@fusebase/fusebase-gate-sdk 2.11.9 → 2.12.0

package/dist/apis/AppApisApi.d.ts

@@ -11,7 +11,7 @@ export declare class AppApisApi {
     constructor(client: Client);
     /**
      * Call app API operation
-     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400.
+     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400. `orgId` is the calling organization: a managed app published by another org resolves and runs under its owner org, while the token and the runtime stay scoped to the calling org, which also arrives as `X-Fusebase-Verified-Org-Id`.
      */
     callAppApi(params: {
         path: {

package/dist/apis/AppApisApi.js

@@ -13,7 +13,7 @@ class AppApisApi {
     }
     /**
      * Call app API operation
-     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400.
+     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400. `orgId` is the calling organization: a managed app published by another org resolves and runs under its owner org, while the token and the runtime stay scoped to the calling org, which also arrives as `X-Fusebase-Verified-Org-Id`.
      */
     async callAppApi(params) {
         return this.client.request({

package/dist/apis/FilesApi.d.ts

@@ -56,7 +56,7 @@ export declare class FilesApi {
     }): Promise<DeleteFileResponseContract>;
     /**
      * List bucket attachments
-     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
+     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, its file `kind` (`image`, `video`, `audio`, `doc`, `archive` or `file`, detected from the mime type), the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, keep only the files one user uploaded with `uploaderId`, keep only some file types with `kinds`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
      */
     listBucketAttachments(params: {
         path: {
@@ -65,6 +65,8 @@ export declare class FilesApi {
         query?: {
             targets?: unknown[];
             sizeFrom?: number;
+            uploaderId?: number;
+            kinds?: unknown[];
             attributes?: string;
             limit?: number;
             offset?: number;
@@ -73,6 +75,17 @@ export declare class FilesApi {
         };
         headers?: Record<string, string>;
     }): Promise<ListBucketAttachmentsResponseContract>;
+    /**
+     * Remove bucket attachment
+     * Removes a file of the organization from the organization file listing, whatever its source (app, note or portal). Only the uploader or an organization manager or owner may remove it.
+     */
+    removeBucketAttachment(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            globalId: BucketAttachmentGlobalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<BucketAttachmentContract>;
     /**
      * Start multipart file upload
      * Starts a file-service multipart upload and returns direct PUT URLs. Clients upload each part to the returned URLs, keep each response ETag, and pass those ETags to completeMultipartFileUpload.
@@ -86,7 +99,7 @@ export declare class FilesApi {
     }): Promise<StartMultipartFileUploadResponseContract>;
     /**
      * Update bucket attachment
-     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
+     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Works on any file of the organization; `accessPrincipals` only on app files. Only the uploader or an organization manager or owner may change `attributes` or `accessPrincipals`. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
      */
     updateBucketAttachment(params: {
         path: {

package/dist/apis/FilesApi.js

@@ -73,7 +73,7 @@ class FilesApi {
     }
     /**
      * List bucket attachments
-     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
+     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, its file `kind` (`image`, `video`, `audio`, `doc`, `archive` or `file`, detected from the mime type), the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, keep only the files one user uploaded with `uploaderId`, keep only some file types with `kinds`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
      */
     async listBucketAttachments(params) {
         return this.client.request({
@@ -86,6 +86,20 @@ class FilesApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Remove bucket attachment
+     * Removes a file of the organization from the organization file listing, whatever its source (app, note or portal). Only the uploader or an organization manager or owner may remove it.
+     */
+    async removeBucketAttachment(params) {
+        return this.client.request({
+            method: "DELETE",
+            path: "/:orgId/bucket-attachments/:globalId",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "removeBucketAttachment",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Start multipart file upload
      * Starts a file-service multipart upload and returns direct PUT URLs. Clients upload each part to the returned URLs, keep each response ETag, and pass those ETags to completeMultipartFileUpload.
@@ -103,7 +117,7 @@ class FilesApi {
     }
     /**
      * Update bucket attachment
-     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
+     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Works on any file of the organization; `accessPrincipals` only on app files. Only the uploader or an organization manager or owner may change `attributes` or `accessPrincipals`. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
      */
     async updateBucketAttachment(params) {
         return this.client.request({

