@fusebase/fusebase-gate-sdk 2.11.1 → 2.11.3

package/dist/apis/PortalsApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: portals
  */
 import type { Client } from "../runtime/transport";
-import type { AddPortalAiAgentBlockRequestContract, AddPortalAiAgentBlockResponseContract, AddPortalAppBlockRequestContract, AddPortalAppBlockResponseContract, AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlankNoteBlockRequestContract, AddPortalBlankNoteBlockResponseContract, AddPortalBpmnDiagramBlockRequestContract, AddPortalBpmnDiagramBlockResponseContract, AddPortalCardBlockRequestContract, AddPortalCardBlockResponseContract, AddPortalCardGroupBlockRequestContract, AddPortalCardGroupBlockResponseContract, AddPortalCarouselBlockRequestContract, AddPortalCarouselBlockResponseContract, AddPortalChatBlockRequestContract, AddPortalChatBlockResponseContract, AddPortalChatsDashboardMenuItemRequestContract, AddPortalChatsDashboardMenuItemResponseContract, AddPortalCountdownBlockRequestContract, AddPortalCountdownBlockResponseContract, AddPortalCustomWidgetBlockRequestContract, AddPortalCustomWidgetBlockResponseContract, AddPortalDatabaseBlockRequestContract, AddPortalDatabaseBlockResponseContract, AddPortalDynamicTableBlockRequestContract, AddPortalDynamicTableBlockResponseContract, AddPortalEmbedBlockRequestContract, AddPortalEmbedBlockResponseContract, AddPortalFilesDashboardMenuItemRequestContract, AddPortalFilesDashboardMenuItemResponseContract, AddPortalFileUploaderBlockRequestContract, AddPortalFileUploaderBlockResponseContract, AddPortalFormBlockRequestContract, AddPortalFormBlockResponseContract, AddPortalHeadingBlockRequestContract, AddPortalHtmlCssBlockRequestContract, AddPortalHtmlCssBlockResponseContract, AddPortalImageBlockRequestContract, AddPortalInfoBlockRequestContract, AddPortalInfoBlockResponseContract, AddPortalInternalSpacePageRequestContract, AddPortalInternalSpacePageResponseContract, AddPortalKanbanBlockRequestContract, AddPortalKanbanBlockResponseContract, AddPortalLinkedBlockRequestContract, AddPortalLinkedBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, AddPortalRecentFilesBlockRequestContract, AddPortalRecentFilesBlockResponseContract, AddPortalTaskListBlockRequestContract, AddPortalTaskListBlockResponseContract, AddPortalTasksDashboardMenuItemRequestContract, AddPortalTasksDashboardMenuItemResponseContract, AddPortalTextBlockRequestContract, AddPortalTimelineBlockRequestContract, AddPortalTimelineBlockResponseContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalLinkRequestContract, CreatePortalLinkResponseContract, CreatePortalPageRequestContract, CreatePortalPageResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DeletePortalItemResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, GetPortalBlockResponseContract, GetPortalPageBlockCountResponseContract, globalIdInPathRequired, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalAiAgentsResponseContract, ListPortalChatChannelsResponseContract, ListPortalChatUsersResponseContract, ListPortalContentResponseContract, ListPortalDatabaseBlockSourcesResponseContract, ListPortalLinkableBlocksResponseContract, ListPortalPageBlocksResponseContract, MovePortalBlockRequestContract, orgIdInPathRequired, OrgPortalListResponseContract, PortalDetailContract, PortalStyleContractResponseContract, PortalTextAndMediaBlockResponseContract, PublishPortalDraftResponseContract, SearchPortalInfoBlockIconsResponseContract, SetDashboardViewReadonlyRequestContract, SetDashboardViewReadonlyResponseContract, StagedPortalBlockResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalAiAgentBlockRequestContract, UpdatePortalAppBlockRequestContract, UpdatePortalBpmnDiagramBlockRequestContract, UpdatePortalCardBlockRequestContract, UpdatePortalCardGroupBlockRequestContract, UpdatePortalCarouselBlockRequestContract, UpdatePortalChatBlockRequestContract, UpdatePortalContentPermissionsRequestContract, UpdatePortalContentPermissionsResponseContract, UpdatePortalCountdownBlockRequestContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract, UpdatePortalCustomWidgetBlockRequestContract, UpdatePortalDatabaseBlockRequestContract, UpdatePortalDynamicTableBlockRequestContract, UpdatePortalEmbedBlockRequestContract, UpdatePortalFileUploaderBlockRequestContract, UpdatePortalFormBlockRequestContract, UpdatePortalHomepageRequestContract, UpdatePortalHomepageResponseContract, UpdatePortalHtmlCssBlockRequestContract, UpdatePortalImageBlockRequestContract, UpdatePortalInfoBlockRequestContract, UpdatePortalItemRequestContract, UpdatePortalItemResponseContract, UpdatePortalLinkedBlockRequestContract, UpdatePortalNoteBlockRequestContract, UpdatePortalRecentFilesBlockRequestContract, UpdatePortalStyleRequestContract, UpdatePortalStyleResponseContract, UpdatePortalTextBlockRequestContract, UpdatePortalTimelineBlockRequestContract } from "../types";
+import type { AddPortalAiAgentBlockRequestContract, AddPortalAiAgentBlockResponseContract, AddPortalAppBlockRequestContract, AddPortalAppBlockResponseContract, AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlankNoteBlockRequestContract, AddPortalBlankNoteBlockResponseContract, AddPortalBpmnDiagramBlockRequestContract, AddPortalBpmnDiagramBlockResponseContract, AddPortalCardBlockRequestContract, AddPortalCardBlockResponseContract, AddPortalCardGroupBlockRequestContract, AddPortalCardGroupBlockResponseContract, AddPortalCarouselBlockRequestContract, AddPortalCarouselBlockResponseContract, AddPortalChatBlockRequestContract, AddPortalChatBlockResponseContract, AddPortalChatsDashboardMenuItemRequestContract, AddPortalChatsDashboardMenuItemResponseContract, AddPortalCountdownBlockRequestContract, AddPortalCountdownBlockResponseContract, AddPortalCustomWidgetBlockRequestContract, AddPortalCustomWidgetBlockResponseContract, AddPortalDatabaseBlockRequestContract, AddPortalDatabaseBlockResponseContract, AddPortalDynamicTableBlockRequestContract, AddPortalDynamicTableBlockResponseContract, AddPortalEmbedBlockRequestContract, AddPortalEmbedBlockResponseContract, AddPortalFilesDashboardMenuItemRequestContract, AddPortalFilesDashboardMenuItemResponseContract, AddPortalFileUploaderBlockRequestContract, AddPortalFileUploaderBlockResponseContract, AddPortalFormBlockRequestContract, AddPortalFormBlockResponseContract, AddPortalHeadingBlockRequestContract, AddPortalHtmlCssBlockRequestContract, AddPortalHtmlCssBlockResponseContract, AddPortalImageBlockRequestContract, AddPortalInfoBlockRequestContract, AddPortalInfoBlockResponseContract, AddPortalInternalSpacePageRequestContract, AddPortalInternalSpacePageResponseContract, AddPortalKanbanBlockRequestContract, AddPortalKanbanBlockResponseContract, AddPortalLinkedBlockRequestContract, AddPortalLinkedBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, AddPortalRecentFilesBlockRequestContract, AddPortalRecentFilesBlockResponseContract, AddPortalTaskListBlockRequestContract, AddPortalTaskListBlockResponseContract, AddPortalTasksDashboardMenuItemRequestContract, AddPortalTasksDashboardMenuItemResponseContract, AddPortalTextBlockRequestContract, AddPortalTimelineBlockRequestContract, AddPortalTimelineBlockResponseContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalLinkRequestContract, CreatePortalLinkResponseContract, CreatePortalPageRequestContract, CreatePortalPageResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DeletePortalItemResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, GetPortalBlockResponseContract, GetPortalPageBlockCountResponseContract, globalIdInPathRequired, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalAiAgentsResponseContract, ListPortalChatChannelsResponseContract, ListPortalChatUsersResponseContract, ListPortalContentResponseContract, ListPortalDatabaseBlockSourcesResponseContract, ListPortalLinkableBlocksResponseContract, ListPortalPageBlocksResponseContract, MovePortalBlockRequestContract, orgIdInPathRequired, OrgPortalListResponseContract, PortalDetailContract, PortalStyleContractResponseContract, PortalTextAndMediaBlockResponseContract, PublishPortalDraftResponseContract, SearchPortalInfoBlockIconsResponseContract, SetDashboardViewReadonlyRequestContract, SetDashboardViewReadonlyResponseContract, StagedPortalBlockResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalAiAgentBlockRequestContract, UpdatePortalAppBlockRequestContract, UpdatePortalBpmnDiagramBlockRequestContract, UpdatePortalCardBlockRequestContract, UpdatePortalCardGroupBlockRequestContract, UpdatePortalCarouselBlockRequestContract, UpdatePortalChatBlockRequestContract, UpdatePortalContentPermissionsRequestContract, UpdatePortalContentPermissionsResponseContract, UpdatePortalCountdownBlockRequestContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract, UpdatePortalCustomWidgetBlockRequestContract, UpdatePortalDatabaseBlockRequestContract, UpdatePortalDynamicTableBlockRequestContract, UpdatePortalEmbedBlockRequestContract, UpdatePortalFileUploaderBlockRequestContract, UpdatePortalFormBlockRequestContract, UpdatePortalHeaderRequestContract, UpdatePortalHeaderResponseContract, UpdatePortalHomepageRequestContract, UpdatePortalHomepageResponseContract, UpdatePortalHtmlCssBlockRequestContract, UpdatePortalImageBlockRequestContract, UpdatePortalInfoBlockRequestContract, UpdatePortalItemRequestContract, UpdatePortalItemResponseContract, UpdatePortalLinkedBlockRequestContract, UpdatePortalNoteBlockRequestContract, UpdatePortalRecentFilesBlockRequestContract, UpdatePortalStyleRequestContract, UpdatePortalStyleResponseContract, UpdatePortalTextBlockRequestContract, UpdatePortalTimelineBlockRequestContract } from "../types";
 export declare class PortalsApi {
     private client;
     constructor(client: Client);
@@ -332,12 +332,13 @@ export declare class PortalsApi {
