {}) {
+    const upload = await this.requestUpload(roomId, file, options);
+    const put = await fetch(upload.upload_url, {
+      method: "PUT",
+      headers: { "Content-Type": options.contentType ?? file.type ?? "application/octet-stream" },
+      body: file
+    });
+    if (!put.ok) throw new Error(`Upload failed: ${put.statusText}`);
+    return this.confirmUpload(roomId, file, upload, options);
+  }
+};
+var dataRooms = new DataRoomClient();
+
+// src/permissions.ts
+function hasPermission(ctx, permission) {
+  return ctx.permissions?.includes(permission) ?? false;
+}
+function hasAnyPermission(ctx, permissions) {
+  return permissions.some((permission) => hasPermission(ctx, permission));
+}
+function hasAllPermissions(ctx, permissions) {
+  return permissions.every((permission) => hasPermission(ctx, permission));
+}
+
+// src/storage.ts
+async function uploadToSignedUrl(uploadUrl, file, contentType = "application/octet-stream") {
+  const res = await fetch(uploadUrl, {
+    method: "PUT",
+    headers: { "Content-Type": contentType },
+    body: file
+  });
+  if (!res.ok) throw new Error(`Upload failed: ${res.statusText}`);
+}
+var StorageClient = class {
+  constructor() {
+    this.uploadToSignedUrl = uploadToSignedUrl;
+  }
+};
+
+// src/user-org.ts
+var UserClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  async current() {
+    if (this.ctx?.user) return this.ctx.user;
+    const res = await apiFetch("/api/v1/auth/me");
+    return res.json();
+  }
+  async updateProfile(input) {
+    const res = await apiFetch("/api/v1/auth/profile", {
+      method: "PATCH",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+};
+var OrganizationClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  currentId() {
+    return this.ctx?.organizationId ?? null;
+  }
+  currentRole() {
+    return this.ctx?.orgRole ?? null;
+  }
+  async listMine() {
+    if (this.ctx?.orgs?.length) return this.ctx.orgs;
+    const res = await apiFetch("/api/v1/auth/my-orgs");
+    return res.json();
+  }
+};
+
+// src/palette-client.ts
+function createPaletteClient(ctx) {
+  const defaultPluginId = () => {
+    if (ctx?.pluginId) return ctx.pluginId;
+    if (typeof window === "undefined") return "";
+    const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+    return match ? decodeURIComponent(match[1]) : "";
+  };
+  return {
+    user: new UserClient(ctx),
+    organization: new OrganizationClient(ctx),
+    dataRooms: new DataRoomClient(),
+    storage: new StorageClient(),
+    config: {
+      get: (pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to read install config");
+        return getInstallConfig(resolved);
+      },
+      update: (values, pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to update install config");
+        return updateInstallConfig(resolved, values);
+      }
+    },
+    permissions: {
+      has: (permission) => ctx ? hasPermission(ctx, permission) : false,
+      hasAny: (permissions) => ctx ? hasAnyPermission(ctx, permissions) : false,
+      hasAll: (permissions) => ctx ? hasAllPermissions(ctx, permissions) : false
+    },
+    toast: {
+      success: (message) => ctx?.showToast(message, "success"),
+      error: (message) => ctx?.showToast(message, "error"),
+      info: (message) => ctx?.showToast(message, "info")
+    }
+  };
+}
+
 // src/hooks/use-plugin-tasks.ts
 var import_react3 = require("react");
 function usePluginTasks(agentId) {
@@ -407,20 +624,30 @@ function usePluginChat(agentId) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  DataRoomClient,
+  OrganizationClient,
   PaletteApiError,
   PlatformCtx,
   PluginProvider,
+  StorageClient,
+  UserClient,
   apiFetch,
   apiUpload,
   createMockPlatformContext,
+  createPaletteClient,
   createSandboxBridge,
+  dataRooms,
   errorFromResponse,
   getBaseUrl,
   getInstallConfig,
+  hasAllPermissions,
+  hasAnyPermission,
+  hasPermission,
   isPaletteApiError,
   isSandboxRuntime,
   setBaseUrl,
   updateInstallConfig,
+  uploadToSignedUrl,
   usePlatform,
   usePluginChat,
   usePluginDataRooms,

package/dist/index.mjs

@@ -159,6 +159,7 @@ function createMockPlatformContext(overrides = {}) {
     orgRole: "owner",
     orgs: [],
     agents: [],
+    permissions: [],
     apiFetch: async () => new Response(JSON.stringify({}), { status: 200 }),
     navigate: () => {
     },
@@ -174,6 +175,212 @@ function withPluginProvider(element, platform = {}) {
   );
 }
 
