@buildbase/sdk 0.0.54 → 0.0.56

package/dist/index.d.ts

@@ -1003,7 +1003,7 @@ interface ISettings {
         /** Auto-create workspace on first login */
         autoCreateFirst: boolean;
     };
-    [key: string]: any;
+    [key: string]: unknown;
 }
 
 /**
@@ -1017,9 +1017,14 @@ interface IOsConfig {
     version: ApiVersion;
     orgId: string;
 }
+/** Lifecycle of the one-time org-settings fetch. */
+type SettingsStatus = 'idle' | 'loading' | 'loaded' | 'error';
 interface IOsState extends IOsConfig {
     auth?: IAuthConfig;
     settings?: ISettings | null;
+    /** State of the settings fetch — lets UI wait instead of guessing with `?? true` defaults. */
+    settingsStatus?: SettingsStatus;
+    settingsError?: string | null;
 }
 
 /**
@@ -1082,6 +1087,7 @@ interface IBaseApiConfig {
  * - getAuthHeaders()
  * - fetchJson<T>(path, init, errorMessage): GET/POST/etc. with handleApiResponse
  * - fetchResponse(path, init): raw Response for custom parsing (e.g. non-JSON or custom error handling)
+ * - fetchUnwrapped<T>(path, init, errorMessage): fetch → throw on !ok → unwrap { success, data } envelope
  */
 declare abstract class BaseApi {
     protected readonly serverUrl: string;
@@ -1130,6 +1136,12 @@ declare abstract class BaseApi {
      * Caller is responsible for checking response.ok and parsing body.
      */
     protected fetchResponse(path: string, init?: RequestInit): Promise<Response>;
+    /**
+     * Execute request, throw a parsed error on !response.ok, and unwrap the
+     * `{ success, data }` envelope. Shorthand for the common
+     * fetchResponse → throwResponseError → unwrapResponse sequence.
+     */
+    protected fetchUnwrapped<T>(path: string, init?: RequestInit, errorMessage?: string): Promise<T>;
     /**
      * Execute request against an absolute URL (bypasses baseUrl).
      * Useful for endpoints outside the default basePath (e.g. /auth vs /public).
@@ -1171,21 +1183,26 @@ interface AuthRequestParams {
     };
     state?: string;
 }
+/**
+ * Unwrapped payload of a successful auth request.
+ * ⚠️ Prior to the envelope unification this type described the raw
+ * `{ success, data, message }` wire envelope; `requestAuth` now unwraps the
+ * envelope like every other SDK method and resolves with the payload only.
+ */
 interface AuthRequestResponse {
-    success: boolean;
-    data: {
-        redirectUrl: string;
-    };
-    message: string;
+    redirectUrl: string;
 }
 declare class AuthApi extends BaseApi {
     constructor(config: Pick<IOsConfig, 'serverUrl' | 'version'> & {
         sessionId?: string;
     });
     /**
-     * Initiate OAuth sign-in flow. Returns redirect URL to the auth provider.
+     * Initiate OAuth sign-in flow. Resolves with the redirect URL to the auth provider.
      * Auth endpoints sit at /api/v1/auth/ (outside the /public basePath),
-     * so we use fetchAbsoluteUrl to get timeout, retry, and error handling via BaseApi.
+     * so we use fetchAbsoluteUrl to get timeout, retry, and error handling via
+     * BaseApi, then apply the standard throwResponseError → unwrapResponse
+     * sequence (the fetchUnwrapped convention). Non-2xx responses and 2xx
+     * envelopes with `success: false` both throw a structured Error.
      */
     requestAuth(params: AuthRequestParams): Promise<AuthRequestResponse>;
     /** Fetch user profile with the given session ID (used after OAuth redirect or from storage). */
@@ -1238,6 +1255,75 @@ declare class BetaForm {
     }): Promise<ApiResponse>;
 }
 
+/**
+ * API client for the signed-in user's devices — the browsers/apps they have
+ * signed in from. Session-authed (x-session-id + x-device-id), scoped to the
+ * current user. Extends BaseApi for shared URL/auth/request handling.
+ *
+ * A device row is login history. Signing a device out revokes its live sessions
+ * but keeps the row (shown as signed-out); "forget" also removes the row.
+ */
+
+/** Coarse geo/network info resolved from the request IP (a lightweight subset). */
+interface IIpInfoLite {
+    ip?: string;
+    hostname?: string;
+    country?: string;
+    city?: string;
+    region?: string;
+    /** "lat,long" string, as provided by the IP lookup. */
+    loc?: string;
+    timezone?: string;
+}
+/** A device the current user has signed in from. */
+interface IDeviceView {
+    /** Stable per-browser/app identifier (the `x-device-id` the client sends). */
+    deviceId: string;
+    /** User-editable label (falls back to a derived name). */
+    name: string;
+    /** IP the device was last seen from. */
+    ip: string;
+    /** Resolved geo/network info for `ip`, when available. */
+    ipInfo: IIpInfoLite | null;
+    userAgent: string;
+    origin: string;
+    /** Whether the user marked this device trusted (longer sessions, fewer prompts). */
+    trusted: boolean;
+    /** ISO string — first time this device was seen. */
+    firstSeenAt?: string;
+    /** ISO string — most recent activity from this device. */
+    lastActiveAt?: string;
+    /** True when this is the device the request came from. */
+    current: boolean;
+    /** Number of live sessions currently on this device. */
+    activeSessions: number;
+    /** Whether this device has an active push-notification subscription. */
+    pushEnabled: boolean;
+}
+declare class DevicesApi extends BaseApi {
+    constructor(config: Pick<IOsConfig, 'serverUrl' | 'version'> & {
+        sessionId?: string;
+    });
+    /** List the devices the current user has signed in from. */
+    list(signal?: AbortSignal): Promise<IDeviceView[]>;
+    /** Rename a device (its user-facing label). */
+    rename(deviceId: string, name: string, signal?: AbortSignal): Promise<void>;
+    /**
+     * Sign a device out: revoke every live session born on it. The device stays
+     * in the list as a signed-out device. Returns the number of sessions revoked.
+     */
+    signOut(deviceId: string, signal?: AbortSignal): Promise<{
+        revokedSessions: number;
+    }>;
+    /**
+     * Forget a device: sign it out AND remove the history row entirely.
+     * Returns the number of sessions revoked in the process.
+     */
+    forget(deviceId: string, signal?: AbortSignal): Promise<{
+        revokedSessions: number;
+    }>;
+}
+
 declare class PushApi extends BaseApi {
     constructor(config: Pick<IBaseApiConfig, 'serverUrl' | 'version' | 'orgId' | 'sessionId'>);
     getVapidPublicKey(): Promise<{
@@ -1253,6 +1339,51 @@ declare class PushApi extends BaseApi {
     unsubscribe(endpoint: string): Promise<void>;
 }
 
+/**
+ * API client for the signed-in user's active sessions. Session-authed
+ * (x-session-id), scoped to the current user. Extends BaseApi for shared
+ * URL/auth/request handling.
+ *
+ * The raw session id is never exposed — a session's public handle is its
+ * mirror-row id (`ISessionView.id`), which is what `revoke` takes.
+ * "Sign out everywhere" / "sign out current" stay on the auth logout flow.
