@cube-dev/platform-client 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -9,6 +9,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 <!-- Curate public-facing entries here before the next release. -->
 
+## [0.6.0] - 2026-09-02
+### Added
+
+- `User` (`GET /api/v1/users/me`, `UsersPublicController.getMe`) gained `userPolicies` — the caller's effective resource policies: direct grants, organization-wide grants and grants inherited from their groups. This is the set the console has always read over GraphQL; on REST it lets an embedded Creator Mode session resolve a workbook another embed user shared with it, which previously granted nothing beyond viewing. New schemas: `Policy`, `PolicyResourceType`.
+- Re-added `POST /api/v1/deployments/{deploymentId}/workbooks/{workbookId}/dashboard/ai-widget-thread` (`WorkbooksPublicController.updatePublishedDashboardAiWidgetThread`) and its `UpdatePublishedAiWidgetThreadInput` schema (`widgetId`, `threadId`, optional `checksum`) — reverting the `0.4.0` removal. Regenerating an AI-analysis widget on a **published** dashboard persists the new thread id (+ checksum) back to the published config so an immediate reload shows the fresh result instead of the stale one. It stores **only** the thread id and checksum — never summary text (CUB-4031).
+- `PATCH /api/v1/users/me/settings` (`UsersPublicController.updateMySettings`) — merge a partial patch into your own settings; omitted fields are left as they are, and `sheets` merges field-by-field (an explicit `null` clears it). `UserSettingsInput` gained `sheets`. New schema: `SheetsUserSettingsInput` (`autoRunQueryOnChange`, `openExplorationFromSheet`, `revealSheetOnOpen`, `showAppliedFilters`, `suppressDuplicateValues`).
+- `POST /api/v1/deployments/{id}/token` (`DeploymentsPublicController.deploymentToken`) now accepts an optional body to request a shorter token lifetime than the 24-hour default. New schema: `CreateDeploymentTokenInput` (`expiresIn`, 60–86400 seconds) — recommended for tokens held outside a browser session (scripts, BI tools, scheduled jobs).
+- `AppTheme` / `AppThemeResponse` (`GET /api/v1/app-theme`, `GET /api/v1/app-config`) gained `palette` and `logoUrl` — the new theme model: base/accent color seeds, contrast level, a pastel toggle, surface mode, and per-semantic color overrides (danger/warning/success/note/code). New schemas: `AppThemePalette`, `AppThemePaletteSeed`, `AppThemePaletteThemes`, `AppThemeCodePalette`, `AppThemeSurfaceMode`.
+- `DashboardWidgetDtoType` / `DashboardWidgetInputType` gained a new `"FIELD"` enum value, for the Field switcher dashboard control.
+- `ReportPlacement` gained `queryChecksum` and `syncStatus` (new schema `ReportPlacementSyncStatus`: `"UP_TO_DATE"` | `"CHANGED"` | `"UNKNOWN"`), and `Report` gained `currentQueryChecksum` — together they let a client tell whether the cells at a placement still reflect the exploration as it stands now.
+
+### Changed
+
+- `POST /api/v1/usage-analytics/token` — corrected docs: tokens expire after 1 hour, not ~24 hours as previously stated. `expiresAt` on the response has always reflected the real value.
+
+### Deprecated
+
+- `AppTheme.light` / `AppTheme.dark` — use `palette` and `logoUrl` instead.
+- `UserSettingsInput.lastSeenChangelogId` — ignored; the changelog now arrives in the notification inbox, which carries its own read state. Accepted for backward compatibility but never read or written.
+
 ## [0.5.0] - 2026-08-30
 
 ### Added
@@ -75,7 +95,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Removed
 
-- **BREAKING:** `POST /api/v1/deployments/{deploymentId}/workbooks/{workbookId}/dashboard/ai-widget-thread` (`WorkbooksPublicController.updatePublishedDashboardAiWidgetThread`) and its `UpdatePublishedAiWidgetThreadInput` schema (added in `0.2.0`). It persisted an AI-analysis thread id + checksum into the published dashboard config — the mechanism that caused read-only/anonymous viewers to hit `WorkbookEdit`/403s and let one viewer's filter state clobber the shared config (CUB-3898). AI-analysis results are now cached server-side keyed by dashboard state, so no client-facing endpoint replaces it. This is a deliberate breaking removal; SDK consumers referencing the operation or schema should drop those references.
+- **BREAKING:** `POST /api/v1/deployments/{deploymentId}/workbooks/{workbookId}/dashboard/ai-widget-thread` (`WorkbooksPublicController.updatePublishedDashboardAiWidgetThread`) and its `UpdatePublishedAiWidgetThreadInput` schema (added in `0.2.0`). It persisted an AI-analysis thread id + checksum into the published dashboard config — the mechanism that caused read-only/anonymous viewers to hit `WorkbookEdit`/403s and let one viewer's filter state clobber the shared config (CUB-3898). AI-analysis results are recovered by replaying the chat thread whose id the dashboard config stores, so no client-facing endpoint replaces it (CUB-4031). This is a deliberate breaking removal; SDK consumers referencing the operation or schema should drop those references.
 
 ## [0.3.0] - 2026-07-30
 

package/dist/schema.d.ts

@@ -1037,6 +1037,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/deployments/{deploymentId}/workbooks/{workbookId}/dashboard/ai-widget-thread": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Update published dashboard ai widget thread */
+        post: operations["WorkbooksPublicController.updatePublishedDashboardAiWidgetThread"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/deployments/{deploymentId}/workbooks/{workbookId}/duplicate": {
         parameters: {
             query?: never;
@@ -2039,7 +2056,7 @@ export interface paths {
          *
          *     The token is scoped to your account: it carries the same server-resolved security context as the embedded Usage Analytics page, so queries only ever see your own data. Send it as `Authorization: Bearer <token>` on requests to the returned `apiUrl` (the deployment's [Cube REST API](https://cube.dev/docs/product/apis-integrations/rest-api)).
          *
-         *     Tokens expire after ~24 hours (see `expiresAt`). Issue a fresh one per session or scheduled refresh — issuing is idempotent and cheap.
+         *     Tokens expire after 1 hour (see `expiresAt`). Issue a fresh one per session or scheduled refresh — issuing is idempotent and cheap.
          *
          *     Requires Usage Analytics to be enabled for the account, otherwise `404` is returned.
          */
@@ -2288,6 +2305,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/users/me/settings": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Update my settings
+         * @description Merge a partial patch into the authenticated user's own settings. Omitted fields are left as they are; `sheets` merges field-by-field, and an explicit `null` clears it.
+         */
+        patch: operations["UsersPublicController.updateMySettings"];
+        trace?: never;
+    };
     "/api/v1/users/{id}": {
         parameters: {
             query?: never;
@@ -2709,18 +2746,61 @@ export interface components {
             timezoneSettings?: components["schemas"]["TimezoneSettings"] | null;
         };
         AppTheme: {
+            /**
+             * @deprecated
+             * @description Deprecated: use palette and logoUrl instead.
+             */
             dark: components["schemas"]["AppThemeScheme"];
+            /**
+             * @deprecated
+             * @description Deprecated: use palette and logoUrl instead.
