@palettelab/sdk 0.1.8 → 0.1.9

package/README.md

@@ -121,6 +121,7 @@ the developer can immediately test the app inside the OS preview URL.
 import {
   PluginProvider,
   usePlatform,
+  createPaletteClient,
   usePluginTasks,
   usePluginDataRooms,
   usePluginChat,
@@ -168,6 +169,53 @@ export default function PluginRoot(props: PluginComponentProps) {
 }
 ```
 
+## Palette Client
+
+Use `createPaletteClient()` when an app needs common Palette OS services without
+remembering raw API routes.
+
+```tsx
+import { createPaletteClient, usePlatform } from "@palettelab/sdk"
+
+function App() {
+  const platform = usePlatform()
+  const palette = createPaletteClient(platform)
+
+  async function upload(file: File) {
+    const rooms = await palette.dataRooms.list()
+    await palette.dataRooms.uploadFile(rooms[0].id, file)
+    palette.toast.success("Uploaded")
+  }
+
+  return <button onClick={() => palette.user.current()}>Load profile</button>
+}
+```
+
+Included clients:
+
+- `palette.user.current()` and `palette.user.updateProfile()`
+- `palette.organization.currentId()`, `currentRole()`, and `listMine()`
+- `palette.dataRooms.list()`, `create()`, `get()`, `folder()`, and `uploadFile()`
+- `palette.config.get()` and `palette.config.update(values)`, with optional plugin ID override
+- `palette.permissions.has()`, `hasAny()`, and `hasAll()`
+- `palette.storage.uploadToSignedUrl()`
+- `palette.toast.success()`, `error()`, and `info()`
+
+These helpers are intentionally thin wrappers over platform APIs. Apps can still
+use `apiFetch()` directly for custom backend routes.
+
+## Permissions
+
+Use permission helpers to keep UI actions aligned with backend permission gates.
+
+```tsx
+const palette = createPaletteClient(usePlatform())
+const canWrite = palette.permissions.has("resources:write")
+```
+
+Backend routes should still enforce permissions with the Python SDK. Frontend
+permission checks are for UX only.
+
 ## API Helpers
 
 Use `apiFetch` for authenticated platform API calls. It includes credentials and performs the platform refresh flow for normal portal runtime.

package/dist/components/index.d.mts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import react__default from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.mjs';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.mjs';
 
 /**
  * Provider that wraps plugin components with the platform context.

package/dist/components/index.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import react__default from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.js';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.js';
 
 /**
  * Provider that wraps plugin components with the platform context.

package/dist/{data-room-BP0PjYoe.d.mts → data-room-Dtd9LLHf.d.mts}

@@ -122,4 +122,4 @@ interface DataRoomFile {
     updated_at: string;
 }
 
-export type { ChatAttachment as C, DataRoom as D, Task as T, ChatMessage as a, ChatThread as b, DataRoomFile as c, DataRoomFolder as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };
+export type { ChatAttachment as C, DataRoom as D, Task as T, DataRoomFolder as a, DataRoomFile as b, ChatMessage as c, ChatThread as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };

package/dist/{data-room-BP0PjYoe.d.ts → data-room-Dtd9LLHf.d.ts}

@@ -122,4 +122,4 @@ interface DataRoomFile {
     updated_at: string;
 }
 
-export type { ChatAttachment as C, DataRoom as D, Task as T, ChatMessage as a, ChatThread as b, DataRoomFile as c, DataRoomFolder as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };
+export type { ChatAttachment as C, DataRoom as D, Task as T, DataRoomFolder as a, DataRoomFile as b, ChatMessage as c, ChatThread as d, DataRoomPermission as e, TaskAgentSnippet as f, TaskCreatePayload as g, TaskPriority as h, TaskStats as i, TaskStatus as j, TaskType as k, TaskUpdatePayload as l };

package/dist/hooks/index.d.mts

@@ -1,6 +1,6 @@
 import * as react from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.mjs';
-import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, d as DataRoomFolder, c as DataRoomFile, b as ChatThread, a as ChatMessage } from '../data-room-BP0PjYoe.mjs';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.mjs';
+import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, a as DataRoomFolder, b as DataRoomFile, d as ChatThread, c as ChatMessage } from '../data-room-Dtd9LLHf.mjs';
 
 /**
  * React context for platform services.

