@fusebase/fusebase-gate-sdk 2.11.8-sdk.0 → 2.12.0

package/dist/apis/AppApisApi.d.ts

@@ -11,7 +11,7 @@ export declare class AppApisApi {
     constructor(client: Client);
     /**
      * Call app API operation
-     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400.
+     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400. `orgId` is the calling organization: a managed app published by another org resolves and runs under its owner org, while the token and the runtime stay scoped to the calling org, which also arrives as `X-Fusebase-Verified-Org-Id`.
      */
     callAppApi(params: {
         path: {

package/dist/apis/AppApisApi.js

@@ -13,7 +13,7 @@ class AppApisApi {
     }
     /**
      * Call app API operation
-     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400.
+     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400. `orgId` is the calling organization: a managed app published by another org resolves and runs under its owner org, while the token and the runtime stay scoped to the calling org, which also arrives as `X-Fusebase-Verified-Org-Id`.
      */
     async callAppApi(params) {
         return this.client.request({

package/dist/apis/FilesApi.d.ts

@@ -23,7 +23,7 @@ export declare class FilesApi {
     }): Promise<CompleteMultipartFileUploadResponseContract>;
     /**
      * Create bucket attachment
-     * Turns an uploaded temp stored file into a bucket-service attachment in the organization's `app` bucket, so it shows up in the file listing next to files from notes and portals. Only app tokens can call it: the attachment is owned by the app the token was issued for.
+     * Turns an uploaded temp stored file into a bucket-service attachment in the organization's `app` bucket, so it shows up in the file listing next to files from notes and portals. The attachment is owned by the app the caller's token was issued for, so it needs an app token: an app backend calls it directly, an app frontend through the app-api gate proxy, which forwards the app's scopes.
      */
     createBucketAttachment(params: {
         path: {
@@ -56,7 +56,7 @@ export declare class FilesApi {
     }): Promise<DeleteFileResponseContract>;
     /**
      * List bucket attachments
-     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
+     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, its file `kind` (`image`, `video`, `audio`, `doc`, `archive` or `file`, detected from the mime type), the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, keep only the files one user uploaded with `uploaderId`, keep only some file types with `kinds`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
      */
     listBucketAttachments(params: {
         path: {
@@ -65,6 +65,8 @@ export declare class FilesApi {
         query?: {
             targets?: unknown[];
             sizeFrom?: number;
+            uploaderId?: number;
+            kinds?: unknown[];
             attributes?: string;
             limit?: number;
             offset?: number;
@@ -73,6 +75,17 @@ export declare class FilesApi {
         };
         headers?: Record<string, string>;
     }): Promise<ListBucketAttachmentsResponseContract>;
+    /**
+     * Remove bucket attachment
+     * Removes a file of the organization from the organization file listing, whatever its source (app, note or portal). Only the uploader or an organization manager or owner may remove it.
+     */
+    removeBucketAttachment(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            globalId: BucketAttachmentGlobalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<BucketAttachmentContract>;
     /**
      * Start multipart file upload
      * Starts a file-service multipart upload and returns direct PUT URLs. Clients upload each part to the returned URLs, keep each response ETag, and pass those ETags to completeMultipartFileUpload.
@@ -86,7 +99,7 @@ export declare class FilesApi {
     }): Promise<StartMultipartFileUploadResponseContract>;
     /**
      * Update bucket attachment
-     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
+     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Works on any file of the organization; `accessPrincipals` only on app files. Only the uploader or an organization manager or owner may change `attributes` or `accessPrincipals`. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
      */
     updateBucketAttachment(params: {
         path: {

package/dist/apis/FilesApi.js

@@ -28,7 +28,7 @@ class FilesApi {
     }
     /**
      * Create bucket attachment
-     * Turns an uploaded temp stored file into a bucket-service attachment in the organization's `app` bucket, so it shows up in the file listing next to files from notes and portals. Only app tokens can call it: the attachment is owned by the app the token was issued for.
+     * Turns an uploaded temp stored file into a bucket-service attachment in the organization's `app` bucket, so it shows up in the file listing next to files from notes and portals. The attachment is owned by the app the caller's token was issued for, so it needs an app token: an app backend calls it directly, an app frontend through the app-api gate proxy, which forwards the app's scopes.
      */
     async createBucketAttachment(params) {
         return this.client.request({
@@ -73,7 +73,7 @@ class FilesApi {
     }
     /**
      * List bucket attachments
-     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
+     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, its file `kind` (`image`, `video`, `audio`, `doc`, `archive` or `file`, detected from the mime type), the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, keep only the files one user uploaded with `uploaderId`, keep only some file types with `kinds`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
      */
     async listBucketAttachments(params) {
         return this.client.request({
@@ -86,6 +86,20 @@ class FilesApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Remove bucket attachment
+     * Removes a file of the organization from the organization file listing, whatever its source (app, note or portal). Only the uploader or an organization manager or owner may remove it.
+     */
+    async removeBucketAttachment(params) {
+        return this.client.request({
+            method: "DELETE",
+            path: "/:orgId/bucket-attachments/:globalId",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "removeBucketAttachment",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Start multipart file upload
      * Starts a file-service multipart upload and returns direct PUT URLs. Clients upload each part to the returned URLs, keep each response ETag, and pass those ETags to completeMultipartFileUpload.
@@ -103,7 +117,7 @@ class FilesApi {
     }
     /**
      * Update bucket attachment
-     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
+     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Works on any file of the organization; `accessPrincipals` only on app files. Only the uploader or an organization manager or owner may change `attributes` or `accessPrincipals`. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
      */
     async updateBucketAttachment(params) {
         return this.client.request({

