@fusebase/fusebase-gate-sdk 2.10.1-sdk.0 → 2.11.0

package/dist/apis/AppApisApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: app-apis
  */
 import type { Client } from "../runtime/transport";
-import type { AppApiOperationContract, AppApiOperationListResponseContract, CallAppApiRequestContract, CallAppApiResponseContract, orgIdInPathRequired, PublishedAppListResponseContract, VerifyAppApiContractsRequestContract, VerifyAppApiContractsResponseContract } from "../types";
+import type { AppApiOperationContract, AppApiOperationListResponseContract, CallAppApiRequestContract, CallAppApiResponseContract, orgIdInPathRequired, PublishedAppApiManifestContract, PublishedAppListResponseContract, VerifyAppApiContractsRequestContract, VerifyAppApiContractsResponseContract } from "../types";
 export declare class AppApisApi {
     private client;
     constructor(client: Client);
@@ -48,6 +48,17 @@ export declare class AppApisApi {
         };
         headers?: Record<string, string>;
     }): Promise<AppApiOperationContract>;
+    /**
+     * Get a published app API manifest
+     * Returns the selected app's published app-api-registry manifest, including the complete parsed OpenAPI document. The caller must have org.read access and user-bound context.
+     */
+    getPublishedAppApiManifest(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            appId: string;
+        };
+        headers?: Record<string, string>;
+    }): Promise<PublishedAppApiManifestContract>;
     /**
      * List app API operations
      * Returns published app API operations visible inside the organization. Optional filters narrow the result by app, feature, visibility, and limit.

package/dist/apis/AppApisApi.js

@@ -55,6 +55,20 @@ class AppApisApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Get a published app API manifest
+     * Returns the selected app's published app-api-registry manifest, including the complete parsed OpenAPI document. The caller must have org.read access and user-bound context.
+     */
+    async getPublishedAppApiManifest(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/apps/:appId/app-api-manifest",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "getPublishedAppApiManifest",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * List app API operations
      * Returns published app API operations visible inside the organization. Optional filters narrow the result by app, feature, visibility, and limit.

package/dist/apis/OrgUsersApi.d.ts

@@ -11,7 +11,7 @@ export declare class OrgUsersApi {
     constructor(client: Client);
     /**
      * Add user to organization
-     * Invites a user into the organization. Without workspaceId it performs an org invite. With workspaceId it performs a workspace-aware invite and can resolve `default` to the organization's default workspace. For org-only instant client onboarding, send orgRole=`client` with autoConfirmClientInvite=`true`. A successful write does not prove that the current session already has org access; confirm access with getMyOrgAccess. Requires org.members.write and org access.
+     * Invites a user into the organization. Without workspaceId it performs an org invite. With workspaceId it performs a workspace-aware invite and can resolve `default` to the organization's default workspace. For org-only instant client onboarding, send orgRole=`client` with autoConfirmClientInvite=`true`. For service accounts (bots) that cannot click an invite email, send autoConfirmInvite=`true` to add an existing Fusebase account as a member of the path org right away with the requested orgRole. A successful write does not prove that the current session already has org access; confirm access with getMyOrgAccess. Requires org.members.write and org access.
      */
     addOrgUser(params: {
         path: {

package/dist/apis/OrgUsersApi.js

@@ -13,7 +13,7 @@ class OrgUsersApi {
     }
     /**
      * Add user to organization
-     * Invites a user into the organization. Without workspaceId it performs an org invite. With workspaceId it performs a workspace-aware invite and can resolve `default` to the organization's default workspace. For org-only instant client onboarding, send orgRole=`client` with autoConfirmClientInvite=`true`. A successful write does not prove that the current session already has org access; confirm access with getMyOrgAccess. Requires org.members.write and org access.
+     * Invites a user into the organization. Without workspaceId it performs an org invite. With workspaceId it performs a workspace-aware invite and can resolve `default` to the organization's default workspace. For org-only instant client onboarding, send orgRole=`client` with autoConfirmClientInvite=`true`. For service accounts (bots) that cannot click an invite email, send autoConfirmInvite=`true` to add an existing Fusebase account as a member of the path org right away with the requested orgRole. A successful write does not prove that the current session already has org access; confirm access with getMyOrgAccess. Requires org.members.write and org access.
      */
     async addOrgUser(params) {
         return this.client.request({

