@pitcher/js-api 1.30.0 → 1.31.0

package/lib/components/savedCanvases/CSavedCanvasesManagement.use.d.ts

@@ -5,6 +5,208 @@ export declare function getFreezeStatus(canvas: Pick<CanvasRetrieve, 'metadata'>
 export declare const SYSTEM_EXCLUDED_TAGS: readonly ["home", "share", "sharebox"];
 export declare function hasHidingTag(tags?: string[], dynamicTags?: string[]): boolean;
 export declare function isTemplateHiddenFromReps(canvas: Pick<CanvasRetrieve, 'tags' | 'template'>, rendererExcludedTags?: string[]): boolean;
+/**
+ * PIT-7488 — which canvas list `CSavedCanvasesManagement` is rendering.
+ *
+ * Everything the variant changes lives in the pure resolvers below rather than inline in the
+ * SFC, because three of them guard state that is SHARED between simultaneously-reachable
+ * instances of the component (localStorage / sessionStorage), where a wrong answer shows up as
+ * the other tab misbehaving and is invisible in normal single-tab use.
+ */
+export type CanvasesManagementVariant = 'pitchdecks' | 'masters';
+export declare function isMastersVariant(variant?: CanvasesManagementVariant): boolean;
+/**
+ * Smart folders are a pitchdeck-only view. `isSmartFoldersView` is a `useLocalStorage`, shared
+ * across every instance of the component, so without the variant guard a rep who switched the
+ * Pitchdecks tab to smart folders would find the master tab rendering `SmartFolders` — which
+ * lists ordinary pitchdecks. Masters aren't foldered, so they have no smart-folder equivalent.
+ */
+export declare function resolveCanvasesView(opts: {
+    isMasters: boolean;
+    smartFoldersEnabled?: boolean;
+    isSmartFoldersView?: boolean;
+}): 'smartFolders' | 'normal';
+/**
+ * The localStorage key `useTableColumnsSettings` persists show/hide/reorder under. Must differ
+ * per variant: a shared key lets the two tabs overwrite each other's layout, and writes the
+ * masters-only `shared_with` column into the pitchdeck tab's saved settings.
+ *
+ * The masters key is `ciq_master_canvases_management_table_columns_settings`. It was renamed off
+ * `…master_pitchdecks…` with the rest of the feature, which resets any column layout a tester had
+ * already saved on the master tab — once, and only for that tab.
+ */
+export declare function resolveColumnSettingsKey(isMasters: boolean): string;
+/**
+ * Which `canvas_manager_table_columns` key to read LD column visibility from. Masters get their
+ * own so ops can configure the two lists independently — `getVisibleColumns` degrades to "show
+ * every column" when the key is absent, whereas reusing `canvases` would mean hiding a column on
+ * the Pitchdecks tab silently hid it here too.
+ *
+ * The masters key is now `master_canvases`: ops must rename it inside the
+ * `canvas_manager_table_columns` LD value, and until they do the helper degrades to "show every
+ * column" rather than failing closed.
+ */
+export declare function resolveColumnVisibilityView(isMasters: boolean): 'canvases' | 'master_canvases';
+/**
+ * PIT-8360 QA — the copy that must NAME a master instead of saying "canvas".
+ *
+ * QA read the delete and unfreeze confirmations on the masters tab as belonging to an ordinary
+ * pitchdeck, because every sentence in them says "canvas". Instances rename that word through
+ * `translation_overrides` (a whole-word replace, so Vontobel's "canvas" -> "PitchDeck" makes them
+ * read "this PitchDeck"), which means the fix is NOT a per-instance label change: the source
+ * string has to carry the qualifier so the same override yields "master PitchDeck". This is also
+ * why the master strings say "master canvas" rather than "master pitchdeck" — the override only
+ * fires on the word it knows.
+ *
+ * Two shapes were rejected, and both failures are worth keeping written down:
+ *
+ * 1. An `{entity}` placeholder in the shared sentences. The pitchdeck tab uses the same strings in
+ *    14 locales, where a swapped-in noun would have to agree in article and gender.
+ * 2. A `resolveKey(copy, isMasters)` table returning the i18n key. **`vue-i18n-extract` runs with