package/dist/hooks/index.d.ts

@@ -1,6 +1,6 @@
 import * as react from 'react';
-import { P as PlatformContext } from '../plugin-DzSTKgkz.js';
-import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, d as DataRoomFolder, c as DataRoomFile, b as ChatThread, a as ChatMessage } from '../data-room-BP0PjYoe.js';
+import { P as PlatformContext } from '../plugin-o-qmdCBl.js';
+import { T as Task, i as TaskStats, g as TaskCreatePayload, l as TaskUpdatePayload, D as DataRoom, a as DataRoomFolder, b as DataRoomFile, d as ChatThread, c as ChatMessage } from '../data-room-Dtd9LLHf.js';
 
 /**
  * React context for platform services.

package/dist/index.d.mts

@@ -1,6 +1,7 @@
-import { P as PlatformContext } from './plugin-DzSTKgkz.mjs';
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from './plugin-DzSTKgkz.mjs';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-BP0PjYoe.mjs';
+import { P as PlatformContext, O as OrgSummary, U as User } from './plugin-o-qmdCBl.mjs';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition } from './plugin-o-qmdCBl.mjs';
+import { D as DataRoom, a as DataRoomFolder, b as DataRoomFile } from './data-room-Dtd9LLHf.mjs';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-Dtd9LLHf.mjs';
 export { AgentResource, ResourcesByGroup } from './types/index.mjs';
 import { ReactElement } from 'react';
 export { PlatformCtx, usePlatform, usePluginChat, usePluginDataRooms, usePluginTasks } from './hooks/index.mjs';
@@ -53,4 +54,81 @@ declare function updateInstallConfig(pluginId: string, config: InstallConfig): P
 declare function createMockPlatformContext(overrides?: Partial<PlatformContext>): PlatformContext;
 declare function withPluginProvider(element: ReactElement, platform?: Partial<PlatformContext>): ReactElement;
 
-export { type InstallConfig, PaletteApiError, PlatformContext, type SandboxBridge, apiFetch, apiUpload, createMockPlatformContext, createSandboxBridge, errorFromResponse, getBaseUrl, getInstallConfig, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, withPluginProvider };
+interface DataRoomContents {
+    room?: DataRoom;
+    folders: DataRoomFolder[];
+    files: DataRoomFile[];
+}
+interface DataRoomUploadOptions {
+    folderId?: number | null;
+    contentType?: string;
+}
+declare class DataRoomClient {
+    list(): Promise<DataRoom[]>;
+    create(input: {
+        name: string;
+        description?: string | null;
+    }): Promise<DataRoom>;
+    get(roomId: number): Promise<DataRoomContents>;
+    folder(roomId: number, folderId: number): Promise<DataRoomContents>;
+    requestUpload(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<{
+        upload_url: string;
+        blob_path: string;
+        file_url: string;
+    }>;
+    confirmUpload(roomId: number, file: File, upload: {
+        blob_path: string;
+    }, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+    uploadFile(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+}
+declare const dataRooms: DataRoomClient;
+
+declare function uploadToSignedUrl(uploadUrl: string, file: Blob, contentType?: string): Promise<void>;
+declare class StorageClient {
+    uploadToSignedUrl: typeof uploadToSignedUrl;
+}
+
+declare class UserClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    current(): Promise<User>;
+    updateProfile(input: {
+        name?: string;
+        company_name?: string | null;
+    }): Promise<User>;
+}
+declare class OrganizationClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    currentId(): number | null;
+    currentRole(): string | null;
+    listMine(): Promise<OrgSummary[]>;
+}
+
+declare function createPaletteClient(ctx?: PlatformContext): {
+    user: UserClient;
+    organization: OrganizationClient;
+    dataRooms: DataRoomClient;
+    storage: StorageClient;
+    config: {
+        get: (pluginId?: string) => Promise<InstallConfig>;
+        update: (values: Record<string, unknown>, pluginId?: string) => Promise<InstallConfig>;
+    };
+    permissions: {
+        has: (permission: string) => boolean;
+        hasAny: (permissions: string[]) => boolean;
+        hasAll: (permissions: string[]) => boolean;
+    };
+    toast: {
+        success: (message: string) => void | undefined;
+        error: (message: string) => void | undefined;