     }): Promise<AddPortalLinkedBlockResponseContract>;
     /**
      * Add an existing Fusebase note as a block to a portal page
-     * Embeds an existing Fusebase note as a content block on an existing portal page (no new page or sidebar item is created). The note must already exist in the portal's workspace and be shared into the portal (e.g. created via createPortalPageWithNote). Pass pageId (the target page node id, obtained from listPortalContent) and noteId. The block is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending block, and publishes it. Returns the created block id and the draft branch/seqs. Requires portals.write access.
+     * Embeds an existing Fusebase note as a content block on an existing portal page (no new page or sidebar item is created). The note must already exist in the portal's workspace and be shared into the portal (e.g. created via createPortalPageWithNote). pageId is the target page node id, obtained from listPortalContent. Optional title sets the block header (default: the page's current title); renaming the note's sidebar item afterwards overwrites it. The block is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending block, and publishes it. Returns the created block id and the draft branch/seqs. Requires portals.write access.
      */
     addPortalNoteBlock(params: {
         path: {
             orgId: orgIdInPathRequired;
             portalId: globalIdInPathRequired;
+            pageId: globalIdInPathRequired;
         };
         headers?: Record<string, string>;
         body: AddPortalNoteBlockRequestContract;
@@ -455,7 +456,7 @@ export declare class PortalsApi {
     }): Promise<CreatePortalLinkResponseContract>;
     /**
      * Create an empty portal page
-     * Creates a new EMPTY page in the portal — a page node plus its menu item, with no Fusebase note and no block. The page is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass positionType ('sidebar' default, 'top' or 'footer') to choose the menu bar. Pass parentId to nest the page under an existing published or active-draft folder. The returned pageId can immediately be passed to semantic block operations to add content before publishing. Use createPortalPageWithNote instead when a page backed by a new Fusebase note is wanted. Returns the page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
+     * Creates a new EMPTY page in the portal — a page node plus its menu item, with no Fusebase note and no block. The page is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass positionType ('sidebar' default, 'top' or 'footer') to choose the menu bar. Pass parentId to nest the page under an existing published or active-draft folder. Pass slug to choose the page URL explicitly (e.g. slug 'pricing' → '/pricing'); omit it and the slug is derived from the title, which needs the explicit slug for titles in scripts that do not transliterate (Japanese, Chinese, Arabic, …). The returned pageId can immediately be passed to semantic block operations to add content before publishing. Use createPortalPageWithNote instead when a page backed by a new Fusebase note is wanted. Returns the page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
      */
     createPortalPage(params: {
         path: {
@@ -467,7 +468,7 @@ export declare class PortalsApi {
     }): Promise<CreatePortalPageResponseContract>;
     /**
      * Create a portal page backed by a Fusebase note
-     * Creates a new sidebar page in the portal backed by a freshly created Fusebase note. The note is created in the portal's workspace and shared into the portal; optional initial text or html can be appended to it. The page (page node + note menu item + note content block) is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass parentId to nest the page under an existing folder, or positionType ('sidebar' default, 'top', 'footer') to place a root page in a specific menu bar. Returns the note/page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
+     * Creates a new sidebar page in the portal backed by a freshly created Fusebase note. The note is created in the portal's workspace and shared into the portal; optional initial text or html can be appended to it. The page (page node + note menu item + note content block) is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass parentId to nest the page under an existing folder, or positionType ('sidebar' default, 'top', 'footer') to place a root page in a specific menu bar. Pass slug to choose the page URL explicitly (e.g. slug 'pricing' → '/pricing'); omit it and the slug is derived from the title, which needs the explicit slug for titles in scripts that do not transliterate (Japanese, Chinese, Arabic, …). Returns the note/page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
      */
     createPortalPageWithNote(params: {
         path: {
@@ -529,12 +530,12 @@ export declare class PortalsApi {
     }): Promise<DuplicatePortalItemResponseContract>;
     /**
      * Get portal details
-     * Returns detailed information for a single portal by ID. Requires portals.read access.
+     * Returns detailed information for a single portal by ID, including the name given to createPortal. Requires portals.read access.
      */
     getPortal(params: {
         path: {
             orgId: orgIdInPathRequired;
-            globalId: globalIdInPathRequired;
+            portalId: globalIdInPathRequired;
         };
         headers?: Record<string, string>;
     }): Promise<PortalDetailContract>;
@@ -987,6 +988,18 @@ export declare class PortalsApi {
         headers?: Record<string, string>;
         body: UpdatePortalFormBlockRequestContract;
     }): Promise<StagedPortalBlockResponseContract>;
+    /**
+     * Update portal header and homepage hero
+     * Sets the portal's header bar (background image, sticky, search button) and the greeting and search box on the homepage hero. Only the provided fields change; omitted fields keep their current value; backgroundImage: null drops the override and falls back to the theme's own. The background is an uploaded image or the theme's color — arbitrary hex colors and gradients are not part of the portal theme model; use updatePortalCustomCode for those. The background image shows on the homepage under every theme, but only light_purple, space_gray, light_orange and light_blue keep it on the inner pages; the other nine themes replace it there with a flat color. The greeting and hero search render only while the block-based hero is off; once the owner turns it on, the header hero area shows blocks instead. The change is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending change and publishes it. Returns the draft branch and the seqs of the staged events. Requires portals.write access.
+     */
+    updatePortalHeader(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            portalId: globalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: UpdatePortalHeaderRequestContract;
+    }): Promise<UpdatePortalHeaderResponseContract>;
     /**
      * Update a portal Heading block
      * Edits ONE existing Text & Media Heading block and STAGES the change in the active customizer draft; nothing is published. Editable: `content` (text, colour, size, styles, alignment), `appearance` and `layout`. The block's wrapper title, HTML, CSS, image url and raw bricks are not accepted. This is a PATCH: an omitted field keeps its current value, and at least one field must be sent. `content` is a field-level patch — a size, style or alignment left out keeps what the block has today. `appearance` is NOT: it is a discriminated variant and must be sent complete, so read the current one with getPortalBlock first; under backdrop `custom` an omitted `background` keeps the block's current one, which is what getPortalBlock reports for a block still on the portal theme's surface colour. `layout.colspan` is 2 to 6 and `layout.height` is at least 50, or null for the automatic height. Rejected with 400: an empty patch, a block of another kind, and a patch the block already satisfies — the message names which. Requires portals.write access.
@@ -1112,7 +1125,7 @@ export declare class PortalsApi {
     }): Promise<StagedPortalBlockResponseContract>;
     /**
      * Update portal branding
-     * Sets the portal's branding, the same fields the customizer's Portal style panel writes: the color theme, the header logo and the favicon. Only the provided fields change; omitted fields keep their current value. Colors come from the named themes — arbitrary hex colors and web fonts are not part of the portal theme model; use updatePortalCustomCode for those. The change is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending change and publishes it. Returns the draft branch and the seq of the staged event. Requires portals.write access.
+     * Sets the portal's branding: the color theme, the semantic color roles (primary, background, surface, text, accent), the web font, the header logo and the favicon. Only the provided fields change; omitted fields keep their current value. Color roles take Tailwind palette tokens such as `indigo-600` — the same tokens the customizer's own color pickers write, and the only values the portal can paint; hex is rejected. `font` is delivered through the portal's custom code as one marked style block that updatePortalCustomCode preserves; the block imports the family from Google Fonts, so every portal visitor's browser makes a request to fonts.googleapis.com. The change is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending change and publishes it. A body touching both the theme and the font stages two events; `seq` is the first of them. Requires portals.write access.
      */
     updatePortalStyle(params: {
         path: {