package/dist/apis/OrgUsersApi.d.ts

@@ -22,7 +22,7 @@ export declare class OrgUsersApi {
     }): Promise<OrgUserAddResponseContract>;
     /**
      * List organization users
-     * Returns the list of users (members) of the organization. Requires org.members.read and org access.
+     * Returns the list of users of the organization, including clients and members. `metadata.clients` and `metadata.members` are the user-added custom columns of those dashboards (system columns omitted; empty when a dashboard does not exist). Requires org.members.read and org access.
      */
     listOrgUsers(params: {
         path: {

package/dist/apis/OrgUsersApi.js

@@ -28,7 +28,7 @@ class OrgUsersApi {
     }
     /**
      * List organization users
-     * Returns the list of users (members) of the organization. Requires org.members.read and org access.
+     * Returns the list of users of the organization, including clients and members. `metadata.clients` and `metadata.members` are the user-added custom columns of those dashboards (system columns omitted; empty when a dashboard does not exist). Requires org.members.read and org access.
      */
     async listOrgUsers(params) {
         return this.client.request({

package/dist/apis/OrgsApi.d.ts

@@ -5,10 +5,20 @@
  * Domain: orgs
  */
 import type { Client } from "../runtime/transport";
-import type { orgIdInPathRequired, OrgUrlResponseContract } from "../types";
+import type { orgIdInPathRequired, OrgServiceInstancesContract, OrgUrlResponseContract } from "../types";
 export declare class OrgsApi {
     private client;
     constructor(client: Client);
+    /**
+     * Discover installed org services
+     * Reports, for FuseBase Work, N8N and Firecrawl, whether the service is set up for the organization (`installed`), whether the organization may set it up (`available`), and its `url` once it can be reached. When `installed` is false and `available` is true, the user can be sent to the setup flow; when `available` is false, do not offer setup — the organization is not entitled to the service. An installed service without a `url` is still coming up.
+     */
+    getOrgServiceInstances(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<OrgServiceInstancesContract>;
     /**
      * Get organization URL
      * Returns the canonical HTTPS base URL for the organization. When a custom CNAME domain is configured, the response uses that hostname; otherwise it uses the org subdomain on the environment Fusebase host (for example `https://{sub}.dev-thefusebase.com`). Requires org.read and org access.

package/dist/apis/OrgsApi.js

@@ -11,6 +11,20 @@ class OrgsApi {
     constructor(client) {
         this.client = client;
     }
+    /**
+     * Discover installed org services
+     * Reports, for FuseBase Work, N8N and Firecrawl, whether the service is set up for the organization (`installed`), whether the organization may set it up (`available`), and its `url` once it can be reached. When `installed` is false and `available` is true, the user can be sent to the setup flow; when `available` is false, do not offer setup — the organization is not entitled to the service. An installed service without a `url` is still coming up.
+     */
+    async getOrgServiceInstances(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/paperclip-services/instances",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "getOrgServiceInstances",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Get organization URL
      * Returns the canonical HTTPS base URL for the organization. When a custom CNAME domain is configured, the response uses that hostname; otherwise it uses the org subdomain on the environment Fusebase host (for example `https://{sub}.dev-thefusebase.com`). Requires org.read and org access.

package/dist/apis/PortalsApi.d.ts

@@ -698,7 +698,7 @@ export declare class PortalsApi {
     }): Promise<ListPortalPageBlocksResponseContract>;
     /**
      * List organization portals
-     * Returns portals visible for the caller in the organization. Requires portals.read and org access.
+     * Returns portals visible for the caller in the organization. `metadata.columns` are the user-added custom columns of the portals dashboard (system columns omitted; empty when that dashboard does not exist). Requires portals.read and org access.
      */
     listPortals(params: {
         path: {

package/dist/apis/PortalsApi.js

@@ -814,7 +814,7 @@ class PortalsApi {
     }
     /**
      * List organization portals
-     * Returns portals visible for the caller in the organization. Requires portals.read and org access.
+     * Returns portals visible for the caller in the organization. `metadata.columns` are the user-added custom columns of the portals dashboard (system columns omitted; empty when that dashboard does not exist). Requires portals.read and org access.
      */
     async listPortals(params) {
         return this.client.request({

package/dist/apis/RoutesApi.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Routes API
+ *
+ * Generated from contract introspection
+ * Domain: routes
+ */
+import type { Client } from "../runtime/transport";
+import type { orgIdInPathRequired, ResolveRouteRequestContract, ResolveRouteResponseContract, RouteListResponseContract } from "../types";
+export declare class RoutesApi {
+    private client;
+    constructor(client: Client);
+    /**
+     * List product navigation routes
+     * Returns the allowlist of product locations Gate can link to, including required extra permissions and param names. Requires route.read and org access. Call this before resolveRoute. Do not invent a location id.
+     */
+    listRoutes(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<RouteListResponseContract>;
+    /**
+     * Resolve a product navigation route
+     * Turns a registered location plus ids into a canonical HTTPS link. Requires route.read, org access, and the location's extra permissions (for example sites.read for a Studio location). Does not search by name: pass ids you already have, or look them up with listWorkspaces, listWebStudioSites, or listOrgUsers first. status unsupported means the screen has no deep link; follow fallback when present.
+     */
+    resolveRoute(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: ResolveRouteRequestContract;
+    }): Promise<ResolveRouteResponseContract>;
+}

package/dist/apis/RoutesApi.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Routes API
+ *
+ * Generated from contract introspection
+ * Domain: routes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoutesApi = void 0;
+class RoutesApi {
+    constructor(client) {
+        this.client = client;
+    }
+    /**
+     * List product navigation routes
+     * Returns the allowlist of product locations Gate can link to, including required extra permissions and param names. Requires route.read and org access. Call this before resolveRoute. Do not invent a location id.
+     */
+    async listRoutes(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/routes",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "listRoutes",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Resolve a product navigation route
+     * Turns a registered location plus ids into a canonical HTTPS link. Requires route.read, org access, and the location's extra permissions (for example sites.read for a Studio location). Does not search by name: pass ids you already have, or look them up with listWorkspaces, listWebStudioSites, or listOrgUsers first. status unsupported means the screen has no deep link; follow fallback when present.
+     */
+    async resolveRoute(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/routes/resolve",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "resolveRoute",
+            expectedContentType: "application/json",
+        });
+    }
+}
+exports.RoutesApi = RoutesApi;