+        info: (message: string) => void | undefined;
+    };
+};
+type PaletteClient = ReturnType<typeof createPaletteClient>;
+
+declare function hasPermission(ctx: PlatformContext, permission: string): boolean;
+declare function hasAnyPermission(ctx: PlatformContext, permissions: string[]): boolean;
+declare function hasAllPermissions(ctx: PlatformContext, permissions: string[]): boolean;
+
+export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };

package/dist/index.d.ts

@@ -1,6 +1,7 @@
-import { P as PlatformContext } from './plugin-DzSTKgkz.js';
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from './plugin-DzSTKgkz.js';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-BP0PjYoe.js';
+import { P as PlatformContext, O as OrgSummary, U as User } from './plugin-o-qmdCBl.js';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition } from './plugin-o-qmdCBl.js';
+import { D as DataRoom, a as DataRoomFolder, b as DataRoomFile } from './data-room-Dtd9LLHf.js';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from './data-room-Dtd9LLHf.js';
 export { AgentResource, ResourcesByGroup } from './types/index.js';
 import { ReactElement } from 'react';
 export { PlatformCtx, usePlatform, usePluginChat, usePluginDataRooms, usePluginTasks } from './hooks/index.js';
@@ -53,4 +54,81 @@ declare function updateInstallConfig(pluginId: string, config: InstallConfig): P
 declare function createMockPlatformContext(overrides?: Partial<PlatformContext>): PlatformContext;
 declare function withPluginProvider(element: ReactElement, platform?: Partial<PlatformContext>): ReactElement;
 
-export { type InstallConfig, PaletteApiError, PlatformContext, type SandboxBridge, apiFetch, apiUpload, createMockPlatformContext, createSandboxBridge, errorFromResponse, getBaseUrl, getInstallConfig, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, withPluginProvider };
+interface DataRoomContents {
+    room?: DataRoom;
+    folders: DataRoomFolder[];
+    files: DataRoomFile[];
+}
+interface DataRoomUploadOptions {
+    folderId?: number | null;
+    contentType?: string;
+}
+declare class DataRoomClient {
+    list(): Promise<DataRoom[]>;
+    create(input: {
+        name: string;
+        description?: string | null;
+    }): Promise<DataRoom>;
+    get(roomId: number): Promise<DataRoomContents>;
+    folder(roomId: number, folderId: number): Promise<DataRoomContents>;
+    requestUpload(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<{
+        upload_url: string;
+        blob_path: string;
+        file_url: string;
+    }>;
+    confirmUpload(roomId: number, file: File, upload: {
+        blob_path: string;
+    }, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+    uploadFile(roomId: number, file: File, options?: DataRoomUploadOptions): Promise<DataRoomFile>;
+}
+declare const dataRooms: DataRoomClient;
+
+declare function uploadToSignedUrl(uploadUrl: string, file: Blob, contentType?: string): Promise<void>;
+declare class StorageClient {
+    uploadToSignedUrl: typeof uploadToSignedUrl;
+}
+
+declare class UserClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    current(): Promise<User>;
+    updateProfile(input: {
+        name?: string;
+        company_name?: string | null;
+    }): Promise<User>;
+}
+declare class OrganizationClient {
+    private readonly ctx?;
+    constructor(ctx?: PlatformContext | undefined);
+    currentId(): number | null;
+    currentRole(): string | null;
+    listMine(): Promise<OrgSummary[]>;
+}
+
+declare function createPaletteClient(ctx?: PlatformContext): {
+    user: UserClient;
+    organization: OrganizationClient;
+    dataRooms: DataRoomClient;
+    storage: StorageClient;
+    config: {
+        get: (pluginId?: string) => Promise<InstallConfig>;
+        update: (values: Record<string, unknown>, pluginId?: string) => Promise<InstallConfig>;
+    };
+    permissions: {
+        has: (permission: string) => boolean;
+        hasAny: (permissions: string[]) => boolean;
+        hasAll: (permissions: string[]) => boolean;
+    };
+    toast: {
+        success: (message: string) => void | undefined;
+        error: (message: string) => void | undefined;
+        info: (message: string) => void | undefined;