package/dist/apis/PortalsApi.js

@@ -388,12 +388,12 @@ class PortalsApi {
     }
     /**
      * Add an existing Fusebase note as a block to a portal page
-     * Embeds an existing Fusebase note as a content block on an existing portal page (no new page or sidebar item is created). The note must already exist in the portal's workspace and be shared into the portal (e.g. created via createPortalPageWithNote). Pass pageId (the target page node id, obtained from listPortalContent) and noteId. The block is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending block, and publishes it. Returns the created block id and the draft branch/seqs. Requires portals.write access.
+     * Embeds an existing Fusebase note as a content block on an existing portal page (no new page or sidebar item is created). The note must already exist in the portal's workspace and be shared into the portal (e.g. created via createPortalPageWithNote). pageId is the target page node id, obtained from listPortalContent. Optional title sets the block header (default: the page's current title); renaming the note's sidebar item afterwards overwrites it. The block is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending block, and publishes it. Returns the created block id and the draft branch/seqs. Requires portals.write access.
      */
     async addPortalNoteBlock(params) {
         return this.client.request({
             method: "POST",
-            path: "/:orgId/portals/:portalId/blocks/note",
+            path: "/:orgId/portals/:portalId/pages/:pageId/blocks/note",
             pathParams: params.path,
             headers: params.headers,
             body: params.body,
@@ -538,7 +538,7 @@ class PortalsApi {
     }
     /**
      * Create an empty portal page
-     * Creates a new EMPTY page in the portal — a page node plus its menu item, with no Fusebase note and no block. The page is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass positionType ('sidebar' default, 'top' or 'footer') to choose the menu bar. Pass parentId to nest the page under an existing published or active-draft folder. The returned pageId can immediately be passed to semantic block operations to add content before publishing. Use createPortalPageWithNote instead when a page backed by a new Fusebase note is wanted. Returns the page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
+     * Creates a new EMPTY page in the portal — a page node plus its menu item, with no Fusebase note and no block. The page is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass positionType ('sidebar' default, 'top' or 'footer') to choose the menu bar. Pass parentId to nest the page under an existing published or active-draft folder. Pass slug to choose the page URL explicitly (e.g. slug 'pricing' → '/pricing'); omit it and the slug is derived from the title, which needs the explicit slug for titles in scripts that do not transliterate (Japanese, Chinese, Arabic, …). The returned pageId can immediately be passed to semantic block operations to add content before publishing. Use createPortalPageWithNote instead when a page backed by a new Fusebase note is wanted. Returns the page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
      */
     async createPortalPage(params) {
         return this.client.request({
@@ -553,7 +553,7 @@ class PortalsApi {
     }
     /**
      * Create a portal page backed by a Fusebase note
-     * Creates a new sidebar page in the portal backed by a freshly created Fusebase note. The note is created in the portal's workspace and shared into the portal; optional initial text or html can be appended to it. The page (page node + note menu item + note content block) is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass parentId to nest the page under an existing folder, or positionType ('sidebar' default, 'top', 'footer') to place a root page in a specific menu bar. Returns the note/page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
+     * Creates a new sidebar page in the portal backed by a freshly created Fusebase note. The note is created in the portal's workspace and shared into the portal; optional initial text or html can be appended to it. The page (page node + note menu item + note content block) is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass parentId to nest the page under an existing folder, or positionType ('sidebar' default, 'top', 'footer') to place a root page in a specific menu bar. Pass slug to choose the page URL explicitly (e.g. slug 'pricing' → '/pricing'); omit it and the slug is derived from the title, which needs the explicit slug for titles in scripts that do not transliterate (Japanese, Chinese, Arabic, …). Returns the note/page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
      */
     async createPortalPageWithNote(params) {
         return this.client.request({
@@ -626,12 +626,12 @@ class PortalsApi {
     }
     /**
      * Get portal details
-     * Returns detailed information for a single portal by ID. Requires portals.read access.
+     * Returns detailed information for a single portal by ID, including the name given to createPortal. Requires portals.read access.
      */
     async getPortal(params) {
         return this.client.request({
             method: "GET",
-            path: "/:orgId/portals/:globalId",
+            path: "/:orgId/portals/:portalId",
             pathParams: params.path,
             headers: params.headers,
             opId: "getPortal",
@@ -1139,6 +1139,21 @@ class PortalsApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Update portal header and homepage hero
+     * Sets the portal's header bar (background image, sticky, search button) and the greeting and search box on the homepage hero. Only the provided fields change; omitted fields keep their current value; backgroundImage: null drops the override and falls back to the theme's own. The background is an uploaded image or the theme's color — arbitrary hex colors and gradients are not part of the portal theme model; use updatePortalCustomCode for those. The background image shows on the homepage under every theme, but only light_purple, space_gray, light_orange and light_blue keep it on the inner pages; the other nine themes replace it there with a flat color. The greeting and hero search render only while the block-based hero is off; once the owner turns it on, the header hero area shows blocks instead. The change is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending change and publishes it. Returns the draft branch and the seqs of the staged events. Requires portals.write access.
+     */
+    async updatePortalHeader(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/portals/:portalId/header",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "updatePortalHeader",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Update a portal Heading block
      * Edits ONE existing Text & Media Heading block and STAGES the change in the active customizer draft; nothing is published. Editable: `content` (text, colour, size, styles, alignment), `appearance` and `layout`. The block's wrapper title, HTML, CSS, image url and raw bricks are not accepted. This is a PATCH: an omitted field keeps its current value, and at least one field must be sent. `content` is a field-level patch — a size, style or alignment left out keeps what the block has today. `appearance` is NOT: it is a discriminated variant and must be sent complete, so read the current one with getPortalBlock first; under backdrop `custom` an omitted `background` keeps the block's current one, which is what getPortalBlock reports for a block still on the portal theme's surface colour. `layout.colspan` is 2 to 6 and `layout.height` is at least 50, or null for the automatic height. Rejected with 400: an empty patch, a block of another kind, and a patch the block already satisfies — the message names which. Requires portals.write access.
@@ -1276,7 +1291,7 @@ class PortalsApi {
     }
     /**
      * Update portal branding
-     * Sets the portal's branding, the same fields the customizer's Portal style panel writes: the color theme, the header logo and the favicon. Only the provided fields change; omitted fields keep their current value. Colors come from the named themes — arbitrary hex colors and web fonts are not part of the portal theme model; use updatePortalCustomCode for those. The change is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending change and publishes it. Returns the draft branch and the seq of the staged event. Requires portals.write access.
+     * Sets the portal's branding: the color theme, the semantic color roles (primary, background, surface, text, accent), the web font, the header logo and the favicon. Only the provided fields change; omitted fields keep their current value. Color roles take Tailwind palette tokens such as `indigo-600` — the same tokens the customizer's own color pickers write, and the only values the portal can paint; hex is rejected. `font` is delivered through the portal's custom code as one marked style block that updatePortalCustomCode preserves; the block imports the family from Google Fonts, so every portal visitor's browser makes a request to fonts.googleapis.com. The change is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending change and publishes it. A body touching both the theme and the font stages two events; `seq` is the first of them. Requires portals.write access.
      */
     async updatePortalStyle(params) {
         return this.client.request({