+// src/data-rooms.ts
+var DataRoomClient = class {
+  matchesName(actual, expected, options = {}) {
+    if (options.caseSensitive) return actual === expected;
+    return actual.localeCompare(expected, void 0, { sensitivity: "accent" }) === 0;
+  }
+  async list() {
+    const res = await apiFetch("/api/v1/data-rooms");
+    return res.json();
+  }
+  async create(input) {
+    const res = await apiFetch("/api/v1/data-rooms", {
+      method: "POST",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+  async get(roomId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}`);
+    return res.json();
+  }
+  async folder(roomId, folderId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/folders/${folderId}`);
+    return res.json();
+  }
+  async findRoomByName(name, options = {}) {
+    const rooms = await this.list();
+    return rooms.find((room) => this.matchesName(room.name, name, options)) ?? null;
+  }
+  async requireRoomByName(name, options = {}) {
+    const room = await this.findRoomByName(name, options);
+    if (!room) throw new Error(`Data Room not found: ${name}`);
+    return room;
+  }
+  async ensureRoom(name, description) {
+    return await this.findRoomByName(name) ?? this.create({ name, description });
+  }
+  async createFolder(roomId, input) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/folders`, {
+      method: "POST",
+      body: JSON.stringify({
+        name: input.name,
+        parent_folder_id: input.parentFolderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async findFolderByName(roomId, name, options = {}) {
+    const contents = options.parentFolderId ? await this.folder(roomId, options.parentFolderId) : await this.get(roomId);
+    return contents.folders.find((folder) => this.matchesName(folder.name, name, options)) ?? null;
+  }
+  async ensureFolder(roomId, name, options = {}) {
+    return await this.findFolderByName(roomId, name, options) ?? this.createFolder(roomId, { name, parentFolderId: options.parentFolderId ?? null });
+  }
+  async resolveFolderPath(roomId, path, options = {}) {
+    const parts = Array.isArray(path) ? path : path.split("/").map((part) => part.trim()).filter(Boolean);
+    let parentFolderId = null;
+    let current = null;
+    for (const part of parts) {
+      current = options.create ? await this.ensureFolder(roomId, part, { ...options, parentFolderId }) : await this.findFolderByName(roomId, part, { ...options, parentFolderId });
+      if (!current) return null;
+      parentFolderId = current.id;
+    }
+    return current;
+  }
+  async findFileByName(roomId, name, options = {}) {
+    const contents = options.folderId ? await this.folder(roomId, options.folderId) : await this.get(roomId);
+    return contents.files.find((file) => this.matchesName(file.original_filename, name, options)) ?? null;
+  }
+  async requestUpload(roomId, file, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/request-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        filename: file.name,
+        content_type: options.contentType ?? file.type ?? "application/octet-stream",
+        file_size: file.size,
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async confirmUpload(roomId, file, upload, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/confirm-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        blob_path: upload.blob_path,
+        original_filename: file.name,
+        file_size: file.size,
+        mime_type: options.contentType ?? file.type ?? "application/octet-stream",
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async uploadFile(roomId, file, options = {}) {
+    const upload = await this.requestUpload(roomId, file, options);
+    const put = await fetch(upload.upload_url, {
+      method: "PUT",
+      headers: { "Content-Type": options.contentType ?? file.type ?? "application/octet-stream" },
+      body: file
+    });
+    if (!put.ok) throw new Error(`Upload failed: ${put.statusText}`);
+    return this.confirmUpload(roomId, file, upload, options);
+  }
+};
+var dataRooms = new DataRoomClient();
+
+// src/permissions.ts
+function hasPermission(ctx, permission) {
+  return ctx.permissions?.includes(permission) ?? false;
+}
+function hasAnyPermission(ctx, permissions) {
+  return permissions.some((permission) => hasPermission(ctx, permission));
+}
+function hasAllPermissions(ctx, permissions) {
+  return permissions.every((permission) => hasPermission(ctx, permission));
+}
+
+// src/storage.ts
+async function uploadToSignedUrl(uploadUrl, file, contentType = "application/octet-stream") {
+  const res = await fetch(uploadUrl, {
+    method: "PUT",
+    headers: { "Content-Type": contentType },
+    body: file
+  });
+  if (!res.ok) throw new Error(`Upload failed: ${res.statusText}`);
+}
+var StorageClient = class {
+  constructor() {
+    this.uploadToSignedUrl = uploadToSignedUrl;
+  }
+};
+
+// src/user-org.ts
+var UserClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  async current() {
+    if (this.ctx?.user) return this.ctx.user;
+    const res = await apiFetch("/api/v1/auth/me");
+    return res.json();
+  }
+  async updateProfile(input) {
+    const res = await apiFetch("/api/v1/auth/profile", {
+      method: "PATCH",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+};
+var OrganizationClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  currentId() {
+    return this.ctx?.organizationId ?? null;
+  }
+  currentRole() {
+    return this.ctx?.orgRole ?? null;
+  }
+  async listMine() {
+    if (this.ctx?.orgs?.length) return this.ctx.orgs;
+    const res = await apiFetch("/api/v1/auth/my-orgs");
+    return res.json();
+  }
+};
+
+// src/palette-client.ts
+function createPaletteClient(ctx) {
+  const defaultPluginId = () => {
+    if (ctx?.pluginId) return ctx.pluginId;
+    if (typeof window === "undefined") return "";
+    const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+    return match ? decodeURIComponent(match[1]) : "";
+  };
+  return {
+    user: new UserClient(ctx),
+    organization: new OrganizationClient(ctx),
+    dataRooms: new DataRoomClient(),
+    storage: new StorageClient(),
+    config: {
+      get: (pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to read install config");
+        return getInstallConfig(resolved);
+      },
+      update: (values, pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to update install config");
+        return updateInstallConfig(resolved, values);
+      }
+    },
+    permissions: {
+      has: (permission) => ctx ? hasPermission(ctx, permission) : false,
+      hasAny: (permissions) => ctx ? hasAnyPermission(ctx, permissions) : false,
+      hasAll: (permissions) => ctx ? hasAllPermissions(ctx, permissions) : false
+    },
+    toast: {
+      success: (message) => ctx?.showToast(message, "success"),
+      error: (message) => ctx?.showToast(message, "error"),
+      info: (message) => ctx?.showToast(message, "info")
+    }
+  };
+}
+
 // src/hooks/use-plugin-tasks.ts
 import { useCallback, useEffect, useState } from "react";
 function usePluginTasks(agentId) {
@@ -362,20 +569,30 @@ function usePluginChat(agentId) {
   };
 }
 export {
+  DataRoomClient,
+  OrganizationClient,
   PaletteApiError,
   PlatformCtx,
   PluginProvider,
+  StorageClient,
+  UserClient,
   apiFetch,
   apiUpload,
   createMockPlatformContext,
+  createPaletteClient,
   createSandboxBridge,
+  dataRooms,
   errorFromResponse,
   getBaseUrl,
   getInstallConfig,
+  hasAllPermissions,
+  hasAnyPermission,
+  hasPermission,
   isPaletteApiError,
   isSandboxRuntime,
   setBaseUrl,
   updateInstallConfig,
+  uploadToSignedUrl,
   usePlatform,
   usePluginChat,
   usePluginDataRooms,