+ */
+
+/** One live session of the current user, joined to its device's label. */
+interface ISessionView {
+    /** Public handle (mirror-row id) — NOT the raw session id. Use for `revoke`. */
+    id: string;
+    /** The device this session was born on. */
+    deviceId: string;
+    /** OAuth client id, or 'first-party' for a normal app sign-in. */
+    clientId: string;
+    ip: string;
+    ipInfo: IIpInfoLite | null;
+    userAgent: string;
+    origin: string;
+    /** ISO string. */
+    createdAt?: string;
+    /** ISO string. */
+    lastActiveAt?: string;
+    /** ISO string — when the session expires (reflects the org session policy). */
+    expiresAt?: string;
+    /** True when this is the session making the request. */
+    current: boolean;
+    /** The device's label only; ip/userAgent/etc. live on the session itself. */
+    device: {
+        name: string;
+    } | null;
+}
+declare class SessionsApi extends BaseApi {
+    constructor(config: Pick<IOsConfig, 'serverUrl' | 'version'> & {
+        sessionId?: string;
+    });
+    /** List the current user's live sessions (each joined to its device label). */
+    list(signal?: AbortSignal): Promise<ISessionView[]>;
+    /** Sign out one session by its public handle (`ISessionView.id`). */
+    revoke(id: string, signal?: AbortSignal): Promise<void>;
+}
+
 /**
  * Centralized API client for organization (OS) settings.
  * Extends BaseApi for shared URL/auth/request handling.
@@ -1336,7 +1467,7 @@ interface NotificationData {
         push?: boolean;
     };
     /** Any additional merge tags available as {{key}} in the email template. */
-    [key: string]: any;
+    [key: string]: unknown;
 }
 /** Result of sending a notification. */
 interface NotificationResult {
@@ -1367,64 +1498,64 @@ declare class WorkspaceApi extends BaseApi {
         sessionId?: string;
         onUnauthorized?: () => void;
     });
-    getWorkspaces(): Promise<IWorkspace[]>;
+    getWorkspaces(signal?: AbortSignal): Promise<IWorkspace[]>;
     createWorkspace(data: {
         name: string;
         image?: string;
-    }): Promise<IWorkspace>;
-    updateWorkspace(id: string, data: Partial<IWorkspace>): Promise<IWorkspace>;
-    deleteWorkspace(id: string): Promise<{
+    }, signal?: AbortSignal): Promise<IWorkspace>;
+    updateWorkspace(id: string, data: Partial<IWorkspace>, signal?: AbortSignal): Promise<IWorkspace>;
+    deleteWorkspace(id: string, signal?: AbortSignal): Promise<{
         success: boolean;
     }>;
-    getWorkspaceUsers(workspaceId: string): Promise<IWorkspaceUser[]>;
+    getWorkspaceUsers(workspaceId: string, signal?: AbortSignal): Promise<IWorkspaceUser[]>;
     addUser(workspaceId: string, config: {
         email: string;
         role: string;
-    }): Promise<{
+    }, signal?: AbortSignal): Promise<{
         userId: string;
         workspace: IWorkspace;
         message: string;
     }>;
-    removeUser(workspaceId: string, userId: string): Promise<{
+    removeUser(workspaceId: string, userId: string, signal?: AbortSignal): Promise<{
         userId: string;
         workspace: IWorkspace;
         message: string;
     }>;
-    updateUser(workspaceId: string, userId: string, data: Partial<IWorkspaceUser>): Promise<{
+    updateUser(workspaceId: string, userId: string, data: Partial<IWorkspaceUser>, signal?: AbortSignal): Promise<{
         userId: string;
         workspace: IWorkspace;
         message: string;
     }>;
     updateSettings(data: {
         permissions: Record<string, string[]>;
-    }): Promise<any>;
-    updateWorkspacePermissions(workspaceId: string, permissions: Record<string, string[]>): Promise<any>;
-    getFeatures(): Promise<IWorkspaceFeature[]>;
-    updateFeature(workspaceId: string, key: string, value: boolean): Promise<IWorkspace>;
-    getWorkspace(workspaceId: string): Promise<IWorkspace>;
-    getProfile(): Promise<IUser>;
-    updateUserProfile(config: Partial<IUser>): Promise<IUser>;
-    getPasskeys(): Promise<IPasskeySummary[]>;
-    renamePasskey(passkeyId: string, name: string): Promise<void>;
-    deletePasskey(passkeyId: string): Promise<void>;
+    }, signal?: AbortSignal): Promise<any>;
+    updateWorkspacePermissions(workspaceId: string, permissions: Record<string, string[]>, signal?: AbortSignal): Promise<any>;
+    getFeatures(signal?: AbortSignal): Promise<IWorkspaceFeature[]>;
+    updateFeature(workspaceId: string, key: string, value: boolean, signal?: AbortSignal): Promise<IWorkspace>;
+    getWorkspace(workspaceId: string, signal?: AbortSignal): Promise<IWorkspace>;
+    getProfile(signal?: AbortSignal): Promise<IUser>;
+    updateUserProfile(config: Partial<IUser>, signal?: AbortSignal): Promise<IUser>;
+    getPasskeys(signal?: AbortSignal): Promise<IPasskeySummary[]>;
+    renamePasskey(passkeyId: string, name: string, signal?: AbortSignal): Promise<void>;
+    deletePasskey(passkeyId: string, signal?: AbortSignal): Promise<void>;
     /**
      * Get current subscription for a workspace
      * Returns subscription details including plan, plan version, and group information
      */
-    getCurrentSubscription(workspaceId: string): Promise<ISubscriptionResponse>;
+    getCurrentSubscription(workspaceId: string, signal?: AbortSignal): Promise<ISubscriptionResponse>;
     /**
      * Get plan group for a workspace
      * Returns the plan group containing the current plan if subscription exists,
      * otherwise returns the latest published group
      */
-    getPlanGroup(workspaceId: string): Promise<IPlanGroupResponse>;
+    getPlanGroup(workspaceId: string, signal?: AbortSignal): Promise<IPlanGroupResponse>;
     /**
      * Get plan group for a workspace with a specific version
      * @param workspaceId - The workspace ID
      * @param groupVersionId - The plan group version ID to fetch
      * @returns Plan group response with the specified version
      */
-    getPlanGroupByVersion(workspaceId: string, groupVersionId: string): Promise<IPlanGroupResponse>;
+    getPlanGroupByVersion(workspaceId: string, groupVersionId: string, signal?: AbortSignal): Promise<IPlanGroupResponse>;
     /**
      * Get current group version and available newer versions of the same group
      * - If user has active subscription: returns their current group version + newer versions
@@ -1434,7 +1565,7 @@ declare class WorkspaceApi extends BaseApi {
      * @param workspaceId - The workspace ID
      * @returns Plan group versions response with currentVersion and availableVersions
      */
-    getPlanGroupVersions(workspaceId: string): Promise<IPlanGroupVersionsResponse>;
+    getPlanGroupVersions(workspaceId: string, signal?: AbortSignal): Promise<IPlanGroupVersionsResponse>;
     /**
      * Get plan group versions by slug (public, no auth required).
      * Returns the latest published plan group versions for the given plan group slug.
@@ -1443,7 +1574,7 @@ declare class WorkspaceApi extends BaseApi {
      * @param slug - Plan group slug (e.g. 'default', 'enterprise')
      * @returns Plan group versions response with currentVersion and availableVersions
      */
-    getPublicPlans(slug: string): Promise<IPublicPlansResponse>;
+    getPublicPlans(slug: string, signal?: AbortSignal): Promise<IPublicPlansResponse>;
     /**
      * Get credit packages (public, no auth required).