package/dist/apis/PortalsApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: portals
  */
 import type { Client } from "../runtime/transport";
-import type { AddPortalAiAgentBlockRequestContract, AddPortalAiAgentBlockResponseContract, AddPortalAppBlockRequestContract, AddPortalAppBlockResponseContract, AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlankNoteBlockRequestContract, AddPortalBlankNoteBlockResponseContract, AddPortalBpmnDiagramBlockRequestContract, AddPortalBpmnDiagramBlockResponseContract, AddPortalCardBlockRequestContract, AddPortalCardBlockResponseContract, AddPortalCardGroupBlockRequestContract, AddPortalCardGroupBlockResponseContract, AddPortalCarouselBlockRequestContract, AddPortalCarouselBlockResponseContract, AddPortalChatBlockRequestContract, AddPortalChatBlockResponseContract, AddPortalChatsDashboardMenuItemRequestContract, AddPortalChatsDashboardMenuItemResponseContract, AddPortalCountdownBlockRequestContract, AddPortalCountdownBlockResponseContract, AddPortalCustomWidgetBlockRequestContract, AddPortalCustomWidgetBlockResponseContract, AddPortalDatabaseBlockRequestContract, AddPortalDatabaseBlockResponseContract, AddPortalDynamicTableBlockRequestContract, AddPortalDynamicTableBlockResponseContract, AddPortalEmbedBlockRequestContract, AddPortalEmbedBlockResponseContract, AddPortalFilesDashboardMenuItemRequestContract, AddPortalFilesDashboardMenuItemResponseContract, AddPortalFileUploaderBlockRequestContract, AddPortalFileUploaderBlockResponseContract, AddPortalFormBlockRequestContract, AddPortalFormBlockResponseContract, AddPortalHeadingBlockRequestContract, AddPortalHtmlCssBlockRequestContract, AddPortalHtmlCssBlockResponseContract, AddPortalImageBlockRequestContract, AddPortalInfoBlockRequestContract, AddPortalInfoBlockResponseContract, AddPortalInternalSpacePageRequestContract, AddPortalInternalSpacePageResponseContract, AddPortalKanbanBlockRequestContract, AddPortalKanbanBlockResponseContract, AddPortalLinkedBlockRequestContract, AddPortalLinkedBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, AddPortalRecentFilesBlockRequestContract, AddPortalRecentFilesBlockResponseContract, AddPortalTaskListBlockRequestContract, AddPortalTaskListBlockResponseContract, AddPortalTasksDashboardMenuItemRequestContract, AddPortalTasksDashboardMenuItemResponseContract, AddPortalTextBlockRequestContract, AddPortalTimelineBlockRequestContract, AddPortalTimelineBlockResponseContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalLinkRequestContract, CreatePortalLinkResponseContract, CreatePortalPageRequestContract, CreatePortalPageResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DeletePortalItemResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, GetPortalBlockResponseContract, GetPortalPageBlockCountResponseContract, globalIdInPathRequired, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalAiAgentsResponseContract, ListPortalChatChannelsResponseContract, ListPortalChatUsersResponseContract, ListPortalContentResponseContract, ListPortalDatabaseBlockSourcesResponseContract, ListPortalLinkableBlocksResponseContract, ListPortalPageBlocksResponseContract, MovePortalBlockRequestContract, orgIdInPathRequired, OrgPortalListResponseContract, PortalDetailContract, PortalTextAndMediaBlockResponseContract, PublishPortalDraftResponseContract, SearchPortalInfoBlockIconsResponseContract, SetDashboardViewReadonlyRequestContract, SetDashboardViewReadonlyResponseContract, StagedPortalBlockResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalAiAgentBlockRequestContract, UpdatePortalAppBlockRequestContract, UpdatePortalBpmnDiagramBlockRequestContract, UpdatePortalCardBlockRequestContract, UpdatePortalCardGroupBlockRequestContract, UpdatePortalCarouselBlockRequestContract, UpdatePortalChatBlockRequestContract, UpdatePortalContentPermissionsRequestContract, UpdatePortalContentPermissionsResponseContract, UpdatePortalCountdownBlockRequestContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract, UpdatePortalCustomWidgetBlockRequestContract, UpdatePortalDatabaseBlockRequestContract, UpdatePortalDynamicTableBlockRequestContract, UpdatePortalEmbedBlockRequestContract, UpdatePortalFileUploaderBlockRequestContract, UpdatePortalFormBlockRequestContract, UpdatePortalHomepageRequestContract, UpdatePortalHomepageResponseContract, UpdatePortalHtmlCssBlockRequestContract, UpdatePortalImageBlockRequestContract, UpdatePortalInfoBlockRequestContract, UpdatePortalItemRequestContract, UpdatePortalItemResponseContract, UpdatePortalLinkedBlockRequestContract, UpdatePortalNoteBlockRequestContract, UpdatePortalRecentFilesBlockRequestContract, UpdatePortalStyleRequestContract, UpdatePortalStyleResponseContract, UpdatePortalTextBlockRequestContract, UpdatePortalTimelineBlockRequestContract } from "../types";
+import type { AddPortalAiAgentBlockRequestContract, AddPortalAiAgentBlockResponseContract, AddPortalAppBlockRequestContract, AddPortalAppBlockResponseContract, AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlankNoteBlockRequestContract, AddPortalBlankNoteBlockResponseContract, AddPortalBpmnDiagramBlockRequestContract, AddPortalBpmnDiagramBlockResponseContract, AddPortalCardBlockRequestContract, AddPortalCardBlockResponseContract, AddPortalCardGroupBlockRequestContract, AddPortalCardGroupBlockResponseContract, AddPortalCarouselBlockRequestContract, AddPortalCarouselBlockResponseContract, AddPortalChatBlockRequestContract, AddPortalChatBlockResponseContract, AddPortalChatsDashboardMenuItemRequestContract, AddPortalChatsDashboardMenuItemResponseContract, AddPortalCountdownBlockRequestContract, AddPortalCountdownBlockResponseContract, AddPortalCustomWidgetBlockRequestContract, AddPortalCustomWidgetBlockResponseContract, AddPortalDatabaseBlockRequestContract, AddPortalDatabaseBlockResponseContract, AddPortalDynamicTableBlockRequestContract, AddPortalDynamicTableBlockResponseContract, AddPortalEmbedBlockRequestContract, AddPortalEmbedBlockResponseContract, AddPortalFilesDashboardMenuItemRequestContract, AddPortalFilesDashboardMenuItemResponseContract, AddPortalFileUploaderBlockRequestContract, AddPortalFileUploaderBlockResponseContract, AddPortalFormBlockRequestContract, AddPortalFormBlockResponseContract, AddPortalHeadingBlockRequestContract, AddPortalHtmlCssBlockRequestContract, AddPortalHtmlCssBlockResponseContract, AddPortalImageBlockRequestContract, AddPortalInfoBlockRequestContract, AddPortalInfoBlockResponseContract, AddPortalInternalSpacePageRequestContract, AddPortalInternalSpacePageResponseContract, AddPortalKanbanBlockRequestContract, AddPortalKanbanBlockResponseContract, AddPortalLinkedBlockRequestContract, AddPortalLinkedBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, AddPortalRecentFilesBlockRequestContract, AddPortalRecentFilesBlockResponseContract, AddPortalTaskListBlockRequestContract, AddPortalTaskListBlockResponseContract, AddPortalTasksDashboardMenuItemRequestContract, AddPortalTasksDashboardMenuItemResponseContract, AddPortalTextBlockRequestContract, AddPortalTimelineBlockRequestContract, AddPortalTimelineBlockResponseContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalLinkRequestContract, CreatePortalLinkResponseContract, CreatePortalPageRequestContract, CreatePortalPageResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DeletePortalItemResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, GetPortalBlockResponseContract, GetPortalPageBlockCountResponseContract, globalIdInPathRequired, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalAiAgentsResponseContract, ListPortalChatChannelsResponseContract, ListPortalChatUsersResponseContract, ListPortalContentResponseContract, ListPortalDatabaseBlockSourcesResponseContract, ListPortalLinkableBlocksResponseContract, ListPortalPageBlocksResponseContract, MovePortalBlockRequestContract, orgIdInPathRequired, OrgPortalListResponseContract, PortalDetailContract, PortalStyleContractResponseContract, PortalTextAndMediaBlockResponseContract, PublishPortalDraftResponseContract, SearchPortalInfoBlockIconsResponseContract, SetDashboardViewReadonlyRequestContract, SetDashboardViewReadonlyResponseContract, StagedPortalBlockResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalAiAgentBlockRequestContract, UpdatePortalAppBlockRequestContract, UpdatePortalBpmnDiagramBlockRequestContract, UpdatePortalCardBlockRequestContract, UpdatePortalCardGroupBlockRequestContract, UpdatePortalCarouselBlockRequestContract, UpdatePortalChatBlockRequestContract, UpdatePortalContentPermissionsRequestContract, UpdatePortalContentPermissionsResponseContract, UpdatePortalCountdownBlockRequestContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract, UpdatePortalCustomWidgetBlockRequestContract, UpdatePortalDatabaseBlockRequestContract, UpdatePortalDynamicTableBlockRequestContract, UpdatePortalEmbedBlockRequestContract, UpdatePortalFileUploaderBlockRequestContract, UpdatePortalFormBlockRequestContract, UpdatePortalHomepageRequestContract, UpdatePortalHomepageResponseContract, UpdatePortalHtmlCssBlockRequestContract, UpdatePortalImageBlockRequestContract, UpdatePortalInfoBlockRequestContract, UpdatePortalItemRequestContract, UpdatePortalItemResponseContract, UpdatePortalLinkedBlockRequestContract, UpdatePortalNoteBlockRequestContract, UpdatePortalRecentFilesBlockRequestContract, UpdatePortalStyleRequestContract, UpdatePortalStyleResponseContract, UpdatePortalTextBlockRequestContract, UpdatePortalTimelineBlockRequestContract } from "../types";
 export declare class PortalsApi {
     private client;
     constructor(client: Client);
@@ -567,6 +567,16 @@ export declare class PortalsApi {
         };
         headers?: Record<string, string>;
     }): Promise<GetPortalPageBlockCountResponseContract>;
+    /**
+     * Get the portal styling contract
+     * Returns the machine-readable styling contract for portals: the stable `data-portal` structural hooks and class hooks that custom CSS may target, how to write selectors that apply, a verified example override, and the anti-contract. Pull it at runtime instead of hard-coding hooks; `version` is the same value getPortal returns as `style.styleContractVersion`, so a consumer can cache the contract and refetch when it changes. The contract is the same for every portal — orgId only scopes access. Requires portals.read access.
+     */
+    getPortalStyleContract(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<PortalStyleContractResponseContract>;
     /**
      * Invite a portal manager (customizer access)
      * Invites a user as a PORTAL MANAGER via a magic link. A manager has access to the portal customizer and can build, edit, and publish the portal (layout, settings, widgets, custom code); they always get full access to all portal pages. This is a dedicated shortcut for inviteToPortal with orgRole='manager' — no access question is needed (managers are always full access). Returns a magic link for direct portal/customizer access without email confirmation. Requires portals.manage access.