package/dist/apis/OrgUsersApi.d.ts

@@ -22,7 +22,7 @@ export declare class OrgUsersApi {
     }): Promise<OrgUserAddResponseContract>;
     /**
      * List organization users
-     * Returns the list of users (members) of the organization. Requires org.members.read and org access.
+     * Returns the list of users of the organization, including clients and members. `metadata.clients` and `metadata.members` are the user-added custom columns of those dashboards (system columns omitted; empty when a dashboard does not exist). Requires org.members.read and org access.
      */
     listOrgUsers(params: {
         path: {

package/dist/apis/OrgUsersApi.js

@@ -28,7 +28,7 @@ class OrgUsersApi {
     }
     /**
      * List organization users
-     * Returns the list of users (members) of the organization. Requires org.members.read and org access.
+     * Returns the list of users of the organization, including clients and members. `metadata.clients` and `metadata.members` are the user-added custom columns of those dashboards (system columns omitted; empty when a dashboard does not exist). Requires org.members.read and org access.
      */
     async listOrgUsers(params) {
         return this.client.request({

package/dist/apis/OrgsApi.d.ts

@@ -5,10 +5,20 @@
  * Domain: orgs
  */
 import type { Client } from "../runtime/transport";
-import type { orgIdInPathRequired, OrgUrlResponseContract } from "../types";
+import type { orgIdInPathRequired, OrgServiceInstancesContract, OrgUrlResponseContract } from "../types";
 export declare class OrgsApi {
     private client;
     constructor(client: Client);
+    /**
+     * Discover installed org services
+     * Reports, for FuseBase Work, N8N and Firecrawl, whether the service is set up for the organization (`installed`), whether the organization may set it up (`available`), and its `url` once it can be reached. When `installed` is false and `available` is true, the user can be sent to the setup flow; when `available` is false, do not offer setup — the organization is not entitled to the service. An installed service without a `url` is still coming up.
+     */
+    getOrgServiceInstances(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<OrgServiceInstancesContract>;
     /**
      * Get organization URL
      * Returns the canonical HTTPS base URL for the organization. When a custom CNAME domain is configured, the response uses that hostname; otherwise it uses the org subdomain on the environment Fusebase host (for example `https://{sub}.dev-thefusebase.com`). Requires org.read and org access.

package/dist/apis/OrgsApi.js

@@ -11,6 +11,20 @@ class OrgsApi {
     constructor(client) {
         this.client = client;
     }
+    /**
+     * Discover installed org services
+     * Reports, for FuseBase Work, N8N and Firecrawl, whether the service is set up for the organization (`installed`), whether the organization may set it up (`available`), and its `url` once it can be reached. When `installed` is false and `available` is true, the user can be sent to the setup flow; when `available` is false, do not offer setup — the organization is not entitled to the service. An installed service without a `url` is still coming up.
+     */
+    async getOrgServiceInstances(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/paperclip-services/instances",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "getOrgServiceInstances",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Get organization URL
      * Returns the canonical HTTPS base URL for the organization. When a custom CNAME domain is configured, the response uses that hostname; otherwise it uses the org subdomain on the environment Fusebase host (for example `https://{sub}.dev-thefusebase.com`). Requires org.read and org access.

package/dist/apis/PortalsApi.d.ts

@@ -698,7 +698,7 @@ export declare class PortalsApi {
     }): Promise<ListPortalPageBlocksResponseContract>;
     /**
      * List organization portals
-     * Returns portals visible for the caller in the organization. Requires portals.read and org access.
+     * Returns portals visible for the caller in the organization. `metadata.columns` are the user-added custom columns of the portals dashboard (system columns omitted; empty when that dashboard does not exist). Requires portals.read and org access.
      */
     listPortals(params: {
         path: {

package/dist/apis/PortalsApi.js

@@ -814,7 +814,7 @@ class PortalsApi {
     }
     /**
      * List organization portals
-     * Returns portals visible for the caller in the organization. Requires portals.read and org access.
+     * Returns portals visible for the caller in the organization. `metadata.columns` are the user-added custom columns of the portals dashboard (system columns omitted; empty when that dashboard does not exist). Requires portals.read and org access.
      */
     async listPortals(params) {
         return this.client.request({

