@beeable/sdk 0.6.3 → 0.7.1

package/dist/generated/schemas/chatStreamOptionsDto.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Generated by orval v7.21.0 🍺
+ * Do not edit manually.
+ * Beeable API
+ * Orchestrator-first business agent platform — a multi-tenant platform where users talk to digital colleagues powered by AI.
+
+## Authentication flow
+
+1. **Register or login** — returns JWT with { sub } only (no org context).
+2. **List organizations** — GET /auth/organizations to see which orgs the user belongs to.
+3. **Select organization** — POST /auth/select-organization with an organizationId — returns new JWT with { sub, org }. Use GET /auth/me to resolve org-admin status.
+4. **Use org-scoped endpoints** — all resource endpoints require the org-scoped token.
+5. **Switch orgs** — call POST /auth/select-organization again with a different org.
+6. **Token refresh** — POST /auth/refresh preserves org context.
+
+## Architecture
+
+Users create conversations with digital colleagues. Each colleague resolves its available tools and context from namespace bindings — tool availability is determined by which skills exist in the colleague's namespaces. Complex work is delegated to subagents via background tasks. Context profiles optionally pre-load condensed file/web page content into the system prompt.
+
+## Namespaces & access control
+
+All resources (databases, skills, apps, files, context profiles, widgets, memories) live in namespaces. Namespaces serve triple duty: group resources, define member visibility, and control permissions via role bindings. See the `namespaces` tag for the full RBAC model.
+
+## Digital colleagues
+
+Persistent AI team members with defined personas, optional model overrides, and namespace-scoped access. All conversations go through a colleague (the system colleague "Buzz" is the default). Colleagues can be invited into meetings for multi-party conversations.
+
+## Skills
+
+Org-scoped capability packages that bundle markdown instructions with tool access. Skills live in namespaces — a colleague gets a skill's tools if it has `skill:use` permission in that namespace. Tool execution is guarded: the streaming loop rejects any tool call not in the resolved set.
+
+## Memories
+
+Two-tier memory system: **org memories** (business facts about the org) and **user memories** (facts about individual users). Created via contemplation (post-conversation synthesis), explicit `remember_this` during conversation, or `manage_user_memory` tool. Injected into system prompts as background knowledge.
+
+## Billing
+
+Credit-based billing. Usage (AI tokens) is tracked and converted to credits via exchange rates. When credits run out, expensive operations return 402.
+
+## File upload flow
+
+POST /files as multipart/form-data with the file in the `file` field. The API stores the file, creates the record, and triggers condensation in a single request.
+
+## Dynamic databases
+
+Each organization can have multiple databases, each backed by its own isolated PostgreSQL schema. Databases are fully SQL-driven — no abstraction layer. Use POST /databases/:id/sql for DDL and DML. Supports migrations, forking, and promoting.
+
+## Conversation SSE protocol
+
+POST /conversations/:id/messages returns an SSE stream (Content-Type: text/event-stream). Events:
+
+| Event | Data | Description |
+|---|---|---|
+| `text` | Raw text delta | Append to displayed message |
+| `tool_use` | `{ "tool": "<name>", "status": "executing" }` | Orchestrator is calling a tool (show spinner) |
+| `done` | `{ "content": "...", "retrievedUnits": [...], "usage": {...} }` | Stream complete |
+| `error` | `{ "error": "..." }` | Error during streaming |
+
+Parse SSE with `event:` and `data:` fields per the SSE spec. On `done`, stop listening and close the connection.
+
+## Inline widgets
+
+Lightweight React components rendered inside conversation messages. Created by the orchestrator during streaming via the `create_widget` tool. Widgets can be saved to a library for reuse.
+
+## Apps
+
+Per-org managed containers running Express. Each org gets its own container with apps served as Express routes. All app traffic is proxied through the API. Install pre-built templates or build custom apps.
+
+## Member management
+
+Org admins manage their team through invitations and namespace bindings:
+
+1. **Invite** — POST /organizations/me/invitations with email → sends an invitation email with a link.
+2. **View invitation** — GET /invitations/:token (public, no auth) → shows org name and whether the invitee has an account.
+3. **Accept** — POST /invitations/:token/accept (auth required, email must match) → creates namespace binding. Then call POST /auth/select-organization to enter the org.
+4. **Decline** — DELETE /invitations/:token (auth required) → permanently deletes the invitation.
+5. **List members** — GET /organizations/me/members → all members with userId, email, displayName, joinedAt.
+6. **Manage access** — use namespace bindings and system roles to control permissions (see `namespaces` tag).
+
+## Context profiles
+
+Context profiles are optional — a conversation can be created without one. When a profile is assigned to a namespace, colleagues with access to that namespace will have its tag and website sources loaded as condensed context into the system prompt.
+ * OpenAPI spec version: 2.0
+ */
+export interface ChatStreamOptionsDto {
+    /** Emit a final usage block in the stream. */
+    include_usage?: boolean;
+}
+//# sourceMappingURL=chatStreamOptionsDto.d.ts.map