package/dist/apis/WorkspacesApi.d.ts

@@ -22,7 +22,7 @@ export declare class WorkspacesApi {
     }): Promise<OrgWorkspaceContract>;
     /**
      * List organization workspaces
-     * Returns workspaces visible for the caller in the organization and marks the default workspace. Requires org.read and org access.
+     * Returns workspaces visible for the caller in the organization and marks the default workspace. `metadata.columns` are the user-added custom columns of the workspaces dashboard (system columns omitted; empty when that dashboard does not exist). Requires org.read and org access.
      */
     listWorkspaces(params: {
         path: {

package/dist/apis/WorkspacesApi.js

@@ -28,7 +28,7 @@ class WorkspacesApi {
     }
     /**
      * List organization workspaces
-     * Returns workspaces visible for the caller in the organization and marks the default workspace. Requires org.read and org access.
+     * Returns workspaces visible for the caller in the organization and marks the default workspace. `metadata.columns` are the user-added custom columns of the workspaces dashboard (system columns omitted; empty when that dashboard does not exist). Requires org.read and org access.
      */
     async listWorkspaces(params) {
         return this.client.request({

package/dist/index.d.ts

@@ -23,6 +23,7 @@ export { OrgsApi } from "./apis/OrgsApi";
 export { PaperclipAgentsApi } from "./apis/PaperclipAgentsApi";
 export { PortalFeatureContextApi } from "./apis/PortalFeatureContextApi";
 export { PortalsApi } from "./apis/PortalsApi";
+export { RoutesApi } from "./apis/RoutesApi";
 export { SystemApi } from "./apis/SystemApi";
 export { TokensApi } from "./apis/TokensApi";
 export { WorkspacesApi } from "./apis/WorkspacesApi";

package/dist/index.js

@@ -19,7 +19,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.PortalsApi = exports.PortalFeatureContextApi = exports.PaperclipAgentsApi = exports.OrgsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.McpManagerApi = exports.IsolatedStoresApi = exports.HealthApi = exports.FusebaseAuthApi = exports.FilesApi = exports.EmailsApi = exports.BillingApi = exports.AppMagicLinksApi = exports.AppEmbedTargetsApi = exports.AppApisApi = exports.AccessApi = void 0;
+exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.RoutesApi = exports.PortalsApi = exports.PortalFeatureContextApi = exports.PaperclipAgentsApi = exports.OrgsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.McpManagerApi = exports.IsolatedStoresApi = exports.HealthApi = exports.FusebaseAuthApi = exports.FilesApi = exports.EmailsApi = exports.BillingApi = exports.AppMagicLinksApi = exports.AppEmbedTargetsApi = exports.AppApisApi = exports.AccessApi = void 0;
 __exportStar(require("./runtime"), exports);
 __exportStar(require("./types"), exports);
 var AccessApi_1 = require("./apis/AccessApi");
@@ -58,6 +58,8 @@ var PortalFeatureContextApi_1 = require("./apis/PortalFeatureContextApi");
 Object.defineProperty(exports, "PortalFeatureContextApi", { enumerable: true, get: function () { return PortalFeatureContextApi_1.PortalFeatureContextApi; } });
 var PortalsApi_1 = require("./apis/PortalsApi");
 Object.defineProperty(exports, "PortalsApi", { enumerable: true, get: function () { return PortalsApi_1.PortalsApi; } });
+var RoutesApi_1 = require("./apis/RoutesApi");
+Object.defineProperty(exports, "RoutesApi", { enumerable: true, get: function () { return RoutesApi_1.RoutesApi; } });
 var SystemApi_1 = require("./apis/SystemApi");
 Object.defineProperty(exports, "SystemApi", { enumerable: true, get: function () { return SystemApi_1.SystemApi; } });
 var TokensApi_1 = require("./apis/TokensApi");

package/dist/types/file/file.d.ts

@@ -69,6 +69,14 @@ export interface BucketAttachmentContract {
     target: string;
     targetId: string;
     filename: string;
+    /**
+     * File kind detected from the mime type: `image`, `video`, `audio`, `doc`,
+     * `archive` or `file` for anything else.
+     */
+    kind: string;
+    /**
+     * @deprecated Same value as `kind`, kept for apps deployed before it existed.
+     */
     type: string;
     size: number;
     /**

package/dist/types/index.d.ts

@@ -18,11 +18,13 @@ export * from "./mcp-manager/mcp-manager";
 export type { MeAuthContract, MeOrgGroupContract, MePreferencesContract, MeResponseContract, MeScopeContract, MeUserContract } from "./me/me";
 export * from "./note/note";
 export * from "./org-group/org-group";
-export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberExpectedJoinedAfterInQueryOptional, OrgMemberExpectedRoleInQueryOptional, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
+export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, DashboardCustomColumnContract, DashboardCustomColumnMetadataContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberExpectedJoinedAfterInQueryOptional, OrgMemberExpectedRoleInQueryOptional, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
 export * from "./orgs/orgs";
 export type { CreatePaperclipAgentTaskRequestContract, PaperclipAgentRunContract, PaperclipAgentTaskAcceptedContract, PaperclipAgentTaskContract, PaperclipAgentTaskIdInPathRequired, PaperclipAgentTaskStatusContract, PaperclipCallableAgentContract, PaperclipCallableAgentListContract } from "./paperclip-agents/paperclip-agents";
+export * from "./paperclip-services/paperclip-services";
 export type { VerifyPortalFeatureContextTokenRequestContract, VerifyPortalFeatureContextTokenResponseContract } from "./portal-feature-context/portal-feature-context";
 export * from "./portals/portals";
+export * from "./routes/routes";
 export * from "./shared/common";
 export * from "./shared/enums";
 export type { GetHealth200ResponseContract } from "./shared/health";