package/dist/apis/RoutesApi.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Routes API
+ *
+ * Generated from contract introspection
+ * Domain: routes
+ */
+import type { Client } from "../runtime/transport";
+import type { orgIdInPathRequired, ResolveRouteRequestContract, ResolveRouteResponseContract, RouteListResponseContract } from "../types";
+export declare class RoutesApi {
+    private client;
+    constructor(client: Client);
+    /**
+     * List product navigation routes
+     * Returns the allowlist of product locations Gate can link to, including required extra permissions and param names. Requires route.read and org access. Call this before resolveRoute. Do not invent a location id.
+     */
+    listRoutes(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<RouteListResponseContract>;
+    /**
+     * Resolve a product navigation route
+     * Turns a registered location plus ids into a canonical HTTPS link. Requires route.read, org access, and the location's extra permissions (for example sites.read for a Studio location). Does not search by name: pass ids you already have, or look them up with listWorkspaces, listWebStudioSites, or listOrgUsers first. status unsupported means the screen has no deep link; follow fallback when present.
+     */
+    resolveRoute(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: ResolveRouteRequestContract;
+    }): Promise<ResolveRouteResponseContract>;
+}

package/dist/apis/RoutesApi.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Routes API
+ *
+ * Generated from contract introspection
+ * Domain: routes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoutesApi = void 0;
+class RoutesApi {
+    constructor(client) {
+        this.client = client;
+    }
+    /**
+     * List product navigation routes
+     * Returns the allowlist of product locations Gate can link to, including required extra permissions and param names. Requires route.read and org access. Call this before resolveRoute. Do not invent a location id.
+     */
+    async listRoutes(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/routes",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "listRoutes",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Resolve a product navigation route
+     * Turns a registered location plus ids into a canonical HTTPS link. Requires route.read, org access, and the location's extra permissions (for example sites.read for a Studio location). Does not search by name: pass ids you already have, or look them up with listWorkspaces, listWebStudioSites, or listOrgUsers first. status unsupported means the screen has no deep link; follow fallback when present.
+     */
+    async resolveRoute(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/routes/resolve",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "resolveRoute",
+            expectedContentType: "application/json",
+        });
+    }
+}
+exports.RoutesApi = RoutesApi;

package/dist/apis/WorkspacesApi.d.ts

@@ -22,7 +22,7 @@ export declare class WorkspacesApi {
     }): Promise<OrgWorkspaceContract>;
     /**
      * List organization workspaces
-     * Returns workspaces visible for the caller in the organization and marks the default workspace. Requires org.read and org access.
+     * Returns workspaces visible for the caller in the organization and marks the default workspace. `metadata.columns` are the user-added custom columns of the workspaces dashboard (system columns omitted; empty when that dashboard does not exist). Requires org.read and org access.
      */
     listWorkspaces(params: {
         path: {

package/dist/apis/WorkspacesApi.js

@@ -28,7 +28,7 @@ class WorkspacesApi {
     }
     /**
      * List organization workspaces
-     * Returns workspaces visible for the caller in the organization and marks the default workspace. Requires org.read and org access.
+     * Returns workspaces visible for the caller in the organization and marks the default workspace. `metadata.columns` are the user-added custom columns of the workspaces dashboard (system columns omitted; empty when that dashboard does not exist). Requires org.read and org access.
      */
     async listWorkspaces(params) {
         return this.client.request({

package/dist/index.d.ts

@@ -23,6 +23,7 @@ export { OrgsApi } from "./apis/OrgsApi";
 export { PaperclipAgentsApi } from "./apis/PaperclipAgentsApi";
 export { PortalFeatureContextApi } from "./apis/PortalFeatureContextApi";
 export { PortalsApi } from "./apis/PortalsApi";
+export { RoutesApi } from "./apis/RoutesApi";
 export { SystemApi } from "./apis/SystemApi";
 export { TokensApi } from "./apis/TokensApi";
 export { WorkspacesApi } from "./apis/WorkspacesApi";

