@fusebase/fusebase-gate-sdk 2.11.9 → 2.12.3-sdk.0

package/dist/apis/AppApisApi.d.ts

@@ -11,7 +11,7 @@ export declare class AppApisApi {
     constructor(client: Client);
     /**
      * Call app API operation
-     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400.
+     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400. `orgId` is the calling organization: a managed app published by another org resolves and runs under its owner org, while the token and the runtime stay scoped to the calling org, which also arrives as `X-Fusebase-Verified-Org-Id`.
      */
     callAppApi(params: {
         path: {

package/dist/apis/AppApisApi.js

@@ -13,7 +13,7 @@ class AppApisApi {
     }
     /**
      * Call app API operation
-     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400.
+     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user. Pass `headers` to forward extra request headers to the runtime, for operations that require one such as `Idempotency-Key`; headers Gate sets itself (auth and `X-Fusebase-*` identity headers) are reserved and rejected with 400. `orgId` is the calling organization: a managed app published by another org resolves and runs under its owner org, while the token and the runtime stay scoped to the calling org, which also arrives as `X-Fusebase-Verified-Org-Id`.
      */
     async callAppApi(params) {
         return this.client.request({

package/dist/apis/FilesApi.d.ts

@@ -56,7 +56,7 @@ export declare class FilesApi {
     }): Promise<DeleteFileResponseContract>;
     /**
      * List bucket attachments
-     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
+     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, its file `kind` (`image`, `video`, `audio`, `doc`, `archive` or `file`, detected from the mime type), the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, keep only some apps or other sources with `targetIds` (matched against the item `targetId`; a bare app id needs `targets` set to `app`), drop small files with `sizeFrom`, keep only the files one user uploaded with `uploaderId`, keep only some file types with `kinds`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
      */
     listBucketAttachments(params: {
         path: {
@@ -64,7 +64,10 @@ export declare class FilesApi {
         };
         query?: {
             targets?: unknown[];
+            targetIds?: unknown[];
             sizeFrom?: number;
+            uploaderId?: number;
+            kinds?: unknown[];
             attributes?: string;
             limit?: number;
             offset?: number;
@@ -73,6 +76,17 @@ export declare class FilesApi {
         };
         headers?: Record<string, string>;
     }): Promise<ListBucketAttachmentsResponseContract>;
+    /**
+     * Remove bucket attachment
+     * Removes a file of the organization from the organization file listing, whatever its source (app, note or portal). Only the uploader or an organization manager or owner may remove it.
+     */
+    removeBucketAttachment(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            globalId: BucketAttachmentGlobalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<BucketAttachmentContract>;
     /**
      * Start multipart file upload
      * Starts a file-service multipart upload and returns direct PUT URLs. Clients upload each part to the returned URLs, keep each response ETag, and pass those ETags to completeMultipartFileUpload.
@@ -86,7 +100,7 @@ export declare class FilesApi {
     }): Promise<StartMultipartFileUploadResponseContract>;
     /**
      * Update bucket attachment
-     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
+     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Works on any file of the organization; `accessPrincipals` only on app files. Only the uploader or an organization manager or owner may change `attributes` or `accessPrincipals`. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
      */
     updateBucketAttachment(params: {
         path: {

package/dist/apis/FilesApi.js

@@ -73,7 +73,7 @@ class FilesApi {
     }
     /**
      * List bucket attachments
-     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, drop small files with `sizeFrom`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
+     * Lists the organization's files from every source in one list: files uploaded into an app (`app`), note attachments (`note`) and portal files (`portalPage`, `portalGlobal`, `portalFiles`, `portalBlock`). Each item carries its source `target`, its file `kind` (`image`, `video`, `audio`, `doc`, `archive` or `file`, detected from the mime type), the uploader `userId` (resolve the email and role with the org-users operations), the `size` in bytes, the custom `attributes` and the `accessPrincipals`. Filter by source with `targets`, keep only some apps or other sources with `targetIds` (matched against the item `targetId`; a bare app id needs `targets` set to `app`), drop small files with `sizeFrom`, keep only the files one user uploaded with `uploaderId`, keep only some file types with `kinds`, and match custom metadata with `attributes`, a JSON object of strings sent as a string, such as `{"source":"file-manager"}`, where every given pair must match exactly (`total` follows the same filter). Clients only receive files their access principals or the bucket permissions allow.
      */
     async listBucketAttachments(params) {
         return this.client.request({
@@ -86,6 +86,20 @@ class FilesApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Remove bucket attachment
+     * Removes a file of the organization from the organization file listing, whatever its source (app, note or portal). Only the uploader or an organization manager or owner may remove it.
+     */
+    async removeBucketAttachment(params) {
+        return this.client.request({
+            method: "DELETE",
+            path: "/:orgId/bucket-attachments/:globalId",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "removeBucketAttachment",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Start multipart file upload
      * Starts a file-service multipart upload and returns direct PUT URLs. Clients upload each part to the returned URLs, keep each response ETag, and pass those ETags to completeMultipartFileUpload.
@@ -103,7 +117,7 @@ class FilesApi {
     }
     /**
      * Update bucket attachment
-     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
+     * Renames a bucket attachment or replaces its attributes and accessPrincipals. Works on any file of the organization; `accessPrincipals` only on app files. Only the uploader or an organization manager or owner may change `attributes` or `accessPrincipals`. Send `accessPrincipals: null` to drop every restriction and show the file to everyone who can see the organization bucket.
      */
     async updateBucketAttachment(params) {
         return this.client.request({

package/dist/apis/OrgUsersApi.d.ts

@@ -22,7 +22,7 @@ export declare class OrgUsersApi {
     }): Promise<OrgUserAddResponseContract>;
     /**
      * List organization users
-     * Returns the list of users (members) of the organization. Requires org.members.read and org access.
+     * Returns the list of users of the organization, including clients and members. `metadata.clients` and `metadata.members` are the user-added custom columns of those dashboards (system columns omitted; empty when a dashboard does not exist). Requires org.members.read and org access.
      */
     listOrgUsers(params: {
         path: {