package/dist/{plugin-DzSTKgkz.d.mts → plugin-o-qmdCBl.d.mts}

@@ -141,6 +141,8 @@ interface PlatformContext {
     user: User;
     /** Current organization ID */
     organizationId: number;
+    /** Current plugin ID */
+    pluginId?: string;
     /** User's org role */
     orgRole: string | null;
     /** Available orgs */
@@ -153,6 +155,8 @@ interface PlatformContext {
     navigate: (path: string) => void;
     /** Show a toast notification */
     showToast: (message: string, type?: "success" | "error" | "info") => void;
+    /** Permissions declared for the current plugin install/runtime */
+    permissions?: string[];
 }
 /** Props passed to a plugin's root component */
 interface PluginComponentProps {

package/dist/{plugin-DzSTKgkz.d.ts → plugin-o-qmdCBl.d.ts}

@@ -141,6 +141,8 @@ interface PlatformContext {
     user: User;
     /** Current organization ID */
     organizationId: number;
+    /** Current plugin ID */
+    pluginId?: string;
     /** User's org role */
     orgRole: string | null;
     /** Available orgs */
@@ -153,6 +155,8 @@ interface PlatformContext {
     navigate: (path: string) => void;
     /** Show a toast notification */
     showToast: (message: string, type?: "success" | "error" | "info") => void;
+    /** Permissions declared for the current plugin install/runtime */
+    permissions?: string[];
 }
 /** Props passed to a plugin's root component */
 interface PluginComponentProps {

package/dist/types/index.d.mts

@@ -1,5 +1,5 @@
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-DzSTKgkz.mjs';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-BP0PjYoe.mjs';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-o-qmdCBl.mjs';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, D as DataRoom, b as DataRoomFile, a as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-Dtd9LLHf.mjs';
 
 interface AgentResource {
     id: number;

package/dist/types/index.d.ts

@@ -1,5 +1,5 @@
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-DzSTKgkz.js';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-BP0PjYoe.js';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-o-qmdCBl.js';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, D as DataRoom, b as DataRoomFile, a as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-Dtd9LLHf.js';
 
 interface AgentResource {
     id: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@palettelab/sdk",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Palette Platform SDK for building plugins and apps",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",