@fusebase/fusebase-gate-sdk 2.2.2-sdk.1 → 2.2.2-sdk.3

package/dist/apis/AccessApi.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Access API
+ *
+ * Generated from contract introspection
+ * Domain: access
+ */
+import type { Client } from "../runtime/transport";
+import type { MyOrgAccessResponseContract, orgIdInPathRequired } from "../types";
+export declare class AccessApi {
+    private client;
+    constructor(client: Client);
+    /**
+     * Get current user's organization access status
+     * Returns the authenticated user's access status for the specified organization. Unlike org-scoped read endpoints, this route is available before membership exists so clients can distinguish authenticated-but-not-provisioned users from signed-out users.
+     */
+    getMyOrgAccess(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<MyOrgAccessResponseContract>;
+}

package/dist/apis/AccessApi.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * Access API
+ *
+ * Generated from contract introspection
+ * Domain: access
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessApi = void 0;
+class AccessApi {
+    constructor(client) {
+        this.client = client;
+    }
+    /**
+     * Get current user's organization access status
+     * Returns the authenticated user's access status for the specified organization. Unlike org-scoped read endpoints, this route is available before membership exists so clients can distinguish authenticated-but-not-provisioned users from signed-out users.
+     */
+    async getMyOrgAccess(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/me/access",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "getMyOrgAccess",
+            expectedContentType: "application/json",
+        });
+    }
+}
+exports.AccessApi = AccessApi;

package/dist/apis/NotesApi.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Notes API
+ *
+ * Generated from contract introspection
+ * Domain: notes
+ */
+import type { Client } from "../runtime/transport";
+import type { CreateWorkspaceNoteFolderRequestContract, CreateWorkspaceNoteFolderResponseContract, CreateWorkspaceNoteRequestContract, CreateWorkspaceNoteResponseContract, orgIdInPathRequired, WorkspaceIdInPathRequired, WorkspaceNoteContentResponseContract, WorkspaceNoteFolderListResponseContract, WorkspaceNoteIdInPathRequired, WorkspaceNoteListResponseContract, WorkspaceNoteParentIdInQueryOptional } from "../types";
+export declare class NotesApi {
+    private client;
+    constructor(client: Client);
+    /**
+     * Create workspace note
+     * Creates a note in the requested workspace. When parentId is omitted, gate uses `default`. Optional initial text or html can be appended after creation.
+     */
+    createWorkspaceNote(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            workspaceId: WorkspaceIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: CreateWorkspaceNoteRequestContract;
+    }): Promise<CreateWorkspaceNoteResponseContract>;
+    /**
+     * Create workspace note folder
+     * Creates a folder in the requested workspace. When parentId is omitted, gate uses `root`.
+     */
+    createWorkspaceNoteFolder(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            workspaceId: WorkspaceIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: CreateWorkspaceNoteFolderRequestContract;
+    }): Promise<CreateWorkspaceNoteFolderResponseContract>;
+    /**
+     * Read workspace note
+     * Returns the note title, parent metadata, and rendered html content for the requested workspace note.
+     */
+    getWorkspaceNote(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            workspaceId: WorkspaceIdInPathRequired;
+            noteId: WorkspaceNoteIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<WorkspaceNoteContentResponseContract>;
+    /**
+     * List workspace note folders
+     * Returns non-portal note folders for the requested workspace.
+     */
+    listWorkspaceNoteFolders(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            workspaceId: WorkspaceIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<WorkspaceNoteFolderListResponseContract>;
+    /**
+     * List workspace notes
+     * Returns non-portal notes for the requested workspace and parent folder. When parentId is omitted, gate defaults to the workspace root folder id `root`.
+     */
+    listWorkspaceNotes(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            workspaceId: WorkspaceIdInPathRequired;
+        };
+        query?: {
+            parentId?: WorkspaceNoteParentIdInQueryOptional;
+        };
+        headers?: Record<string, string>;
+    }): Promise<WorkspaceNoteListResponseContract>;
+}