package/dist/apis/OrgUsersApi.js

@@ -28,7 +28,7 @@ class OrgUsersApi {
     }
     /**
      * List organization users
-     * Returns the list of users (members) of the organization. Requires org.members.read and org access.
+     * Returns the list of users of the organization, including clients and members. `metadata.clients` and `metadata.members` are the user-added custom columns of those dashboards (system columns omitted; empty when a dashboard does not exist). Requires org.members.read and org access.
      */
     async listOrgUsers(params) {
         return this.client.request({

package/dist/apis/OrgsApi.d.ts

@@ -5,10 +5,20 @@
  * Domain: orgs
  */
 import type { Client } from "../runtime/transport";
-import type { orgIdInPathRequired, OrgUrlResponseContract } from "../types";
+import type { orgIdInPathRequired, OrgServiceInstancesContract, OrgUrlResponseContract } from "../types";
 export declare class OrgsApi {
     private client;
     constructor(client: Client);
+    /**
+     * Discover installed org services
+     * Reports, for FuseBase Work, N8N and Firecrawl, whether the service is set up for the organization (`installed`), whether the organization may set it up (`available`), and its `url` once it can be reached. When `installed` is false and `available` is true, the user can be sent to the setup flow; when `available` is false, do not offer setup — the organization is not entitled to the service. An installed service without a `url` is still coming up.
+     */
+    getOrgServiceInstances(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<OrgServiceInstancesContract>;
     /**
      * Get organization URL
      * Returns the canonical HTTPS base URL for the organization. When a custom CNAME domain is configured, the response uses that hostname; otherwise it uses the org subdomain on the environment Fusebase host (for example `https://{sub}.dev-thefusebase.com`). Requires org.read and org access.

package/dist/apis/OrgsApi.js

@@ -11,6 +11,20 @@ class OrgsApi {
     constructor(client) {
         this.client = client;
     }
+    /**
+     * Discover installed org services
+     * Reports, for FuseBase Work, N8N and Firecrawl, whether the service is set up for the organization (`installed`), whether the organization may set it up (`available`), and its `url` once it can be reached. When `installed` is false and `available` is true, the user can be sent to the setup flow; when `available` is false, do not offer setup — the organization is not entitled to the service. An installed service without a `url` is still coming up.
+     */
+    async getOrgServiceInstances(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/paperclip-services/instances",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "getOrgServiceInstances",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Get organization URL
      * Returns the canonical HTTPS base URL for the organization. When a custom CNAME domain is configured, the response uses that hostname; otherwise it uses the org subdomain on the environment Fusebase host (for example `https://{sub}.dev-thefusebase.com`). Requires org.read and org access.

package/dist/apis/PortalsApi.d.ts

@@ -698,7 +698,7 @@ export declare class PortalsApi {
     }): Promise<ListPortalPageBlocksResponseContract>;
     /**
      * List organization portals
-     * Returns portals visible for the caller in the organization. Requires portals.read and org access.
+     * Returns portals visible for the caller in the organization. `metadata.columns` are the user-added custom columns of the portals dashboard (system columns omitted; empty when that dashboard does not exist). Requires portals.read and org access.
      */
     listPortals(params: {
         path: {

package/dist/apis/PortalsApi.js

@@ -814,7 +814,7 @@ class PortalsApi {
     }
     /**
      * List organization portals
-     * Returns portals visible for the caller in the organization. Requires portals.read and org access.
+     * Returns portals visible for the caller in the organization. `metadata.columns` are the user-added custom columns of the portals dashboard (system columns omitted; empty when that dashboard does not exist). Requires portals.read and org access.
      */
     async listPortals(params) {
         return this.client.request({

package/dist/apis/RoutesApi.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Routes API
+ *
+ * Generated from contract introspection
+ * Domain: routes
+ */
+import type { Client } from "../runtime/transport";
+import type { orgIdInPathRequired, ResolveRouteRequestContract, ResolveRouteResponseContract, RouteListResponseContract } from "../types";
+export declare class RoutesApi {
+    private client;
+    constructor(client: Client);
+    /**
+     * List product navigation routes
+     * Returns the allowlist of product locations Gate can link to, including required extra permissions and param names. Requires route.read and org access. Call this before resolveRoute. Do not invent a location id.
+     */
+    listRoutes(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<RouteListResponseContract>;
+    /**
+     * Resolve a product navigation route
+     * Turns a registered location plus ids into a canonical HTTPS link. Requires route.read, org access, and the location's extra permissions (for example sites.read for a Studio location). Does not search by name: pass ids you already have, or look them up with listWorkspaces, listWebStudioSites, or listOrgUsers first. status unsupported means the screen has no deep link; follow fallback when present.
+     */
+    resolveRoute(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: ResolveRouteRequestContract;
+    }): Promise<ResolveRouteResponseContract>;
+}

package/dist/apis/RoutesApi.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Routes API
+ *
+ * Generated from contract introspection
+ * Domain: routes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoutesApi = void 0;
+class RoutesApi {
+    constructor(client) {
+        this.client = client;
+    }
+    /**
+     * List product navigation routes
+     * Returns the allowlist of product locations Gate can link to, including required extra permissions and param names. Requires route.read and org access. Call this before resolveRoute. Do not invent a location id.
+     */
+    async listRoutes(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/routes",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "listRoutes",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Resolve a product navigation route
+     * Turns a registered location plus ids into a canonical HTTPS link. Requires route.read, org access, and the location's extra permissions (for example sites.read for a Studio location). Does not search by name: pass ids you already have, or look them up with listWorkspaces, listWebStudioSites, or listOrgUsers first. status unsupported means the screen has no deep link; follow fallback when present.
+     */
+    async resolveRoute(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/routes/resolve",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "resolveRoute",
+            expectedContentType: "application/json",
+        });
+    }
+}
+exports.RoutesApi = RoutesApi;