package/dist/types/index.js

@@ -27,7 +27,9 @@ __exportStar(require("./mcp-manager/mcp-manager"), exports);
 __exportStar(require("./note/note"), exports);
 __exportStar(require("./org-group/org-group"), exports);
 __exportStar(require("./orgs/orgs"), exports);
+__exportStar(require("./paperclip-services/paperclip-services"), exports);
 __exportStar(require("./portals/portals"), exports);
+__exportStar(require("./routes/routes"), exports);
 __exportStar(require("./shared/common"), exports);
 __exportStar(require("./shared/enums"), exports);
 __exportStar(require("./system/system"), exports);

package/dist/types/org-user/org-user.d.ts

@@ -8,8 +8,31 @@ export interface OrgUserContract {
 }
 export type OrgUserIdInPathRequired = number;
 export type OrgUserWorkspaceIdInPathRequired = string;
+export interface DashboardCustomColumnContract {
+    key: string;
+    /** @nullable true */
+    alias: string | null;
+    name: string;
+    /** dashboard-service custom column type, for example `string` or `phone`. */
+    customType: string;
+    hidden: boolean;
+    readonly: boolean;
+    required: boolean;
+}
+/** User-added columns of one existing dashboard. Empty when that dashboard is absent. */
+export interface DashboardCustomColumnMetadataContract {
+    columns: DashboardCustomColumnContract[];
+}
 export interface OrgUserListResponseContract {
     users: OrgUserContract[];
+    /**
+     * Custom columns from the clients and members dashboards.
+     * Both dashboards describe users. System columns are omitted.
+     */
+    metadata: {
+        clients: DashboardCustomColumnMetadataContract;
+        members: DashboardCustomColumnMetadataContract;
+    };
 }
 export interface OrgUserAddRequestContract {
     /**
@@ -77,6 +100,8 @@ export interface OrgWorkspaceContract {
 }
 export interface OrgWorkspaceListResponseContract {
     workspaces: OrgWorkspaceContract[];
+    /** Custom columns of the workspaces dashboard. Empty when it does not exist. */
+    metadata: DashboardCustomColumnMetadataContract;
 }
 export interface CreateWorkspaceRequestContract {
     /** Display name for the new workspace. Required. */
@@ -95,6 +120,8 @@ export interface OrgPortalContract {
 }
 export interface OrgPortalListResponseContract {
     portals: OrgPortalContract[];
+    /** Custom columns of the portals dashboard. Empty when it does not exist. */
+    metadata: DashboardCustomColumnMetadataContract;
 }
 export interface OrgWorkspaceInviteContract {
     workspaceId: string;