package/dist/index.d.ts

@@ -21,7 +21,6 @@ export { OrgGroupsApi } from "./apis/OrgGroupsApi";
 export { OrgUsersApi } from "./apis/OrgUsersApi";
 export { OrgsApi } from "./apis/OrgsApi";
 export { PaperclipAgentsApi } from "./apis/PaperclipAgentsApi";
-export { PaperclipServicesApi } from "./apis/PaperclipServicesApi";
 export { PortalFeatureContextApi } from "./apis/PortalFeatureContextApi";
 export { PortalsApi } from "./apis/PortalsApi";
 export { SystemApi } from "./apis/SystemApi";

package/dist/index.js

@@ -19,7 +19,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.PortalsApi = exports.PortalFeatureContextApi = exports.PaperclipServicesApi = exports.PaperclipAgentsApi = exports.OrgsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.McpManagerApi = exports.IsolatedStoresApi = exports.HealthApi = exports.FusebaseAuthApi = exports.FilesApi = exports.EmailsApi = exports.BillingApi = exports.AppMagicLinksApi = exports.AppEmbedTargetsApi = exports.AppApisApi = exports.AccessApi = void 0;
+exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.PortalsApi = exports.PortalFeatureContextApi = exports.PaperclipAgentsApi = exports.OrgsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.McpManagerApi = exports.IsolatedStoresApi = exports.HealthApi = exports.FusebaseAuthApi = exports.FilesApi = exports.EmailsApi = exports.BillingApi = exports.AppMagicLinksApi = exports.AppEmbedTargetsApi = exports.AppApisApi = exports.AccessApi = void 0;
 __exportStar(require("./runtime"), exports);
 __exportStar(require("./types"), exports);
 var AccessApi_1 = require("./apis/AccessApi");
@@ -54,8 +54,6 @@ var OrgsApi_1 = require("./apis/OrgsApi");
 Object.defineProperty(exports, "OrgsApi", { enumerable: true, get: function () { return OrgsApi_1.OrgsApi; } });
 var PaperclipAgentsApi_1 = require("./apis/PaperclipAgentsApi");
 Object.defineProperty(exports, "PaperclipAgentsApi", { enumerable: true, get: function () { return PaperclipAgentsApi_1.PaperclipAgentsApi; } });
-var PaperclipServicesApi_1 = require("./apis/PaperclipServicesApi");
-Object.defineProperty(exports, "PaperclipServicesApi", { enumerable: true, get: function () { return PaperclipServicesApi_1.PaperclipServicesApi; } });
 var PortalFeatureContextApi_1 = require("./apis/PortalFeatureContextApi");
 Object.defineProperty(exports, "PortalFeatureContextApi", { enumerable: true, get: function () { return PortalFeatureContextApi_1.PortalFeatureContextApi; } });
 var PortalsApi_1 = require("./apis/PortalsApi");

package/dist/types/index.d.ts

@@ -21,7 +21,6 @@ export * from "./org-group/org-group";
 export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberExpectedJoinedAfterInQueryOptional, OrgMemberExpectedRoleInQueryOptional, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
 export * from "./orgs/orgs";
 export type { CreatePaperclipAgentTaskRequestContract, PaperclipAgentRunContract, PaperclipAgentTaskAcceptedContract, PaperclipAgentTaskContract, PaperclipAgentTaskIdInPathRequired, PaperclipAgentTaskStatusContract, PaperclipCallableAgentContract, PaperclipCallableAgentListContract } from "./paperclip-agents/paperclip-agents";
-export * from "./paperclip-services/paperclip-services";
 export type { VerifyPortalFeatureContextTokenRequestContract, VerifyPortalFeatureContextTokenResponseContract } from "./portal-feature-context/portal-feature-context";
 export * from "./portals/portals";
 export * from "./shared/common";

package/dist/types/index.js

@@ -27,7 +27,6 @@ __exportStar(require("./mcp-manager/mcp-manager"), exports);
 __exportStar(require("./note/note"), exports);
 __exportStar(require("./org-group/org-group"), exports);
 __exportStar(require("./orgs/orgs"), exports);
-__exportStar(require("./paperclip-services/paperclip-services"), exports);
 __exportStar(require("./portals/portals"), exports);
 __exportStar(require("./shared/common"), exports);
 __exportStar(require("./shared/enums"), exports);