package/dist/generated/schemas/chatStreamOptionsDto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatStreamOptionsDto.d.ts","sourceRoot":"","sources":["../../../src/generated/schemas/chatStreamOptionsDto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG;AAEH,MAAM,WAAW,oBAAoB;IACnC,8CAA8C;IAC9C,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB"}

package/dist/generated/schemas/chatStreamOptionsDto.js

@@ -0,0 +1,86 @@
+/**
+ * Generated by orval v7.21.0 🍺
+ * Do not edit manually.
+ * Beeable API
+ * Orchestrator-first business agent platform — a multi-tenant platform where users talk to digital colleagues powered by AI.
+
+## Authentication flow
+
+1. **Register or login** — returns JWT with { sub } only (no org context).
+2. **List organizations** — GET /auth/organizations to see which orgs the user belongs to.
+3. **Select organization** — POST /auth/select-organization with an organizationId — returns new JWT with { sub, org }. Use GET /auth/me to resolve org-admin status.
+4. **Use org-scoped endpoints** — all resource endpoints require the org-scoped token.
+5. **Switch orgs** — call POST /auth/select-organization again with a different org.
+6. **Token refresh** — POST /auth/refresh preserves org context.
+
+## Architecture
+
+Users create conversations with digital colleagues. Each colleague resolves its available tools and context from namespace bindings — tool availability is determined by which skills exist in the colleague's namespaces. Complex work is delegated to subagents via background tasks. Context profiles optionally pre-load condensed file/web page content into the system prompt.
+
+## Namespaces & access control
+
+All resources (databases, skills, apps, files, context profiles, widgets, memories) live in namespaces. Namespaces serve triple duty: group resources, define member visibility, and control permissions via role bindings. See the `namespaces` tag for the full RBAC model.
+
+## Digital colleagues
+
+Persistent AI team members with defined personas, optional model overrides, and namespace-scoped access. All conversations go through a colleague (the system colleague "Buzz" is the default). Colleagues can be invited into meetings for multi-party conversations.
+
+## Skills
+
+Org-scoped capability packages that bundle markdown instructions with tool access. Skills live in namespaces — a colleague gets a skill's tools if it has `skill:use` permission in that namespace. Tool execution is guarded: the streaming loop rejects any tool call not in the resolved set.
+
+## Memories
+
+Two-tier memory system: **org memories** (business facts about the org) and **user memories** (facts about individual users). Created via contemplation (post-conversation synthesis), explicit `remember_this` during conversation, or `manage_user_memory` tool. Injected into system prompts as background knowledge.
+
+## Billing
+
+Credit-based billing. Usage (AI tokens) is tracked and converted to credits via exchange rates. When credits run out, expensive operations return 402.
+
+## File upload flow
+
+POST /files as multipart/form-data with the file in the `file` field. The API stores the file, creates the record, and triggers condensation in a single request.
+
+## Dynamic databases
+
+Each organization can have multiple databases, each backed by its own isolated PostgreSQL schema. Databases are fully SQL-driven — no abstraction layer. Use POST /databases/:id/sql for DDL and DML. Supports migrations, forking, and promoting.
+
+## Conversation SSE protocol
+
+POST /conversations/:id/messages returns an SSE stream (Content-Type: text/event-stream). Events:
+
+| Event | Data | Description |
+|---|---|---|
+| `text` | Raw text delta | Append to displayed message |
+| `tool_use` | `{ "tool": "<name>", "status": "executing" }` | Orchestrator is calling a tool (show spinner) |
+| `done` | `{ "content": "...", "retrievedUnits": [...], "usage": {...} }` | Stream complete |
+| `error` | `{ "error": "..." }` | Error during streaming |
+
+Parse SSE with `event:` and `data:` fields per the SSE spec. On `done`, stop listening and close the connection.
+
+## Inline widgets
+
+Lightweight React components rendered inside conversation messages. Created by the orchestrator during streaming via the `create_widget` tool. Widgets can be saved to a library for reuse.
+
+## Apps
+
+Per-org managed containers running Express. Each org gets its own container with apps served as Express routes. All app traffic is proxied through the API. Install pre-built templates or build custom apps.
+
+## Member management
+
+Org admins manage their team through invitations and namespace bindings:
+
+1. **Invite** — POST /organizations/me/invitations with email → sends an invitation email with a link.
+2. **View invitation** — GET /invitations/:token (public, no auth) → shows org name and whether the invitee has an account.
+3. **Accept** — POST /invitations/:token/accept (auth required, email must match) → creates namespace binding. Then call POST /auth/select-organization to enter the org.
+4. **Decline** — DELETE /invitations/:token (auth required) → permanently deletes the invitation.
+5. **List members** — GET /organizations/me/members → all members with userId, email, displayName, joinedAt.
+6. **Manage access** — use namespace bindings and system roles to control permissions (see `namespaces` tag).
+
+## Context profiles
+
+Context profiles are optional — a conversation can be created without one. When a profile is assigned to a namespace, colleagues with access to that namespace will have its tag and website sources loaded as condensed context into the system prompt.
+ * OpenAPI spec version: 2.0
+ */
+export {};
+//# sourceMappingURL=chatStreamOptionsDto.js.map