+    };
+};
+type PaletteClient = ReturnType<typeof createPaletteClient>;
+
+declare function hasPermission(ctx: PlatformContext, permission: string): boolean;
+declare function hasAnyPermission(ctx: PlatformContext, permissions: string[]): boolean;
+declare function hasAllPermissions(ctx: PlatformContext, permissions: string[]): boolean;
+
+export { DataRoom, DataRoomClient, type DataRoomContents, DataRoomFile, DataRoomFolder, type DataRoomUploadOptions, type InstallConfig, OrgSummary, OrganizationClient, PaletteApiError, type PaletteClient, PlatformContext, type SandboxBridge, StorageClient, User, UserClient, apiFetch, apiUpload, createMockPlatformContext, createPaletteClient, createSandboxBridge, dataRooms, errorFromResponse, getBaseUrl, getInstallConfig, hasAllPermissions, hasAnyPermission, hasPermission, isPaletteApiError, isSandboxRuntime, setBaseUrl, updateInstallConfig, uploadToSignedUrl, withPluginProvider };

package/dist/index.js

@@ -20,20 +20,30 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  DataRoomClient: () => DataRoomClient,
+  OrganizationClient: () => OrganizationClient,
   PaletteApiError: () => PaletteApiError,
   PlatformCtx: () => PlatformCtx,
   PluginProvider: () => PluginProvider,
+  StorageClient: () => StorageClient,
+  UserClient: () => UserClient,
   apiFetch: () => apiFetch,
   apiUpload: () => apiUpload,
   createMockPlatformContext: () => createMockPlatformContext,
+  createPaletteClient: () => createPaletteClient,
   createSandboxBridge: () => createSandboxBridge,
+  dataRooms: () => dataRooms,
   errorFromResponse: () => errorFromResponse,
   getBaseUrl: () => getBaseUrl,
   getInstallConfig: () => getInstallConfig,
+  hasAllPermissions: () => hasAllPermissions,
+  hasAnyPermission: () => hasAnyPermission,
+  hasPermission: () => hasPermission,
   isPaletteApiError: () => isPaletteApiError,
   isSandboxRuntime: () => isSandboxRuntime,
   setBaseUrl: () => setBaseUrl,
   updateInstallConfig: () => updateInstallConfig,
+  uploadToSignedUrl: () => uploadToSignedUrl,
   usePlatform: () => usePlatform,
   usePluginChat: () => usePluginChat,
   usePluginDataRooms: () => usePluginDataRooms,
@@ -203,6 +213,7 @@ function createMockPlatformContext(overrides = {}) {
     orgRole: "owner",
     orgs: [],
     agents: [],
+    permissions: [],
     apiFetch: async () => new Response(JSON.stringify({}), { status: 200 }),
     navigate: () => {
     },
@@ -218,6 +229,164 @@ function withPluginProvider(element, platform = {}) {
   );
 }
 
+// src/data-rooms.ts
+var DataRoomClient = class {
+  async list() {
+    const res = await apiFetch("/api/v1/data-rooms");
+    return res.json();
+  }
+  async create(input) {
+    const res = await apiFetch("/api/v1/data-rooms", {
+      method: "POST",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+  async get(roomId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}`);
+    return res.json();
+  }
+  async folder(roomId, folderId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/folders/${folderId}`);
+    return res.json();
+  }
+  async requestUpload(roomId, file, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/request-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        filename: file.name,
+        content_type: options.contentType ?? file.type ?? "application/octet-stream",
+        file_size: file.size,
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async confirmUpload(roomId, file, upload, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/confirm-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        blob_path: upload.blob_path,
+        original_filename: file.name,
+        file_size: file.size,
+        mime_type: options.contentType ?? file.type ?? "application/octet-stream",
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async uploadFile(roomId, file, options = {}) {
+    const upload = await this.requestUpload(roomId, file, options);
+    const put = await fetch(upload.upload_url, {
+      method: "PUT",
+      headers: { "Content-Type": options.contentType ?? file.type ?? "application/octet-stream" },
+      body: file
+    });
+    if (!put.ok) throw new Error(`Upload failed: ${put.statusText}`);
+    return this.confirmUpload(roomId, file, upload, options);