      * Returns active credit packages for the org with pricing info.
@@ -1451,7 +1582,7 @@ declare class WorkspaceApi extends BaseApi {
      *
      * @returns Credit packages with pricing variants
      */
-    getPublicCreditPackages(): Promise<IPublicCreditPackagesResponse>;
+    getPublicCreditPackages(signal?: AbortSignal): Promise<IPublicCreditPackagesResponse>;
     /**
      * Get plan group version details by ID (public, no auth required).
      * Returns the full plan group version with populated plan versions.
@@ -1460,15 +1591,24 @@ declare class WorkspaceApi extends BaseApi {
      * @param groupVersionId - The plan group version ID to fetch
      * @returns Plan group version with populated plan versions
      */
-    getPlanGroupVersion(groupVersionId: string): Promise<IPlanGroupVersion>;
+    getPlanGroupVersion(groupVersionId: string, signal?: AbortSignal): Promise<IPlanGroupVersion>;
     /**
      * Create checkout session for new subscription
      * @param workspaceId - The workspace ID
      * @param request - Checkout session request with planVersionId and optional billing interval/URLs
      * @returns Checkout session response with checkoutUrl to redirect user
      */
-    createCheckoutSession(workspaceId: string, request: ICheckoutSessionRequest): Promise<CheckoutResult>;
-    selectFreePlan(workspaceId: string, planVersionId: string): Promise<{
+    createCheckoutSession(workspaceId: string, request: ICheckoutSessionRequest, signal?: AbortSignal): Promise<CheckoutResult>;
+    /**
+     * Assign a free (freemium) plan to the workspace without a Stripe checkout.
+     *
+     * This endpoint's envelope carries no `data` payload — it is
+     * `{ success, message }` — so `fetchUnwrapped` resolves with the envelope
+     * itself (its unwrap only extracts `data` when present). On resolution
+     * `success` is therefore always `true`: non-2xx responses and 2xx envelopes
+     * with `success: false` both throw a structured Error.
+     */
+    selectFreePlan(workspaceId: string, planVersionId: string, signal?: AbortSignal): Promise<{
         success: boolean;
         message: string;
     }>;
@@ -1477,12 +1617,12 @@ declare class WorkspaceApi extends BaseApi {
      * Only allows plan changes within the same plan group
      * Returns checkout session if payment is required, otherwise returns subscription update response
      */
-    updateSubscription(workspaceId: string, request: ISubscriptionUpdateRequest): Promise<ISubscriptionUpdateResponse | ICheckoutSessionResponse>;
+    updateSubscription(workspaceId: string, request: ISubscriptionUpdateRequest, signal?: AbortSignal): Promise<ISubscriptionUpdateResponse | ICheckoutSessionResponse>;
     /**
      * Create a Stripe Customer Portal session for managing payment methods, invoices, etc.
      * Returns the portal URL — redirect user to it.
      */
-    createBillingPortalSession(workspaceId: string, returnUrl?: string): Promise<{
+    createBillingPortalSession(workspaceId: string, returnUrl?: string, signal?: AbortSignal): Promise<{
         url: string;
     }>;
     /**
@@ -1492,35 +1632,35 @@ declare class WorkspaceApi extends BaseApi {
      * @param startingAfter - Invoice ID to start after (for pagination)
      * @returns List of invoices with pagination info
      */
-    listInvoices(workspaceId: string, limit?: number, startingAfter?: string): Promise<IInvoiceListResponse>;
+    listInvoices(workspaceId: string, limit?: number, startingAfter?: string, signal?: AbortSignal): Promise<IInvoiceListResponse>;
     /**
      * Get a single invoice by ID
      * @param workspaceId - The workspace ID
      * @param invoiceId - The invoice ID
      * @returns Invoice details
      */
-    getInvoice(workspaceId: string, invoiceId: string): Promise<IInvoiceResponse>;
+    getInvoice(workspaceId: string, invoiceId: string, signal?: AbortSignal): Promise<IInvoiceResponse>;
     /**
      * Cancel subscription at the end of the current billing period
      * Sets cancelAtPeriodEnd: true - subscription remains active until period ends
      * @param workspaceId - The workspace ID
      * @returns Updated subscription with cancelAtPeriodEnd and stripeCurrentPeriodEnd
      */
-    cancelSubscriptionAtPeriodEnd(workspaceId: string): Promise<ISubscriptionResponse>;
+    cancelSubscriptionAtPeriodEnd(workspaceId: string, signal?: AbortSignal): Promise<ISubscriptionResponse>;
     /**
      * Resume a subscription that was scheduled for cancellation
      * Sets cancelAtPeriodEnd: false - subscription will continue after period ends
      * @param workspaceId - The workspace ID
      * @returns Updated subscription with cancelAtPeriodEnd set to false
      */
-    resumeSubscription(workspaceId: string): Promise<ISubscriptionResponse>;
+    resumeSubscription(workspaceId: string, signal?: AbortSignal): Promise<ISubscriptionResponse>;
     /**
      * Record quota usage for a workspace
      * @param workspaceId - The workspace ID
      * @param request - Usage request with quotaSlug, quantity, and optional metadata/source
      * @returns Usage result with consumed/included/available/overage
      */
-    recordUsage(workspaceId: string, request: IRecordUsageRequest): Promise<IRecordUsageResponse>;
+    recordUsage(workspaceId: string, request: IRecordUsageRequest, signal?: AbortSignal): Promise<IRecordUsageResponse>;
     /**
      * Record multiple quota usage entries in a single request.
      * Designed for backend-to-backend high-volume scenarios (bulk exports, batch jobs).
@@ -1544,7 +1684,7 @@ declare class WorkspaceApi extends BaseApi {
             source?: string;
             idempotencyKey?: string;
         }>;
-    }): Promise<{
+    }, signal?: AbortSignal): Promise<{
         success: boolean;
         total: number;
         succeeded: number;
@@ -1562,20 +1702,20 @@ declare class WorkspaceApi extends BaseApi {
      * @param quotaSlug - The quota slug to check
      * @returns Quota usage status with consumed/included/available/overage/hasOverage
      */
-    getQuotaUsageStatus(workspaceId: string, quotaSlug: string): Promise<IQuotaUsageStatusResponse>;
+    getQuotaUsageStatus(workspaceId: string, quotaSlug: string, signal?: AbortSignal): Promise<IQuotaUsageStatusResponse>;
     /**
      * Get usage status for all quotas in the workspace's current plan
      * @param workspaceId - The workspace ID
      * @returns All quota usage statuses keyed by quota slug
      */
-    getAllQuotaUsage(workspaceId: string): Promise<IAllQuotaUsageResponse>;
+    getAllQuotaUsage(workspaceId: string, signal?: AbortSignal): Promise<IAllQuotaUsageResponse>;
     /**
      * Get paginated usage logs for a workspace
      * @param workspaceId - The workspace ID
      * @param query - Optional filters: quotaSlug, from, to, source, page, limit
      * @returns Paginated usage log entries
      */
-    getUsageLogs(workspaceId: string, query?: IUsageLogsQuery): Promise<IUsageLogsResponse>;
+    getUsageLogs(workspaceId: string, query?: IUsageLogsQuery, signal?: AbortSignal): Promise<IUsageLogsResponse>;
     /**
      * Trigger a notification event for a workspace.
      * Respects all notification gates (org settings, event config, workspace preferences).