package/dist/types/portals/portals.d.ts

@@ -143,6 +143,15 @@ export interface CreatePortalPageRequestContract {
      * "footer". Ignored when `parentId` is set (the page inherits the parent's bar).
      */
     positionType?: PortalContentPositionType;
+    /**
+     * Explicit URL slug for the page, e.g. `pricing` for `/pricing`. Normalized to
+     * lowercase latin letters, digits and hyphens; a `-N` suffix is still appended
+     * when the slug is already taken. Omit it to derive the slug from the title —
+     * pass it when the title is in a script that does not transliterate (Japanese,
+     * Chinese, Arabic, …) and would otherwise fall back to `/page`.
+     * @maxLength 90
+     */
+    slug?: string;
 }
 export interface CreatePortalPageResponseContract {
     /** Id of the created sidebar menu item. */
@@ -271,6 +280,15 @@ export interface CreatePortalPageWithNoteRequestContract {
      * "footer". Ignored when `parentId` is set (the page inherits the parent's bar).
      */
     positionType?: PortalContentPositionType;
+    /**
+     * Explicit URL slug for the page, e.g. `pricing` for `/pricing`. Normalized to
+     * lowercase latin letters, digits and hyphens; a `-N` suffix is still appended
+     * when the slug is already taken. Omit it to derive the slug from the title —
+     * pass it when the title is in a script that does not transliterate (Japanese,
+     * Chinese, Arabic, …) and would otherwise fall back to `/page`.
+     * @maxLength 90
+     */
+    slug?: string;
 }
 export interface CreatePortalPageWithNoteResponseContract {
     /** Global id of the created Fusebase note backing the page. */
@@ -345,11 +363,12 @@ export interface AddPortalInternalSpacePageResponseContract {
     staged: boolean;
 }
 export interface AddPortalNoteBlockRequestContract {
-    /** Id of the existing portal page node to add the note block to. */
-    pageId: string;
     /** Global id of the existing Fusebase note to embed as a block. */
     noteId: string;
-    /** Optional block title (defaults to the page's current title). */
+    /**
+     * Block header text (defaults to the target page's current title). Renaming
+     * the note's sidebar item later overwrites it.
+     */
     title?: string;
 }
 export interface AddPortalBlankNoteBlockRequestContract {
@@ -2907,6 +2926,11 @@ export interface DuplicatePortalItemResponseContract {
 }
 export interface PortalDetailContract {
     id: string;
+    /**
+     * Portal name as given to createPortal. Omitted when portal-service does not
+     * return settings for the portal.
+     */
+    name?: string;
     orgId: string;
     workspaceId: string;
     domain: string;
@@ -2923,6 +2947,71 @@ export interface PortalDetailContract {
      * portal-service does not return theme settings for the portal.
      */
     style?: PortalStyleContract;
+    /**
+     * Published header and homepage-hero settings, the read analogue of
+     * updatePortalHeader. Omitted when portal-service does not return settings for
+     * the portal.
+     */
+    header?: PortalHeaderContract;
+}
+/** Published header and homepage-hero settings of a portal. */
+export interface PortalHeaderContract {
+    /**
+     * URL of the header background image, when the portal overrides its theme's
+     * own. Absent when the theme's default image (or plain header color) is used.
+     */
+    backgroundImageUrl?: string;
+    /** Header stays pinned to the top while the visitor scrolls. */
+    sticky?: boolean;
+    /** The search button is shown in the header bar. */
+    showSearchButton?: boolean;
+    /**
+     * Greeting shown on the homepage hero. portal-service substitutes a random
+     * welcome message when the portal never had one set, so a value here is not
+     * proof that one was stored.
+     */
+    greeting?: string;
+    /** The greeting is shown on the homepage hero. */
+    showGreeting?: boolean;
+    /** The large search box is shown on the homepage hero. */
+    showHeroSearch?: boolean;
+}
+export interface UpdatePortalHeaderRequestContract {
+    /**
+     * Background image for the portal header. Pass null to drop the override and
+     * fall back to the image (or plain color) the portal's theme defines. Shows on
+     * the homepage under every theme; only light_purple, space_gray, light_orange
+     * and light_blue keep it on the inner pages — the other nine themes replace it
+     * there with a flat color.
+     */
+    backgroundImage?: PortalStyleImageContract | null;
+    /** Pin the header to the top of the viewport while the visitor scrolls. */
+    sticky?: boolean;
+    /** Show the search button in the header bar. */
+    showSearchButton?: boolean;
+    /**
+     * Greeting shown on the homepage hero (portal-service `greetingMessage`).
+     * Pass an empty string to clear it.
+     */
+    greeting?: string;
+    /** Show the greeting on the homepage hero (`greetingEnabled`). */
+    showGreeting?: boolean;
+    /** Show the large search box on the homepage hero (`searchEnabled`). */
+    showHeroSearch?: boolean;
+}
+export interface UpdatePortalHeaderResponseContract {
+    /** Draft branch the change was staged on. */
+    branchId: string;
+    /**
+     * Sequence numbers assigned to the staged change events — one per affected
+     * area (header theme, homepage hero), staged together. At most two.
+     */
+    seqs: number[];
+    /**
+     * Always true: the change is staged in the portal's customizer draft, not yet
+     * live. The portal owner reviews and publishes it from the customizer.
+     */
+    staged: boolean;
 }
 /** Published branding of a portal, as stored in its theme. */
 export interface PortalStyleContract {
@@ -2938,6 +3027,13 @@ export interface PortalStyleContract {
     logoUrl?: string;
     /** Favicon image URL, used as the portal's browser tab icon. */
     faviconUrl?: string;
+    /**
+     * Semantic color roles overridden on top of the theme. Only roles the portal
+     * actually overrides appear; the rest come from the named theme.
+     */
+    colors?: PortalStyleColorsContract;
+    /** Web font family applied to the portal, when one was set. */
+    fontFamily?: string;
 }
 /**
  * The portal styling contract: the stable hooks custom CSS may target. Mirrors
@@ -2970,11 +3066,81 @@ export interface PortalStyleContractResponseContract {
 export interface UpdatePortalStyleRequestContract {
     /** Color theme to apply, the same picker the customizer's Theme screen shows. */
     theme?: PortalThemeKey;
+    /**
+     * Semantic color roles, applied on top of the theme. Sent together with
+     * `theme`, they override the theme's own slots.
+     */
+    colors?: PortalStyleColorsContract;
+    /** Web font for the portal text. */
+    font?: PortalStyleFontContract;
     /** Logo image, shown in the portal header. */
     logo?: PortalStyleImageContract;
     /** Favicon image, used as the portal's browser tab icon. */
     favicon?: PortalStyleImageContract;
 }
+/**
+ * The portal's semantic color roles. Each role writes the theme color slots the
+ * portal renderer reads, so a recolor stays consistent across every page and
+ * works on any domain, unlike custom CSS.
+ *
+ * Values are Tailwind palette tokens — the same tokens the customizer's own
+ * color pickers write, and the only values the renderer can paint: it
+ * interpolates the token straight into a class name (`bg-neutral-900`). Hex,
+ * `rgb()`, CSS variables and `bg-*` classes are rejected.
+ *
+ * Narrower than PortalColorToken: `stone` and `violet` are missing from the
+ * portal build's Tailwind safelist, so they would compile to nothing.
+ */
+export interface PortalStyleColorsContract {
+    /**
+     * Buttons, links and other primary surfaces (`bg_primary`,
+     * `bg_primary_hover`, `primary`).
+     * @pattern ^(transparent|white|black|(slate|gray|zinc|neutral|red|orange|amber|yellow|lime|green|emerald|teal|cyan|sky|blue|indigo|purple|fuchsia|pink|rose)-(50|100|200|300|400|500|600|700|800|900|950))$
+     */
+    primary?: PortalColorToken;
+    /**
+     * Page background behind the content (`bg_body`).
+     * @pattern ^(transparent|white|black|(slate|gray|zinc|neutral|red|orange|amber|yellow|lime|green|emerald|teal|cyan|sky|blue|indigo|purple|fuchsia|pink|rose)-(50|100|200|300|400|500|600|700|800|900|950))$
+     */
+    background?: PortalColorToken;
+    /**
+     * Cards and panels sitting on the background (`bg_surface`).
+     * @pattern ^(transparent|white|black|(slate|gray|zinc|neutral|red|orange|amber|yellow|lime|green|emerald|teal|cyan|sky|blue|indigo|purple|fuchsia|pink|rose)-(50|100|200|300|400|500|600|700|800|900|950))$
+     */
+    surface?: PortalColorToken;
+    /**
+     * Body text on a surface (`text_surface`).
+     * @pattern ^(transparent|white|black|(slate|gray|zinc|neutral|red|orange|amber|yellow|lime|green|emerald|teal|cyan|sky|blue|indigo|purple|fuchsia|pink|rose)-(50|100|200|300|400|500|600|700|800|900|950))$
+     */
+    text?: PortalColorToken;
+    /**
+     * Secondary highlight surfaces (`bg_secondary`, `bg_secondary_hover`).
+     * @pattern ^(transparent|white|black|(slate|gray|zinc|neutral|red|orange|amber|yellow|lime|green|emerald|teal|cyan|sky|blue|indigo|purple|fuchsia|pink|rose)-(50|100|200|300|400|500|600|700|800|900|950))$
+     */
+    accent?: PortalColorToken;
+}
+/**
+ * A web font for the portal. The portal theme model has no font field, so the
+ * font is delivered through the portal's custom code: gate stages one marked
+ * `<style>` block that imports the family and applies it to the portal
+ * container. The block is replaced (not appended) on every call, and
+ * updatePortalCustomCode preserves it.
+ *
+ * The block imports the family from Google Fonts, so every portal visitor's
+ * browser requests it from `fonts.googleapis.com` (and the files themselves
+ * from `fonts.gstatic.com`) — a third-party request from the portal's own
+ * domain, which a portal serving a CSP has to allow.
+ */
+export interface PortalStyleFontContract {
+    /**
+     * Family name exactly as Google Fonts spells it, e.g. `Fraunces`. Letters,
+     * digits and spaces only.
+     * @pattern ^[A-Za-z0-9][A-Za-z0-9 ]{0,63}$
+     */
+    family: string;
+    /** Where the family is loaded from. Only Google Fonts is supported. */
+    source?: "google";
+}
 /** An image for portal branding, referenced by its uploaded stored file. */
 export interface PortalStyleImageContract {
     /** `storedFileUUID` of an already uploaded image file. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.11.1",
+  "version": "2.11.3",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.11.3.md

@@ -0,0 +1,77 @@
+# Release Notes 2.11.3
+
+- Current ref: `HEAD`
+- Previous tag: `v2.11.3`
+- Generated at: 2026-09-03T04:13:04.983Z
+
+## Included Drafts
+
+- `docs/release-notes/2026-09-02-portal-style-colors-font.md` - Portal branding: color roles and web font (NIM-42204)
+
+## Summary
+
+### Portal branding: color roles and web font (NIM-42204)
+
+`updatePortalStyle` now also takes `colors` and `font`, the two field groups the
+first round left out. Colors are expressed the way the portal actually renders
+them — as **Tailwind palette tokens** written into the theme's own color slots,
+not as hex. The font is delivered through the portal's custom code, since the
+theme model has no font field.
+
+
+## API / SDK Changes
+
+### Portal branding: color roles and web font (NIM-42204)
+
+- `updatePortalStyle` body gained:
+  - `colors` — five semantic roles, each one palette token (`transparent`,
+    `white`, `black` or `<hue>-<shade>`, e.g. `indigo-600`):
+
+    | Role | Theme slots written |
+    | --- | --- |
+    | `primary` | `bg_primary`, `bg_primary_hover`, `primary` |
+    | `background` | `bg_body` |
+    | `surface` | `bg_surface` |
+    | `text` | `text_surface` |
+    | `accent` | `bg_secondary`, `bg_secondary_hover` |
+
+  - `font` — `{ family, source: "google" }`. The family is spelled as Google
+    Fonts spells it; letters, digits and spaces only.
+- `getPortal` → `style` gained `colors` (the roles the portal overrides) and
+  `fontFamily`.
+- A body touching both the theme fields and `font` stages **two** events (one
+  `updateThemeSettings`, one `updateCustomCodeSettings`); `seq` is the first.
+- The error for an empty body is now
+  `At least one of theme, colors, font, logo, or favicon is required`.
+
+
+## Consumer Impact
+
+### Portal branding: color roles and web font (NIM-42204)
+
+An agent can now recolor a portal past the 13 named themes without writing
+custom CSS, and the recolor works on any domain.
+
+**Hex is still rejected, on purpose.** The renderer interpolates the stored
+token straight into a class name (`bg-neutral-900`), and
+`apps/portals/tailwind.config.js` safelists palette names only, so `#2563eb`
+would be stored, published, and style nothing. `stone` and `violet` are rejected
+for the same reason: they are missing from that safelist. Convert a hex to the
+nearest token before calling.
+
+**Where the font lives.** The theme DTO has no font field, so `font` stages one
+marked `<style>` block inside the portal's `customStyle`:
+
+```html
+<!--fusebase-font--><style>@import url("https://fonts.googleapis.com/css2?family=Fraunces&display=swap");#main-scrolling-container{font-family:'Fraunces',sans-serif}</style><!--/fusebase-font-->
+```
+
+The markers make it replaceable: a second `font` call swaps the block rather
+than appending one, and `updatePortalCustomCode` carries it through when the
+agent rewrites the surrounding CSS. Because it is custom code, it renders
+wherever custom code renders — the customizer only offers the custom-code editor
+on portals served from a custom CNAME domain.
+
+**Hover slots take the same token as their base.** No shade is derived, so a
+recolored hover never lands on an unrelated preset color. An agent that wants a
+distinct hover uses `updatePortalCustomCode`.