package/dist/generated/schemas/chatStreamOptionsDto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatStreamOptionsDto.js","sourceRoot":"","sources":["../../../src/generated/schemas/chatStreamOptionsDto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG"}

package/dist/generated/schemas/chatToolCallDto.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Generated by orval v7.21.0 🍺
+ * Do not edit manually.
+ * Beeable API
+ * Orchestrator-first business agent platform — a multi-tenant platform where users talk to digital colleagues powered by AI.
+
+## Authentication flow
+
+1. **Register or login** — returns JWT with { sub } only (no org context).
+2. **List organizations** — GET /auth/organizations to see which orgs the user belongs to.
+3. **Select organization** — POST /auth/select-organization with an organizationId — returns new JWT with { sub, org }. Use GET /auth/me to resolve org-admin status.
+4. **Use org-scoped endpoints** — all resource endpoints require the org-scoped token.
+5. **Switch orgs** — call POST /auth/select-organization again with a different org.
+6. **Token refresh** — POST /auth/refresh preserves org context.
+
+## Architecture
+
+Users create conversations with digital colleagues. Each colleague resolves its available tools and context from namespace bindings — tool availability is determined by which skills exist in the colleague's namespaces. Complex work is delegated to subagents via background tasks. Context profiles optionally pre-load condensed file/web page content into the system prompt.
+
+## Namespaces & access control
+
+All resources (databases, skills, apps, files, context profiles, widgets, memories) live in namespaces. Namespaces serve triple duty: group resources, define member visibility, and control permissions via role bindings. See the `namespaces` tag for the full RBAC model.
+
+## Digital colleagues
+
+Persistent AI team members with defined personas, optional model overrides, and namespace-scoped access. All conversations go through a colleague (the system colleague "Buzz" is the default). Colleagues can be invited into meetings for multi-party conversations.
+
+## Skills
+
+Org-scoped capability packages that bundle markdown instructions with tool access. Skills live in namespaces — a colleague gets a skill's tools if it has `skill:use` permission in that namespace. Tool execution is guarded: the streaming loop rejects any tool call not in the resolved set.
+
+## Memories
+
+Two-tier memory system: **org memories** (business facts about the org) and **user memories** (facts about individual users). Created via contemplation (post-conversation synthesis), explicit `remember_this` during conversation, or `manage_user_memory` tool. Injected into system prompts as background knowledge.
+
+## Billing
+
+Credit-based billing. Usage (AI tokens) is tracked and converted to credits via exchange rates. When credits run out, expensive operations return 402.
+
+## File upload flow
+
+POST /files as multipart/form-data with the file in the `file` field. The API stores the file, creates the record, and triggers condensation in a single request.
+
+## Dynamic databases
+