@@ -1598,16 +1738,16 @@ declare class WorkspaceApi extends BaseApi {
      * });
      * ```
      */
-    sendNotification(workspaceId: string, event: string, userId?: string, data?: NotificationData): Promise<NotificationResult>;
-    getNotificationEvents(workspaceId: string): Promise<NotificationEvent[]>;
-    getNotificationPreferences(workspaceId: string): Promise<Record<string, {
+    sendNotification(workspaceId: string, event: string, userId?: string, data?: NotificationData, signal?: AbortSignal): Promise<NotificationResult>;
+    getNotificationEvents(workspaceId: string, signal?: AbortSignal): Promise<NotificationEvent[]>;
+    getNotificationPreferences(workspaceId: string, signal?: AbortSignal): Promise<Record<string, {
         email?: boolean;
         push?: boolean;
     }>>;
     updateNotificationPreferences(workspaceId: string, preferences: Record<string, {
         email?: boolean;
         push?: boolean;
-    }>): Promise<Record<string, {
+    }>, signal?: AbortSignal): Promise<Record<string, {
         email?: boolean;
         push?: boolean;
     }>>;
@@ -1616,7 +1756,7 @@ declare class WorkspaceApi extends BaseApi {
      * @param workspaceId - The workspace ID
      * @returns Credit balance with available, totalGranted, totalConsumed, totalExpired, totalRefunded
      */
-    getCreditBalance(workspaceId: string): Promise<ICreditBalance>;
+    getCreditBalance(workspaceId: string, signal?: AbortSignal): Promise<ICreditBalance>;
     /**
      * Consume credits from a workspace balance.
      * Throws an error with `code: 'INSUFFICIENT_CREDITS'` and `available`/`requested` fields on 402.
@@ -1624,7 +1764,7 @@ declare class WorkspaceApi extends BaseApi {
      * @param request - Consume request with amount, optional description, idempotencyKey, metadata
      * @returns Consume result with consumed amount and balanceAfter
      */
-    consumeCredits(workspaceId: string, request: IConsumeCreditsRequest): Promise<IConsumeCreditsResponse>;
+    consumeCredits(workspaceId: string, request: IConsumeCreditsRequest, signal?: AbortSignal): Promise<IConsumeCreditsResponse>;
     /**
      * Create a Stripe checkout session for purchasing a credit package.
      * Returns a checkout URL to redirect the user to.
@@ -1632,35 +1772,35 @@ declare class WorkspaceApi extends BaseApi {
      * @param request - Purchase request with creditPackageId, successUrl, cancelUrl, optional currency
      * @returns Checkout session ID and URL
      */
-    purchaseCredits(workspaceId: string, request: ICreditPurchaseRequest): Promise<ICreditPurchaseResponse>;
+    purchaseCredits(workspaceId: string, request: ICreditPurchaseRequest, signal?: AbortSignal): Promise<ICreditPurchaseResponse>;
     /**
      * List available credit packages for purchase.
      * Returns active, non-archived packages sorted by sortOrder then creditAmount.
      * @param workspaceId - The workspace ID
      * @returns Array of credit packages
      */
-    getCreditPackages(workspaceId: string): Promise<ICreditPackage[]>;
+    getCreditPackages(workspaceId: string, signal?: AbortSignal): Promise<ICreditPackage[]>;
     /**
      * Get paginated credit transaction history.
      * @param workspaceId - The workspace ID
      * @param query - Optional filters: type, page, limit
      * @returns Paginated credit transactions
      */
-    getCreditTransactions(workspaceId: string, query?: ICreditTransactionsQuery): Promise<ICreditTransactionsResponse>;
+    getCreditTransactions(workspaceId: string, query?: ICreditTransactionsQuery, signal?: AbortSignal): Promise<ICreditTransactionsResponse>;
     /**
      * Get paginated credit buckets.
      * @param workspaceId - The workspace ID
      * @param query - Optional filters: status, source, page, limit
      * @returns Paginated credit buckets
      */
-    getCreditBuckets(workspaceId: string, query?: ICreditBucketsQuery): Promise<ICreditBucketsResponse>;
+    getCreditBuckets(workspaceId: string, query?: ICreditBucketsQuery, signal?: AbortSignal): Promise<ICreditBucketsResponse>;
     /**
      * Get credits expiring within N days.
      * @param workspaceId - The workspace ID
      * @param days - Look-ahead window in days (1-90, default 7)
      * @returns Expiring credits summary with bucket list
      */
-    getExpiringCredits(workspaceId: string, days?: number): Promise<IExpiringCreditsResponse>;
+    getExpiringCredits(workspaceId: string, days?: number, signal?: AbortSignal): Promise<IExpiringCreditsResponse>;
 }
 
 /**
@@ -1787,6 +1927,7 @@ declare const BBAction: {
     readonly SelectPlan: "selectPlan";
     readonly CreditPurchase: "creditPurchase";
     readonly OpenCreditStore: "openCreditStore";
+    readonly OpenConnectGuide: "openConnectGuide";
     readonly Invite: "invite";
 };
 type BBActionType = (typeof BBAction)[keyof typeof BBAction];
@@ -1944,14 +2085,33 @@ declare const PLAN_CURRENCY_OPTIONS: {
     value: "usd" | "eur" | "gbp" | "jpy" | "cad" | "aud" | "chf" | "cny" | "hkd" | "sgd" | "inr" | "mxn" | "brl" | "nzd" | "sek" | "nok" | "dkk" | "pln" | "thb";
     label: string;
 }[];
+/**
+ * Minor-unit digits for a currency per ISO 4217: 0 (JPY, KRW, …), 2 (most),
+ * or 3 (KWD, BHD, …). The zero- and three-decimal sets are pinned to Stripe's
+ * treatment (the billing backend defines amount semantics); ISK is pinned to 2
+ * (Stripe legacy — ISO 4217 says 0). Any other code defers to the runtime's
+ * CLDR data (IQD/LYD → 3, CLF/UYW → 4, UYI → 0), falling back to 2 for codes
+ * unknown to Intl or malformed.
+ */
+declare function getCurrencyDecimals(currency: string | null | undefined): number;
 /** True when `currency` has no minor unit (JPY, KRW, …) — amounts are whole units, not cents. */
 declare function isZeroDecimalCurrency(currency: string | null | undefined): boolean;
 /**
  * Convert a minor-unit amount to its display number for `currency`:
  * `minorAmountToDisplay(1999, 'usd')` → `"19.99"`,
- * `minorAmountToDisplay(1000, 'jpy')` → `"1,000"` (zero-decimal — no division).
+ * `minorAmountToDisplay(1000, 'jpy')` → `"1,000"` (zero-decimal — no division),
+ * `minorAmountToDisplay(12345, 'kwd')` → `"12.345"` (three-decimal — ÷1000).
  */
 declare function minorAmountToDisplay(amount: number, currency: string): string;
+/**
+ * Locale-aware currency formatting of a minor-unit amount via `Intl.NumberFormat`
+ * (`(1999, 'usd', 'en-US')` → `"$19.99"`; `(1000, 'jpy', 'ja-JP')` → `"￥1,000"`;
+ * `(12345, 'kwd')` → `"KWD 12.345"`). The divisor follows the currency's ISO 4217
+ * minor-unit digits (see `getCurrencyDecimals`) — zero-decimal currencies are
+ * never divided, three-decimal divide by 1000. Falls back to the symbol table
+ * when the currency code is empty or malformed.