package/release-notes/latest.md

@@ -1,9 +1,77 @@
-# Release Notes 2.11.1
+# Release Notes 2.11.3
 
 - Current ref: `HEAD`
-- Previous tag: `v2.11.1`
-- Generated at: 2026-08-28T07:03:30.074Z
+- Previous tag: `v2.11.3`
+- Generated at: 2026-09-03T04:13:04.983Z
 
 ## Included Drafts
 
-- None
+- `docs/release-notes/2026-09-02-portal-style-colors-font.md` - Portal branding: color roles and web font (NIM-42204)
+
+## Summary
+
+### Portal branding: color roles and web font (NIM-42204)
+
+`updatePortalStyle` now also takes `colors` and `font`, the two field groups the
+first round left out. Colors are expressed the way the portal actually renders
+them — as **Tailwind palette tokens** written into the theme's own color slots,
+not as hex. The font is delivered through the portal's custom code, since the
+theme model has no font field.
+
+
+## API / SDK Changes
+
+### Portal branding: color roles and web font (NIM-42204)
+
+- `updatePortalStyle` body gained:
+  - `colors` — five semantic roles, each one palette token (`transparent`,
+    `white`, `black` or `<hue>-<shade>`, e.g. `indigo-600`):
+
+    | Role | Theme slots written |
+    | --- | --- |
+    | `primary` | `bg_primary`, `bg_primary_hover`, `primary` |
+    | `background` | `bg_body` |
+    | `surface` | `bg_surface` |
+    | `text` | `text_surface` |
+    | `accent` | `bg_secondary`, `bg_secondary_hover` |
+
+  - `font` — `{ family, source: "google" }`. The family is spelled as Google
+    Fonts spells it; letters, digits and spaces only.
+- `getPortal` → `style` gained `colors` (the roles the portal overrides) and
+  `fontFamily`.
+- A body touching both the theme fields and `font` stages **two** events (one
+  `updateThemeSettings`, one `updateCustomCodeSettings`); `seq` is the first.
+- The error for an empty body is now
+  `At least one of theme, colors, font, logo, or favicon is required`.
+
+
+## Consumer Impact
+
+### Portal branding: color roles and web font (NIM-42204)
+
+An agent can now recolor a portal past the 13 named themes without writing
+custom CSS, and the recolor works on any domain.
+
+**Hex is still rejected, on purpose.** The renderer interpolates the stored
+token straight into a class name (`bg-neutral-900`), and
+`apps/portals/tailwind.config.js` safelists palette names only, so `#2563eb`
+would be stored, published, and style nothing. `stone` and `violet` are rejected
+for the same reason: they are missing from that safelist. Convert a hex to the
+nearest token before calling.
+
+**Where the font lives.** The theme DTO has no font field, so `font` stages one
+marked `<style>` block inside the portal's `customStyle`:
+
+```html
+<!--fusebase-font--><style>@import url("https://fonts.googleapis.com/css2?family=Fraunces&display=swap");#main-scrolling-container{font-family:'Fraunces',sans-serif}</style><!--/fusebase-font-->
+```
+
+The markers make it replaceable: a second `font` call swaps the block rather
+than appending one, and `updatePortalCustomCode` carries it through when the
+agent rewrites the surrounding CSS. Because it is custom code, it renders
+wherever custom code renders — the customizer only offers the custom-code editor
+on portals served from a custom CNAME domain.
+
+**Hover slots take the same token as their base.** No shade is derived, so a
+recolored hover never lands on an unrelated preset color. An agent that wants a
+distinct hover uses `updatePortalCustomCode`.

package/dist/apis/PaperclipServicesApi.d.ts

@@ -1,124 +0,0 @@
-/**
- * PaperclipServices API
- *
- * Generated from contract introspection
- * Domain: paperclip-services
- */
-import type { Client } from "../runtime/transport";
-import type { orgIdInPathRequired, PaperclipServiceAppKeyInPathRequired, PaperclipServiceBackupRequestContract, PaperclipServiceInstallRequestContract, PaperclipServiceInstallResultContract, PaperclipServiceOperationContract, PaperclipServiceOperationIdInPathRequired, PaperclipServiceOperationRequestContract, PaperclipServiceRestoreRequestContract, PaperclipServiceRetryRequestContract, PaperclipServicesCapabilitiesContract, PaperclipServicesCapacityContract, PaperclipServicesHealthContract, PaperclipServiceUpgradeRequestContract } from "../types";
-export declare class PaperclipServicesApi {
-    private client;
-    constructor(client: Client);
-    /**
-     * Back up a Paperclip Service
-     * Starts an idempotent retained backup operation.
-     */
-    backupPaperclipService(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-            appKey: PaperclipServiceAppKeyInPathRequired;
-        };
-        headers?: Record<string, string>;
-        body: PaperclipServiceBackupRequestContract;
-    }): Promise<PaperclipServiceOperationContract>;
-    /**
-     * Delete a Paperclip Service
-     * Starts an idempotent Nimbus-backed deletion operation for an installed service.
-     */
-    deletePaperclipService(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-            appKey: PaperclipServiceAppKeyInPathRequired;
-        };
-        headers?: Record<string, string>;
-        body: PaperclipServiceOperationRequestContract;
-    }): Promise<PaperclipServiceOperationContract>;
-    /**
-     * Get a Paperclip Service operation
-     * Returns the durable Nimbus lifecycle operation state.
-     */
-    getPaperclipServiceOperation(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-            operationId: PaperclipServiceOperationIdInPathRequired;
-        };
-        headers?: Record<string, string>;
-    }): Promise<PaperclipServiceOperationContract>;
-    /**
-     * Get Paperclip Services capabilities
-     * Returns Nimbus-backed service availability and entitlement for an org-scoped Paperclip service token.
-     */
-    getPaperclipServicesCapabilities(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-        };
-        headers?: Record<string, string>;
-    }): Promise<PaperclipServicesCapabilitiesContract>;
-    /**
-     * Get Paperclip Services capacity
-     * Returns reserved, used, and available service capacity for the token-scoped organization.
-     */
-    getPaperclipServicesCapacity(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-        };
-        headers?: Record<string, string>;
-    }): Promise<PaperclipServicesCapacityContract>;
-    /**
-     * Get Paperclip Services health
-     * Returns observed workloads, alerts, and reconciliation state for the token-scoped organization.
-     */
-    getPaperclipServicesHealth(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-        };
-        headers?: Record<string, string>;
-    }): Promise<PaperclipServicesHealthContract>;
-    /**
-     * Install a Paperclip Service
-     * Starts an idempotent Nimbus-backed installation operation for the token-scoped organization.
-     */
-    installPaperclipService(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-        };
-        headers?: Record<string, string>;
-        body: PaperclipServiceInstallRequestContract;
-    }): Promise<PaperclipServiceInstallResultContract>;
-    /**
-     * Restore a Paperclip Service
-     * Starts an idempotent restore from a verified retained backup.
-     */
-    restorePaperclipService(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-            appKey: PaperclipServiceAppKeyInPathRequired;
-        };
-        headers?: Record<string, string>;
-        body: PaperclipServiceRestoreRequestContract;
-    }): Promise<PaperclipServiceOperationContract>;
-    /**
-     * Retry a Paperclip Service operation
-     * Starts an idempotent retry for the requested lifecycle action.
-     */
-    retryPaperclipService(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-            appKey: PaperclipServiceAppKeyInPathRequired;
-        };
-        headers?: Record<string, string>;
-        body: PaperclipServiceRetryRequestContract;
-    }): Promise<PaperclipServiceOperationContract>;
-    /**
-     * Upgrade a Paperclip Service
-     * Starts an idempotent upgrade to an approved manifest revision.
-     */
-    upgradePaperclipService(params: {
-        path: {
-            orgId: orgIdInPathRequired;
-            appKey: PaperclipServiceAppKeyInPathRequired;
-        };
-        headers?: Record<string, string>;
-        body: PaperclipServiceUpgradeRequestContract;
-    }): Promise<PaperclipServiceOperationContract>;
-}