package/dist/index.js

@@ -19,7 +19,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.PortalsApi = exports.PortalFeatureContextApi = exports.PaperclipAgentsApi = exports.OrgsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.McpManagerApi = exports.IsolatedStoresApi = exports.HealthApi = exports.FusebaseAuthApi = exports.FilesApi = exports.EmailsApi = exports.BillingApi = exports.AppMagicLinksApi = exports.AppEmbedTargetsApi = exports.AppApisApi = exports.AccessApi = void 0;
+exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.RoutesApi = exports.PortalsApi = exports.PortalFeatureContextApi = exports.PaperclipAgentsApi = exports.OrgsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.McpManagerApi = exports.IsolatedStoresApi = exports.HealthApi = exports.FusebaseAuthApi = exports.FilesApi = exports.EmailsApi = exports.BillingApi = exports.AppMagicLinksApi = exports.AppEmbedTargetsApi = exports.AppApisApi = exports.AccessApi = void 0;
 __exportStar(require("./runtime"), exports);
 __exportStar(require("./types"), exports);
 var AccessApi_1 = require("./apis/AccessApi");
@@ -58,6 +58,8 @@ var PortalFeatureContextApi_1 = require("./apis/PortalFeatureContextApi");
 Object.defineProperty(exports, "PortalFeatureContextApi", { enumerable: true, get: function () { return PortalFeatureContextApi_1.PortalFeatureContextApi; } });
 var PortalsApi_1 = require("./apis/PortalsApi");
 Object.defineProperty(exports, "PortalsApi", { enumerable: true, get: function () { return PortalsApi_1.PortalsApi; } });
+var RoutesApi_1 = require("./apis/RoutesApi");
+Object.defineProperty(exports, "RoutesApi", { enumerable: true, get: function () { return RoutesApi_1.RoutesApi; } });
 var SystemApi_1 = require("./apis/SystemApi");
 Object.defineProperty(exports, "SystemApi", { enumerable: true, get: function () { return SystemApi_1.SystemApi; } });
 var TokensApi_1 = require("./apis/TokensApi");

package/dist/types/file/file.d.ts

@@ -69,6 +69,14 @@ export interface BucketAttachmentContract {
     target: string;
     targetId: string;
     filename: string;
+    /**
+     * File kind detected from the mime type: `image`, `video`, `audio`, `doc`,
+     * `archive` or `file` for anything else.
+     */
+    kind: string;
+    /**
+     * @deprecated Same value as `kind`, kept for apps deployed before it existed.
+     */
     type: string;
     size: number;
     /**

package/dist/types/index.d.ts

@@ -18,11 +18,13 @@ export * from "./mcp-manager/mcp-manager";
 export type { MeAuthContract, MeOrgGroupContract, MePreferencesContract, MeResponseContract, MeScopeContract, MeUserContract } from "./me/me";
 export * from "./note/note";
 export * from "./org-group/org-group";
-export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberExpectedJoinedAfterInQueryOptional, OrgMemberExpectedRoleInQueryOptional, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
+export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, DashboardCustomColumnContract, DashboardCustomColumnMetadataContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberExpectedJoinedAfterInQueryOptional, OrgMemberExpectedRoleInQueryOptional, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
 export * from "./orgs/orgs";
 export type { CreatePaperclipAgentTaskRequestContract, PaperclipAgentRunContract, PaperclipAgentTaskAcceptedContract, PaperclipAgentTaskContract, PaperclipAgentTaskIdInPathRequired, PaperclipAgentTaskStatusContract, PaperclipCallableAgentContract, PaperclipCallableAgentListContract } from "./paperclip-agents/paperclip-agents";
+export * from "./paperclip-services/paperclip-services";
 export type { VerifyPortalFeatureContextTokenRequestContract, VerifyPortalFeatureContextTokenResponseContract } from "./portal-feature-context/portal-feature-context";
 export * from "./portals/portals";
+export * from "./routes/routes";
 export * from "./shared/common";
 export * from "./shared/enums";
 export type { GetHealth200ResponseContract } from "./shared/health";

package/dist/types/index.js

@@ -27,7 +27,9 @@ __exportStar(require("./mcp-manager/mcp-manager"), exports);
 __exportStar(require("./note/note"), exports);
 __exportStar(require("./org-group/org-group"), exports);
 __exportStar(require("./orgs/orgs"), exports);
+__exportStar(require("./paperclip-services/paperclip-services"), exports);
 __exportStar(require("./portals/portals"), exports);
+__exportStar(require("./routes/routes"), exports);
 __exportStar(require("./shared/common"), exports);
 __exportStar(require("./shared/enums"), exports);
 __exportStar(require("./system/system"), exports);