package/dist/apis/PortalsApi.js

@@ -667,6 +667,20 @@ class PortalsApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Get the portal styling contract
+     * Returns the machine-readable styling contract for portals: the stable `data-portal` structural hooks and class hooks that custom CSS may target, how to write selectors that apply, a verified example override, and the anti-contract. Pull it at runtime instead of hard-coding hooks; `version` is the same value getPortal returns as `style.styleContractVersion`, so a consumer can cache the contract and refetch when it changes. The contract is the same for every portal — orgId only scopes access. Requires portals.read access.
+     */
+    async getPortalStyleContract(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/portal-style-contract",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "getPortalStyleContract",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Invite a portal manager (customizer access)
      * Invites a user as a PORTAL MANAGER via a magic link. A manager has access to the portal customizer and can build, edit, and publish the portal (layout, settings, widgets, custom code); they always get full access to all portal pages. This is a dedicated shortcut for inviteToPortal with orgRole='manager' — no access question is needed (managers are always full access). Returns a magic link for direct portal/customizer access without email confirmation. Requires portals.manage access.

package/dist/types/app-api/app-api.d.ts

@@ -40,6 +40,38 @@ export interface PublishedAppListResponseContract {
     apps: PublishedAppContract[];
     total: number;
 }
+export interface AppApiManifestOperationContract {
+    operationId: string;
+    method: string;
+    path: string;
+    summary?: string;
+    description?: string;
+    tags?: string[];
+    visibility?: string;
+    executionMode?: string;
+    allowedCallers?: string[];
+    requiredPermissions?: string[];
+}
+export interface AppApiRegistryManifestContract {
+    kind: "app-api-registry";
+    format: "openapi";
+    schemaVersion: string;
+    sourceFile: string;
+    publishedAt: string;
+    info: {
+        title: string;
+        version: string;
+    };
+    openapiVersion: string;
+    operations: AppApiManifestOperationContract[];
+    document: Record<string, unknown>;
+}
+export interface PublishedAppApiManifestContract {
+    productId: string;
+    appId: string;
+    title: string;
+    manifest: AppApiRegistryManifestContract;
+}
 export interface CallAppApiRequestContract {
     path?: Record<string, string>;
     query?: Record<string, string | number | boolean>;

package/dist/types/index.d.ts

@@ -6,7 +6,7 @@
  */
 export type { AuthenticatedUserSummaryContract, MyOrgAccessResponseContract } from "./access/access";
 export type { AppAccessPrincipalContract, RemoveAppAccessPrincipalRequestContract, RemoveAppAccessPrincipalResponseContract } from "./app-access-principal/app-access-principal";
-export type { AppApiOperationContract, AppApiOperationListResponseContract, CallAppApiRequestContract, CallAppApiResponseContract, PublishedAppContract, PublishedAppListResponseContract, VerifyAppApiContractsRequestContract, VerifyAppApiContractsResponseContract, VerifyCaseResultContract } from "./app-api/app-api";
+export type { AppApiManifestOperationContract, AppApiOperationContract, AppApiOperationListResponseContract, AppApiRegistryManifestContract, CallAppApiRequestContract, CallAppApiResponseContract, PublishedAppApiManifestContract, PublishedAppContract, PublishedAppListResponseContract, VerifyAppApiContractsRequestContract, VerifyAppApiContractsResponseContract, VerifyCaseResultContract } from "./app-api/app-api";
 export type { AppPortalEmbedContract, ListAppPortalEmbedsResponseContract } from "./app-embed-targets/app-embed-targets";
 export type { ActivateAppMagicLinkResponseContract, AppMagicLinkSummaryContract, BulkAppMagicLinkInvitationContract, BulkAppMagicLinkResultItemContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppClientInviteRequestContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, ListAppMagicLinksResponseContract, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract, RevokeAppMagicLinkResponseContract } from "./app-magic-link/app-magic-link";
 export * from "./billing/billing";

package/dist/types/org-user/org-user.d.ts

@@ -51,6 +51,13 @@ export interface OrgUserAddRequestContract {
      * is omitted.
      */
     autoConfirmClientInvite?: boolean;
+    /**
+     * Org-only shortcut for service accounts (bots): when the email already has
+     * a Fusebase account, add it as an org member right away with `orgRole`
+     * instead of sending an invite email a bot can never click. Falls back to a
+     * normal invite when no account exists yet. Requires `workspaceId` omitted.
+     */
+    autoConfirmInvite?: boolean;
 }
 export interface OrgInviteContract {
     id: number;