+ */
+declare function formatMinorAmountIntl(amount: number, currency: string, locale?: string): string;
 /** Format cents as money string (e.g. 1999, "usd" -> "$19.99"; 1000, "jpy" -> "¥1,000"). Caller must pass currency (e.g. from plan or workspace). */
 declare function formatCents(cents: number, currency: string): string;
 /** Translatable labels for overage/quota formatting */
@@ -1971,15 +2131,16 @@ interface OverageLabels {
 }
 /**
  * Format overage rate for display. When unitSize > 1: "$1.00/1,000 units"; else "$1.00/unit".
- * Pass `labels` for i18n support.
+ * Pass `labels` for i18n support and `locale` to group numbers in the display locale.
  */
-declare function formatOverageRate(overageCents: number | undefined, unitSize: number | undefined, currency: string, labels?: Partial<OverageLabels>): string | null;
+declare function formatOverageRate(overageCents: number | undefined, unitSize: number | undefined, currency: string, labels?: Partial<OverageLabels>, locale?: string): string | null;
 /**
  * Format overage rate with optional unit label for comparison/preview UIs.
  * e.g. formatOverageRateWithLabel(50, 1000, "video", "usd") -> "$0.50/1,000 videos"
  * Pass `labels` for i18n support. Pass `pluralUnitLabel` to avoid English "s" pluralization.
+ * Pass `locale` to group numbers in the display locale.
  */
-declare function formatOverageRateWithLabel(overageCents: number | undefined, unitSize: number | undefined, unitLabel: string | undefined, currency: string, pluralUnitLabel?: string, labels?: Partial<OverageLabels>): string | null;
+declare function formatOverageRateWithLabel(overageCents: number | undefined, unitSize: number | undefined, unitLabel: string | undefined, currency: string, pluralUnitLabel?: string, labels?: Partial<OverageLabels>, locale?: string): string | null;
 /**
  * Get singular unit label from item name or slug (e.g. "Videos" -> "video", "reels" -> "reel").
  * Used for quota display in comparison and preview.
@@ -1988,9 +2149,10 @@ declare function formatOverageRateWithLabel(overageCents: number | undefined, un
 declare function getQuotaUnitLabelFromName(nameOrSlug: string, fallback?: string): string;
 /**
  * Format quota "included + overage" for display.
- * Pass `labels` and `pluralUnitLabel` for i18n support.
+ * Pass `labels` and `pluralUnitLabel` for i18n support, and `locale` to group
+ * numbers in the display locale.
  */
-declare function formatQuotaIncludedOverage(included: number | undefined, overageCents: number | undefined, unitLabel: string, currency: string, unitSize?: number, pluralUnitLabel?: string, labels?: Partial<OverageLabels>, allowOverage?: boolean): string;
+declare function formatQuotaIncludedOverage(included: number | undefined, overageCents: number | undefined, unitLabel: string, currency: string, unitSize?: number, pluralUnitLabel?: string, labels?: Partial<OverageLabels>, allowOverage?: boolean, locale?: string): string;
 
 type QuotaDisplayValue = {
     included: number;
@@ -2022,6 +2184,8 @@ interface QuotaLabels {
     included: string;
     /** e.g. "then" — separator between included and price */
     then: string;
+    /** e.g. "hard limit" — shown when overage is not allowed */
+    hardLimit?: string;
 }
 /**
  * Format a quota display value as "X included, then $Y.YY / unit".
@@ -2149,6 +2313,18 @@ declare function validateInvite(opts: {
     requireSubscription?: boolean;
 }): InviteValidation;
 
+/** Minimal workspace shape needed for ownership/role checks. Extended by `permissions.WorkspaceLike`. */
+interface WorkspaceLike$1 {
+    _id: string;
+    createdBy: string | {
+        _id: string;
+    } | null | undefined;
+    users?: Array<string | {
+        _id: string;
+        role?: string;
+    }>;
+}
+
 /**
  * Role-based permission system.
  * Framework-agnostic — used by both React hooks and server-side BuildBase.
@@ -2166,6 +2342,7 @@ declare function validateInvite(opts: {
  * Both are resolved from the same role→permission map. Owner always gets all
  * platform permissions + any app permissions defined in the config.
  */
+
 declare const Permission: {
     readonly WORKSPACE_SETTINGS_VIEW: "workspace:settings:view";
     readonly WORKSPACE_SETTINGS_EDIT: "workspace:settings:edit";
@@ -2183,15 +2360,7 @@ declare const Permission: {
 type PermissionKey = (typeof Permission)[keyof typeof Permission];
 type RolePermissionMap = Record<string, string[]>;
 declare const DEFAULT_ROLE_PERMISSIONS: RolePermissionMap;
-interface WorkspaceLike {
-    _id: string;
-    createdBy: string | {
-        _id: string;
-    } | null | undefined;
-    users?: Array<string | {
-        _id: string;
-        role?: string;
-    }>;
+interface WorkspaceLike extends WorkspaceLike$1 {
     permissions?: Record<string, string[]>;
 }
 interface SettingsLike {
@@ -2248,7 +2417,7 @@ declare function hasPermission(permission: string | string[], ctx: PermissionCon
  *
  * Or manually create `public/push-sw.js` with this content.