+Each organization can have multiple databases, each backed by its own isolated PostgreSQL schema. Databases are fully SQL-driven — no abstraction layer. Use POST /databases/:id/sql for DDL and DML. Supports migrations, forking, and promoting.
+
+## Conversation SSE protocol
+
+POST /conversations/:id/messages returns an SSE stream (Content-Type: text/event-stream). Events:
+
+| Event | Data | Description |
+|---|---|---|
+| `text` | Raw text delta | Append to displayed message |
+| `tool_use` | `{ "tool": "<name>", "status": "executing" }` | Orchestrator is calling a tool (show spinner) |
+| `done` | `{ "content": "...", "retrievedUnits": [...], "usage": {...} }` | Stream complete |
+| `error` | `{ "error": "..." }` | Error during streaming |
+
+Parse SSE with `event:` and `data:` fields per the SSE spec. On `done`, stop listening and close the connection.
+
+## Inline widgets
+
+Lightweight React components rendered inside conversation messages. Created by the orchestrator during streaming via the `create_widget` tool. Widgets can be saved to a library for reuse.
+
+## Apps
+
+Per-org managed containers running Express. Each org gets its own container with apps served as Express routes. All app traffic is proxied through the API. Install pre-built templates or build custom apps.
+
+## Member management
+
+Org admins manage their team through invitations and namespace bindings:
+
+1. **Invite** — POST /organizations/me/invitations with email → sends an invitation email with a link.
+2. **View invitation** — GET /invitations/:token (public, no auth) → shows org name and whether the invitee has an account.
+3. **Accept** — POST /invitations/:token/accept (auth required, email must match) → creates namespace binding. Then call POST /auth/select-organization to enter the org.
+4. **Decline** — DELETE /invitations/:token (auth required) → permanently deletes the invitation.
+5. **List members** — GET /organizations/me/members → all members with userId, email, displayName, joinedAt.
+6. **Manage access** — use namespace bindings and system roles to control permissions (see `namespaces` tag).
+
+## Context profiles
+
+Context profiles are optional — a conversation can be created without one. When a profile is assigned to a namespace, colleagues with access to that namespace will have its tag and website sources loaded as condensed context into the system prompt.
+ * OpenAPI spec version: 2.0
+ */
+import type { ChatToolCallDtoType } from './chatToolCallDtoType';
+import type { ChatToolCallFunctionDto } from './chatToolCallFunctionDto';
+export interface ChatToolCallDto {
+    id: string;
+    type: ChatToolCallDtoType;
+    function: ChatToolCallFunctionDto;
+}
+//# sourceMappingURL=chatToolCallDto.d.ts.map

package/dist/generated/schemas/chatToolCallDto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatToolCallDto.d.ts","sourceRoot":"","sources":["../../../src/generated/schemas/chatToolCallDto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEzE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,uBAAuB,CAAC;CACnC"}

package/dist/generated/schemas/chatToolCallDto.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=chatToolCallDto.js.map