+  }
+};
+var dataRooms = new DataRoomClient();
+
+// src/permissions.ts
+function hasPermission(ctx, permission) {
+  return ctx.permissions?.includes(permission) ?? false;
+}
+function hasAnyPermission(ctx, permissions) {
+  return permissions.some((permission) => hasPermission(ctx, permission));
+}
+function hasAllPermissions(ctx, permissions) {
+  return permissions.every((permission) => hasPermission(ctx, permission));
+}
+
+// src/storage.ts
+async function uploadToSignedUrl(uploadUrl, file, contentType = "application/octet-stream") {
+  const res = await fetch(uploadUrl, {
+    method: "PUT",
+    headers: { "Content-Type": contentType },
+    body: file
+  });
+  if (!res.ok) throw new Error(`Upload failed: ${res.statusText}`);
+}
+var StorageClient = class {
+  constructor() {
+    this.uploadToSignedUrl = uploadToSignedUrl;
+  }
+};
+
+// src/user-org.ts
+var UserClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  async current() {
+    if (this.ctx?.user) return this.ctx.user;
+    const res = await apiFetch("/api/v1/auth/me");
+    return res.json();
+  }
+  async updateProfile(input) {
+    const res = await apiFetch("/api/v1/auth/profile", {
+      method: "PATCH",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+};
+var OrganizationClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  currentId() {
+    return this.ctx?.organizationId ?? null;
+  }
+  currentRole() {
+    return this.ctx?.orgRole ?? null;
+  }
+  async listMine() {
+    if (this.ctx?.orgs?.length) return this.ctx.orgs;
+    const res = await apiFetch("/api/v1/auth/my-orgs");
+    return res.json();
+  }
+};
+
+// src/palette-client.ts
+function createPaletteClient(ctx) {
+  const defaultPluginId = () => {
+    if (ctx?.pluginId) return ctx.pluginId;
+    if (typeof window === "undefined") return "";
+    const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+    return match ? decodeURIComponent(match[1]) : "";
+  };
+  return {
+    user: new UserClient(ctx),
+    organization: new OrganizationClient(ctx),
+    dataRooms: new DataRoomClient(),
+    storage: new StorageClient(),
+    config: {
+      get: (pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to read install config");
+        return getInstallConfig(resolved);
+      },
+      update: (values, pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to update install config");
+        return updateInstallConfig(resolved, values);
+      }
+    },
+    permissions: {
+      has: (permission) => ctx ? hasPermission(ctx, permission) : false,
+      hasAny: (permissions) => ctx ? hasAnyPermission(ctx, permissions) : false,
+      hasAll: (permissions) => ctx ? hasAllPermissions(ctx, permissions) : false
+    },
+    toast: {
+      success: (message) => ctx?.showToast(message, "success"),
+      error: (message) => ctx?.showToast(message, "error"),
+      info: (message) => ctx?.showToast(message, "info")
+    }
+  };
+}
+
 // src/hooks/use-plugin-tasks.ts
 var import_react3 = require("react");
 function usePluginTasks(agentId) {
@@ -407,20 +576,30 @@ function usePluginChat(agentId) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  DataRoomClient,
+  OrganizationClient,
   PaletteApiError,
   PlatformCtx,
   PluginProvider,
+  StorageClient,
+  UserClient,
   apiFetch,
   apiUpload,
   createMockPlatformContext,
+  createPaletteClient,
   createSandboxBridge,
+  dataRooms,
   errorFromResponse,
   getBaseUrl,
   getInstallConfig,
+  hasAllPermissions,
+  hasAnyPermission,
+  hasPermission,
   isPaletteApiError,
   isSandboxRuntime,
   setBaseUrl,
   updateInstallConfig,
+  uploadToSignedUrl,
   usePlatform,
   usePluginChat,
   usePluginDataRooms,

package/dist/index.mjs

@@ -159,6 +159,7 @@ function createMockPlatformContext(overrides = {}) {
     orgRole: "owner",
     orgs: [],
     agents: [],
+    permissions: [],
     apiFetch: async () => new Response(JSON.stringify({}), { status: 200 }),
     navigate: () => {
     },
@@ -174,6 +175,164 @@ function withPluginProvider(element, platform = {}) {
   );
 }
 
+// src/data-rooms.ts
+var DataRoomClient = class {
+  async list() {
+    const res = await apiFetch("/api/v1/data-rooms");
+    return res.json();
+  }
+  async create(input) {