package/dist/types/paperclip-services/paperclip-services.d.ts

@@ -0,0 +1,197 @@
+export type PaperclipServicesEntitlementSourceContract = "advanced_subscription" | "ltd_coupons" | "ltd_pack" | "ineligible";
+export type PaperclipServicesEntitlementErrorCodeContract = "ltd_coupons_below_minimum" | "ineligible" | "unavailable";
+export interface PaperclipServicesEntitlementContract {
+    eligible: boolean;
+    source: PaperclipServicesEntitlementSourceContract;
+    couponCount: number | null;
+    evaluatedAt: string;
+    errorCode?: PaperclipServicesEntitlementErrorCodeContract;
+    message?: string;
+}
+export interface PaperclipServicesEntitlementsContract {
+    n8n: PaperclipServicesEntitlementContract;
+    firecrawl: PaperclipServicesEntitlementContract;
+}
+export interface PaperclipServicesCapabilitiesContract {
+    provider: string;
+    providerVersion: string;
+    architecture: string;
+    featureAvailable: boolean;
+    firecrawlProxyManagement?: boolean;
+    entitlement?: PaperclipServicesEntitlementContract;
+    entitlements?: PaperclipServicesEntitlementsContract;
+}
+export interface PaperclipServicesResourceUsageContract {
+    cpu: string;
+    memory: string;
+    storage: string;
+    pods: number;
+    persistentVolumeClaims: number;
+}
+export interface PaperclipServicesCapacityContract {
+    currentProfile: string;
+    reserved: PaperclipServicesResourceUsageContract;
+    used: PaperclipServicesResourceUsageContract;
+    available: PaperclipServicesResourceUsageContract;
+    eligibleNextProfiles: string[];
+}
+export type PaperclipServicesComponentKindContract = "Deployment" | "StatefulSet";
+export type PaperclipServicesComponentStatusContract = "healthy" | "degraded" | "unhealthy" | "unknown";
+export interface PaperclipServicesComponentHealthContract {
+    appKey: string;
+    component: string;
+    kind: PaperclipServicesComponentKindContract;
+    status: PaperclipServicesComponentStatusContract;
+    desiredReplicas: number;
+    readyReplicas: number;
+    restartCount: number;
+    manifestRevision?: string;
+    reason?: string;
+}
+export interface PaperclipServicesHealthAlertContract {
+    code: string;
+    severity: "warning" | "critical";
+    message: string;
+    appKey?: string;
+    component?: string;
+}
+export interface PaperclipServicesHealthContract {
+    status: "healthy" | "degraded" | "unavailable";
+    checkedAt: string;
+    components: PaperclipServicesComponentHealthContract[];
+    alerts: PaperclipServicesHealthAlertContract[];
+    operations: {
+        pending: number;
+        running: number;
+        staleClaims: number;
+        needsManualReview: number;
+    };
+    reconciliation: {
+        orphanedWorkloads: number;
+        outdatedManifests: number;
+    };
+}
+export interface OrgServiceInstanceContract {
+    /** Set up for this organization. */
+    installed: boolean;
+    /** The organization may set it up. False means do not offer a setup flow. */
+    available: boolean;
+    url?: string;
+}
+export interface OrgServiceInstancesContract {
+    fusebaseWork: OrgServiceInstanceContract;
+    n8n: OrgServiceInstanceContract;
+    firecrawl: OrgServiceInstanceContract;
+}
+export type PaperclipServiceAppKeyContract = "n8n" | "firecrawl";
+export type PaperclipServiceAppKeyInPathRequired = string;
+export type PaperclipServiceOperationIdInPathRequired = string;
+export type PaperclipManagedCompanyIdInQueryRequired = string;
+export type FirecrawlProxyModeContract = "direct" | "custom_gateway" | "proxy_list" | "remote_list";
+export interface FirecrawlProxyUpdateContract {
+    mode: FirecrawlProxyModeContract;
+    server?: string;
+    username?: string;
+    password?: string;
+    proxies?: string[];
+    sourceUrl?: string;
+    sourceAuthorization?: string;
+    refreshIntervalSeconds?: number;
+}
+export interface FirecrawlProxyConfigureRequestContract {
+    orgRuntimeIdentity: string;
+    managedCompanyId: string;
+    update: FirecrawlProxyUpdateContract;
+}
+export interface FirecrawlProxySettingsContract {
+    available: boolean;
+    mode: FirecrawlProxyModeContract;
+    server: string | null;
+    usernameConfigured: boolean;
+    passwordConfigured: boolean;
+    proxyCount: number;
+    sourceConfigured: boolean;
+    sourceAuthorizationConfigured: boolean;
+    refreshIntervalSeconds: number | null;
+    /** @format date-time */
+    updatedAt: string | null;
+}
+export interface PaperclipServiceOperationRequestContract {
+    orgRuntimeIdentity: string;
+    managedCompanyId: string;
+    operationId: string;
+    idempotencyKey: string;
+    providerRef?: string;
+}
+export interface PaperclipServiceInstallRequestContract extends PaperclipServiceOperationRequestContract {
+    appKey: PaperclipServiceAppKeyContract;
+    approvedManifestRevision: string;
+}
+export interface PaperclipServiceUpgradeRequestContract extends PaperclipServiceOperationRequestContract {
+    appKey: PaperclipServiceAppKeyContract;
+    approvedManifestRevision: string;
+}
+export interface PaperclipServiceBackupRequestContract extends PaperclipServiceOperationRequestContract {
+    manifestRevision: string;
+}
+export interface PaperclipServiceRestoreRequestContract extends PaperclipServiceOperationRequestContract {
+    backupProviderRequestId: string;
+}
+export interface PaperclipServiceRetryRequestContract extends PaperclipServiceOperationRequestContract {
+    action: "install" | "delete" | "upgrade" | "backup" | "restore";
+}
+export type PaperclipServiceOperationStatusContract = "pending" | "running" | "succeeded" | "failed" | "needs_manual_review";
+export interface PaperclipServiceOperationContract {
+    providerRequestId: string;
+    status: PaperclipServiceOperationStatusContract;
+    providerRef?: string;
+    providerRouteRef?: string;
+    observedState: Record<string, unknown>;
+    error?: string;
+}
+export interface PaperclipServiceInstallResultContract {
+    outcome: "accepted" | "insufficient_capacity";
+    operation?: PaperclipServiceOperationContract;
+    requested?: PaperclipServicesResourceUsageContract;
+    available?: PaperclipServicesResourceUsageContract;
+    requiredProfile?: string;
+    eligibleProfiles?: string[];
+}
+export declare const PaperclipServicesEntitlementSourceContract: {
+    readonly AdvancedSubscription: "advanced_subscription";
+    readonly LtdCoupons: "ltd_coupons";
+    readonly LtdPack: "ltd_pack";
+    readonly Ineligible: "ineligible";
+};
+export declare const PaperclipServicesEntitlementErrorCodeContract: {
+    readonly LtdCouponsBelowMinimum: "ltd_coupons_below_minimum";
+    readonly Ineligible: "ineligible";
+    readonly Unavailable: "unavailable";
+};
+export declare const PaperclipServicesComponentKindContract: {
+    readonly Deployment: "Deployment";
+    readonly Statefulset: "StatefulSet";
+};
+export declare const PaperclipServicesComponentStatusContract: {
+    readonly Healthy: "healthy";
+    readonly Degraded: "degraded";
+    readonly Unhealthy: "unhealthy";
+    readonly Unknown: "unknown";
+};
+export declare const PaperclipServiceAppKeyContract: {
+    readonly N8n: "n8n";
+    readonly Firecrawl: "firecrawl";
+};
+export declare const FirecrawlProxyModeContract: {
+    readonly Direct: "direct";
+    readonly CustomGateway: "custom_gateway";
+    readonly ProxyList: "proxy_list";
+    readonly RemoteList: "remote_list";
+};
+export declare const PaperclipServiceOperationStatusContract: {
+    readonly Pending: "pending";
+    readonly Running: "running";
+    readonly Succeeded: "succeeded";
+    readonly Failed: "failed";
+    readonly NeedsManualReview: "needs_manual_review";
+};