package/dist/generated/schemas/chatToolCallDto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatToolCallDto.js","sourceRoot":"","sources":["../../../src/generated/schemas/chatToolCallDto.ts"],"names":[],"mappings":""}

package/dist/generated/schemas/chatToolCallDtoType.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Generated by orval v7.21.0 🍺
+ * Do not edit manually.
+ * Beeable API
+ * Orchestrator-first business agent platform — a multi-tenant platform where users talk to digital colleagues powered by AI.
+
+## Authentication flow
+
+1. **Register or login** — returns JWT with { sub } only (no org context).
+2. **List organizations** — GET /auth/organizations to see which orgs the user belongs to.
+3. **Select organization** — POST /auth/select-organization with an organizationId — returns new JWT with { sub, org }. Use GET /auth/me to resolve org-admin status.
+4. **Use org-scoped endpoints** — all resource endpoints require the org-scoped token.
+5. **Switch orgs** — call POST /auth/select-organization again with a different org.
+6. **Token refresh** — POST /auth/refresh preserves org context.
+
+## Architecture
+
+Users create conversations with digital colleagues. Each colleague resolves its available tools and context from namespace bindings — tool availability is determined by which skills exist in the colleague's namespaces. Complex work is delegated to subagents via background tasks. Context profiles optionally pre-load condensed file/web page content into the system prompt.
+
+## Namespaces & access control
+
+All resources (databases, skills, apps, files, context profiles, widgets, memories) live in namespaces. Namespaces serve triple duty: group resources, define member visibility, and control permissions via role bindings. See the `namespaces` tag for the full RBAC model.
+
+## Digital colleagues
+
+Persistent AI team members with defined personas, optional model overrides, and namespace-scoped access. All conversations go through a colleague (the system colleague "Buzz" is the default). Colleagues can be invited into meetings for multi-party conversations.
+
+## Skills
+
+Org-scoped capability packages that bundle markdown instructions with tool access. Skills live in namespaces — a colleague gets a skill's tools if it has `skill:use` permission in that namespace. Tool execution is guarded: the streaming loop rejects any tool call not in the resolved set.
+
+## Memories
+
+Two-tier memory system: **org memories** (business facts about the org) and **user memories** (facts about individual users). Created via contemplation (post-conversation synthesis), explicit `remember_this` during conversation, or `manage_user_memory` tool. Injected into system prompts as background knowledge.
+
+## Billing
+
+Credit-based billing. Usage (AI tokens) is tracked and converted to credits via exchange rates. When credits run out, expensive operations return 402.
+
+## File upload flow
+
+POST /files as multipart/form-data with the file in the `file` field. The API stores the file, creates the record, and triggers condensation in a single request.
+
+## Dynamic databases
+
+Each organization can have multiple databases, each backed by its own isolated PostgreSQL schema. Databases are fully SQL-driven — no abstraction layer. Use POST /databases/:id/sql for DDL and DML. Supports migrations, forking, and promoting.
+
+## Conversation SSE protocol
+
+POST /conversations/:id/messages returns an SSE stream (Content-Type: text/event-stream). Events:
+
+| Event | Data | Description |
+|---|---|---|
+| `text` | Raw text delta | Append to displayed message |
+| `tool_use` | `{ "tool": "<name>", "status": "executing" }` | Orchestrator is calling a tool (show spinner) |
+| `done` | `{ "content": "...", "retrievedUnits": [...], "usage": {...} }` | Stream complete |
+| `error` | `{ "error": "..." }` | Error during streaming |
+
+Parse SSE with `event:` and `data:` fields per the SSE spec. On `done`, stop listening and close the connection.
+
+## Inline widgets
+
+Lightweight React components rendered inside conversation messages. Created by the orchestrator during streaming via the `create_widget` tool. Widgets can be saved to a library for reuse.
+
+## Apps
+
+Per-org managed containers running Express. Each org gets its own container with apps served as Express routes. All app traffic is proxied through the API. Install pre-built templates or build custom apps.
+
+## Member management
+
+Org admins manage their team through invitations and namespace bindings:
+
+1. **Invite** — POST /organizations/me/invitations with email → sends an invitation email with a link.
+2. **View invitation** — GET /invitations/:token (public, no auth) → shows org name and whether the invitee has an account.
+3. **Accept** — POST /invitations/:token/accept (auth required, email must match) → creates namespace binding. Then call POST /auth/select-organization to enter the org.
+4. **Decline** — DELETE /invitations/:token (auth required) → permanently deletes the invitation.
+5. **List members** — GET /organizations/me/members → all members with userId, email, displayName, joinedAt.
+6. **Manage access** — use namespace bindings and system roles to control permissions (see `namespaces` tag).
+
+## Context profiles
+
+Context profiles are optional — a conversation can be created without one. When a profile is assigned to a namespace, colleagues with access to that namespace will have its tag and website sources loaded as condensed context into the system prompt.
+ * OpenAPI spec version: 2.0
+ */
+export type ChatToolCallDtoType = typeof ChatToolCallDtoType[keyof typeof ChatToolCallDtoType];
+export declare const ChatToolCallDtoType: {
+    readonly function: "function";
+};
+//# sourceMappingURL=chatToolCallDtoType.d.ts.map