  */
-declare const PUSH_SERVICE_WORKER_SCRIPT = "\n// BuildBase Push Notification Service Worker\n// Place this file in your app's public directory (e.g. public/push-sw.js)\n\nself.addEventListener('push', function(event) {\n  if (!event.data) return;\n\n  try {\n    const payload = event.data.json();\n    const title = payload.title || 'Notification';\n    const options = {\n      body: payload.body || '',\n      icon: payload.icon || undefined,\n      badge: payload.icon || undefined,\n      data: { url: payload.url, ...(payload.data || {}) },\n      tag: 'buildbase-push-' + Date.now(),\n    };\n\n    event.waitUntil(\n      self.registration.showNotification(title, options)\n    );\n  } catch (e) {\n    console.error('[PushSW] Failed to show notification:', e);\n  }\n});\n\nself.addEventListener('notificationclick', function(event) {\n  event.notification.close();\n\n  const url = event.notification.data && event.notification.data.url;\n  if (url) {\n    event.waitUntil(\n      clients.matchAll({ type: 'window', includeUncontrolled: true }).then(function(clientList) {\n        for (let i = 0; i < clientList.length; i++) {\n          const client = clientList[i];\n          if (client.url === url && 'focus' in client) {\n            return client.focus();\n          }\n        }\n        if (clients.openWindow) {\n          return clients.openWindow(url);\n        }\n      })\n    );\n  }\n});\n";
+declare const PUSH_SERVICE_WORKER_SCRIPT = "\n// BuildBase Push Notification Service Worker\n// Place this file in your app's public directory (e.g. public/push-sw.js)\n\nself.addEventListener('push', function(event) {\n  if (!event.data) return;\n\n  try {\n    const payload = event.data.json();\n    // i18n exception: service workers run outside the SDK's translation\n    // provider, so this last-resort fallback stays English. The server should\n    // always send a localized payload.title.\n    const title = payload.title || 'Notification';\n    const options = {\n      body: payload.body || '',\n      icon: payload.icon || undefined,\n      badge: payload.icon || undefined,\n      data: { url: payload.url, ...(payload.data || {}) },\n      tag: 'buildbase-push-' + Date.now(),\n    };\n\n    event.waitUntil(\n      self.registration.showNotification(title, options)\n    );\n  } catch (e) {\n    console.error('[PushSW] Failed to show notification:', e);\n  }\n});\n\nself.addEventListener('notificationclick', function(event) {\n  event.notification.close();\n\n  const url = event.notification.data && event.notification.data.url;\n  if (url) {\n    event.waitUntil(\n      clients.matchAll({ type: 'window', includeUncontrolled: true }).then(function(clientList) {\n        for (let i = 0; i < clientList.length; i++) {\n          const client = clientList[i];\n          if (client.url === url && 'focus' in client) {\n            return client.focus();\n          }\n        }\n        if (clients.openWindow) {\n          return clients.openWindow(url);\n        }\n      })\n    );\n  }\n});\n";
 
 interface BetaFormData {
     name?: string;
@@ -2271,6 +2440,24 @@ interface SDKMessages {
         connectedAgentsEmpty: string;
         connectedAgentsAccess: string;
         connectedAgentsGranted: string;
+        connectedAgentsLoadFailed: string;
+        connectedAgentsRevokeFailed: string;
+        mcpConnectAction: string;
+        mcpGuideTitle: string;
+        mcpGuideDescription: string;
+        mcpServerUrlLabel: string;
+        mcpServerUrlHint: string;
+        mcpPromptLabel: string;
+        mcpPromptHint: string;
+        mcpPromptTemplate: string;
+        mcpClientsLabel: string;
+        mcpAddToConfigFile: string;
+        mcpClientChatgptInstructions: string;
+        mcpClientClaudeInstructions: string;
+        mcpClientClineInstructions: string;
+        mcpCopy: string;
+        mcpCopied: string;
+        mcpLearnMore: string;
         inactive: string;
         inactiveHint: string;
         passkeysTitle: string;
@@ -2284,11 +2471,41 @@ interface SDKMessages {
         renamePlaceholder: string;
         lastUsed: string;
         added: string;
+        devicesTitle: string;
+        devicesDescription: string;
+        devicesEmpty: string;
+        devicesLoadFailed: string;
+        deviceCurrent: string;
+        deviceTrusted: string;
+        deviceActiveSessions: string;
+        devicePushEnabled: string;
+        deviceLastActive: string;
+        deviceRename: string;
+        deviceRenamePlaceholder: string;
+        deviceRenameFailed: string;
+        deviceSave: string;
+        deviceCancel: string;
+        deviceSignOut: string;
+        deviceSignOutFailed: string;
+        deviceForget: string;
+        deviceForgetFailed: string;
+        deviceForgetConfirmTitle: string;
+        deviceForgetConfirmBody: string;
+        sessionsTitle: string;
+        sessionsDescription: string;
+        sessionsEmpty: string;
+        sessionsLoadFailed: string;
+        sessionCurrent: string;
+        sessionExpires: string;
+        sessionLastActive: string;
+        sessionSignOut: string;
+        sessionSignOutFailed: string;
     };
     settings: {
         titles: {
             profile: string;
             security: string;
+            devices: string;
             general: string;
             users: string;
             subscription: string;
@@ -2304,6 +2521,7 @@ interface SDKMessages {
             workspace: string;
             profile: string;
             security: string;
+            devices: string;
             general: string;
             users: string;
             subscription: string;
@@ -2334,6 +2552,7 @@ interface SDKMessages {
             billingManageOnly: string;
             openSettings: string;
             back: string;
+            close: string;
         };
     };
     subscription: {
@@ -2620,6 +2839,7 @@ interface SDKMessages {
         featureSuccess: string;
         updateSuccess: string;
         actionStatus: string;
+        fallbackName: string;
     };
     danger: {
         title: string;
@@ -2840,6 +3060,7 @@ interface SDKMessages {
         purchaseFailed: string;
         errorLoading: string;
         insufficientCredits: string;
+        insufficientDetail: string;
     };
     loading: {
         restoringSession: string;
@@ -2875,6 +3096,7 @@ interface SDKMessages {
         fetchCreditPackages: string;
         fetchCreditTransactions: string;
         fetchExpiringCredits: string;
+        fetchWorkspaces: string;
     };
 }
 /**
@@ -3019,8 +3241,8 @@ declare function parseWebhookEvent(options: {
  * export const agentConfig: AgentReadyConfig = {
  *   serverUrl: process.env.BUILDBASE_URL!,
  *   orgId: process.env.BUILDBASE_ORG_ID!,
- *   siteUrl: "https://imejis.io",
- *   site: { name: "Imejis", description: "Generate images from templates via API." },
+ *   siteUrl: "https://example.com",
+ *   site: { name: "Acme", description: "Generate images from templates via API." },
  *   robots: { contentSignals: { search: true, aiInput: true, aiTrain: false } },
  * };
  * export async function serveAgentPath(req: Request): Promise<Response> {
@@ -3063,7 +3285,7 @@ interface AgentReadinessBundle {
 }
 /** An Agent Skill (Agent Skills Discovery RFC v0.2.0) published by this app. */
 interface AgentSkill {
-    /** Stable slug, e.g. `imejis-api`. */
+    /** Stable slug, e.g. `acme-api`. */
     name: string;
     /** One-line human/agent-readable summary. */
     description: string;
@@ -3079,7 +3301,7 @@ interface AgentSkill {
 }
 /** One API described in an API Catalog (RFC 9727 / RFC 9264 linkset). */
 interface ApiCatalogApi {
-    /** Anchor URL identifying the API, e.g. `https://api.imejis.io`. */
+    /** Anchor URL identifying the API, e.g. `https://api.example.com`. */
     anchor: string;
     /** OpenAPI / machine-readable description URL (link rel `service-desc`). */
     serviceDesc?: string;
@@ -3100,7 +3322,7 @@ interface McpServerCard {
     endpoint: string;
     /** Transport type. Defaults to `"streamable-http"`. */
     transport?: string;
-    /** MCP protocol version the server speaks. Defaults to `"2025-06-18"`. */
+    /** MCP protocol version the server speaks. Defaults to `"2025-11-25"`. */
     protocolVersion?: string;
     /**
      * Capability flags. Booleans per SEP-1649 v1.0; a legacy object value
@@ -3204,7 +3426,7 @@ interface AgentReadyConfig {
     /** The org id (24-hex) whose agent-readiness config to serve. */
     orgId: string;
     /**
-     * This app's public origin, e.g. `https://imejis.io`. Used to build absolute
+     * This app's public origin, e.g. `https://example.com`. Used to build absolute
      * URLs in the Agent Card and to match RFC 9728 resource paths.
      */
     siteUrl: string;
@@ -3518,14 +3740,20 @@ declare function resolveWellKnown(requestPath: string, config: AgentReadyConfig)
  * agent-readiness surface. Returns null for paths this app doesn't serve.
  */
 declare function resolveAgentPath(requestPath: string, config: AgentReadyConfig): Promise<DiscoveryDocument | null>;
-/** A WebMCP tool definition exposed to in-page agents via `navigator.modelContext`. */
-interface WebMcpTool {
+/**
+ * A WebMCP tool definition exposed to in-page agents via `navigator.modelContext`.
+ * `TInput` is the shape your `inputSchema` describes — type your `execute`
+ * parameter inline (`execute: (input: { path: string }) => …`) or pin it with
+ * `WebMcpTool<{ path: string }>`. The default is deliberately loose: the input
+ * arrives from the agent unvalidated, so treat it as untrusted regardless.