package/dist/types/paperclip-services/paperclip-services.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaperclipServiceOperationStatusContract = exports.FirecrawlProxyModeContract = exports.PaperclipServiceAppKeyContract = exports.PaperclipServicesComponentStatusContract = exports.PaperclipServicesComponentKindContract = exports.PaperclipServicesEntitlementErrorCodeContract = exports.PaperclipServicesEntitlementSourceContract = void 0;
+exports.PaperclipServicesEntitlementSourceContract = {
+    AdvancedSubscription: "advanced_subscription",
+    LtdCoupons: "ltd_coupons",
+    LtdPack: "ltd_pack",
+    Ineligible: "ineligible"
+};
+exports.PaperclipServicesEntitlementErrorCodeContract = {
+    LtdCouponsBelowMinimum: "ltd_coupons_below_minimum",
+    Ineligible: "ineligible",
+    Unavailable: "unavailable"
+};
+exports.PaperclipServicesComponentKindContract = {
+    Deployment: "Deployment",
+    Statefulset: "StatefulSet"
+};
+exports.PaperclipServicesComponentStatusContract = {
+    Healthy: "healthy",
+    Degraded: "degraded",
+    Unhealthy: "unhealthy",
+    Unknown: "unknown"
+};
+exports.PaperclipServiceAppKeyContract = {
+    N8n: "n8n",
+    Firecrawl: "firecrawl"
+};
+exports.FirecrawlProxyModeContract = {
+    Direct: "direct",
+    CustomGateway: "custom_gateway",
+    ProxyList: "proxy_list",
+    RemoteList: "remote_list"
+};
+exports.PaperclipServiceOperationStatusContract = {
+    Pending: "pending",
+    Running: "running",
+    Succeeded: "succeeded",
+    Failed: "failed",
+    NeedsManualReview: "needs_manual_review"
+};

package/dist/types/routes/routes.d.ts

@@ -0,0 +1,49 @@
+export type RouteOpenInContract = "same_tab" | "new_tab";
+export type RouteResolveStatusContract = "ok" | "unsupported";
+export interface RouteCatalogEntryContract {
+    location: string;
+    title: string;
+    /** False when the screen exists but has no URL. Use `fallback`. */
+    linkable: boolean;
+    /** Permissions the caller must already hold, in addition to `route.read`. */
+    requires: string[];
+    /** Param names this location accepts. `workspaceId` may also come from `context`. */
+    params: string[];
+    openIn?: RouteOpenInContract;
+    fallback?: string;
+}
+export interface RouteListResponseContract {
+    routes: RouteCatalogEntryContract[];
+}
+export interface RouteContextContract {
+    /** Workspace the person is in. Used as the web-client shell path. */
+    workspaceId?: string;
+    siteId?: string;
+    branchId?: string;
+}
+export interface ResolveRouteRequestContract {
+    /** Registry id from listRoutes. Not a URL and not a goto string. */
+    location: string;
+    params?: Record<string, string>;
+    context?: RouteContextContract;
+}
+export interface ResolveRouteFallbackContract {
+    location: string;
+    url: string;
+}
+export interface ResolveRouteResponseContract {
+    status: RouteResolveStatusContract;
+    location: string;
+    url?: string;
+    openIn?: RouteOpenInContract;
+    reason?: string;
+    fallback?: ResolveRouteFallbackContract;
+}
+export declare const RouteOpenInContract: {
+    readonly SameTab: "same_tab";
+    readonly NewTab: "new_tab";
+};
+export declare const RouteResolveStatusContract: {
+    readonly Ok: "ok";
+    readonly Unsupported: "unsupported";
+};

package/dist/types/routes/routes.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RouteResolveStatusContract = exports.RouteOpenInContract = void 0;
+exports.RouteOpenInContract = {
+    SameTab: "same_tab",
+    NewTab: "new_tab"
+};
+exports.RouteResolveStatusContract = {
+    Ok: "ok",
+    Unsupported: "unsupported"
+};

package/dist/types/shared/enums.d.ts

@@ -3,7 +3,7 @@ export type PermissionContract = string & {
     __pattern: "^[a-z][a-z0-9_]*(\\.[a-z0-9_]+)*\\.(read|write|delete|execute|send|create|manage|bypass|delegate|client_invite)$";
 };
 export type RootEntityContract = "custom" | "portal" | "workspace" | "org" | "user" | "client" | "form" | "form-response" | "tracker" | "tracker-result" | "meeting";
-export type ScopeTypeContract = "org" | "workspace" | "portal" | "user" | "client" | "block" | "tracker" | "parent_row" | "parent_table";
+export type ScopeTypeContract = "org" | "workspace" | "portal" | "user" | "client" | "block" | "tracker" | "parent_row" | "parent_table" | "app";
 export type ScopeTypeOrgContract = "org";
 export declare const OrgRoleContract: {
     readonly Owner: "owner";
@@ -36,6 +36,7 @@ export declare const ScopeTypeContract: {
     readonly Tracker: "tracker";
     readonly ParentRow: "parent_row";
     readonly ParentTable: "parent_table";
+    readonly App: "app";
 };
 export declare const ScopeTypeOrgContract: {
     readonly Org: "org";

package/dist/types/shared/enums.js

@@ -32,7 +32,8 @@ exports.ScopeTypeContract = {
     Block: "block",
     Tracker: "tracker",
     ParentRow: "parent_row",
-    ParentTable: "parent_table"
+    ParentTable: "parent_table",
+    App: "app"
 };
 exports.ScopeTypeOrgContract = {
     Org: "org"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.11.8-sdk.0",
+  "version": "2.12.0",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.11.8-sdk.0.md

@@ -2,7 +2,7 @@
 
 - Current ref: `HEAD`
 - Previous tag: `v2.11.7-sdk.0`
-- Generated at: 2026-09-21T07:25:49.110Z
+- Generated at: 2026-09-21T10:48:18.778Z
 
 ## Included Drafts
 

package/release-notes/2.12.0.md

@@ -0,0 +1,9 @@
+# Release Notes 2.12.0
+
+- Current ref: `HEAD`
+- Previous tag: `v2.12.0`
+- Generated at: 2026-09-28T09:44:29.506Z
+
+## Included Drafts
+
+- None

package/release-notes/latest.md

@@ -1,252 +1,9 @@
-# Release Notes 2.11.8-sdk.0
+# Release Notes 2.12.0
 
 - Current ref: `HEAD`
-- Previous tag: `v2.11.7-sdk.0`
-- Generated at: 2026-09-21T07:25:49.110Z
+- Previous tag: `v2.12.0`
+- Generated at: 2026-09-28T09:44:29.506Z
 