+             */
             light: components["schemas"]["AppThemeScheme"];
+            logoUrl: string;
+            palette: components["schemas"]["AppThemePalette"];
             typography?: components["schemas"]["AppThemeTypography"] | null;
         };
+        AppThemeCodePalette: {
+            saturation?: number | null;
+        };
         AppThemeFontRef: {
             fontRef: string;
             fontWeight: number;
         };
+        AppThemePalette: {
+            accent?: components["schemas"]["AppThemePaletteSeed"] | null;
+            base?: components["schemas"]["AppThemePaletteSeed"] | null;
+            contrastLevel?: number | null;
+            pastel?: boolean | null;
+            surfaceMode?: components["schemas"]["AppThemeSurfaceMode"] | null;
+            themes?: components["schemas"]["AppThemePaletteThemes"] | null;
+        };
+        AppThemePaletteSeed: {
+            color?: string | null;
+            hue?: number | null;
+            saturation?: number | null;
+        };
+        AppThemePaletteThemes: {
+            code?: components["schemas"]["AppThemeCodePalette"] | null;
+            danger?: components["schemas"]["AppThemePaletteSeed"] | null;
+            note?: components["schemas"]["AppThemePaletteSeed"] | null;
+            success?: components["schemas"]["AppThemePaletteSeed"] | null;
+            warning?: components["schemas"]["AppThemePaletteSeed"] | null;
+        };
         AppThemeResponse: {
             applyThemeGlobally: boolean;
+            /**
+             * @deprecated
+             * @description Deprecated: use palette and logoUrl instead.
+             */
             dark: components["schemas"]["AppThemeScheme"];
+            /**
+             * @deprecated
+             * @description Deprecated: use palette and logoUrl instead.
+             */
             light: components["schemas"]["AppThemeScheme"];
+            logoUrl: string;
+            palette: components["schemas"]["AppThemePalette"];
             typography?: components["schemas"]["AppThemeTypography"];
         };
         AppThemeScheme: {
@@ -2730,6 +2810,8 @@ export interface components {
             foregroundColor: string;
             logoUrl: string;
         };
+        /** @enum {string} */
+        AppThemeSurfaceMode: "neutral" | "tinted";
         AppThemeTypography: {
             body: components["schemas"]["AppThemeFontRef"];
             fonts: components["schemas"]["ThemeFont"][];
@@ -2887,6 +2969,9 @@ export interface components {
         CreateDeploymentInputCreationMethod: "upload" | "cubecloud" | "github" | "ssh";
         /** @enum {string} */
         CreateDeploymentInputDeployMode: "git" | "cli";
+        CreateDeploymentTokenInput: {
+            expiresIn?: number | null;
+        };
         CreateEmbedGroupInput: {
             description?: string | null;
             /** @description Group name, unique within the embed tenant. The `system:` prefix is reserved and rejected. */
@@ -3211,7 +3296,7 @@ export interface components {
             type: components["schemas"]["DashboardWidgetDtoType"];
         };
         /** @enum {string} */
-        DashboardWidgetDtoType: "CHART" | "TEXT" | "FILTER" | "AI" | "TIME_GRAIN" | "PARENT" | "SPACER" | "DIVIDER" | "CONTAINER";
+        DashboardWidgetDtoType: "CHART" | "TEXT" | "FILTER" | "AI" | "TIME_GRAIN" | "FIELD" | "PARENT" | "SPACER" | "DIVIDER" | "CONTAINER";
         DashboardWidgetInput: {
             config?: {
                 [key: string]: any;
@@ -3225,7 +3310,7 @@ export interface components {
             type: components["schemas"]["DashboardWidgetInputType"];
         };
         /** @enum {string} */
-        DashboardWidgetInputType: "CHART" | "TEXT" | "FILTER" | "AI" | "TIME_GRAIN" | "PARENT" | "SPACER" | "DIVIDER" | "CONTAINER";
+        DashboardWidgetInputType: "CHART" | "TEXT" | "FILTER" | "AI" | "TIME_GRAIN" | "FIELD" | "PARENT" | "SPACER" | "DIVIDER" | "CONTAINER";
         DashboardWidgetPosition: {
             h: number;
             w: number;
@@ -4009,6 +4094,13 @@ export interface components {
         PivotItemsMeasuresAxis: "columns" | "rows";
         /** @enum {string} */
         PivotItemsMeasuresPosition: "before" | "after";
+        Policy: {
+            actions: ("All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage")[];
+            resourceType: components["schemas"]["PolicyResourceType"];
+            resources: string[];
+        };
+        /** @enum {string} */
+        PolicyResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread";