package/dist/apis/WorkspacesApi.d.ts

@@ -22,7 +22,7 @@ export declare class WorkspacesApi {
     }): Promise<OrgWorkspaceContract>;
     /**
      * List organization workspaces
-     * Returns workspaces visible for the caller in the organization and marks the default workspace. Requires org.read and org access.
+     * Returns workspaces visible for the caller in the organization and marks the default workspace. `metadata.columns` are the user-added custom columns of the workspaces dashboard (system columns omitted; empty when that dashboard does not exist). Requires org.read and org access.
      */
     listWorkspaces(params: {
         path: {

package/dist/apis/WorkspacesApi.js

@@ -28,7 +28,7 @@ class WorkspacesApi {
     }
     /**
      * List organization workspaces
-     * Returns workspaces visible for the caller in the organization and marks the default workspace. Requires org.read and org access.
+     * Returns workspaces visible for the caller in the organization and marks the default workspace. `metadata.columns` are the user-added custom columns of the workspaces dashboard (system columns omitted; empty when that dashboard does not exist). Requires org.read and org access.
      */
     async listWorkspaces(params) {
         return this.client.request({

package/dist/index.d.ts

@@ -23,6 +23,7 @@ export { OrgsApi } from "./apis/OrgsApi";
 export { PaperclipAgentsApi } from "./apis/PaperclipAgentsApi";
 export { PortalFeatureContextApi } from "./apis/PortalFeatureContextApi";
 export { PortalsApi } from "./apis/PortalsApi";
+export { RoutesApi } from "./apis/RoutesApi";
 export { SystemApi } from "./apis/SystemApi";
 export { TokensApi } from "./apis/TokensApi";
 export { WorkspacesApi } from "./apis/WorkspacesApi";

package/dist/index.js

@@ -19,7 +19,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.PortalsApi = exports.PortalFeatureContextApi = exports.PaperclipAgentsApi = exports.OrgsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.McpManagerApi = exports.IsolatedStoresApi = exports.HealthApi = exports.FusebaseAuthApi = exports.FilesApi = exports.EmailsApi = exports.BillingApi = exports.AppMagicLinksApi = exports.AppEmbedTargetsApi = exports.AppApisApi = exports.AccessApi = void 0;
+exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.RoutesApi = exports.PortalsApi = exports.PortalFeatureContextApi = exports.PaperclipAgentsApi = exports.OrgsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.McpManagerApi = exports.IsolatedStoresApi = exports.HealthApi = exports.FusebaseAuthApi = exports.FilesApi = exports.EmailsApi = exports.BillingApi = exports.AppMagicLinksApi = exports.AppEmbedTargetsApi = exports.AppApisApi = exports.AccessApi = void 0;
 __exportStar(require("./runtime"), exports);
 __exportStar(require("./types"), exports);
 var AccessApi_1 = require("./apis/AccessApi");
@@ -58,6 +58,8 @@ var PortalFeatureContextApi_1 = require("./apis/PortalFeatureContextApi");
 Object.defineProperty(exports, "PortalFeatureContextApi", { enumerable: true, get: function () { return PortalFeatureContextApi_1.PortalFeatureContextApi; } });
 var PortalsApi_1 = require("./apis/PortalsApi");
 Object.defineProperty(exports, "PortalsApi", { enumerable: true, get: function () { return PortalsApi_1.PortalsApi; } });
+var RoutesApi_1 = require("./apis/RoutesApi");
+Object.defineProperty(exports, "RoutesApi", { enumerable: true, get: function () { return RoutesApi_1.RoutesApi; } });
 var SystemApi_1 = require("./apis/SystemApi");
 Object.defineProperty(exports, "SystemApi", { enumerable: true, get: function () { return SystemApi_1.SystemApi; } });
 var TokensApi_1 = require("./apis/TokensApi");

package/dist/types/file/file.d.ts

@@ -69,6 +69,14 @@ export interface BucketAttachmentContract {
     target: string;
     targetId: string;
     filename: string;
+    /**
+     * File kind detected from the mime type: `image`, `video`, `audio`, `doc`,
+     * `archive` or `file` for anything else.
+     */
+    kind: string;
+    /**
+     * @deprecated Same value as `kind`, kept for apps deployed before it existed.
+     */
     type: string;
     size: number;
     /**

package/dist/types/index.d.ts

@@ -18,11 +18,13 @@ export * from "./mcp-manager/mcp-manager";
 export type { MeAuthContract, MeOrgGroupContract, MePreferencesContract, MeResponseContract, MeScopeContract, MeUserContract } from "./me/me";
 export * from "./note/note";
 export * from "./org-group/org-group";
-export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberExpectedJoinedAfterInQueryOptional, OrgMemberExpectedRoleInQueryOptional, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
+export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, DashboardCustomColumnContract, DashboardCustomColumnMetadataContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberExpectedJoinedAfterInQueryOptional, OrgMemberExpectedRoleInQueryOptional, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
 export * from "./orgs/orgs";
 export type { CreatePaperclipAgentTaskRequestContract, PaperclipAgentRunContract, PaperclipAgentTaskAcceptedContract, PaperclipAgentTaskContract, PaperclipAgentTaskIdInPathRequired, PaperclipAgentTaskStatusContract, PaperclipCallableAgentContract, PaperclipCallableAgentListContract } from "./paperclip-agents/paperclip-agents";
+export * from "./paperclip-services/paperclip-services";
 export type { VerifyPortalFeatureContextTokenRequestContract, VerifyPortalFeatureContextTokenResponseContract } from "./portal-feature-context/portal-feature-context";
 export * from "./portals/portals";
+export * from "./routes/routes";
 export * from "./shared/common";
 export * from "./shared/enums";
 export type { GetHealth200ResponseContract } from "./shared/health";