 ## Included Drafts
 
-- `docs/release-notes/2026-06-08-get-org-url.md` - Get organization URL
-- `docs/release-notes/2026-09-09-org-url-web-client-host.md` - getOrgUrl returns the web-client host
-- `docs/release-notes/2026-09-14-bucket-attachments.md` - Bucket attachments for app files
-- `docs/release-notes/2026-09-14-list-bucket-attachments.md` - One file list across app, note and portal files
-- `docs/release-notes/2026-09-14-presigned-file-upload.md` - Presigned single-request file upload
-- `docs/release-notes/2026-09-19-web-studio-motion-guidance.md` - Web Studio motion guidance
-
-## Summary
-
-### Get organization URL
-
-Gate exposes `GET /:orgId/url` (`getOrgUrl`) to resolve the canonical HTTPS base URL for an organization. The hostname follows org-service rules: custom CNAME domain when configured, otherwise `{sub}.{FUSEBASE_WEB_CLIENT_HOST}` (see the 2026-09-09 note; before that it was `{sub}.{FUSEBASE_HOST}`).
-
-### getOrgUrl returns the web-client host
-
-`getOrgUrl` built org subdomain URLs from `FUSEBASE_HOST` (the API host, e.g.
-`thefusebase.com`), so it returned `{sub}.thefusebase.com`. Users know their org by
-the web-client host (`{sub}.nimbusweb.me` on prod). Both hosts resolve, so the wrong
-one never failed loudly.
-
-`FUSEBASE_HOST` could not be repurposed — it also derives `app.thefusebase.com` for
-the auth-form URLs.
-
-### Bucket attachments for app files
-
-An app that uploaded a file through Gate had nowhere to put it: the stored file was
-not part of the organization's file listing, so the File Manager app could only ever
-show its own files. Gate now talks to bucket-service, so an uploaded file becomes an
-attachment in the organization's `app` bucket and shows up next to files from notes
-and portals.
-
-### One file list across app, note and portal files
-
-The File Manager app could only show the files it uploaded itself. `listBucketAttachments`
-returns the organization's files from every source in one list, with the metadata needed to
-filter them (source, uploader, size) and to show each file only to people who may see it.
-
-### Presigned single-request file upload
-
-Uploading a file through Gate always meant a multipart upload: start, PUT every part,
-complete. For a file small enough to fit in one request that is three round trips for
-no reason, and the completion step always created a stored-file record, which the
-File Manager app does not want — it creates its own bucket attachment instead.
-
-### Web Studio motion guidance
-
-Added the safe, declarative Web Studio motion contract to the Gate MCP prompt.
-
-
-## API / SDK Changes
-
-### Get organization URL
-
-- Added `getOrgUrl` operation and `OrgsApi.getOrgUrl` SDK client method.
-- Response fields: `url`, `host`, `kind` (`cname` | `subdomain`), `sub`, `customDomain`, `domainShorter`.
-- Permission: `org.read` with org-scoped authz.
-
-### Bucket attachments for app files
-
-- New op `createBucketAttachment`, `POST /:orgId/bucket-attachments` (`files.write`).
-  Body takes `tempStoredFileName` (required) plus optional `attributes`, `accessPrincipals`
-  and `folder`. Gate generates the attachment id and reads the owning app from the
-  token's `client` scope, so a call without an app token answers 400.
-- New op `updateBucketAttachment`, `PATCH /:orgId/bucket-attachments/:globalId`
-  (`files.write`). Body takes `filename`, `attributes` and `accessPrincipals`, all optional.
-  A field that is not sent stays as it is; `accessPrincipals: null` clears every
-  restriction. bucket-service statuses (400, 404) are passed through unchanged.
-- Both return the attachment as `globalId`, `target`, `targetId`, `filename`, `type`,
-  `size`, `userId`, `url`, `createdAt`, `attributes` and `accessPrincipals`.
-- MCP `files` prompt covers both ops, and the Gate files skill reference is
-  regenerated.
-
-### One file list across app, note and portal files
-
-- New op `listBucketAttachments`, `GET /:orgId/bucket-attachments` (`files.read`, clients
-  included). Query: `targets` (source buckets, for example `app` or `note`), `sizeFrom`
-  (bytes), `attributes`, `limit` (default 50, max 100), `offset`, `sortField`, `sortOrder`.
-- `attributes` keeps only the files whose custom metadata contains every given pair, as a
-  JSON object of strings such as `{"source":"file-manager"}` (max 50 keys, 255 chars per key
-  and value). `total` follows the same filter. A malformed filter is a 400, answered before
-  bucket-service is called.
-- Returns `{items, total}`. Each item carries `globalId`, `target` (the source), `targetId`,
-  `workspaceId`, `portalId`, `filename`, `type`, `size`, `userId` (the uploader), `url`,
-  `createdAt`, `attributes`, `accessPrincipals` and, for organization members, `permissions`.
-- `createBucketAttachment` and `updateBucketAttachment` now return the same three extra
-  fields (`workspaceId`, `portalId`, `permissions`), null for app files.
-- Gate resolves the caller's organization role and group memberships itself and forwards
-  them, with the caller's user id, to both the listing and the count. bucket-service then
-  decides what the caller may see. A client role is filtered in `client` permissions mode,
-  everyone else in `admin` mode.
-- `accessPrincipals.groupIds` on `createBucketAttachment` and `updateBucketAttachment` are
-  organization group global ids (strings), the ids org-service and bucket-service use.
-- MCP `files` prompt covers the new op, and the Gate files skill reference is regenerated.
-
-### Presigned single-request file upload
-
-- New op `createTempStoredFileUpload`, `POST /:orgId/files/uploads/presigned`
-  (`files.write`). Body takes `name` (required) plus optional `type`, `size`,
-  `folder` and `public`. It returns `uploadUrl`, `method`, `expiresAt`,
-  `tempStoredFileName`, and `headers` holding the single `content-type` header the
-  PUT may carry — the URL signs `host` only, so anything else breaks the signature.