package/dist/apis/NotesApi.js

@@ -0,0 +1,88 @@
+"use strict";
+/**
+ * Notes API
+ *
+ * Generated from contract introspection
+ * Domain: notes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotesApi = void 0;
+class NotesApi {
+    constructor(client) {
+        this.client = client;
+    }
+    /**
+     * Create workspace note
+     * Creates a note in the requested workspace. When parentId is omitted, gate uses `default`. Optional initial text or html can be appended after creation.
+     */
+    async createWorkspaceNote(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/workspaces/:workspaceId/notes",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "createWorkspaceNote",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Create workspace note folder
+     * Creates a folder in the requested workspace. When parentId is omitted, gate uses `root`.
+     */
+    async createWorkspaceNoteFolder(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/workspaces/:workspaceId/notes/folders",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "createWorkspaceNoteFolder",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Read workspace note
+     * Returns the note title, parent metadata, and rendered html content for the requested workspace note.
+     */
+    async getWorkspaceNote(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/workspaces/:workspaceId/notes/:noteId",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "getWorkspaceNote",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * List workspace note folders
+     * Returns non-portal note folders for the requested workspace.
+     */
+    async listWorkspaceNoteFolders(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/workspaces/:workspaceId/notes/folders",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "listWorkspaceNoteFolders",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * List workspace notes
+     * Returns non-portal notes for the requested workspace and parent folder. When parentId is omitted, gate defaults to the workspace root folder id `root`.
+     */
+    async listWorkspaceNotes(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/workspaces/:workspaceId/notes",
+            pathParams: params.path,
+            query: params.query,
+            headers: params.headers,
+            opId: "listWorkspaceNotes",
+            expectedContentType: "application/json",
+        });
+    }
+}
+exports.NotesApi = NotesApi;

package/dist/index.d.ts

@@ -5,8 +5,10 @@
  */
 export * from "./runtime";
 export * from "./types";
+export { AccessApi } from "./apis/AccessApi";
 export { EmailsApi } from "./apis/EmailsApi";
 export { HealthApi } from "./apis/HealthApi";
+export { NotesApi } from "./apis/NotesApi";
 export { OrgUsersApi } from "./apis/OrgUsersApi";
 export { PortalsApi } from "./apis/PortalsApi";
 export { SystemApi } from "./apis/SystemApi";

package/dist/index.js

@@ -19,13 +19,17 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.PortalsApi = exports.OrgUsersApi = exports.HealthApi = exports.EmailsApi = void 0;
+exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.PortalsApi = exports.OrgUsersApi = exports.NotesApi = exports.HealthApi = exports.EmailsApi = exports.AccessApi = void 0;
 __exportStar(require("./runtime"), exports);
 __exportStar(require("./types"), exports);
+var AccessApi_1 = require("./apis/AccessApi");
+Object.defineProperty(exports, "AccessApi", { enumerable: true, get: function () { return AccessApi_1.AccessApi; } });
 var EmailsApi_1 = require("./apis/EmailsApi");
 Object.defineProperty(exports, "EmailsApi", { enumerable: true, get: function () { return EmailsApi_1.EmailsApi; } });
 var HealthApi_1 = require("./apis/HealthApi");
 Object.defineProperty(exports, "HealthApi", { enumerable: true, get: function () { return HealthApi_1.HealthApi; } });
+var NotesApi_1 = require("./apis/NotesApi");
+Object.defineProperty(exports, "NotesApi", { enumerable: true, get: function () { return NotesApi_1.NotesApi; } });
 var OrgUsersApi_1 = require("./apis/OrgUsersApi");
 Object.defineProperty(exports, "OrgUsersApi", { enumerable: true, get: function () { return OrgUsersApi_1.OrgUsersApi; } });
 var PortalsApi_1 = require("./apis/PortalsApi");

package/dist/types/access/access.d.ts

@@ -0,0 +1,19 @@
+export type OrgMembershipStatus = "ready" | "none" | "expired" | "disabled";
+export type OrgAccessSource = "owner" | "member" | "none";
+export interface AuthenticatedUserSummaryContract {
+    id: number;
+    email?: string | null;
+    firstname?: string | null;
+    lastname?: string | null;
+}
+export interface MyOrgAccessResponseContract {
+    authenticated: true;
+    orgId: string;
+    hasOrgAccess: boolean;
+    membershipStatus: OrgMembershipStatus;
+    source: OrgAccessSource;
+    role?: string | null;
+    expiresAt?: number | null;
+    memberTTL?: number | null;
+    user: AuthenticatedUserSummaryContract;
+}

package/dist/types/access/access.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/index.d.ts