package/dist/types/index.js

@@ -27,7 +27,9 @@ __exportStar(require("./mcp-manager/mcp-manager"), exports);
 __exportStar(require("./note/note"), exports);
 __exportStar(require("./org-group/org-group"), exports);
 __exportStar(require("./orgs/orgs"), exports);
+__exportStar(require("./paperclip-services/paperclip-services"), exports);
 __exportStar(require("./portals/portals"), exports);
+__exportStar(require("./routes/routes"), exports);
 __exportStar(require("./shared/common"), exports);
 __exportStar(require("./shared/enums"), exports);
 __exportStar(require("./system/system"), exports);

package/dist/types/org-user/org-user.d.ts

@@ -8,8 +8,31 @@ export interface OrgUserContract {
 }
 export type OrgUserIdInPathRequired = number;
 export type OrgUserWorkspaceIdInPathRequired = string;
+export interface DashboardCustomColumnContract {
+    key: string;
+    /** @nullable true */
+    alias: string | null;
+    name: string;
+    /** dashboard-service custom column type, for example `string` or `phone`. */
+    customType: string;
+    hidden: boolean;
+    readonly: boolean;
+    required: boolean;
+}
+/** User-added columns of one existing dashboard. Empty when that dashboard is absent. */
+export interface DashboardCustomColumnMetadataContract {
+    columns: DashboardCustomColumnContract[];
+}
 export interface OrgUserListResponseContract {
     users: OrgUserContract[];
+    /**
+     * Custom columns from the clients and members dashboards.
+     * Both dashboards describe users. System columns are omitted.
+     */
+    metadata: {
+        clients: DashboardCustomColumnMetadataContract;
+        members: DashboardCustomColumnMetadataContract;
+    };
 }
 export interface OrgUserAddRequestContract {
     /**
@@ -77,6 +100,8 @@ export interface OrgWorkspaceContract {
 }
 export interface OrgWorkspaceListResponseContract {
     workspaces: OrgWorkspaceContract[];
+    /** Custom columns of the workspaces dashboard. Empty when it does not exist. */
+    metadata: DashboardCustomColumnMetadataContract;
 }
 export interface CreateWorkspaceRequestContract {
     /** Display name for the new workspace. Required. */
@@ -95,6 +120,8 @@ export interface OrgPortalContract {
 }
 export interface OrgPortalListResponseContract {
     portals: OrgPortalContract[];
+    /** Custom columns of the portals dashboard. Empty when it does not exist. */
+    metadata: DashboardCustomColumnMetadataContract;
 }
 export interface OrgWorkspaceInviteContract {
     workspaceId: string;