+ *    `--remove` in CI** (`scripts/lib-extract-translations.js`, and slotty's `extract:translations`)
+ *    and finds keys by scanning source for literal translation calls — a computed key is
+ *    invisible to it, so it deleted the master keys AND the pitchdeck keys whose literals the
+ *    table had replaced. Every i18n key must appear spelled out as the argument of a translation
+ *    call at its own call site; that is why the master copy is selected with a ternary over two
+ *    whole calls rather than by picking a key. `resolveBulkEntityType` below is fine because it
+ *    names an ENTITY, not a key — its `canvasUI.common.masterCanvas` literal lives in
+ *    `getCanvasTypeTranslation`. Mind this when writing about i18n in a comment, too: a
+ *    call-shaped example inside the scan glob is harvested as a real key.
+ */
+/**
+ * The noun the BULK dialogs put in front of the rep ("delete the 2 selected …").
+ *
+ * Only the two bulk dialogs the masters tab actually offers take this — delete and manage
+ * attributes. The tag dialogs are hidden there (`moreActions.addTags: !isMasters`) and keep the
+ * plain `CanvasType`, because their value is also sent to the instance-tags endpoint as
+ * `canvas_type`, where `'master-canvas'` is not a thing.
+ */
+export declare function resolveBulkEntityType(isMasters: boolean): 'canvas' | 'master-canvas';
+/**
+ * Account scoping for the fetch. Never applies to masters: they are account-less server-side
+ * (`resolve_account` nulls it on write), so an `account__id` filter matches nothing and empties
+ * the whole list. The selected account comes from localStorage and therefore survives across
+ * tabs — so this fires on the master tab even when no account was ever picked there.
+ */
+export declare function resolveAccountFilterId(opts: {
+    isMasters: boolean;
+    accountVisibilityEnabled?: boolean;
+    selectedAccountId?: string | null;
+}): string | undefined;
+/** Masters have no account, so the column would render a dash on every row. */
+export declare function shouldShowAccountColumn(opts: {
+    isMasters: boolean;
+    isCRM?: boolean;
+}): boolean;
+/**
+ * Masters always show Owner: block 5 lets colleagues share a master, so the list stops being
+ * "only mine" and the owner becomes what distinguishes rows. On the pitchdeck tab it stays
+ * admin-gated exactly as before.
+ */
+export declare function shouldShowOwnerColumn(opts: {
+    isMasters: boolean;
+    isAnyTypeOfAdmin?: boolean;
+    accountVisibilityEnabled?: boolean;
+}): boolean;
+/**
+ * Whether the Documents column shows (PIT-8360).
+ *
+ * Pitchdecks only. It shipped on the MASTER tab, where the signed-off prototype never put it — the
+ * prototype's "Document download" column belongs to the pitchdecks tab. Nothing is lost by
+ * removing it from the masters list: a master's rendered documents are still reachable from its row
+ * actions (Download PDF / PPTX / Regenerate), which read the same server-side state the column did.
+ *
+ * The `enable_scale_content` term is not belt-and-braces. That flag selects which conversion path
+ * runs for a DECK, and only the pdftopptx path it enables ever writes the `pdf_url`/`pptx_url`
+ * metadata this column reads — so with it off every row would render a dash under a header
+ * promising documents. Hidden beats uniformly empty.
+ *
+ * The downloader term follows how `shared_with` gates on its fetcher: a host that supplies none
+ * would otherwise get a column whose PDF/PPTX buttons render and then do nothing — the silent-no-op
+ * failure this file's `template`-column comment records as a reported QA bug.
+ *
+ * Gated here rather than through the LD column config because `getVisibleColumns` degrades to
+ * "show every column" when an instance configures no entry for the view, so the config cannot
+ * express "never on this tab".
+ */
+export declare function shouldShowDocumentsColumn(opts: {
+    isMasters: boolean;
+    scaleContentEnabled?: boolean;
+    /** The host callback behind the column's click; without it the buttons are inert. */
+    hasDocumentDownloader?: boolean;
+}): boolean;
+/**
+ * Whether duplicating should prompt for an account first.