-- `completeMultipartFileUpload` takes an optional `saveStoredFile` (default `true`).
-  With `false` it finishes the upload and skips the stored-file record.
-- `completeMultipartFileUpload` response gains `storedFileCreated` and
-  `tempStoredfileName`. `fileId` and `storedFileUUID` are now nullable — they are
-  null exactly when `saveStoredFile` was `false`.
-- MCP `files` prompt covers both, and the Gate files skill reference is regenerated.
-
-### Web Studio motion guidance
-
-No operation or SDK contract changed. The `webStudio` MCP prompt is now version
-`1.11.0` and describes the supported `reveal`, `count`, and `parallax` motion
-attributes and their bounded options.
-
-
-## Consumer Impact
-
-### Get organization URL
-
-- Apps and agents can stop hardcoding Fusebase hostnames when building org-scoped links.
-- Portal domains and app magic-link hosts remain separate surfaces; use `listPortals` or app APIs for those.
-
-### getOrgUrl returns the web-client host
-
-- Custom CNAME domains are unchanged — they already won over the host.
-- Deployments without the new variable keep the previous behaviour via the fallback.
-
-### Bucket attachments for app files
-
-- Nothing changes for existing callers: both ops are new and no existing response
-  shape moved.
-- Deployments need `BUCKET_SERVICE_URL`. Without it the two new ops answer 500 and
-  every other op is unaffected.
-- Gate calls bucket-service with the plain `Internal` header and no super secret, so
-  bucket-service authorizes the real user against the file's own organization. That
-  is what keeps an app from touching an attachment in another organization.
-
-### One file list across app, note and portal files
-
-- Nothing changes for existing callers: the op is new and the two added fields are optional.
-- A token issued for an app sees exactly what a user session for the same user sees: the
-  role and the group memberships are resolved from the organization membership and from
-  org-service, not from the request.
-- `total` is counted by bucket-service, which counts the page it would return, so the gate
-  asks it for up to 1000 files. A larger organization reports 1000.
-
-### Presigned single-request file upload
-
-- Existing callers are unaffected: `saveStoredFile` defaults to `true`, so the
-  response keeps the same values it had.
-- TypeScript consumers reading `storedFileUUID` from the completion response now see
-  `string | null` and have to narrow it. Checking `storedFileCreated` is the clearest
-  way.
-
-### Web Studio motion guidance
-
-MCP agents receive the same motion guidance as Studio Chat: they can request
-compiler-owned motion without attempting to add site-authored JavaScript.
-
-
-## Verification
-
-### Get organization URL
-
-- `npm test -- tests/unit/org-url-service.test.ts tests/unit/orgs-controller.test.ts`
-- `npm run build:sdk`
-- `npm run mcp:skills:generate`
-- `npm run mcp:skills:validate`
-
-### getOrgUrl returns the web-client host
-
-- `npm test -- tests/unit/config-env.test.ts tests/unit/orgs-controller.test.ts tests/unit/org-url-service.test.ts`
-
-### Bucket attachments for app files
-
-- `npm test -- tests/unit/files`
-- `npm run build`, `npm run build:sdk`, `npm run mcp:skills:generate`,
-  `npm run mcp:skills:validate`
-- e2e-sdk and mcp-e2e cover the update flow and the 400/404 cases against a fake
-  bucket-service. Creating an attachment needs a real app token (`client` scope),
-  so that path is covered by unit tests and by QA on dev (NIM-44491).
-
-### One file list across app, note and portal files
-
-- `npm test -- tests/unit/files tests/unit/bucket-service-client`
-- `npm run build`, `npm run build:sdk`, `npm run mcp:skills:generate`,
-  `npm run mcp:skills:validate`
-- e2e-sdk and mcp-e2e list app and note files against the fake bucket-service and check the
-  `targets` and `sizeFrom` filters. The fake enforces the caller access principals, and one
-  e2e-sdk case creates a real group, grants files by role and by group, and asserts both
-  a token and a user session see them while a file granted to neither stays hidden. Further
-  cases cover the `attributes` filter and its count, an app file addressed to another user
-  staying hidden from an org member, the uploader receiving their own restricted file, and a
-  client receiving the app file granted to the `client` role.
-
-### Presigned single-request file upload
-
-- `npm test -- tests/unit/files`
-- `npm run build`, `npm run build:sdk`, `npm run mcp:skills:generate`,
-  `npm run mcp:skills:validate`
-
-### Web Studio motion guidance
-
-- `npm run build`
-- `npm run mcp:skills:generate`
-- `npm run mcp:skills:validate` remains blocked locally because the `skills_ref`
-  Python module is unavailable.
-
-
-## Follow-ups
-
-### Get organization URL
-
-- None.
-
-### Bucket attachments for app files
-
-- `listBucketAttachments` (NIM-44489) returns the aggregated listing these
-  attachments join.
-
-### Presigned single-request file upload
-
-- `createBucketAttachment` (NIM-44488) is what turns `tempStoredFileName` into a
-  bucket attachment for the File Manager app.
-
-### Web Studio motion guidance
-
-Deploy the matching Web Studio compiler release before relying on motion
-attributes in published sites.
-
-
-## Changes
-
-### getOrgUrl returns the web-client host
-
-- New env variable `FUSEBASE_WEB_CLIENT_HOST` (`config.fusebaseWebClientHost`),
-  falling back to `FUSEBASE_HOST` when unset.
-- `getOrgUrl` now resolves subdomain org URLs against `fusebaseWebClientHost`, and so
-  do the markdown-note share URLs, which are built on the same org base.
-- The MCP prompt host bag carries `fusebaseWebClientHost` alongside `fusebaseHost`;
-  the `getOrgUrl` prompt example uses the web-client one. `fusebaseHost` keeps meaning
-  the API/platform host everywhere.
-- Added to nimbus-helm-chart `fusebase-gate` values and deployment env
-  (prod `nimbusweb.me`, dev `dev-thefusebase.com`).
+- None