package/dist/types/paperclip-services/paperclip-services.d.ts

@@ -0,0 +1,197 @@
+export type PaperclipServicesEntitlementSourceContract = "advanced_subscription" | "ltd_coupons" | "ltd_pack" | "ineligible";
+export type PaperclipServicesEntitlementErrorCodeContract = "ltd_coupons_below_minimum" | "ineligible" | "unavailable";
+export interface PaperclipServicesEntitlementContract {
+    eligible: boolean;
+    source: PaperclipServicesEntitlementSourceContract;
+    couponCount: number | null;
+    evaluatedAt: string;
+    errorCode?: PaperclipServicesEntitlementErrorCodeContract;
+    message?: string;
+}
+export interface PaperclipServicesEntitlementsContract {
+    n8n: PaperclipServicesEntitlementContract;
+    firecrawl: PaperclipServicesEntitlementContract;
+}
+export interface PaperclipServicesCapabilitiesContract {
+    provider: string;
+    providerVersion: string;
+    architecture: string;
+    featureAvailable: boolean;
+    firecrawlProxyManagement?: boolean;
+    entitlement?: PaperclipServicesEntitlementContract;
+    entitlements?: PaperclipServicesEntitlementsContract;
+}
+export interface PaperclipServicesResourceUsageContract {
+    cpu: string;
+    memory: string;
+    storage: string;
+    pods: number;
+    persistentVolumeClaims: number;
+}
+export interface PaperclipServicesCapacityContract {
+    currentProfile: string;
+    reserved: PaperclipServicesResourceUsageContract;
+    used: PaperclipServicesResourceUsageContract;
+    available: PaperclipServicesResourceUsageContract;
+    eligibleNextProfiles: string[];
+}
+export type PaperclipServicesComponentKindContract = "Deployment" | "StatefulSet";
+export type PaperclipServicesComponentStatusContract = "healthy" | "degraded" | "unhealthy" | "unknown";
+export interface PaperclipServicesComponentHealthContract {
+    appKey: string;
+    component: string;
+    kind: PaperclipServicesComponentKindContract;
+    status: PaperclipServicesComponentStatusContract;
+    desiredReplicas: number;
+    readyReplicas: number;
+    restartCount: number;
+    manifestRevision?: string;
+    reason?: string;
+}
+export interface PaperclipServicesHealthAlertContract {
+    code: string;
+    severity: "warning" | "critical";
+    message: string;
+    appKey?: string;
+    component?: string;
+}
+export interface PaperclipServicesHealthContract {
+    status: "healthy" | "degraded" | "unavailable";
+    checkedAt: string;
+    components: PaperclipServicesComponentHealthContract[];
+    alerts: PaperclipServicesHealthAlertContract[];
+    operations: {
+        pending: number;
+        running: number;
+        staleClaims: number;
+        needsManualReview: number;
+    };
+    reconciliation: {
+        orphanedWorkloads: number;
+        outdatedManifests: number;
+    };
+}
+export interface OrgServiceInstanceContract {
+    /** Set up for this organization. */
+    installed: boolean;
+    /** The organization may set it up. False means do not offer a setup flow. */
+    available: boolean;
+    url?: string;
+}
+export interface OrgServiceInstancesContract {
+    fusebaseWork: OrgServiceInstanceContract;
+    n8n: OrgServiceInstanceContract;
+    firecrawl: OrgServiceInstanceContract;
+}
+export type PaperclipServiceAppKeyContract = "n8n" | "firecrawl";
+export type PaperclipServiceAppKeyInPathRequired = string;
+export type PaperclipServiceOperationIdInPathRequired = string;
+export type PaperclipManagedCompanyIdInQueryRequired = string;
+export type FirecrawlProxyModeContract = "direct" | "custom_gateway" | "proxy_list" | "remote_list";
+export interface FirecrawlProxyUpdateContract {
+    mode: FirecrawlProxyModeContract;
+    server?: string;
+    username?: string;
+    password?: string;
+    proxies?: string[];
+    sourceUrl?: string;
+    sourceAuthorization?: string;
+    refreshIntervalSeconds?: number;
+}
+export interface FirecrawlProxyConfigureRequestContract {
+    orgRuntimeIdentity: string;
+    managedCompanyId: string;
+    update: FirecrawlProxyUpdateContract;
+}
+export interface FirecrawlProxySettingsContract {
+    available: boolean;
+    mode: FirecrawlProxyModeContract;
+    server: string | null;
+    usernameConfigured: boolean;
+    passwordConfigured: boolean;
+    proxyCount: number;
+    sourceConfigured: boolean;
+    sourceAuthorizationConfigured: boolean;
+    refreshIntervalSeconds: number | null;
+    /** @format date-time */
+    updatedAt: string | null;
+}
+export interface PaperclipServiceOperationRequestContract {
+    orgRuntimeIdentity: string;
+    managedCompanyId: string;
+    operationId: string;
+    idempotencyKey: string;
+    providerRef?: string;
+}
+export interface PaperclipServiceInstallRequestContract extends PaperclipServiceOperationRequestContract {
+    appKey: PaperclipServiceAppKeyContract;
+    approvedManifestRevision: string;
+}
+export interface PaperclipServiceUpgradeRequestContract extends PaperclipServiceOperationRequestContract {
+    appKey: PaperclipServiceAppKeyContract;
+    approvedManifestRevision: string;
+}
+export interface PaperclipServiceBackupRequestContract extends PaperclipServiceOperationRequestContract {
+    manifestRevision: string;
+}
+export interface PaperclipServiceRestoreRequestContract extends PaperclipServiceOperationRequestContract {
+    backupProviderRequestId: string;
+}
+export interface PaperclipServiceRetryRequestContract extends PaperclipServiceOperationRequestContract {
+    action: "install" | "delete" | "upgrade" | "backup" | "restore";
+}
+export type PaperclipServiceOperationStatusContract = "pending" | "running" | "succeeded" | "failed" | "needs_manual_review";
+export interface PaperclipServiceOperationContract {
+    providerRequestId: string;
+    status: PaperclipServiceOperationStatusContract;
+    providerRef?: string;
+    providerRouteRef?: string;
+    observedState: Record<string, unknown>;
+    error?: string;
+}
+export interface PaperclipServiceInstallResultContract {
+    outcome: "accepted" | "insufficient_capacity";
+    operation?: PaperclipServiceOperationContract;
+    requested?: PaperclipServicesResourceUsageContract;
+    available?: PaperclipServicesResourceUsageContract;
+    requiredProfile?: string;
+    eligibleProfiles?: string[];
+}
+export declare const PaperclipServicesEntitlementSourceContract: {
+    readonly AdvancedSubscription: "advanced_subscription";
+    readonly LtdCoupons: "ltd_coupons";
+    readonly LtdPack: "ltd_pack";
+    readonly Ineligible: "ineligible";
+};
+export declare const PaperclipServicesEntitlementErrorCodeContract: {
+    readonly LtdCouponsBelowMinimum: "ltd_coupons_below_minimum";
+    readonly Ineligible: "ineligible";
+    readonly Unavailable: "unavailable";
+};
+export declare const PaperclipServicesComponentKindContract: {
+    readonly Deployment: "Deployment";
+    readonly Statefulset: "StatefulSet";
+};
+export declare const PaperclipServicesComponentStatusContract: {
+    readonly Healthy: "healthy";
+    readonly Degraded: "degraded";
+    readonly Unhealthy: "unhealthy";
+    readonly Unknown: "unknown";
+};
+export declare const PaperclipServiceAppKeyContract: {
+    readonly N8n: "n8n";
+    readonly Firecrawl: "firecrawl";
+};
+export declare const FirecrawlProxyModeContract: {
+    readonly Direct: "direct";
+    readonly CustomGateway: "custom_gateway";
+    readonly ProxyList: "proxy_list";
+    readonly RemoteList: "remote_list";
+};
+export declare const PaperclipServiceOperationStatusContract: {
+    readonly Pending: "pending";
+    readonly Running: "running";
+    readonly Succeeded: "succeeded";
+    readonly Failed: "failed";
+    readonly NeedsManualReview: "needs_manual_review";
+};

package/dist/types/paperclip-services/paperclip-services.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaperclipServiceOperationStatusContract = exports.FirecrawlProxyModeContract = exports.PaperclipServiceAppKeyContract = exports.PaperclipServicesComponentStatusContract = exports.PaperclipServicesComponentKindContract = exports.PaperclipServicesEntitlementErrorCodeContract = exports.PaperclipServicesEntitlementSourceContract = void 0;
+exports.PaperclipServicesEntitlementSourceContract = {
+    AdvancedSubscription: "advanced_subscription",
+    LtdCoupons: "ltd_coupons",
+    LtdPack: "ltd_pack",
+    Ineligible: "ineligible"
+};
+exports.PaperclipServicesEntitlementErrorCodeContract = {
+    LtdCouponsBelowMinimum: "ltd_coupons_below_minimum",
+    Ineligible: "ineligible",
+    Unavailable: "unavailable"
+};
+exports.PaperclipServicesComponentKindContract = {
+    Deployment: "Deployment",
+    Statefulset: "StatefulSet"
+};
+exports.PaperclipServicesComponentStatusContract = {
+    Healthy: "healthy",
+    Degraded: "degraded",
+    Unhealthy: "unhealthy",
+    Unknown: "unknown"
+};
+exports.PaperclipServiceAppKeyContract = {
+    N8n: "n8n",
+    Firecrawl: "firecrawl"
+};
+exports.FirecrawlProxyModeContract = {
+    Direct: "direct",
+    CustomGateway: "custom_gateway",
+    ProxyList: "proxy_list",
+    RemoteList: "remote_list"
+};
+exports.PaperclipServiceOperationStatusContract = {
+    Pending: "pending",
+    Running: "running",
+    Succeeded: "succeeded",
+    Failed: "failed",
+    NeedsManualReview: "needs_manual_review"
+};