+ *
+ * Never for masters. Not merely because the value would be redundant (the server nulls it) — the
+ * master tab passes `accounts: []`, so the modal would open with an empty list, the rep could
+ * select nothing, and the duplicate would silently abort with no toast and no error.
+ */
+export declare function shouldRequireAccountOnDuplicate(opts: {
+    isMasters: boolean;
+    isCRM?: boolean;
+    requireAccountOnCanvasCreation?: boolean;
+}): boolean;
+/**
+ * PIT-7488 block 4 — inputs shared by the two places the create-from-master flow can be started.
+ *
+ * The host capabilities are part of the gate on purpose: the flow needs a way to LIST masters (for
+ * the picker, and to resolve a preselected id to a label) and a way to create an ORDINARY deck
+ * (the masters tab's own `creator` makes masters). A flag turned on without them renders an entry
+ * that cannot work, which reads as a broken feature rather than an unconfigured one.
+ *
+ * `isCanvasCreationDisabled` matters because this creates a canvas — the same permission bypass
+ * CodeRabbit caught on block 3's "Use as master", where a rep without `canvas.create` could make
+ * one anyway.
+ */
+interface CreateFromMasterCapability {
+    masterCanvasesEnabled?: boolean;
+    hasMasterFetcher?: boolean;
+    hasCanvasFromMasterCreator?: boolean;
+    isCanvasCreationDisabled?: boolean;
+}
+/** Enables the master row's "Use to create pitchdeck" button (rendered disabled until block 4). */
+export declare function canUseMasterToCreateCanvas(opts: CreateFromMasterCapability): boolean;
+/**
+ * Whether NEW becomes a dropdown offering "From my master pitchdeck".
+ *
+ * The ONLY difference from `canUseMasterToCreateCanvas` is the variant term, and it is not
+ * cosmetic: `CSavedCanvasesManagementToolbar` renders for BOTH variants, so without the guard the
+ * master tab's own NEW grows an entry that builds a deck from a master while standing in the master
+ * list — the same shared-surface trap as the smart-folders view and the column-settings key.
+ */
+export declare function shouldOfferCreateFromMaster(opts: CreateFromMasterCapability & {
+    isMasters: boolean;
+}): boolean;
+/**
+ * PIT-8398 — apply a known field delta to one loaded row, instead of refetching the page to
+ * discover what the caller just wrote.
+ *
+ * Two properties this relies on, both load-bearing:
+ *
+ * 1. **Immutable replacement**, because this is a pure function — it must not mutate the array
+ *    the caller handed it, which is also what makes it testable in isolation. Note this is NOT
+ *    a reactivity requirement: `CTable` renders each cell from `row.original`, so Vue's deep
+ *    proxy tracks a nested write and an in-place `rows[i].metadata = …` re-renders too
+ *    (measured, not assumed). Replacement is preferred anyway — it matches the three existing
+ *    row-write patterns in the consuming component (`updateProperty`, `refreshCanvasMetadata`,
+ *    `startAsyncDownload`) and it does not depend on the row being a reactive proxy at all,
+ *    which a plain snapshot passed through `deepToRaw` would not be.
+ * 2. **Spread onto the existing row, never replace it.** A PATCH response carries only the
+ *    canvas fields; it does not carry the list-only ones the row already holds (`indicators`
+ *    from the list serializer, the account name injected by `enrichCanvasesWithAccountNames`).
+ *    Overwriting the row with a response would silently drop them — the trap `updateProperty`
+ *    works around by re-attaching `indicators` by hand.
+ *
+ * `patched` is false when the id is not on the current page, so a caller can fall back to a
+ * full `refetch()` rather than assume the UI caught up.
+ */
+export declare function applyRowPatch<T extends {
+    id: string;
+}>(rows: T[], id: T['id'], patch: Partial<T>): {
+    rows: T[];
+    patched: boolean;
+};
 export declare function useCSavedCanvasesManagement(): {
     statusOptions: {
         label: string;
@@ -14,3 +216,4 @@ export declare function useCSavedCanvasesManagement(): {
         [key: string]: any;
     }>[];
 };
+export {};