+    const res = await apiFetch("/api/v1/data-rooms", {
+      method: "POST",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+  async get(roomId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}`);
+    return res.json();
+  }
+  async folder(roomId, folderId) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/folders/${folderId}`);
+    return res.json();
+  }
+  async requestUpload(roomId, file, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/request-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        filename: file.name,
+        content_type: options.contentType ?? file.type ?? "application/octet-stream",
+        file_size: file.size,
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async confirmUpload(roomId, file, upload, options = {}) {
+    const res = await apiFetch(`/api/v1/data-rooms/${roomId}/files/confirm-upload`, {
+      method: "POST",
+      body: JSON.stringify({
+        blob_path: upload.blob_path,
+        original_filename: file.name,
+        file_size: file.size,
+        mime_type: options.contentType ?? file.type ?? "application/octet-stream",
+        folder_id: options.folderId ?? null
+      })
+    });
+    return res.json();
+  }
+  async uploadFile(roomId, file, options = {}) {
+    const upload = await this.requestUpload(roomId, file, options);
+    const put = await fetch(upload.upload_url, {
+      method: "PUT",
+      headers: { "Content-Type": options.contentType ?? file.type ?? "application/octet-stream" },
+      body: file
+    });
+    if (!put.ok) throw new Error(`Upload failed: ${put.statusText}`);
+    return this.confirmUpload(roomId, file, upload, options);
+  }
+};
+var dataRooms = new DataRoomClient();
+
+// src/permissions.ts
+function hasPermission(ctx, permission) {
+  return ctx.permissions?.includes(permission) ?? false;
+}
+function hasAnyPermission(ctx, permissions) {
+  return permissions.some((permission) => hasPermission(ctx, permission));
+}
+function hasAllPermissions(ctx, permissions) {
+  return permissions.every((permission) => hasPermission(ctx, permission));
+}
+
+// src/storage.ts
+async function uploadToSignedUrl(uploadUrl, file, contentType = "application/octet-stream") {
+  const res = await fetch(uploadUrl, {
+    method: "PUT",
+    headers: { "Content-Type": contentType },
+    body: file
+  });
+  if (!res.ok) throw new Error(`Upload failed: ${res.statusText}`);
+}
+var StorageClient = class {
+  constructor() {
+    this.uploadToSignedUrl = uploadToSignedUrl;
+  }
+};
+
+// src/user-org.ts
+var UserClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  async current() {
+    if (this.ctx?.user) return this.ctx.user;
+    const res = await apiFetch("/api/v1/auth/me");
+    return res.json();
+  }
+  async updateProfile(input) {
+    const res = await apiFetch("/api/v1/auth/profile", {
+      method: "PATCH",
+      body: JSON.stringify(input)
+    });
+    return res.json();
+  }
+};
+var OrganizationClient = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  currentId() {
+    return this.ctx?.organizationId ?? null;
+  }
+  currentRole() {
+    return this.ctx?.orgRole ?? null;
+  }
+  async listMine() {
+    if (this.ctx?.orgs?.length) return this.ctx.orgs;
+    const res = await apiFetch("/api/v1/auth/my-orgs");
+    return res.json();
+  }
+};
+
+// src/palette-client.ts
+function createPaletteClient(ctx) {
+  const defaultPluginId = () => {
+    if (ctx?.pluginId) return ctx.pluginId;
+    if (typeof window === "undefined") return "";
+    const match = window.location.pathname.match(/\/apps\/([^/?#]+)/);
+    return match ? decodeURIComponent(match[1]) : "";
+  };
+  return {
+    user: new UserClient(ctx),
+    organization: new OrganizationClient(ctx),
+    dataRooms: new DataRoomClient(),
+    storage: new StorageClient(),
+    config: {
+      get: (pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to read install config");
+        return getInstallConfig(resolved);
+      },
+      update: (values, pluginId = ctx?.pluginId ?? "") => {
+        const resolved = pluginId || defaultPluginId();
+        if (!resolved) throw new Error("pluginId is required to update install config");
+        return updateInstallConfig(resolved, values);
+      }
+    },
+    permissions: {