package/dist/types/portals/portals.d.ts

@@ -2926,6 +2926,12 @@ export interface PortalDetailContract {
 }
 /** Published branding of a portal, as stored in its theme. */
 export interface PortalStyleContract {
+    /**
+     * Version of the portal styling contract this portal renders with. Compare it
+     * against a cached value to detect a breaking change; call
+     * getPortalStyleContract for the contract itself.
+     */
+    styleContractVersion: string;
     /** Color theme key. Absent when the portal never had one set explicitly. */
     theme?: PortalThemeKey;
     /** Logo image URL, as rendered in the portal header. */
@@ -2933,6 +2939,34 @@ export interface PortalStyleContract {
     /** Favicon image URL, used as the portal's browser tab icon. */
     faviconUrl?: string;
 }
+/**
+ * The portal styling contract: the stable hooks custom CSS may target. Mirrors
+ * PORTAL_STYLE_CONTRACT in nx-frontend, where a CI guard fails the portal build
+ * if any hook below disappears from the source.
+ */
+export interface PortalStyleContractResponseContract {
+    /**
+     * Contract version. Removing or renaming a hook bumps the major, adding one
+     * bumps the minor.
+     */
+    version: string;
+    /**
+     * Preferred surface: `data-portal` attribute values, targeted as
+     * `[data-portal="sidebar"]`.
+     */
+    structuralHooks: string[];
+    /** Legacy stable class hooks, also part of the contract, e.g. `.container`. */
+    classHooks: string[];
+    /** How to write CSS that actually applies. */
+    usage: string;
+    /** A working override, verified against the portal build. */
+    canonicalOverride: string;
+    /**
+     * Things that look styleable but are not part of the contract, each written
+     * as a sentence explaining why targeting it fails.
+     */
+    antiContract: string[];
+}
 export interface UpdatePortalStyleRequestContract {
     /** Color theme to apply, the same picker the customizer's Theme screen shows. */
     theme?: PortalThemeKey;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.10.1-sdk.0",
+  "version": "2.11.0",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.10.1-sdk.0.md

@@ -2,8 +2,46 @@
 
 - Current ref: `HEAD`
 - Previous tag: `v2.10.1-sdk.0`
-- Generated at: 2026-08-25T08:32:52.825Z
+- Generated at: 2026-08-25T11:38:27.682Z
 
 ## Included Drafts
 
-- None
+- `docs/release-notes/2026-08-25-published-app-api-manifest.md` - Published App API manifest endpoint
+
+## Summary
+
+### Published App API manifest endpoint
+
+Gate now exposes the complete published OpenAPI manifest for a selected FuseBase App so authenticated HTTP clients such as FuseBase Work can discover an App's request and response schemas without using the frontend proxy or MCP.
+
+
+## API / SDK Changes
+
+### Published App API manifest endpoint
+
+- Added `GET /:orgId/apps/:appId/app-api-manifest`.
+- Added the `getPublishedAppApiManifest` generated SDK operation.
+- The response includes stable Product/App identifiers and the complete `app-api-registry` manifest, including `manifest.document`.
+- The operation requires `org.read`, accepts user or user-bound token authentication, and is intentionally not exposed as an MCP tool.
+
+
+## Consumer Impact
+
+### Published App API manifest endpoint
+
+HTTP clients can list Apps and operations through the existing Gate APIs, then fetch the selected App's full OpenAPI contract through Gate. Existing operations are unchanged.
+
+
+## Verification
+
+### Published App API manifest endpoint
+
+- Unit coverage verifies complete manifest delivery and rejects Apps without a published App API manifest.
+- Generated SDK and OpenAPI artifacts were rebuilt.
+
+
+## Follow-ups
+
+### Published App API manifest endpoint
+
+- FuseBase Work will consume this operation through its direct server-to-server Gate client.

package/release-notes/2.11.0.md

@@ -0,0 +1,9 @@
+# Release Notes 2.11.0
+
+- Current ref: `HEAD`
+- Previous tag: `v2.11.0`
+- Generated at: 2026-08-26T07:53:27.963Z
+
+## Included Drafts
+
+- None

package/release-notes/latest.md

@@ -1,8 +1,8 @@
-# Release Notes 2.10.1-sdk.0
+# Release Notes 2.11.0
 
 - Current ref: `HEAD`
-- Previous tag: `v2.10.1-sdk.0`
-- Generated at: 2026-08-25T08:32:52.825Z
+- Previous tag: `v2.11.0`
+- Generated at: 2026-08-26T07:53:27.963Z
 
 ## Included Drafts