package/lib/components/savedCanvases/savedCanvasDocuments.use.d.ts

@@ -0,0 +1,111 @@
+import { MasterDocumentsState } from '../masterCanvases/masterCanvasDocuments.use';
+/**
+ * PIT-8360 — the Documents column on the PITCHDECK tab.
+ *
+ * The column shipped on the master tab, which the signed-off prototype never had: its
+ * "Document download" column sits on the pitchdecks tab. Moving it there means feeding the SAME
+ * cell from a different artifact store, because the two tabs' documents come from different
+ * pipelines and only one of them is server-orchestrated:
+ *
+ *  - a MASTER's artifacts live in `core_master_canvas_documents`, rendered server-side by
+ *    next-core, and the bulk read is also the scheduler;
+ *  - a DECK's artifacts live in its own `metadata` (`pdf_url` / `pptx_url` / `conversion_date` /
+ *    `job_id`), written by the pdftopptx callback server when a rep asks for a download.
+ *
+ * So this is an adapter, not a second fetch: everything it needs is already on the row the list
+ * fetched. That is the whole reason the column could move without touching the backend — and why
+ * relaxing next-core's `c.is_master = true` filters was not necessary. It also means the pitchdeck
+ * column adds no requests and schedules no renders, which matters: reps hold far more decks than
+ * masters, so scheduling one render per listed row would have multiplied Gotenberg load.
+ *
+ * Kept free of Vue so the mapping is testable on its own, like its master-side counterpart.
+ */
+/**
+ * What `getAsyncDownloadState` in `CSavedCanvasesManagement` returns.
+ *
+ * Declared here rather than exported from the component: it is a local `const` inside a
+ * 2000-line SFC, and the call site is what structurally checks the two against each other, so a
+ * drift shows up as a type error there. `undefined` is part of the contract — that function
+ * returns it outright when `enable_scale_content` is off.
+ */
+export interface SavedCanvasDownloadNotStarted {
+    status: 'not_started';
+}
+export interface SavedCanvasDownloadInProgress {
+    status: 'in_progress';
+    jobId?: string;
+    /** `metadata.conversion_date` verbatim — when the job was queued. See the staleness rule below. */
+    conversionDate?: string | null;
+    /**
+     * The rep started this download in THIS session, so the component is already polling it and it is
+     * live by construction. Exempt from the staleness rule, and legitimately stampless.
+     */
+    startedThisSession?: boolean;
+}
+export interface SavedCanvasDownloadCompleted {
+    status: 'completed';
+    pdfUrl?: string;
+    pptxUrl?: string;
+    jobId?: string;
+    /** The presigned artifact is past the instance's `async_download_expiration_hours` window. */
+    isExpired?: boolean;
+    /**
+     * `metadata.conversion_date` verbatim. Needed here because `isExpired` alone cannot be trusted —
+     * see the age guards in `toDocumentsState`.
+     */
+    conversionDate?: string | null;
+}
+/**
+ * A `type` because it is a union, which an interface cannot express; the object shapes above are
+ * interfaces per the repo convention.
+ */
+export type SavedCanvasAsyncDownloadState = SavedCanvasDownloadNotStarted | SavedCanvasDownloadInProgress | SavedCanvasDownloadCompleted;
+/**
+ * Maps a deck's async-download state onto the shape `CMasterCanvasesDocumentsCell` renders.
+ *
+ * `null` means "no documents", which the cell draws as a dash. Three states reach it:
+ *
+ *  - the pipeline is off (`undefined`), so no deck can have artifacts;
+ *  - nobody has downloaded this deck yet;
+ *  - the artifacts have EXPIRED. Returning the URLs anyway would hand the rep two buttons
+ *    pointing at objects that are gone — the actions menu already refuses to offer them
+ *    (`!props.isExpired` gates its PDF/PPTX entries) and offers Regenerate instead, so a dash here
+ *    keeps the two surfaces telling the same story.
+ *
+ * Note what is deliberately NOT mapped:
+ *
+ *  - `is_stale` is always false. Staleness is a master concept — the server re-renders a master
+ *    whose slides have moved on, and the cell keeps the old links plus a quiet refresh spinner. A
+ *    deck's artifact is never refreshed behind the rep's back; it expires instead.
+ *  - there is no `failed`. `getAsyncDownloadState` never reports one, so `canRetryDocuments` stays
+ *    false and the cell renders no Retry button — which is correct, because re-running a deck
+ *    conversion is the actions menu's Download entry, not this cell's job.
+ *  - `rendered_at` and `error` stay null: the deck pipeline records neither, and inventing values
+ *    would claim knowledge the cell would then display.
+ */
+export declare function toDocumentsState(asyncState: SavedCanvasAsyncDownloadState | undefined | null): MasterDocumentsState | null;
+/**
+ * The predicate behind `openableUrl`, exported because the row's Download actions need the same
+ * answer: they build their own anchor instead of going through the host's opener, so without this
+ * they are the only artifact surface with no scheme check on them at all.
+ */
+export declare function isOpenableDocumentUrl(url: string | null | undefined): url is string;
+/**
+ * Whether the cell should offer a download for a deck that has no artifact yet (PIT-8360 follow-up).
+ *
+ * The column started as a mirror of existing artifacts, so a deck nobody had downloaded showed a
+ * dash — which reads as "no documents available" when the truth is "nobody has asked yet". The
+ * developer's call: a READY deck always offers PDF and PPTX, and the click generates them.
+ *
+ * Gated on Ready (`is_draft === false`) because that is the signal the rep uses to mean "this deck
+ * is finished". A draft still keeps its Download action in the row menu, so nothing is lost — the
+ * column simply does not invite a render of something still being written.
+ *
+ * `isDraft` is optional and a missing value is treated as NOT ready: a partially-fetched row must
+ * not invite a Gotenberg render on a deck whose state we do not actually know.
+ */
+export declare function shouldOfferDocumentDownload(opts: {
+    isDraft?: boolean;
+    /** Present when the artifacts already exist — then the cell shows real links, not an offer. */
+    hasDocuments?: boolean;
+}): boolean;

package/lib/components/savedCanvases/savedCanvasDocuments.use.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/components/savedCanvases/smartFolders/SmartFolders.use.d.ts