+ */
+interface WebMcpTool<TInput = any> {
     name: string;
     description: string;
     /** JSON Schema for the tool's input. */
     inputSchema: Record<string, unknown>;
     /** Called when an agent invokes the tool. */
-    execute: (input: any) => unknown | Promise<unknown>;
+    execute: (input: TInput) => unknown | Promise<unknown>;
 }
 /**
  * Register WebMCP tools with the browser so in-page AI agents can invoke your
@@ -3620,6 +3848,24 @@ interface AppRevokeRequestClaims {
     reason: string;
     [claim: string]: unknown;
 }
+/**
+ * A verified JWT payload: registered claims (RFC 7519) are typed AND
+ * runtime-validated by {@link verifyClientJwt} (a signed token whose `sub` is
+ * a number is rejected, so the types here are real guarantees). Every other
+ * claim is `unknown` — custom claims are attacker-influenced input until you
+ * narrow them (`typeof payload.sid === 'string'`), even after the signature
+ * checks out.
+ */
+interface VerifiedJwtPayload {
+    iss?: string;
+    sub?: string;
+    aud?: string | string[];
+    exp?: number;
+    nbf?: number;
+    iat?: number;
+    jti?: string;
+    [claim: string]: unknown;
+}
 /** Options for {@link verifyClientJwt} (all optional; secure defaults). */
 interface VerifyClientJwtOptions {
     /** Allowed clock skew in seconds for `exp`/`nbf`. Default 60. */
@@ -3641,7 +3887,7 @@ interface VerifyClientJwtOptions {
  * and — by default — that an `exp` is present at all. Optionally pins `iss`/`aud`.
  * Throws {@link AppBridgeError} on any failure.
  */
-declare function verifyClientJwt(token: string, clientSecret: string, options?: VerifyClientJwtOptions): Record<string, any>;
+declare function verifyClientJwt(token: string, clientSecret: string, options?: VerifyClientJwtOptions): VerifiedJwtPayload;
 /** Extract the token from an `Authorization: Bearer <token>` header. */
 declare function extractBearerToken(authorization: string | null | undefined): string | null;
 /**
@@ -3918,6 +4164,28 @@ interface PermissionActions {
     /** Resolve all permissions for a user in a workspace. Returns both platform and app permissions. */
     resolve(workspaceId: string, userId: string): Promise<Set<string>>;
 }
+/** Manage the signed-in user's devices (login history + per-device sign-out). */
+interface DeviceActions {
+    /** List the devices the user has signed in from. */
+    list(): Promise<IDeviceView[]>;
+    /** Rename a device's user-facing label. */
+    rename(deviceId: string, name: string): Promise<void>;
+    /** Sign a device out (revoke its live sessions; keep the history row). */
+    signOut(deviceId: string): Promise<{
+        revokedSessions: number;
+    }>;
+    /** Sign a device out AND remove its history row ("forget"). */
+    forget(deviceId: string): Promise<{
+        revokedSessions: number;
+    }>;
+}
+/** Manage the signed-in user's active sessions. */
+interface SessionActions {
+    /** List the user's live sessions (each joined to its device label). */
+    list(): Promise<ISessionView[]>;
+    /** Sign out one session by its public handle (`ISessionView.id`). */
+    revoke(id: string): Promise<void>;
+}
 interface NotificationActions {
     /**
      * Send a notification to a user or all workspace members.
@@ -3974,6 +4242,8 @@ interface ScopedActions {
     permissions: PermissionActions;
     notification: NotificationActions;
     credits: CreditActions;
+    devices: DeviceActions;
+    sessions: SessionActions;
 }
 interface BuildBaseResult extends ScopedActions {
     /**
@@ -4017,6 +4287,8 @@ interface BuildBaseResult extends ScopedActions {
             user: UserApi;
             settings: SettingsApi;
             push: PushApi;
+            devices: DevicesApi;
+            sessions: SessionsApi;
         };
     };
 }
@@ -4054,13 +4326,20 @@ declare function BuildBase(config: BuildBaseConfig): BuildBaseResult;
  *
  * export const mcp = createMcpHandler({
  *   buildbase,
- *   serverInfo: { name: 'imejis', version: '1.0.0' },
+ *   serverInfo: { name: 'acme', version: '1.0.0' },
  *   auth: {
  *     verify: (token) => {
  *       const c = verifyClientJwt(token, process.env.BUILDBASE_CLIENT_SECRET!);
- *       return { sessionId: String(c.sid), userId: String(c.sub), scopes: c.scope };
+ *       // Claims beyond RFC 7519 are `unknown` — narrow before use.
+ *       return {
+ *         sessionId: typeof c.sid === 'string' ? c.sid : '',
+ *         userId: c.sub,
+ *         scopes: Array.isArray(c.scope)
+ *           ? c.scope.filter((s): s is string => typeof s === 'string')
+ *           : undefined,
+ *       };
  *     },
- *     resourceMetadataUrl: 'https://imejis.io/.well-known/oauth-protected-resource',
+ *     resourceMetadataUrl: 'https://example.com/.well-known/oauth-protected-resource',
  *   },
  * });
  *
@@ -4215,5 +4494,5 @@ declare function buildbaseAuth(options: BuildBaseAuthOptions): {
     resourceMetadataUrl?: string;
 };
 
-export { AI_BOT_USER_AGENTS, ApiVersion, AppBridgeError, AuthApi, AuthStatus, BBAction, BBScreen, BBStatus, BB_PARAM, BaseApi, BetaForm, BillingIntervals, BuildBase, CURRENCY_DISPLAY, CURRENCY_FLAG, CreditBucketSource, CreditBucketStatus, CreditTransactionType, DEFAULT_ROLE_PERMISSIONS, DunningState, EventEmitter, InvoiceStatuses, PLAN_CURRENCY_CODES, PLAN_CURRENCY_OPTIONS, PUSH_SERVICE_WORKER_SCRIPT, Permission, PushApi, SDKEvent, SettingsApi, SubscriptionItemType, SubscriptionStatus, UserApi, WorkspaceApi, appTokenFailure, appTokenSuccess, bearerChallenge, buildA2AAgentCard, buildAgentCard, buildAgentSkillsIndex, buildApiCatalog, buildAuthMd, buildDiscoveryLinkHeader, buildDnsAidRecords, buildLlmsFullTxt, buildLlmsTxt, buildMcpDiscoveryManifest, buildMcpServerCard, buildProtectedResourceMetadata, buildRobotsTxt, buildSecurityTxt, buildSitemap, buildSkillMd, buildWebBotAuthDirectory, buildbaseAuth, calculateBillableSeats, calculateSeatOverageCents, calculateTotalSubscriptionCents, cleanBBParams, clearAgentReadinessCache, clearAuthIntent, consumeAuthIntent, createBBUrl, createCheckoutRedirectUrls, createCreditPurchaseRedirectUrls, createSessionRefCrypto, BuildBase as