package/dist/generated/schemas/chatToolCallDtoType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatToolCallDtoType.d.ts","sourceRoot":"","sources":["../../../src/generated/schemas/chatToolCallDtoType.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG;AAEH,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAI/F,eAAO,MAAM,mBAAmB;;CAEtB,CAAC"}

package/dist/generated/schemas/chatToolCallDtoType.js

@@ -0,0 +1,89 @@
+/**
+ * Generated by orval v7.21.0 🍺
+ * Do not edit manually.
+ * Beeable API
+ * Orchestrator-first business agent platform — a multi-tenant platform where users talk to digital colleagues powered by AI.
+
+## Authentication flow
+
+1. **Register or login** — returns JWT with { sub } only (no org context).
+2. **List organizations** — GET /auth/organizations to see which orgs the user belongs to.
+3. **Select organization** — POST /auth/select-organization with an organizationId — returns new JWT with { sub, org }. Use GET /auth/me to resolve org-admin status.
+4. **Use org-scoped endpoints** — all resource endpoints require the org-scoped token.
+5. **Switch orgs** — call POST /auth/select-organization again with a different org.
+6. **Token refresh** — POST /auth/refresh preserves org context.
+
+## Architecture
+
+Users create conversations with digital colleagues. Each colleague resolves its available tools and context from namespace bindings — tool availability is determined by which skills exist in the colleague's namespaces. Complex work is delegated to subagents via background tasks. Context profiles optionally pre-load condensed file/web page content into the system prompt.
+
+## Namespaces & access control
+
+All resources (databases, skills, apps, files, context profiles, widgets, memories) live in namespaces. Namespaces serve triple duty: group resources, define member visibility, and control permissions via role bindings. See the `namespaces` tag for the full RBAC model.
+
+## Digital colleagues
+
+Persistent AI team members with defined personas, optional model overrides, and namespace-scoped access. All conversations go through a colleague (the system colleague "Buzz" is the default). Colleagues can be invited into meetings for multi-party conversations.
+
+## Skills
+
+Org-scoped capability packages that bundle markdown instructions with tool access. Skills live in namespaces — a colleague gets a skill's tools if it has `skill:use` permission in that namespace. Tool execution is guarded: the streaming loop rejects any tool call not in the resolved set.
+
+## Memories
+
+Two-tier memory system: **org memories** (business facts about the org) and **user memories** (facts about individual users). Created via contemplation (post-conversation synthesis), explicit `remember_this` during conversation, or `manage_user_memory` tool. Injected into system prompts as background knowledge.
+
+## Billing
+
+Credit-based billing. Usage (AI tokens) is tracked and converted to credits via exchange rates. When credits run out, expensive operations return 402.
+
+## File upload flow
+