package/dist/types/org-user/org-user.d.ts

@@ -8,8 +8,31 @@ export interface OrgUserContract {
 }
 export type OrgUserIdInPathRequired = number;
 export type OrgUserWorkspaceIdInPathRequired = string;
+export interface DashboardCustomColumnContract {
+    key: string;
+    /** @nullable true */
+    alias: string | null;
+    name: string;
+    /** dashboard-service custom column type, for example `string` or `phone`. */
+    customType: string;
+    hidden: boolean;
+    readonly: boolean;
+    required: boolean;
+}
+/** User-added columns of one existing dashboard. Empty when that dashboard is absent. */
+export interface DashboardCustomColumnMetadataContract {
+    columns: DashboardCustomColumnContract[];
+}
 export interface OrgUserListResponseContract {
     users: OrgUserContract[];
+    /**
+     * Custom columns from the clients and members dashboards.
+     * Both dashboards describe users. System columns are omitted.
+     */
+    metadata: {
+        clients: DashboardCustomColumnMetadataContract;
+        members: DashboardCustomColumnMetadataContract;
+    };
 }
 export interface OrgUserAddRequestContract {
     /**
@@ -77,6 +100,8 @@ export interface OrgWorkspaceContract {
 }
 export interface OrgWorkspaceListResponseContract {
     workspaces: OrgWorkspaceContract[];
+    /** Custom columns of the workspaces dashboard. Empty when it does not exist. */
+    metadata: DashboardCustomColumnMetadataContract;
 }
 export interface CreateWorkspaceRequestContract {
     /** Display name for the new workspace. Required. */
@@ -95,6 +120,8 @@ export interface OrgPortalContract {
 }
 export interface OrgPortalListResponseContract {
     portals: OrgPortalContract[];
+    /** Custom columns of the portals dashboard. Empty when it does not exist. */
+    metadata: DashboardCustomColumnMetadataContract;
 }
 export interface OrgWorkspaceInviteContract {
     workspaceId: string;