         PostTokenBySessionIdInput: {
             sessionId: string;
         };
@@ -4192,6 +4284,7 @@ export interface components {
             canManage?: boolean | null;
             createdAt: string;
             createdBy?: number;
+            currentQueryChecksum?: string | null;
             deploymentId: number;
             description?: string | null;
             endResultCell?: string | null;
@@ -4248,16 +4341,20 @@ export interface components {
             id?: string | null;
             placedAt?: string | null;
             placedByUserId?: number | null;
+            queryChecksum?: string | null;
             refreshedAt?: string | null;
             refreshedByUserId?: number | null;
             resultLocation: string;
             sheetId?: string | null;
             sheetName?: string | null;
+            syncStatus?: components["schemas"]["ReportPlacementSyncStatus"] | null;
             workbookId: string;
             workbookName?: string | null;
         };
         /** @enum {string} */
         ReportPlacementHost: "GOOGLE_SHEETS" | "EXCEL";
+        /** @enum {string} */
+        ReportPlacementSyncStatus: "UP_TO_DATE" | "CHANGED" | "UNKNOWN";
         ReportSnapshot: {
             description?: string | null;
             fillMissingRows?: components["schemas"]["FillMissingRows"] | null;
@@ -4342,6 +4439,13 @@ export interface components {
         SheetsUiSettings: {
             showAppliedFilters?: boolean | null;
         };
+        SheetsUserSettingsInput: {
+            autoRunQueryOnChange?: boolean | null;
+            openExplorationFromSheet?: boolean | null;
+            revealSheetOnOpen?: boolean | null;
+            showAppliedFilters?: boolean | null;
+            suppressDuplicateValues?: boolean | null;
+        };
         SourceTreeResponse: {
             /**
              * @deprecated
@@ -4497,6 +4601,11 @@ export interface components {
             subFormat?: string | null;
             targetEnvVar?: string | null;
         };
+        UpdatePublishedAiWidgetThreadInput: {
+            checksum?: string | null;
+            threadId: string;
+            widgetId: string;
+        };
         UpdateReportInput: {
             endResultCell?: string | null;
             externalWorkbookId?: string | null;
@@ -4587,6 +4696,7 @@ export interface components {
             title?: string | null;
             tosAccepted?: Record<string, never> | null;
             updatedAt?: (string) | null;
+            userPolicies?: components["schemas"]["Policy"][] | null;
             username: string;
         };
         UserAlias: {
@@ -4712,6 +4822,7 @@ export interface components {
             defaultDeploymentId?: number | null;
             lastSeenChangelogId?: number | null;
             locale?: string | null;
+            sheets?: components["schemas"]["SheetsUserSettingsInput"] | null;
             theme?: string | null;
             timezone?: string | null;
         };
@@ -6491,7 +6602,12 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        /** @description CreateDeploymentTokenInput */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["CreateDeploymentTokenInput"];
+            };
+        };
         responses: {
             200: {
                 headers: {
@@ -6705,6 +6821,33 @@ export interface operations {
             };
         };
     };
+    "WorkbooksPublicController.updatePublishedDashboardAiWidgetThread": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+                workbookId: number;
+            };
+            cookie?: never;
+        };
+        /** @description UpdatePublishedAiWidgetThreadInput */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["UpdatePublishedAiWidgetThreadInput"];
+            };
+        };
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["Dashboard"];
+                };
+            };
+        };
+    };
     "WorkbooksPublicController.duplicateWorkbook": {
         parameters: {
             query?: never;
@@ -8582,6 +8725,30 @@ export interface operations {
             };
         };
     };
+    "UsersPublicController.updateMySettings": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description UserSettings */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["UserSettingsInput"];
+            };
+        };
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["User"];
+                };
+            };
+        };
+    };
     "UsersAdminPublicController.updateUser": {
         parameters: {
             query?: never;