default, eventEmitter, extractBearerToken, fetchAgentReadiness, formatCents, formatOverageRate, formatOverageRateWithLabel, formatQuotaIncludedOverage, formatQuotaWithPrice, getAvailableCurrenciesFromPlans, getBasePriceCents, getBillingIntervalAndCurrencyFromPriceId, getCurrencyFlag, getCurrencySymbol, getDisplayCurrency, getPerSeatPriceCents, getPricingVariant, getQuotaDisplayValue, getQuotaDisplayWithVariant, getQuotaOverageCents, getQuotaUnitLabelFromName, getSeatPricing, getStripePriceIdForInterval, handleAppRevokeRequest, handleAppTokenRequest, hasPermission, invalidateCreditBalance, invalidateQuotaUsage, invalidateSubscription, isZeroDecimalCurrency, minorAmountToDisplay, mintAgentToken, negotiateMarkdown, parseWebhookEvent, provideWebMcpTools, readBBParams, resolveAgentPath, resolveMaxUsers, resolvePermissions, resolveWellKnown, safeRedirect, saveAuthIntent, sha256Digest, signClientJwt, validateInvite, validateRedirectUrl, verifyAppRevokeRequest, verifyAppTokenRequest, verifyClientJwt, verifyWebhookSignature, wantsMarkdown };
+export { AI_BOT_USER_AGENTS, ApiVersion, AppBridgeError, AuthApi, AuthStatus, BBAction, BBScreen, BBStatus, BB_PARAM, BaseApi, BetaForm, BillingIntervals, BuildBase, CURRENCY_DISPLAY, CURRENCY_FLAG, CreditBucketSource, CreditBucketStatus, CreditTransactionType, DEFAULT_ROLE_PERMISSIONS, DunningState, EventEmitter, InvoiceStatuses, PLAN_CURRENCY_CODES, PLAN_CURRENCY_OPTIONS, PUSH_SERVICE_WORKER_SCRIPT, Permission, PushApi, SDKEvent, SettingsApi, SubscriptionItemType, SubscriptionStatus, UserApi, WorkspaceApi, appTokenFailure, appTokenSuccess, bearerChallenge, buildA2AAgentCard, buildAgentCard, buildAgentSkillsIndex, buildApiCatalog, buildAuthMd, buildDiscoveryLinkHeader, buildDnsAidRecords, buildLlmsFullTxt, buildLlmsTxt, buildMcpDiscoveryManifest, buildMcpServerCard, buildProtectedResourceMetadata, buildRobotsTxt, buildSecurityTxt, buildSitemap, buildSkillMd, buildWebBotAuthDirectory, buildbaseAuth, calculateBillableSeats, calculateSeatOverageCents, calculateTotalSubscriptionCents, cleanBBParams, clearAgentReadinessCache, clearAuthIntent, consumeAuthIntent, createBBUrl, createCheckoutRedirectUrls, createCreditPurchaseRedirectUrls, createSessionRefCrypto, BuildBase as default, eventEmitter, extractBearerToken, fetchAgentReadiness, formatCents, formatMinorAmountIntl, formatOverageRate, formatOverageRateWithLabel, formatQuotaIncludedOverage, formatQuotaWithPrice, getAvailableCurrenciesFromPlans, getBasePriceCents, getBillingIntervalAndCurrencyFromPriceId, getCurrencyDecimals, getCurrencyFlag, getCurrencySymbol, getDisplayCurrency, getPerSeatPriceCents, getPricingVariant, getQuotaDisplayValue, getQuotaDisplayWithVariant, getQuotaOverageCents, getQuotaUnitLabelFromName, getSeatPricing, getStripePriceIdForInterval, handleAppRevokeRequest, handleAppTokenRequest, hasPermission, invalidateCreditBalance, invalidateQuotaUsage, invalidateSubscription, isZeroDecimalCurrency, minorAmountToDisplay, mintAgentToken, negotiateMarkdown, parseWebhookEvent, provideWebMcpTools, readBBParams, resolveAgentPath, resolveMaxUsers, resolvePermissions, resolveWellKnown, safeRedirect, saveAuthIntent, sha256Digest, signClientJwt, validateInvite, validateRedirectUrl, verifyAppRevokeRequest, verifyAppTokenRequest, verifyClientJwt, verifyWebhookSignature, wantsMarkdown };
 export type { A2ACardConfig, A2ACardSkill, AgentReadinessBundle, AgentReadyConfig, AgentSkill, ApiCatalogApi, AppRevokeRequestClaims, AppScope, AppTokenRequestClaims, AppTokenResponseBody, AppTokenResult, BBActionType, BBScreenType, BBStatusType, BetaFormData, BetaFormResponse, BillingInterval, BuildBaseAuthOptions, BuildBaseConfig, BuildBaseResult, BuildBaseSession, CheckoutResult, ContentSignals, CreditActions, CreditBucketSourceType, CreditBucketStatusType, CreditTransactionTypeValue, DiscoveryDocument, DnsAidRecord, DunningStateType, EventData, EventType, FeatureActions, FormatQuotaWithPriceOptions, GetCheckoutStripeParams, HandlerResult, IAllQuotaUsageResponse, IBaseApiConfig, IBasePricing, IBetaConfig, ICheckoutSessionRequest, ICheckoutSessionResponse, ICheckoutStripeOptions, IConsumeCreditsRequest, IConsumeCreditsResponse, ICreditBalance, ICreditBucket, ICreditBucketsQuery, ICreditBucketsResponse, ICreditPackage, ICreditPackagePricingVariant, ICreditPurchaseRequest, ICreditPurchaseResponse, ICreditTransaction, ICreditTransactionsQuery, ICreditTransactionsResponse, IEventCallbacks, IExpiringCreditsResponse, IInvoice, IInvoiceListResponse, IInvoiceResponse, IOsConfig, IOsState, IPlan, IPlanGroup, IPlanGroupInfo, IPlanGroupLatestVersion, IPlanGroupResponse, IPlanGroupVersion, IPlanGroupVersionWithPlans, IPlanGroupVersionsResponse, IPlanVersion, IPlanVersionSummary, IPlanVersionWithPlan, IPricingVariant, IPublicCreditPackage, IPublicCreditPackagesResponse, IPublicPlanItem, IPublicPlanItemCategory, IPublicPlanVersion, IPublicPlansResponse, IQuotaByInterval, IQuotaIntervalValue, IQuotaOveragePriceIdsByInterval, IQuotaOveragesByInterval, IQuotaUsageStatus, IQuotaUsageStatusResponse, IRecordUsageRequest, IRecordUsageResponse, ISettings, IStripePricesByInterval, ISubscription, ISubscriptionItem, ISubscriptionResponse, ISubscriptionUpdateRequest, ISubscriptionUpdateResponse, IUsageLogEntry, IUsageLogsQuery, IUsageLogsResponse, IUser, IWorkspace, InviteBlockReason, InviteValidation, InvoiceActions, InvoiceStatus, InvoiceStatusType, MaxUsersConfig, McpServerCard, MintAgentTokenOptions, NotificationData, NotificationEvent, NotificationResult, OnWorkspaceChangeParams, PermissionActions, PermissionContext, PermissionKey, PlanActions, PlanVersionWithPricingVariants, QuotaDisplayValue, QuotaDisplayWithOverage, RedirectValidationOptions, RobotsConfig, RobotsPolicy, RolePermissionMap, ScopedActions, SessionRefCrypto, SettingsActions, SitemapUrl, SubscriptionActions, SubscriptionItemTypeValue, SubscriptionStatusType, TranslationKey, UsageActions, UserActions, UserCreatedEventData, UserUpdatedEventData, WebMcpTool, WorkspaceActions, WorkspaceChangedEventData, WorkspaceCreatedEventData, WorkspaceDeletedEventData, WorkspaceUpdatedEventData, WorkspaceUserAddedEventData, WorkspaceUserRemovedEventData, WorkspaceUserRoleChangedEventData };