@@ -65,6 +65,7 @@ export default function useSmartFolders(emit?: (event: 'open', ...args: any[]) =
         is_template?: boolean | undefined;
         is_section?: boolean | undefined;
         is_block?: boolean | undefined;
+        is_master?: boolean | undefined;
         is_editable?: boolean | undefined;
         is_default?: boolean | undefined;
         metadata?: any;
@@ -150,6 +151,7 @@ export default function useSmartFolders(emit?: (event: 'open', ...args: any[]) =
         is_template?: boolean | undefined;
         is_section?: boolean | undefined;
         is_block?: boolean | undefined;
+        is_master?: boolean | undefined;
         is_editable?: boolean | undefined;
         is_default?: boolean | undefined;
         metadata?: any;
@@ -215,6 +217,7 @@ export default function useSmartFolders(emit?: (event: 'open', ...args: any[]) =
         is_template?: boolean | undefined;
         is_section?: boolean | undefined;
         is_block?: boolean | undefined;
+        is_master?: boolean | undefined;
         is_editable?: boolean | undefined;
         is_default?: boolean | undefined;
         metadata?: any;
@@ -281,6 +284,7 @@ export default function useSmartFolders(emit?: (event: 'open', ...args: any[]) =
         is_template?: boolean | undefined;
         is_section?: boolean | undefined;
         is_block?: boolean | undefined;
+        is_master?: boolean | undefined;
         is_editable?: boolean | undefined;
         is_default?: boolean | undefined;
         metadata?: any;

package/lib/constants/cdp.const.d.ts

@@ -51,6 +51,7 @@ export declare const PLATFORM_TYPE: {
     readonly ios: "ios";
     readonly android: "android";
     readonly windows: "windows";
+    readonly macos: "macos";
 };
 export declare const EMBED_TYPE: {
     readonly standalone: "standalone";