package/dist/apis/PaperclipServicesApi.js

@@ -1,161 +0,0 @@
-"use strict";
-/**
- * PaperclipServices API
- *
- * Generated from contract introspection
- * Domain: paperclip-services
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PaperclipServicesApi = void 0;
-class PaperclipServicesApi {
-    constructor(client) {
-        this.client = client;
-    }
-    /**
-     * Back up a Paperclip Service
-     * Starts an idempotent retained backup operation.
-     */
-    async backupPaperclipService(params) {
-        return this.client.request({
-            method: "POST",
-            path: "/:orgId/paperclip-services/installations/:appKey/backup",
-            pathParams: params.path,
-            headers: params.headers,
-            body: params.body,
-            opId: "backupPaperclipService",
-            expectedContentType: "application/json",
-        });
-    }
-    /**
-     * Delete a Paperclip Service
-     * Starts an idempotent Nimbus-backed deletion operation for an installed service.
-     */
-    async deletePaperclipService(params) {
-        return this.client.request({
-            method: "DELETE",
-            path: "/:orgId/paperclip-services/installations/:appKey",
-            pathParams: params.path,
-            headers: params.headers,
-            body: params.body,
-            opId: "deletePaperclipService",
-            expectedContentType: "application/json",
-        });
-    }
-    /**
-     * Get a Paperclip Service operation
-     * Returns the durable Nimbus lifecycle operation state.
-     */
-    async getPaperclipServiceOperation(params) {
-        return this.client.request({
-            method: "GET",
-            path: "/:orgId/paperclip-services/operations/:operationId",
-            pathParams: params.path,
-            headers: params.headers,
-            opId: "getPaperclipServiceOperation",
-            expectedContentType: "application/json",
-        });
-    }
-    /**
-     * Get Paperclip Services capabilities
-     * Returns Nimbus-backed service availability and entitlement for an org-scoped Paperclip service token.
-     */
-    async getPaperclipServicesCapabilities(params) {
-        return this.client.request({
-            method: "GET",
-            path: "/:orgId/paperclip-services/capabilities",
-            pathParams: params.path,
-            headers: params.headers,
-            opId: "getPaperclipServicesCapabilities",
-            expectedContentType: "application/json",
-        });
-    }
-    /**
-     * Get Paperclip Services capacity
-     * Returns reserved, used, and available service capacity for the token-scoped organization.
-     */
-    async getPaperclipServicesCapacity(params) {
-        return this.client.request({
-            method: "GET",
-            path: "/:orgId/paperclip-services/capacity",
-            pathParams: params.path,
-            headers: params.headers,
-            opId: "getPaperclipServicesCapacity",
-            expectedContentType: "application/json",
-        });
-    }
-    /**
-     * Get Paperclip Services health
-     * Returns observed workloads, alerts, and reconciliation state for the token-scoped organization.
-     */
-    async getPaperclipServicesHealth(params) {
-        return this.client.request({
-            method: "GET",
-            path: "/:orgId/paperclip-services/health",
-            pathParams: params.path,
-            headers: params.headers,
-            opId: "getPaperclipServicesHealth",
-            expectedContentType: "application/json",
-        });
-    }
-    /**
-     * Install a Paperclip Service
-     * Starts an idempotent Nimbus-backed installation operation for the token-scoped organization.
-     */
-    async installPaperclipService(params) {
-        return this.client.request({
-            method: "POST",
-            path: "/:orgId/paperclip-services/installations",
-            pathParams: params.path,
-            headers: params.headers,
-            body: params.body,
-            opId: "installPaperclipService",
-            expectedContentType: "application/json",
-        });
-    }
-    /**
-     * Restore a Paperclip Service
-     * Starts an idempotent restore from a verified retained backup.
-     */
-    async restorePaperclipService(params) {
-        return this.client.request({
-            method: "POST",
-            path: "/:orgId/paperclip-services/installations/:appKey/restore",
-            pathParams: params.path,
-            headers: params.headers,
-            body: params.body,
-            opId: "restorePaperclipService",
-            expectedContentType: "application/json",
-        });
-    }
-    /**
-     * Retry a Paperclip Service operation
-     * Starts an idempotent retry for the requested lifecycle action.
-     */
-    async retryPaperclipService(params) {
-        return this.client.request({
-            method: "POST",
-            path: "/:orgId/paperclip-services/installations/:appKey/retry",
-            pathParams: params.path,
-            headers: params.headers,
-            body: params.body,
-            opId: "retryPaperclipService",
-            expectedContentType: "application/json",
-        });
-    }
-    /**
-     * Upgrade a Paperclip Service
-     * Starts an idempotent upgrade to an approved manifest revision.
-     */
-    async upgradePaperclipService(params) {
-        return this.client.request({
-            method: "POST",
-            path: "/:orgId/paperclip-services/installations/:appKey/upgrade",
-            pathParams: params.path,
-            headers: params.headers,
-            body: params.body,
-            opId: "upgradePaperclipService",
-            expectedContentType: "application/json",
-        });
-    }
-}
-exports.PaperclipServicesApi = PaperclipServicesApi;