+POST /files as multipart/form-data with the file in the `file` field. The API stores the file, creates the record, and triggers condensation in a single request.
+
+## Dynamic databases
+
+Each organization can have multiple databases, each backed by its own isolated PostgreSQL schema. Databases are fully SQL-driven — no abstraction layer. Use POST /databases/:id/sql for DDL and DML. Supports migrations, forking, and promoting.
+
+## Conversation SSE protocol
+
+POST /conversations/:id/messages returns an SSE stream (Content-Type: text/event-stream). Events:
+
+| Event | Data | Description |
+|---|---|---|
+| `text` | Raw text delta | Append to displayed message |
+| `tool_use` | `{ "tool": "<name>", "status": "executing" }` | Orchestrator is calling a tool (show spinner) |
+| `done` | `{ "content": "...", "retrievedUnits": [...], "usage": {...} }` | Stream complete |
+| `error` | `{ "error": "..." }` | Error during streaming |
+
+Parse SSE with `event:` and `data:` fields per the SSE spec. On `done`, stop listening and close the connection.
+
+## Inline widgets
+
+Lightweight React components rendered inside conversation messages. Created by the orchestrator during streaming via the `create_widget` tool. Widgets can be saved to a library for reuse.
+
+## Apps
+
+Per-org managed containers running Express. Each org gets its own container with apps served as Express routes. All app traffic is proxied through the API. Install pre-built templates or build custom apps.
+
+## Member management
+
+Org admins manage their team through invitations and namespace bindings:
+
+1. **Invite** — POST /organizations/me/invitations with email → sends an invitation email with a link.
+2. **View invitation** — GET /invitations/:token (public, no auth) → shows org name and whether the invitee has an account.
+3. **Accept** — POST /invitations/:token/accept (auth required, email must match) → creates namespace binding. Then call POST /auth/select-organization to enter the org.
+4. **Decline** — DELETE /invitations/:token (auth required) → permanently deletes the invitation.
+5. **List members** — GET /organizations/me/members → all members with userId, email, displayName, joinedAt.
+6. **Manage access** — use namespace bindings and system roles to control permissions (see `namespaces` tag).
+
+## Context profiles
+
+Context profiles are optional — a conversation can be created without one. When a profile is assigned to a namespace, colleagues with access to that namespace will have its tag and website sources loaded as condensed context into the system prompt.
+ * OpenAPI spec version: 2.0
+ */
+// eslint-disable-next-line @typescript-eslint/no-redeclare
+export const ChatToolCallDtoType = {
+    function: 'function',
+};
+//# sourceMappingURL=chatToolCallDtoType.js.map

package/dist/generated/schemas/chatToolCallDtoType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatToolCallDtoType.js","sourceRoot":"","sources":["../../../src/generated/schemas/chatToolCallDtoType.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG;AAKH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ,EAAE,UAAU;CACZ,CAAC"}