package/lib/constants/translationLanguages.const.d.ts

@@ -15,12 +15,42 @@
  * `label` is intentionally NOT an i18n key: language names are shown in their own
  * language (the endonym), which is what every locale picker in the product does,
  * and it keeps the list free of the dynamic-key lookups the i18n extractor strips.
+ * That is also what lets this list exceed the shipped locales without any i18n work.
+ *
+ * ⚠️ THE LITERAL ORDER IS THE DISPLAY ORDER. Entries are sorted by `label`, the
+ * string the admin actually reads: Latin alphabetically, then Greek, Cyrillic,
+ * Devanagari, Thai, Hangul, CJK, which is what `Intl.Collator` yields. Sorting by
+ * `locale` reads better in a diff and was the original order, but it only looked
+ * alphabetical by accident while the list was 14 Latin-ish languages — at 24 it put
+ * Suomi between Español and Français. The pickers do not sort, so this list must.
+ *
+ * ⚠️ These are NOT all platform UI locales. The original 14 were, which is why an
+ * older version of this comment said so; the 10 added on 2026-08-11 (cs, da, fi,
+ * hi, id, ko, nb, ru, sv, vi) have no `locale/<code>.json`. Translating CONTENT is
+ * not localising the PRODUCT, and nothing here loads a bundle from `locale`.
+ *
+ * ⚠️ Every entry must stay selectable — the admin client maps this list straight to
+ * Vuetify items with no `disabled` prop and no filtering, which is deliberate. Do
+ * not add a per-language disabled/beta flag; a language that cannot be served by
+ * both translation legs should not be in the list. That is why Arabic and Hebrew
+ * are absent despite DeepL supporting them: the product has no RTL rendering, so a
+ * translated canvas would lay out left-to-right.
  */
 export interface TranslationLanguageOption {
-    /** Platform locale, matching the locale JSON filenames. Posted to the backend. */
+    /** Target-language key posted to the backend. NOT necessarily a shipped UI locale. */
     locale: string;
     /** Endonym shown in the picker. */
     label: string;
+    /**
+     * English name of the language, used ONLY to make the picker searchable.
+     *
+     * ⚠️ Load-bearing for `filterable` pickers. Naive UI's default filter matches
+     * `option.label`, and `label` is the endonym — so without this an admin typing
+     * "swedish" gets "No data" for Svenska, and likewise for 9 other entries. The
+     * filter must be given explicitly and must test BOTH fields; see
+     * `translationLanguageOptions`.
+     */
+    englishName: string;
     /** Uppercase suffix the backend appends to a translated record's name. */
     suffix: string;
 }
@@ -53,20 +83,68 @@ export declare function isTranslatableFileExtension(extension?: string | null):
  * Extension of a file record, resolved the way the route resolves it.
  *
  * ⚠️ MIRROR of `resolveExtension` in
- * `packages/next-core/src/app/api/protected/files/translate/route.ts`: prefer the
- * explicit extension field, fall back to parsing the name. A UI gate that only
- * read the explicit field hid the action on records whose extension column is
- * empty even though the route would have accepted them. The API field is called
- * `extension` on the detail serializer and `original_extension` on the compact
- * one the browser list uses, so both are accepted here.
+ * `packages/next-core/src/services/translation/translated-file.ts`: prefer
+ * `content_extension`, then `extension`, then parse the name. Keep the two in
+ * step — a gate that disagrees with the route either hides a supported file or
+ * offers one the route will reject.
+ *
+ * `content_extension` comes first because it is the closest thing the list
+ * payload has to the rendition, and it is nearer to what the route declares to
+ * DeepL. Resolving `original_extension` first offered the action for a
+ * PDF-converted deck as `pptx`, so the button appeared and the upload then
+ * failed on bytes that are a PDF.
+ *
+ * ⚠️ `content_extension` does NOT describe the bytes actually stored. It records
+ * the UPLOAD. Django derives the served rendition from `content_type` alone
+ * (`get_content_url`), which is why the route resolves from `content_url` and
+ * this gate can only approximate it. Do not restate the stronger claim: it was
+ * wrong, and believing it cost three defects on PIT-7916.
+ *
+ * ⚠️ The chain is deliberately LONGER than the route's, and `original_extension`
+ * must stay in it. The two read different payloads:
+ *
+ * - This gate runs over the **folder/list** payload, which carries ONLY
+ *   `original_extension` (verified against `GET /api/v1/folders/{id}/`: no
+ *   `content_extension`, no `extension`). Drop it here and every file in the
+ *   content browser resolves `''` and loses the action.
+ * - The route re-resolves from the **detail** payload
+ *   (`GET /api/v1/files/{id}/`), which always carries `content_extension`, so it
+ *   never needs the pre-conversion value and must not trust it.
+ *
+ * So a converted deck shows the action as `pptx` and then translates as `pdf`,
+ * which is correct in both places. The name parse survives as the last resort
+ * for records with no extension column at all.
  */
 export declare function resolveFileExtension(file?: {
     name?: string | null;
+    content_extension?: string | null;
     extension?: string | null;
     original_extension?: string | null;
 } | null): string;
-/** Naive UI / CSelect option shape for the language pickers. */
+/**
+ * Naive UI / CSelect option shape for the language pickers.
+ *
+ * `englishName` rides along so a `filterable` picker can search it — see
+ * `translationLanguageFilter`, which such a picker MUST be given.
+ */
 export declare function translationLanguageOptions(): {
     label: string;
+    englishName: string;
     value: string;
 }[];
+/**
+ * Filter for a `filterable` language picker, matching the endonym OR the English name.
+ *
+ * ⚠️ Pass this explicitly. Naive UI's default filter tests `option.label` only, and
+ * `label` is the endonym, so the default silently returns "No data" for every
+ * language an English-speaking admin would type the name of: Čeština, Dansk, Suomi,
+ * हिन्दी, Bahasa Indonesia, 한국어, Norsk bokmål, Русский, Svenska, Tiếng Việt, plus
+ * Ελληνικά, 日本語, ไทย and 中文. That is 14 of 24, and it fails silently rather than
+ * visibly, which is why it went unnoticed while the list was small.
+ *
+ * Accent-insensitive on the pattern side too, so "cestina" finds Čeština.
+ */
+export declare function translationLanguageFilter(pattern: string, option: {
+    label?: string;
+    englishName?: string;
+}): boolean;

package/lib/constants/translationLanguages.const.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/main.lib.d.ts