package/dist/types/routes/routes.d.ts

@@ -0,0 +1,49 @@
+export type RouteOpenInContract = "same_tab" | "new_tab";
+export type RouteResolveStatusContract = "ok" | "unsupported";
+export interface RouteCatalogEntryContract {
+    location: string;
+    title: string;
+    /** False when the screen exists but has no URL. Use `fallback`. */
+    linkable: boolean;
+    /** Permissions the caller must already hold, in addition to `route.read`. */
+    requires: string[];
+    /** Param names this location accepts. `workspaceId` may also come from `context`. */
+    params: string[];
+    openIn?: RouteOpenInContract;
+    fallback?: string;
+}
+export interface RouteListResponseContract {
+    routes: RouteCatalogEntryContract[];
+}
+export interface RouteContextContract {
+    /** Workspace the person is in. Used as the web-client shell path. */
+    workspaceId?: string;
+    siteId?: string;
+    branchId?: string;
+}
+export interface ResolveRouteRequestContract {
+    /** Registry id from listRoutes. Not a URL and not a goto string. */
+    location: string;
+    params?: Record<string, string>;
+    context?: RouteContextContract;
+}
+export interface ResolveRouteFallbackContract {
+    location: string;
+    url: string;
+}
+export interface ResolveRouteResponseContract {
+    status: RouteResolveStatusContract;
+    location: string;
+    url?: string;
+    openIn?: RouteOpenInContract;
+    reason?: string;
+    fallback?: ResolveRouteFallbackContract;
+}
+export declare const RouteOpenInContract: {
+    readonly SameTab: "same_tab";
+    readonly NewTab: "new_tab";
+};
+export declare const RouteResolveStatusContract: {
+    readonly Ok: "ok";
+    readonly Unsupported: "unsupported";
+};

package/dist/types/routes/routes.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RouteResolveStatusContract = exports.RouteOpenInContract = void 0;
+exports.RouteOpenInContract = {
+    SameTab: "same_tab",
+    NewTab: "new_tab"
+};
+exports.RouteResolveStatusContract = {
+    Ok: "ok",
+    Unsupported: "unsupported"
+};

package/dist/types/shared/enums.d.ts

@@ -3,7 +3,7 @@ export type PermissionContract = string & {
     __pattern: "^[a-z][a-z0-9_]*(\\.[a-z0-9_]+)*\\.(read|write|delete|execute|send|create|manage|bypass|delegate|client_invite)$";
 };
 export type RootEntityContract = "custom" | "portal" | "workspace" | "org" | "user" | "client" | "form" | "form-response" | "tracker" | "tracker-result" | "meeting";
-export type ScopeTypeContract = "org" | "workspace" | "portal" | "user" | "client" | "block" | "tracker" | "parent_row" | "parent_table";
+export type ScopeTypeContract = "org" | "workspace" | "portal" | "user" | "client" | "block" | "tracker" | "parent_row" | "parent_table" | "app";
 export type ScopeTypeOrgContract = "org";
 export declare const OrgRoleContract: {
     readonly Owner: "owner";
@@ -36,6 +36,7 @@ export declare const ScopeTypeContract: {
     readonly Tracker: "tracker";
     readonly ParentRow: "parent_row";
     readonly ParentTable: "parent_table";
+    readonly App: "app";
 };
 export declare const ScopeTypeOrgContract: {
     readonly Org: "org";

package/dist/types/shared/enums.js

@@ -32,7 +32,8 @@ exports.ScopeTypeContract = {
     Block: "block",
     Tracker: "tracker",
     ParentRow: "parent_row",
-    ParentTable: "parent_table"
+    ParentTable: "parent_table",
+    App: "app"
 };
 exports.ScopeTypeOrgContract = {
     Org: "org"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.11.9",
+  "version": "2.12.3-sdk.0",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.12.3-sdk.0.md

@@ -0,0 +1,9 @@
+# Release Notes 2.12.3-sdk.0
+
+- Current ref: `HEAD`
+- Previous tag: `v2.12.3-sdk.0`
+- Generated at: 2026-09-29T09:19:11.863Z
+
+## Included Drafts
+
+- None

package/release-notes/latest.md

@@ -1,8 +1,8 @@
-# Release Notes 2.11.9
+# Release Notes 2.12.3-sdk.0
 
 - Current ref: `HEAD`
-- Previous tag: `v2.11.9`
-- Generated at: 2026-09-24T07:49:55.731Z
+- Previous tag: `v2.12.3-sdk.0`
+- Generated at: 2026-09-29T09:19:11.863Z
 