package/dist/types/paperclip-services/paperclip-services.d.ts

@@ -0,0 +1,197 @@
+export type PaperclipServicesEntitlementSourceContract = "advanced_subscription" | "ltd_coupons" | "ltd_pack" | "ineligible";
+export type PaperclipServicesEntitlementErrorCodeContract = "ltd_coupons_below_minimum" | "ineligible" | "unavailable";
+export interface PaperclipServicesEntitlementContract {
+    eligible: boolean;
+    source: PaperclipServicesEntitlementSourceContract;
+    couponCount: number | null;
+    evaluatedAt: string;
+    errorCode?: PaperclipServicesEntitlementErrorCodeContract;
+    message?: string;
+}
+export interface PaperclipServicesEntitlementsContract {
+    n8n: PaperclipServicesEntitlementContract;
+    firecrawl: PaperclipServicesEntitlementContract;
+}
+export interface PaperclipServicesCapabilitiesContract {
+    provider: string;
+    providerVersion: string;
+    architecture: string;
+    featureAvailable: boolean;
+    firecrawlProxyManagement?: boolean;
+    entitlement?: PaperclipServicesEntitlementContract;
+    entitlements?: PaperclipServicesEntitlementsContract;
+}
+export interface PaperclipServicesResourceUsageContract {
+    cpu: string;
+    memory: string;
+    storage: string;
+    pods: number;
+    persistentVolumeClaims: number;
+}
+export interface PaperclipServicesCapacityContract {
+    currentProfile: string;
+    reserved: PaperclipServicesResourceUsageContract;
+    used: PaperclipServicesResourceUsageContract;
+    available: PaperclipServicesResourceUsageContract;
+    eligibleNextProfiles: string[];
+}
+export type PaperclipServicesComponentKindContract = "Deployment" | "StatefulSet";
+export type PaperclipServicesComponentStatusContract = "healthy" | "degraded" | "unhealthy" | "unknown";
+export interface PaperclipServicesComponentHealthContract {
+    appKey: string;
+    component: string;
+    kind: PaperclipServicesComponentKindContract;
+    status: PaperclipServicesComponentStatusContract;
+    desiredReplicas: number;
+    readyReplicas: number;
+    restartCount: number;
+    manifestRevision?: string;
+    reason?: string;
+}
+export interface PaperclipServicesHealthAlertContract {
+    code: string;
+    severity: "warning" | "critical";
+    message: string;
+    appKey?: string;
+    component?: string;
+}
+export interface PaperclipServicesHealthContract {
+    status: "healthy" | "degraded" | "unavailable";
+    checkedAt: string;
+    components: PaperclipServicesComponentHealthContract[];
+    alerts: PaperclipServicesHealthAlertContract[];
+    operations: {
+        pending: number;
+        running: number;
+        staleClaims: number;
+        needsManualReview: number;
+    };
+    reconciliation: {
+        orphanedWorkloads: number;
+        outdatedManifests: number;
+    };
+}
+export interface OrgServiceInstanceContract {
+    /** Set up for this organization. */
+    installed: boolean;
+    /** The organization may set it up. False means do not offer a setup flow. */
+    available: boolean;
+    url?: string;
+}
+export interface OrgServiceInstancesContract {
+    fusebaseWork: OrgServiceInstanceContract;
+    n8n: OrgServiceInstanceContract;
+    firecrawl: OrgServiceInstanceContract;
+}
+export type PaperclipServiceAppKeyContract = "n8n" | "firecrawl";
+export type PaperclipServiceAppKeyInPathRequired = string;
+export type PaperclipServiceOperationIdInPathRequired = string;
+export type PaperclipManagedCompanyIdInQueryRequired = string;
+export type FirecrawlProxyModeContract = "direct" | "custom_gateway" | "proxy_list" | "remote_list";
+export interface FirecrawlProxyUpdateContract {
+    mode: FirecrawlProxyModeContract;
+    server?: string;
+    username?: string;
+    password?: string;
+    proxies?: string[];
+    sourceUrl?: string;
+    sourceAuthorization?: string;
+    refreshIntervalSeconds?: number;
+}
+export interface FirecrawlProxyConfigureRequestContract {
+    orgRuntimeIdentity: string;
+    managedCompanyId: string;
+    update: FirecrawlProxyUpdateContract;
+}
+export interface FirecrawlProxySettingsContract {
+    available: boolean;
+    mode: FirecrawlProxyModeContract;
+    server: string | null;
+    usernameConfigured: boolean;
+    passwordConfigured: boolean;
+    proxyCount: number;
+    sourceConfigured: boolean;
+    sourceAuthorizationConfigured: boolean;
+    refreshIntervalSeconds: number | null;
+    /** @format date-time */
+    updatedAt: string | null;
+}
+export interface PaperclipServiceOperationRequestContract {
+    orgRuntimeIdentity: string;
+    managedCompanyId: string;
+    operationId: string;
+    idempotencyKey: string;
+    providerRef?: string;
+}
+export interface PaperclipServiceInstallRequestContract extends PaperclipServiceOperationRequestContract {
+    appKey: PaperclipServiceAppKeyContract;
+    approvedManifestRevision: string;
+}
+export interface PaperclipServiceUpgradeRequestContract extends PaperclipServiceOperationRequestContract {
+    appKey: PaperclipServiceAppKeyContract;
+    approvedManifestRevision: string;
+}
+export interface PaperclipServiceBackupRequestContract extends PaperclipServiceOperationRequestContract {
+    manifestRevision: string;
+}
+export interface PaperclipServiceRestoreRequestContract extends PaperclipServiceOperationRequestContract {
+    backupProviderRequestId: string;
+}
+export interface PaperclipServiceRetryRequestContract extends PaperclipServiceOperationRequestContract {
+    action: "install" | "delete" | "upgrade" | "backup" | "restore";
+}
+export type PaperclipServiceOperationStatusContract = "pending" | "running" | "succeeded" | "failed" | "needs_manual_review";
+export interface PaperclipServiceOperationContract {
+    providerRequestId: string;
+    status: PaperclipServiceOperationStatusContract;
+    providerRef?: string;
+    providerRouteRef?: string;
+    observedState: Record<string, unknown>;
+    error?: string;
+}
+export interface PaperclipServiceInstallResultContract {
+    outcome: "accepted" | "insufficient_capacity";
+    operation?: PaperclipServiceOperationContract;
+    requested?: PaperclipServicesResourceUsageContract;
+    available?: PaperclipServicesResourceUsageContract;
+    requiredProfile?: string;
+    eligibleProfiles?: string[];
+}
+export declare const PaperclipServicesEntitlementSourceContract: {
+    readonly AdvancedSubscription: "advanced_subscription";
+    readonly LtdCoupons: "ltd_coupons";
+    readonly LtdPack: "ltd_pack";
+    readonly Ineligible: "ineligible";
+};
+export declare const PaperclipServicesEntitlementErrorCodeContract: {
+    readonly LtdCouponsBelowMinimum: "ltd_coupons_below_minimum";
+    readonly Ineligible: "ineligible";
+    readonly Unavailable: "unavailable";
+};
+export declare const PaperclipServicesComponentKindContract: {
+    readonly Deployment: "Deployment";
+    readonly Statefulset: "StatefulSet";
+};
+export declare const PaperclipServicesComponentStatusContract: {
+    readonly Healthy: "healthy";
+    readonly Degraded: "degraded";
+    readonly Unhealthy: "unhealthy";
+    readonly Unknown: "unknown";
+};
+export declare const PaperclipServiceAppKeyContract: {
+    readonly N8n: "n8n";
+    readonly Firecrawl: "firecrawl";
+};
+export declare const FirecrawlProxyModeContract: {
+    readonly Direct: "direct";
+    readonly CustomGateway: "custom_gateway";
+    readonly ProxyList: "proxy_list";
+    readonly RemoteList: "remote_list";
+};
+export declare const PaperclipServiceOperationStatusContract: {
+    readonly Pending: "pending";
+    readonly Running: "running";
+    readonly Succeeded: "succeeded";
+    readonly Failed: "failed";
+    readonly NeedsManualReview: "needs_manual_review";
+};