@@ -86,6 +86,7 @@ export { default as CAssignedCanvasesManagement } from './components/assignedCan
 export { default as CAssignedCanvasesManagementToolbar } from './components/assignedCanvases/CAssignedCanvasesManagementToolbar.vue';
 export { default as useShareCanvas } from './components/savedCanvases/CSavedCanvasesManagementShareCanvas.use';
 export { getFreezeStatus, SYSTEM_EXCLUDED_TAGS, type FreezeStatus } from './components/savedCanvases/CSavedCanvasesManagement.use';
+export { buildMasterFromTemplatePayload, type MasterFromTemplatePayload, type MasterTemplateSource, } from './components/masterCanvases/masterFromTemplate.use';
 export { default as CConfigEditor } from './components/CConfigEditor/CConfigEditor.vue';
 export { default as CTableInput } from './components/CTableInput/CTableInput.vue';
 export { default as CTableTag } from './components/CTableTag/CTableTag.vue';
@@ -106,6 +107,7 @@ export { default as CFileViewer } from './components/CFileViewer/CFileViewer.vue
 export { default as CDetailPageSectionButtons } from './components/CDetailPageSectionButtons/CDetailPageSectionButtons.vue';
 export { default as CFullScreenLoader } from './components/CFullScreenLoader/CFullScreenLoader.vue';
 export { default as CGlobalLoader } from './components/CGlobalLoader/CGlobalLoader.vue';
+export { default as CGlobalLoaderMark } from './components/CGlobalLoader/CGlobalLoaderMark.vue';
 export { default as CFilesFolderDeleteDialogContent } from './components/CFilesFolderDeleteDialogContent/CFilesFolderDeleteDialogContent.vue';
 export { default as CCatalogIqSwitcher } from './components/CCatalogIqSwitcher/CCatalogIqSwitcher.vue';
 export { default as CCarousel } from './components/CCarousel/CCarousel.vue';
@@ -138,6 +140,9 @@ export { default as CanvasSelector } from './apps/canvas-selector/App.vue';
 export type { CanvasSelection } from './apps/canvas-selector/appTypes';
 export { default as NotesApp } from './apps/notes/NotesApp.vue';
 export { default as useNotesApp } from './apps/notes/composables/useNotesApp';
+export { useAccountNotes, accountNotesBucketKey, NOTES_APP_CONTENT_KEY } from './apps/notes/composables/useAccountNotes';
+export { useAccountOnlyNotesGate } from './apps/notes/composables/useAccountOnlyNotesGate';
+export { ACTIVE_SLIDE_NOTES_KEY, clearActiveSlideNotes, setActiveSlideNotes, useActiveSlideNotes, type ActiveSlideNotes, } from './apps/notes/composables/useActiveSlideNotes';
 export { default as AssetsManagerApp } from './apps/assets-manager/App.vue';
 export type { AppProps as AssetsManagerProps } from './apps/assets-manager/App.vue';
 export * as pptConversionSelector from './apps/ppt-conversion-selector/export';

package/lib/sdk/api/HighLevelApi.d.ts

@@ -173,6 +173,7 @@ export declare function createHighLevelApi(options?: ApiOptions): {
         id: import('../../main.lib').CanvasRetrieve["id"];
         fields?: string;
         lazy_sections?: boolean;
+        skip_error_toast?: boolean;
     }): Promise<import('../../main.lib').CanvasRetrieve>;
     getSectionsByIds(payload: {
         canvas_id: import('../../main.lib').CanvasRetrieve["id"];
@@ -185,6 +186,7 @@ export declare function createHighLevelApi(options?: ApiOptions): {
     }>;
     shareCanvas(payload: {
         id: import('../../main.lib').CanvasRetrieve["id"];
+        brand_id?: string;
     }): Promise<import('../../main.lib').SharedLink>;
     getCanvasRecommendedFiles(payload: {
         canvas_id: import('../../main.lib').CanvasRetrieve["id"];