 ## Included Drafts
 

package/release-notes/2.11.8-sdk.0.md

@@ -1,252 +0,0 @@
-# Release Notes 2.11.8-sdk.0
-
-- Current ref: `HEAD`
-- Previous tag: `v2.11.7-sdk.0`
-- Generated at: 2026-09-21T10:48:18.778Z
-
-## Included Drafts
-
-- `docs/release-notes/2026-06-08-get-org-url.md` - Get organization URL
-- `docs/release-notes/2026-09-09-org-url-web-client-host.md` - getOrgUrl returns the web-client host
-- `docs/release-notes/2026-09-14-bucket-attachments.md` - Bucket attachments for app files
-- `docs/release-notes/2026-09-14-list-bucket-attachments.md` - One file list across app, note and portal files
-- `docs/release-notes/2026-09-14-presigned-file-upload.md` - Presigned single-request file upload
-- `docs/release-notes/2026-09-19-web-studio-motion-guidance.md` - Web Studio motion guidance
-
-## Summary
-
-### Get organization URL
-
-Gate exposes `GET /:orgId/url` (`getOrgUrl`) to resolve the canonical HTTPS base URL for an organization. The hostname follows org-service rules: custom CNAME domain when configured, otherwise `{sub}.{FUSEBASE_WEB_CLIENT_HOST}` (see the 2026-09-09 note; before that it was `{sub}.{FUSEBASE_HOST}`).
-
-### getOrgUrl returns the web-client host
-
-`getOrgUrl` built org subdomain URLs from `FUSEBASE_HOST` (the API host, e.g.
-`thefusebase.com`), so it returned `{sub}.thefusebase.com`. Users know their org by
-the web-client host (`{sub}.nimbusweb.me` on prod). Both hosts resolve, so the wrong
-one never failed loudly.
-
-`FUSEBASE_HOST` could not be repurposed — it also derives `app.thefusebase.com` for
-the auth-form URLs.
-
-### Bucket attachments for app files
-
-An app that uploaded a file through Gate had nowhere to put it: the stored file was
-not part of the organization's file listing, so the File Manager app could only ever
-show its own files. Gate now talks to bucket-service, so an uploaded file becomes an
-attachment in the organization's `app` bucket and shows up next to files from notes
-and portals.
-
-### One file list across app, note and portal files
-
-The File Manager app could only show the files it uploaded itself. `listBucketAttachments`
-returns the organization's files from every source in one list, with the metadata needed to
-filter them (source, uploader, size) and to show each file only to people who may see it.
-
-### Presigned single-request file upload
-
-Uploading a file through Gate always meant a multipart upload: start, PUT every part,
-complete. For a file small enough to fit in one request that is three round trips for
-no reason, and the completion step always created a stored-file record, which the
-File Manager app does not want — it creates its own bucket attachment instead.
-
-### Web Studio motion guidance
-
-Added the safe, declarative Web Studio motion contract to the Gate MCP prompt.
-
-
-## API / SDK Changes
-
-### Get organization URL
-
-- Added `getOrgUrl` operation and `OrgsApi.getOrgUrl` SDK client method.
-- Response fields: `url`, `host`, `kind` (`cname` | `subdomain`), `sub`, `customDomain`, `domainShorter`.
-- Permission: `org.read` with org-scoped authz.
-
-### Bucket attachments for app files
-
-- New op `createBucketAttachment`, `POST /:orgId/bucket-attachments` (`files.write`).
-  Body takes `tempStoredFileName` (required) plus optional `attributes`, `accessPrincipals`
-  and `folder`. Gate generates the attachment id and reads the owning app from the
-  token's `client` scope, so a call without an app token answers 400.
-- New op `updateBucketAttachment`, `PATCH /:orgId/bucket-attachments/:globalId`
-  (`files.write`). Body takes `filename`, `attributes` and `accessPrincipals`, all optional.
-  A field that is not sent stays as it is; `accessPrincipals: null` clears every
-  restriction. bucket-service statuses (400, 404) are passed through unchanged.
-- Both return the attachment as `globalId`, `target`, `targetId`, `filename`, `type`,
-  `size`, `userId`, `url`, `createdAt`, `attributes` and `accessPrincipals`.
-- MCP `files` prompt covers both ops, and the Gate files skill reference is
-  regenerated.
-
-### One file list across app, note and portal files
-
-- New op `listBucketAttachments`, `GET /:orgId/bucket-attachments` (`files.read`, clients
-  included). Query: `targets` (source buckets, for example `app` or `note`), `sizeFrom`
-  (bytes), `attributes`, `limit` (default 50, max 100), `offset`, `sortField`, `sortOrder`.
-- `attributes` keeps only the files whose custom metadata contains every given pair, as a
-  JSON object of strings such as `{"source":"file-manager"}` (max 50 keys, 255 chars per key
-  and value). `total` follows the same filter. A malformed filter is a 400, answered before
-  bucket-service is called.
-- Returns `{items, total}`. Each item carries `globalId`, `target` (the source), `targetId`,
-  `workspaceId`, `portalId`, `filename`, `type`, `size`, `userId` (the uploader), `url`,
-  `createdAt`, `attributes`, `accessPrincipals` and, for organization members, `permissions`.
-- `createBucketAttachment` and `updateBucketAttachment` now return the same three extra
-  fields (`workspaceId`, `portalId`, `permissions`), null for app files.
-- Gate resolves the caller's organization role and group memberships itself and forwards
-  them, with the caller's user id, to both the listing and the count. bucket-service then
-  decides what the caller may see. A client role is filtered in `client` permissions mode,
-  everyone else in `admin` mode.
-- `accessPrincipals.groupIds` on `createBucketAttachment` and `updateBucketAttachment` are
-  organization group global ids (strings), the ids org-service and bucket-service use.
-- MCP `files` prompt covers the new op, and the Gate files skill reference is regenerated.
-
-### Presigned single-request file upload
-
-- New op `createTempStoredFileUpload`, `POST /:orgId/files/uploads/presigned`
-  (`files.write`). Body takes `name` (required) plus optional `type`, `size`,
-  `folder` and `public`. It returns `uploadUrl`, `method`, `expiresAt`,
-  `tempStoredFileName`, and `headers` holding the single `content-type` header the
-  PUT may carry — the URL signs `host` only, so anything else breaks the signature.