package/dist/types/paperclip-services/paperclip-services.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaperclipServiceOperationStatusContract = exports.FirecrawlProxyModeContract = exports.PaperclipServiceAppKeyContract = exports.PaperclipServicesComponentStatusContract = exports.PaperclipServicesComponentKindContract = exports.PaperclipServicesEntitlementErrorCodeContract = exports.PaperclipServicesEntitlementSourceContract = void 0;
+exports.PaperclipServicesEntitlementSourceContract = {
+    AdvancedSubscription: "advanced_subscription",
+    LtdCoupons: "ltd_coupons",
+    LtdPack: "ltd_pack",
+    Ineligible: "ineligible"
+};
+exports.PaperclipServicesEntitlementErrorCodeContract = {
+    LtdCouponsBelowMinimum: "ltd_coupons_below_minimum",
+    Ineligible: "ineligible",
+    Unavailable: "unavailable"
+};
+exports.PaperclipServicesComponentKindContract = {
+    Deployment: "Deployment",
+    Statefulset: "StatefulSet"
+};
+exports.PaperclipServicesComponentStatusContract = {
+    Healthy: "healthy",
+    Degraded: "degraded",
+    Unhealthy: "unhealthy",
+    Unknown: "unknown"
+};
+exports.PaperclipServiceAppKeyContract = {
+    N8n: "n8n",
+    Firecrawl: "firecrawl"
+};
+exports.FirecrawlProxyModeContract = {
+    Direct: "direct",
+    CustomGateway: "custom_gateway",
+    ProxyList: "proxy_list",
+    RemoteList: "remote_list"
+};
+exports.PaperclipServiceOperationStatusContract = {
+    Pending: "pending",
+    Running: "running",
+    Succeeded: "succeeded",
+    Failed: "failed",
+    NeedsManualReview: "needs_manual_review"
+};