package/lib/sdk/api/modules/appsDb.d.ts

@@ -2,7 +2,7 @@ import { AppsDbDeleteEntryPayload, AppsDbEntriesResult, AppsDbEntry, AppsDbGetEn
 /**
  * Lists AppsDB entries of a type, adapting to the platform:
  * - Web: GET to the next-core AppsDB REST API.
- * - iOS: reads the local offline mirror via the `appsdb_get_entries` bridge
+ * - Native (iPad or desktop): reads the local offline mirror via the `appsdb_get_entries` bridge
  *   request. Types not allowlisted in the `offline_appsdb_types` setting fail
  *   with `code = type_not_synced` and automatically fall back to the network.
  *
@@ -13,7 +13,7 @@ export declare function appsDbGetEntries(payload: AppsDbGetEntriesPayload): Prom
 /**
  * Creates or updates (deep-merges) an AppsDB entry, adapting to the platform:
  * - Web: POST (create) or PUT (update, when `id` is set) to the next-core AppsDB REST API.
- * - iOS: the `appsdb_upsert_entry` bridge request writes on the server and
+ * - Native (iPad or desktop): the `appsdb_upsert_entry` bridge request writes on the server and
  *   mirrors the authoritative result locally. Offline it rejects with
  *   `code = offline_write_not_supported` — AppsDB writes are online-only.
  *
@@ -28,7 +28,7 @@ export declare function appsDbUpsertEntry(payload: AppsDbUpsertEntryPayload): Pr
 /**
  * Deletes an AppsDB entry (soft delete server-side), adapting to the platform:
  * - Web: DELETE to the next-core AppsDB REST API.
- * - iOS: the `appsdb_delete_entry` bridge request deletes on the server and
+ * - Native (iPad or desktop): the `appsdb_delete_entry` bridge request deletes on the server and
  *   removes the entry from the local offline mirror. Offline it rejects with
  *   `code = offline_write_not_supported`.
  *
@@ -40,7 +40,7 @@ export declare function appsDbDeleteEntry(payload: AppsDbDeleteEntryPayload): Pr
  * Runs a PSQL (SQL-like) query against AppsDB: POST to the next-core
  * `/appsdb/psql` endpoint whenever the network is available.
  *
- * On iOS the local offline mirror (`appsdb_get_entries` + client-side
+ * On a native host the local offline mirror (`appsdb_get_entries` + client-side
  * evaluation of simple `field = literal` AND-chains) serves the query ONLY
  * while the device is offline, or when an online fetch fails at the
  * connection level. Online queries are always answered by the server: Hub

package/lib/sdk/api/modules/canvas.d.ts

@@ -91,6 +91,8 @@ export declare function getCanvas(payload: {
     id: CanvasRetrieve['id'];
     fields?: string;
     lazy_sections?: boolean;
+    /** Suppress the host's error toast for best-effort reads (e.g. download-completion polling). */
+    skip_error_toast?: boolean;
 }): Promise<CanvasRetrieve>;
 /**
  * Batch-hydrate section bodies for a canvas fetched as a lazy shell.
@@ -123,8 +125,18 @@ export declare function getSectionsByIds(payload: {
 }): Promise<{
     sections: CanvasSection[];
 }>;
+/**
+ * Get (or create) the shared link for a canvas.
+ *
+ * `brand_id` (PIT-7682, optional) names an entry in the instance's `shared_link_brands` setting and
+ * only takes effect when the link is created. Omit it and the server uses the brand the rep last
+ * used on that instance, falling back to the instance default — the behaviour quick-share,
+ * bulk-share and API-created links get. A host that does not forward it (the iOS bridge today)
+ * therefore still produces a correctly branded link, just without the rep's per-share choice.
+ */
 export declare function shareCanvas(payload: {
     id: CanvasRetrieve['id'];
+    brand_id?: string;
 }): Promise<SharedLink>;
 export declare function getCanvasRecommendedFiles(payload: {
     canvas_id: CanvasRetrieve['id'];

package/lib/sdk/api/modules/ui/types.ui.d.ts

@@ -356,5 +356,23 @@ export interface UiOpenSharingSettingsResponse {
         allowed_domains?: string[];
         valid_until_days?: number | null;
         allow_download?: boolean;
+        /**
+         * PIT-7682 — id of an entry in the instance's `shared_link_brands` setting, present only when
+         * the rep made a deliberate pick in the sharing modal. The host collects it; the app that
+         * later creates the link (ng-emails-app's ShareBox POST) forwards it verbatim to
+         * `/shared-links`, which is the only place it means anything — the brand is baked into the
+         * short URL at creation. Absent means "no choice", and the API applies the brand the rep last
+         * used on the instance, then the instance default.
+         */
+        brand_id?: string;
     };
+    /**
+     * PIT-5865 — the name the rep typed for the ShareBox in the sharing modal, already resolved
+     * (blank fell back to the default timestamp name, and it is capped at 100 chars). Deliberately a
+     * SIBLING of `settings` rather than a field inside it: `settings` is stored verbatim by the
+     * calling app as its pending-ShareBox sharing settings and rides into saved drafts, so a canvas
+     * name has no business in there. Absent on older hosts — the caller falls back to its own
+     * default.
+     */
+    canvas_name?: string;
 }