-- `completeMultipartFileUpload` takes an optional `saveStoredFile` (default `true`).
-  With `false` it finishes the upload and skips the stored-file record.
-- `completeMultipartFileUpload` response gains `storedFileCreated` and
-  `tempStoredfileName`. `fileId` and `storedFileUUID` are now nullable — they are
-  null exactly when `saveStoredFile` was `false`.
-- MCP `files` prompt covers both, and the Gate files skill reference is regenerated.
-
-### Web Studio motion guidance
-
-No operation or SDK contract changed. The `webStudio` MCP prompt is now version
-`1.11.0` and describes the supported `reveal`, `count`, and `parallax` motion
-attributes and their bounded options.
-
-
-## Consumer Impact
-
-### Get organization URL
-
-- Apps and agents can stop hardcoding Fusebase hostnames when building org-scoped links.
-- Portal domains and app magic-link hosts remain separate surfaces; use `listPortals` or app APIs for those.
-
-### getOrgUrl returns the web-client host
-
-- Custom CNAME domains are unchanged — they already won over the host.
-- Deployments without the new variable keep the previous behaviour via the fallback.
-
-### Bucket attachments for app files
-
-- Nothing changes for existing callers: both ops are new and no existing response
-  shape moved.
-- Deployments need `BUCKET_SERVICE_URL`. Without it the two new ops answer 500 and
-  every other op is unaffected.
-- Gate calls bucket-service with the plain `Internal` header and no super secret, so
-  bucket-service authorizes the real user against the file's own organization. That
-  is what keeps an app from touching an attachment in another organization.
-
-### One file list across app, note and portal files
-
-- Nothing changes for existing callers: the op is new and the two added fields are optional.
-- A token issued for an app sees exactly what a user session for the same user sees: the
-  role and the group memberships are resolved from the organization membership and from
-  org-service, not from the request.
-- `total` is counted by bucket-service, which counts the page it would return, so the gate
-  asks it for up to 1000 files. A larger organization reports 1000.
-
-### Presigned single-request file upload
-
-- Existing callers are unaffected: `saveStoredFile` defaults to `true`, so the
-  response keeps the same values it had.
-- TypeScript consumers reading `storedFileUUID` from the completion response now see
-  `string | null` and have to narrow it. Checking `storedFileCreated` is the clearest
-  way.
-
-### Web Studio motion guidance
-
-MCP agents receive the same motion guidance as Studio Chat: they can request
-compiler-owned motion without attempting to add site-authored JavaScript.
-
-
-## Verification
-
-### Get organization URL
-
-- `npm test -- tests/unit/org-url-service.test.ts tests/unit/orgs-controller.test.ts`
-- `npm run build:sdk`
-- `npm run mcp:skills:generate`
-- `npm run mcp:skills:validate`
-
-### getOrgUrl returns the web-client host
-
-- `npm test -- tests/unit/config-env.test.ts tests/unit/orgs-controller.test.ts tests/unit/org-url-service.test.ts`
-
-### Bucket attachments for app files
-
-- `npm test -- tests/unit/files`
-- `npm run build`, `npm run build:sdk`, `npm run mcp:skills:generate`,
-  `npm run mcp:skills:validate`
-- e2e-sdk and mcp-e2e cover the update flow and the 400/404 cases against a fake
-  bucket-service. Creating an attachment needs a real app token (`client` scope),
-  so that path is covered by unit tests and by QA on dev (NIM-44491).
-
-### One file list across app, note and portal files
-
-- `npm test -- tests/unit/files tests/unit/bucket-service-client`
-- `npm run build`, `npm run build:sdk`, `npm run mcp:skills:generate`,
-  `npm run mcp:skills:validate`
-- e2e-sdk and mcp-e2e list app and note files against the fake bucket-service and check the
-  `targets` and `sizeFrom` filters. The fake enforces the caller access principals, and one
-  e2e-sdk case creates a real group, grants files by role and by group, and asserts both
-  a token and a user session see them while a file granted to neither stays hidden. Further
-  cases cover the `attributes` filter and its count, an app file addressed to another user
-  staying hidden from an org member, the uploader receiving their own restricted file, and a
-  client receiving the app file granted to the `client` role.
-
-### Presigned single-request file upload
-
-- `npm test -- tests/unit/files`
-- `npm run build`, `npm run build:sdk`, `npm run mcp:skills:generate`,
-  `npm run mcp:skills:validate`
-
-### Web Studio motion guidance
-
-- `npm run build`
-- `npm run mcp:skills:generate`
-- `npm run mcp:skills:validate` remains blocked locally because the `skills_ref`
-  Python module is unavailable.
-
-
-## Follow-ups
-
-### Get organization URL
-
-- None.
-
-### Bucket attachments for app files
-
-- `listBucketAttachments` (NIM-44489) returns the aggregated listing these
-  attachments join.
-
-### Presigned single-request file upload
-
-- `createBucketAttachment` (NIM-44488) is what turns `tempStoredFileName` into a
-  bucket attachment for the File Manager app.
-
-### Web Studio motion guidance
-
-Deploy the matching Web Studio compiler release before relying on motion
-attributes in published sites.
-
-
-## Changes
-
-### getOrgUrl returns the web-client host
-
-- New env variable `FUSEBASE_WEB_CLIENT_HOST` (`config.fusebaseWebClientHost`),
-  falling back to `FUSEBASE_HOST` when unset.
-- `getOrgUrl` now resolves subdomain org URLs against `fusebaseWebClientHost`, and so
-  do the markdown-note share URLs, which are built on the same org base.
-- The MCP prompt host bag carries `fusebaseWebClientHost` alongside `fusebaseHost`;
-  the `getOrgUrl` prompt example uses the web-client one. `fusebaseHost` keeps meaning
-  the API/platform host everywhere.
-- Added to nimbus-helm-chart `fusebase-gate` values and deployment env
-  (prod `nimbusweb.me`, dev `dev-thefusebase.com`).

package/release-notes/2.11.9.md

@@ -1,9 +0,0 @@
-# Release Notes 2.11.9
-
-- Current ref: `HEAD`
-- Previous tag: `v2.11.9`
-- Generated at: 2026-09-24T07:49:55.731Z
-
-## Included Drafts
-
-- None