package/dist/generated/schemas/chatToolCallFunctionDto.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Generated by orval v7.21.0 🍺
+ * Do not edit manually.
+ * Beeable API
+ * Orchestrator-first business agent platform — a multi-tenant platform where users talk to digital colleagues powered by AI.
+
+## Authentication flow
+
+1. **Register or login** — returns JWT with { sub } only (no org context).
+2. **List organizations** — GET /auth/organizations to see which orgs the user belongs to.
+3. **Select organization** — POST /auth/select-organization with an organizationId — returns new JWT with { sub, org }. Use GET /auth/me to resolve org-admin status.
+4. **Use org-scoped endpoints** — all resource endpoints require the org-scoped token.
+5. **Switch orgs** — call POST /auth/select-organization again with a different org.
+6. **Token refresh** — POST /auth/refresh preserves org context.
+
+## Architecture
+
+Users create conversations with digital colleagues. Each colleague resolves its available tools and context from namespace bindings — tool availability is determined by which skills exist in the colleague's namespaces. Complex work is delegated to subagents via background tasks. Context profiles optionally pre-load condensed file/web page content into the system prompt.
+
+## Namespaces & access control
+
+All resources (databases, skills, apps, files, context profiles, widgets, memories) live in namespaces. Namespaces serve triple duty: group resources, define member visibility, and control permissions via role bindings. See the `namespaces` tag for the full RBAC model.
+
+## Digital colleagues
+
+Persistent AI team members with defined personas, optional model overrides, and namespace-scoped access. All conversations go through a colleague (the system colleague "Buzz" is the default). Colleagues can be invited into meetings for multi-party conversations.
+
+## Skills
+
+Org-scoped capability packages that bundle markdown instructions with tool access. Skills live in namespaces — a colleague gets a skill's tools if it has `skill:use` permission in that namespace. Tool execution is guarded: the streaming loop rejects any tool call not in the resolved set.
+
+## Memories
+
+Two-tier memory system: **org memories** (business facts about the org) and **user memories** (facts about individual users). Created via contemplation (post-conversation synthesis), explicit `remember_this` during conversation, or `manage_user_memory` tool. Injected into system prompts as background knowledge.
+
+## Billing
+
+Credit-based billing. Usage (AI tokens) is tracked and converted to credits via exchange rates. When credits run out, expensive operations return 402.
+
+## File upload flow
+
+POST /files as multipart/form-data with the file in the `file` field. The API stores the file, creates the record, and triggers condensation in a single request.
+
+## Dynamic databases
+
+Each organization can have multiple databases, each backed by its own isolated PostgreSQL schema. Databases are fully SQL-driven — no abstraction layer. Use POST /databases/:id/sql for DDL and DML. Supports migrations, forking, and promoting.
+
+## Conversation SSE protocol
+
+POST /conversations/:id/messages returns an SSE stream (Content-Type: text/event-stream). Events:
+
+| Event | Data | Description |
+|---|---|---|
+| `text` | Raw text delta | Append to displayed message |
+| `tool_use` | `{ "tool": "<name>", "status": "executing" }` | Orchestrator is calling a tool (show spinner) |
+| `done` | `{ "content": "...", "retrievedUnits": [...], "usage": {...} }` | Stream complete |
+| `error` | `{ "error": "..." }` | Error during streaming |
+
+Parse SSE with `event:` and `data:` fields per the SSE spec. On `done`, stop listening and close the connection.
+
+## Inline widgets
+
+Lightweight React components rendered inside conversation messages. Created by the orchestrator during streaming via the `create_widget` tool. Widgets can be saved to a library for reuse.
+
+## Apps
+
+Per-org managed containers running Express. Each org gets its own container with apps served as Express routes. All app traffic is proxied through the API. Install pre-built templates or build custom apps.
+
+## Member management
+
+Org admins manage their team through invitations and namespace bindings:
+
+1. **Invite** — POST /organizations/me/invitations with email → sends an invitation email with a link.
+2. **View invitation** — GET /invitations/:token (public, no auth) → shows org name and whether the invitee has an account.
+3. **Accept** — POST /invitations/:token/accept (auth required, email must match) → creates namespace binding. Then call POST /auth/select-organization to enter the org.
+4. **Decline** — DELETE /invitations/:token (auth required) → permanently deletes the invitation.
+5. **List members** — GET /organizations/me/members → all members with userId, email, displayName, joinedAt.
+6. **Manage access** — use namespace bindings and system roles to control permissions (see `namespaces` tag).
+
+## Context profiles
+
+Context profiles are optional — a conversation can be created without one. When a profile is assigned to a namespace, colleagues with access to that namespace will have its tag and website sources loaded as condensed context into the system prompt.
+ * OpenAPI spec version: 2.0
+ */
+export interface ChatToolCallFunctionDto {
+    name: string;
+    /** JSON-encoded arguments */
+    arguments: string;
+}
+//# sourceMappingURL=chatToolCallFunctionDto.d.ts.map

package/dist/generated/schemas/chatToolCallFunctionDto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatToolCallFunctionDto.d.ts","sourceRoot":"","sources":["../../../src/generated/schemas/chatToolCallFunctionDto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmFG;AAEH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB"}