package/dist/types/paperclip-services/paperclip-services.d.ts

@@ -1,142 +0,0 @@
-export type PaperclipServicesEntitlementSourceContract = "advanced_subscription" | "ltd_coupons" | "ineligible";
-export type PaperclipServicesEntitlementErrorCodeContract = "ltd_coupons_below_minimum" | "ineligible" | "unavailable";
-export interface PaperclipServicesEntitlementContract {
-    eligible: boolean;
-    source: PaperclipServicesEntitlementSourceContract;
-    couponCount: number | null;
-    evaluatedAt: string;
-    errorCode?: PaperclipServicesEntitlementErrorCodeContract;
-    message?: string;
-}
-export interface PaperclipServicesCapabilitiesContract {
-    provider: string;
-    providerVersion: string;
-    architecture: string;
-    featureAvailable: boolean;
-    entitlement?: PaperclipServicesEntitlementContract;
-}
-export interface PaperclipServicesResourceUsageContract {
-    cpu: string;
-    memory: string;
-    storage: string;
-    pods: number;
-    persistentVolumeClaims: number;
-}
-export interface PaperclipServicesCapacityContract {
-    currentProfile: string;
-    reserved: PaperclipServicesResourceUsageContract;
-    used: PaperclipServicesResourceUsageContract;
-    available: PaperclipServicesResourceUsageContract;
-    eligibleNextProfiles: string[];
-}
-export type PaperclipServicesComponentKindContract = "Deployment" | "StatefulSet";
-export type PaperclipServicesComponentStatusContract = "healthy" | "degraded" | "unhealthy" | "unknown";
-export interface PaperclipServicesComponentHealthContract {
-    appKey: string;
-    component: string;
-    kind: PaperclipServicesComponentKindContract;
-    status: PaperclipServicesComponentStatusContract;
-    desiredReplicas: number;
-    readyReplicas: number;
-    restartCount: number;
-    manifestRevision?: string;
-    reason?: string;
-}
-export interface PaperclipServicesHealthAlertContract {
-    code: string;
-    severity: "warning" | "critical";
-    message: string;
-    appKey?: string;
-    component?: string;
-}
-export interface PaperclipServicesHealthContract {
-    status: "healthy" | "degraded" | "unavailable";
-    checkedAt: string;
-    components: PaperclipServicesComponentHealthContract[];
-    alerts: PaperclipServicesHealthAlertContract[];
-    operations: {
-        pending: number;
-        running: number;
-        staleClaims: number;
-        needsManualReview: number;
-    };
-    reconciliation: {
-        orphanedWorkloads: number;
-        outdatedManifests: number;
-    };
-}
-export type PaperclipServiceAppKeyContract = "n8n" | "firecrawl";
-export type PaperclipServiceAppKeyInPathRequired = string;
-export type PaperclipServiceOperationIdInPathRequired = string;
-export interface PaperclipServiceOperationRequestContract {
-    orgRuntimeIdentity: string;
-    managedCompanyId: string;
-    operationId: string;
-    idempotencyKey: string;
-    providerRef?: string;
-}
-export interface PaperclipServiceInstallRequestContract extends PaperclipServiceOperationRequestContract {
-    appKey: PaperclipServiceAppKeyContract;
-    approvedManifestRevision: string;
-}
-export interface PaperclipServiceUpgradeRequestContract extends PaperclipServiceOperationRequestContract {
-    appKey: PaperclipServiceAppKeyContract;
-    approvedManifestRevision: string;
-}
-export interface PaperclipServiceBackupRequestContract extends PaperclipServiceOperationRequestContract {
-    manifestRevision: string;
-}
-export interface PaperclipServiceRestoreRequestContract extends PaperclipServiceOperationRequestContract {
-    backupProviderRequestId: string;
-}
-export interface PaperclipServiceRetryRequestContract extends PaperclipServiceOperationRequestContract {
-    action: "install" | "delete" | "upgrade" | "backup" | "restore";
-}
-export type PaperclipServiceOperationStatusContract = "pending" | "running" | "succeeded" | "failed" | "needs_manual_review";
-export interface PaperclipServiceOperationContract {
-    providerRequestId: string;
-    status: PaperclipServiceOperationStatusContract;
-    providerRef?: string;
-    providerRouteRef?: string;
-    observedState: Record<string, unknown>;
-    error?: string;
-}
-export interface PaperclipServiceInstallResultContract {
-    outcome: "accepted" | "insufficient_capacity";
-    operation?: PaperclipServiceOperationContract;
-    requested?: PaperclipServicesResourceUsageContract;
-    available?: PaperclipServicesResourceUsageContract;
-    requiredProfile?: string;
-    eligibleProfiles?: string[];
-}
-export declare const PaperclipServicesEntitlementSourceContract: {
-    readonly AdvancedSubscription: "advanced_subscription";
-    readonly LtdCoupons: "ltd_coupons";
-    readonly Ineligible: "ineligible";
-};
-export declare const PaperclipServicesEntitlementErrorCodeContract: {
-    readonly LtdCouponsBelowMinimum: "ltd_coupons_below_minimum";
-    readonly Ineligible: "ineligible";
-    readonly Unavailable: "unavailable";
-};
-export declare const PaperclipServicesComponentKindContract: {
-    readonly Deployment: "Deployment";
-    readonly Statefulset: "StatefulSet";
-};
-export declare const PaperclipServicesComponentStatusContract: {
-    readonly Healthy: "healthy";
-    readonly Degraded: "degraded";
-    readonly Unhealthy: "unhealthy";
-    readonly Unknown: "unknown";
-};
-export declare const PaperclipServiceAppKeyContract: {
-    readonly N8n: "n8n";
-    readonly Firecrawl: "firecrawl";
-};
-export declare const PaperclipServiceOperationStatusContract: {
-    readonly Pending: "pending";
-    readonly Running: "running";
-    readonly Succeeded: "succeeded";
-    readonly Failed: "failed";
-    readonly NeedsManualReview: "needs_manual_review";
-};

package/dist/types/paperclip-services/paperclip-services.js

@@ -1,34 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PaperclipServiceOperationStatusContract = exports.PaperclipServiceAppKeyContract = exports.PaperclipServicesComponentStatusContract = exports.PaperclipServicesComponentKindContract = exports.PaperclipServicesEntitlementErrorCodeContract = exports.PaperclipServicesEntitlementSourceContract = void 0;
-exports.PaperclipServicesEntitlementSourceContract = {
-    AdvancedSubscription: "advanced_subscription",
-    LtdCoupons: "ltd_coupons",
-    Ineligible: "ineligible"
-};
-exports.PaperclipServicesEntitlementErrorCodeContract = {
-    LtdCouponsBelowMinimum: "ltd_coupons_below_minimum",
-    Ineligible: "ineligible",
-    Unavailable: "unavailable"
-};
-exports.PaperclipServicesComponentKindContract = {
-    Deployment: "Deployment",
-    Statefulset: "StatefulSet"
-};
-exports.PaperclipServicesComponentStatusContract = {
-    Healthy: "healthy",
-    Degraded: "degraded",
-    Unhealthy: "unhealthy",
-    Unknown: "unknown"
-};
-exports.PaperclipServiceAppKeyContract = {
-    N8n: "n8n",
-    Firecrawl: "firecrawl"
-};
-exports.PaperclipServiceOperationStatusContract = {
-    Pending: "pending",
-    Running: "running",
-    Succeeded: "succeeded",
-    Failed: "failed",
-    NeedsManualReview: "needs_manual_review"
-};

package/release-notes/2.11.0.md

@@ -1,80 +0,0 @@
-# Release Notes 2.11.0
-
-- Current ref: `HEAD`
-- Previous tag: `v2.11.0`
-- Generated at: 2026-08-27T10:06:16.345Z
-
-## Included Drafts
-
-- `docs/release-notes/2026-08-26-owner-delegated-private-app-apis.md` - Owner-delegated private App APIs
-- `docs/release-notes/2026-08-27-fusebase-app-work-agent-calls.md` - FuseBase Apps can invoke Work agents
-
-## Summary
-
-### Owner-delegated private App APIs
-
-FuseBase Work connections may invoke a private AI App API operation when the
-stored Gate token is bound to a user who currently has access to private App API
-operations.
-
-### FuseBase Apps can invoke Work agents
-
-Adds an organization-scoped asynchronous bridge for FuseBase App backends to list FuseBase Work agents, create assigned tasks, and poll task results. The bridge is disabled unless the `app_agent_invocation` Gate feature flag is enabled.
-
-
-## API / SDK Changes
-
-### Owner-delegated private App APIs
-
-No request or response contracts changed. The App API call endpoint now accepts
-a private operation after Nimbus AI's user-aware operation lookup authorizes it.
-The lower-level runtime call service remains fail-closed without that explicit
-authorization result.
-
-### FuseBase Apps can invoke Work agents
-
-- Added `listPaperclipCallableAgents` (`GET /:orgId/paperclip-agents`).
-- Added `createPaperclipAgentTask` (`POST /:orgId/paperclip-agents/tasks`).
-- Added `getPaperclipAgentTask` (`GET /:orgId/paperclip-agents/tasks/:taskId`).
-- Added backend permissions `paperclip_agents.read` and `paperclip_agents.invoke`.
-- Regenerated OpenAPI and TypeScript SDK artifacts.
-
-
-## Consumer Impact
-
-### Owner-delegated private App APIs
-
-Owners can connect private AI App APIs to FuseBase Work without changing their
-OpenAPI visibility to `org`. Non-owner and cross-organization callers continue
-to be denied by Nimbus AI's operation lookup.
-
-### FuseBase Apps can invoke Work agents
-
-App backends must use a user-bound Gate token for the same organization and explicitly request the new permissions. Supplying `externalRef` when creating a task makes retries idempotent. Browser clients should not receive tokens carrying `paperclip_agents.invoke`.
-
-
-## Verification
-
-### Owner-delegated private App APIs
-
-- Unit coverage confirms an authorized private operation reaches the runtime.
-- Unit coverage confirms a denied private-operation lookup never reaches the runtime.
-- Existing service coverage confirms direct low-level private calls remain denied.
-
-### FuseBase Apps can invoke Work agents
-
-- Gate TypeScript build passes.
-- Nimbus AI forwarding routes compile; its repository-wide build remains blocked by pre-existing database config and stale coupon-test type errors.
-- Paperclip server typecheck passes; its embedded PostgreSQL integration test is skipped where embedded PostgreSQL is unavailable.
-
-
-## Follow-ups
-
-### Owner-delegated private App APIs
-
-None.
-
-### FuseBase Apps can invoke Work agents
-
-- Add optional signed webhook delivery after polling behavior is proven in dev.
-- Add the permissions to selected App backend manifests; do not add them to browser/default client token sets.

package/release-notes/2.11.1.md

@@ -1,9 +0,0 @@
-# Release Notes 2.11.1
-
-- Current ref: `HEAD`
-- Previous tag: `v2.11.1`
-- Generated at: 2026-08-28T07:03:30.074Z
-
-## Included Drafts
-
-- None