+      has: (permission) => ctx ? hasPermission(ctx, permission) : false,
+      hasAny: (permissions) => ctx ? hasAnyPermission(ctx, permissions) : false,
+      hasAll: (permissions) => ctx ? hasAllPermissions(ctx, permissions) : false
+    },
+    toast: {
+      success: (message) => ctx?.showToast(message, "success"),
+      error: (message) => ctx?.showToast(message, "error"),
+      info: (message) => ctx?.showToast(message, "info")
+    }
+  };
+}
+
 // src/hooks/use-plugin-tasks.ts
 import { useCallback, useEffect, useState } from "react";
 function usePluginTasks(agentId) {
@@ -362,20 +521,30 @@ function usePluginChat(agentId) {
   };
 }
 export {
+  DataRoomClient,
+  OrganizationClient,
   PaletteApiError,
   PlatformCtx,
   PluginProvider,
+  StorageClient,
+  UserClient,
   apiFetch,
   apiUpload,
   createMockPlatformContext,
+  createPaletteClient,
   createSandboxBridge,
+  dataRooms,
   errorFromResponse,
   getBaseUrl,
   getInstallConfig,
+  hasAllPermissions,
+  hasAnyPermission,
+  hasPermission,
   isPaletteApiError,
   isSandboxRuntime,
   setBaseUrl,
   updateInstallConfig,
+  uploadToSignedUrl,
   usePlatform,
   usePluginChat,
   usePluginDataRooms,

package/dist/{plugin-DzSTKgkz.d.mts → plugin-o-qmdCBl.d.mts}

@@ -141,6 +141,8 @@ interface PlatformContext {
     user: User;
     /** Current organization ID */
     organizationId: number;
+    /** Current plugin ID */
+    pluginId?: string;
     /** User's org role */
     orgRole: string | null;
     /** Available orgs */
@@ -153,6 +155,8 @@ interface PlatformContext {
     navigate: (path: string) => void;
     /** Show a toast notification */
     showToast: (message: string, type?: "success" | "error" | "info") => void;
+    /** Permissions declared for the current plugin install/runtime */
+    permissions?: string[];
 }
 /** Props passed to a plugin's root component */
 interface PluginComponentProps {

package/dist/{plugin-DzSTKgkz.d.ts → plugin-o-qmdCBl.d.ts}

@@ -141,6 +141,8 @@ interface PlatformContext {
     user: User;
     /** Current organization ID */
     organizationId: number;
+    /** Current plugin ID */
+    pluginId?: string;
     /** User's org role */
     orgRole: string | null;
     /** Available orgs */
@@ -153,6 +155,8 @@ interface PlatformContext {
     navigate: (path: string) => void;
     /** Show a toast notification */
     showToast: (message: string, type?: "success" | "error" | "info") => void;
+    /** Permissions declared for the current plugin install/runtime */
+    permissions?: string[];
 }
 /** Props passed to a plugin's root component */
 interface PluginComponentProps {

package/dist/types/index.d.mts

@@ -1,5 +1,5 @@
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-DzSTKgkz.mjs';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-BP0PjYoe.mjs';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-o-qmdCBl.mjs';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, D as DataRoom, b as DataRoomFile, a as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-Dtd9LLHf.mjs';
 
 interface AgentResource {
     id: number;

package/dist/types/index.d.ts

@@ -1,5 +1,5 @@
-export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-DzSTKgkz.js';
-export { C as ChatAttachment, a as ChatMessage, b as ChatThread, D as DataRoom, c as DataRoomFile, d as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-BP0PjYoe.js';
+export { A as Agent, a as AgentConfig, b as AppCategory, c as AuthContextValue, O as OrgSummary, P as PlatformContext, d as PluginAgentDefinition, e as PluginComponentProps, f as PluginManifest, g as PluginToolDefinition, U as User } from '../plugin-o-qmdCBl.js';
+export { C as ChatAttachment, c as ChatMessage, d as ChatThread, D as DataRoom, b as DataRoomFile, a as DataRoomFolder, e as DataRoomPermission, T as Task, f as TaskAgentSnippet, g as TaskCreatePayload, h as TaskPriority, i as TaskStats, j as TaskStatus, k as TaskType, l as TaskUpdatePayload } from '../data-room-Dtd9LLHf.js';
 
 interface AgentResource {
     id: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@palettelab/sdk",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Palette Platform SDK for building plugins and apps",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",