package/dist/types/routes/routes.d.ts

@@ -0,0 +1,49 @@
+export type RouteOpenInContract = "same_tab" | "new_tab";
+export type RouteResolveStatusContract = "ok" | "unsupported";
+export interface RouteCatalogEntryContract {
+    location: string;
+    title: string;
+    /** False when the screen exists but has no URL. Use `fallback`. */
+    linkable: boolean;
+    /** Permissions the caller must already hold, in addition to `route.read`. */
+    requires: string[];
+    /** Param names this location accepts. `workspaceId` may also come from `context`. */
+    params: string[];
+    openIn?: RouteOpenInContract;
+    fallback?: string;
+}
+export interface RouteListResponseContract {
+    routes: RouteCatalogEntryContract[];
+}
+export interface RouteContextContract {
+    /** Workspace the person is in. Used as the web-client shell path. */
+    workspaceId?: string;
+    siteId?: string;
+    branchId?: string;
+}
+export interface ResolveRouteRequestContract {
+    /** Registry id from listRoutes. Not a URL and not a goto string. */
+    location: string;
+    params?: Record<string, string>;
+    context?: RouteContextContract;
+}
+export interface ResolveRouteFallbackContract {
+    location: string;
+    url: string;
+}
+export interface ResolveRouteResponseContract {
+    status: RouteResolveStatusContract;
+    location: string;
+    url?: string;
+    openIn?: RouteOpenInContract;
+    reason?: string;
+    fallback?: ResolveRouteFallbackContract;
+}
+export declare const RouteOpenInContract: {
+    readonly SameTab: "same_tab";
+    readonly NewTab: "new_tab";
+};
+export declare const RouteResolveStatusContract: {
+    readonly Ok: "ok";
+    readonly Unsupported: "unsupported";
+};

package/dist/types/routes/routes.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RouteResolveStatusContract = exports.RouteOpenInContract = void 0;
+exports.RouteOpenInContract = {
+    SameTab: "same_tab",
+    NewTab: "new_tab"
+};
+exports.RouteResolveStatusContract = {
+    Ok: "ok",
+    Unsupported: "unsupported"
+};

package/dist/types/shared/enums.d.ts

@@ -3,7 +3,7 @@ export type PermissionContract = string & {
     __pattern: "^[a-z][a-z0-9_]*(\\.[a-z0-9_]+)*\\.(read|write|delete|execute|send|create|manage|bypass|delegate|client_invite)$";
 };
 export type RootEntityContract = "custom" | "portal" | "workspace" | "org" | "user" | "client" | "form" | "form-response" | "tracker" | "tracker-result" | "meeting";
-export type ScopeTypeContract = "org" | "workspace" | "portal" | "user" | "client" | "block" | "tracker" | "parent_row" | "parent_table";
+export type ScopeTypeContract = "org" | "workspace" | "portal" | "user" | "client" | "block" | "tracker" | "parent_row" | "parent_table" | "app";
 export type ScopeTypeOrgContract = "org";
 export declare const OrgRoleContract: {
     readonly Owner: "owner";
@@ -36,6 +36,7 @@ export declare const ScopeTypeContract: {
     readonly Tracker: "tracker";
     readonly ParentRow: "parent_row";
     readonly ParentTable: "parent_table";
+    readonly App: "app";
 };
 export declare const ScopeTypeOrgContract: {
     readonly Org: "org";

package/dist/types/shared/enums.js

@@ -32,7 +32,8 @@ exports.ScopeTypeContract = {
     Block: "block",
     Tracker: "tracker",
     ParentRow: "parent_row",
-    ParentTable: "parent_table"
+    ParentTable: "parent_table",
+    App: "app"
 };
 exports.ScopeTypeOrgContract = {
     Org: "org"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.11.9",
+  "version": "2.12.0",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.12.0.md

@@ -0,0 +1,9 @@
+# Release Notes 2.12.0
+
+- Current ref: `HEAD`
+- Previous tag: `v2.12.0`
+- Generated at: 2026-09-28T09:44:29.506Z
+
+## Included Drafts
+
+- None

package/release-notes/latest.md

@@ -1,8 +1,8 @@
-# Release Notes 2.11.9
+# Release Notes 2.12.0
 
 - Current ref: `HEAD`
-- Previous tag: `v2.11.9`
-- Generated at: 2026-09-24T07:49:55.731Z
+- Previous tag: `v2.12.0`
+- Generated at: 2026-09-28T09:44:29.506Z
 
 ## Included Drafts
 

package/release-notes/2.11.9.md

@@ -1,9 +0,0 @@
-# Release Notes 2.11.9
-
-- Current ref: `HEAD`
-- Previous tag: `v2.11.9`
-- Generated at: 2026-09-24T07:49:55.731Z
-
-## Included Drafts
-
-- None