@@ -4,7 +4,9 @@
  * Re-exports all Contract types used by the SDK
  * Generated by SDK codegen
  */
+export type { AuthenticatedUserSummaryContract, MyOrgAccessResponseContract } from "./access/access";
 export type { OrgEmailSendRequestContract, OrgEmailSendResponseContract } from "./email/email";
+export * from "./note/note";
 export type { OrgInviteContract, OrgMagicLinkContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserListResponseContract, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract } from "./org-user/org-user";
 export * from "./shared/common";
 export * from "./shared/enums";

package/dist/types/index.js

@@ -20,6 +20,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./note/note"), exports);
 __exportStar(require("./shared/common"), exports);
 __exportStar(require("./shared/enums"), exports);
 __exportStar(require("./system/system"), exports);

package/dist/types/note/note.d.ts

@@ -0,0 +1,59 @@
+export type WorkspaceIdInPathRequired = string;
+export type WorkspaceNoteIdInPathRequired = string;
+export interface WorkspaceNoteSummaryContract {
+    globalId: string;
+    title?: string | null;
+    parentId?: string | null;
+}
+export interface WorkspaceNoteContentContract extends WorkspaceNoteSummaryContract {
+    html: string;
+}
+export interface WorkspaceNoteFolderListResponseContract {
+    folders: WorkspaceNoteSummaryContract[];
+}
+export interface WorkspaceNoteListResponseContract {
+    notes: WorkspaceNoteSummaryContract[];
+}
+export interface WorkspaceNoteContentResponseContract {
+    note: WorkspaceNoteContentContract;
+}
+export type WorkspaceNoteParentIdInQueryOptional = string | null;
+export type WorkspaceNoteContentFormatContract = "text" | "html";
+export interface WorkspaceNoteListQueryContract {
+    /**
+     * Folder global id to list notes from. When omitted, gate defaults to `root`.
+     */
+    parentId?: WorkspaceNoteParentIdInQueryOptional;
+}
+export interface CreateWorkspaceNoteFolderRequestContract {
+    title: string;
+    /**
+     * Parent folder global id. Defaults to `root`.
+     */
+    parentId?: string | null;
+}
+export interface CreateWorkspaceNoteFolderResponseContract {
+    folder: WorkspaceNoteSummaryContract;
+}
+export interface CreateWorkspaceNoteRequestContract {
+    title: string;
+    /**
+     * Parent folder global id. Defaults to `default`.
+     */
+    parentId?: string | null;
+    /**
+     * Optional initial text or html appended to the note after creation.
+     */
+    content?: string | null;
+    /**
+     * Content format used with `content`. Defaults to `text`.
+     */
+    format?: WorkspaceNoteContentFormatContract | null;
+}
+export interface CreateWorkspaceNoteResponseContract {
+    note: WorkspaceNoteSummaryContract;
+}
+export declare const WorkspaceNoteContentFormatContract: {
+    readonly Text: "text";
+    readonly Html: "html";
+};

package/dist/types/note/note.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkspaceNoteContentFormatContract = void 0;
+exports.WorkspaceNoteContentFormatContract = {
+    Text: "text",
+    Html: "html"
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.2.2-sdk.1",
+  "version": "2.2.2-sdk.3",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.2.2-sdk.3.md

@@ -0,0 +1,85 @@
+# Release Notes 2.2.2-sdk.3
+
+- Current ref: `HEAD`
+- Previous tag: `v2.2.2-sdk.2`
+- Generated at: 2026-03-30T12:29:12.945Z
+
+## Included Drafts
+
+- `docs/release-notes/2026-03-30-notes-list-ops.md` - 2026-03-30-notes-list-ops
+- `docs/release-notes/2026-03-30-notes-mcp-opaque-ids.md` - 2026-03-30-notes-mcp-opaque-ids
+
+## Summary
+
+### 2026-03-30-notes-list-ops
+
+Add Gate notes read and write endpoints for listing, reading, and creating workspace notes and folders.
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+Notes notes-tool validation and HTTP routing now match the note-service behavior more closely: MCP no longer treats note-service IDs as UUIDs, and the HTTP/SDK notes folder listing route no longer gets shadowed by the generic note-read route.
+
+
+## API / SDK Changes
+
+### 2026-03-30-notes-list-ops
+
+- Added `listWorkspaceNoteFolders` for `GET /:orgId/workspaces/:workspaceId/notes/folders`.
+- Added `listWorkspaceNotes` for `GET /:orgId/workspaces/:workspaceId/notes`.
+- Added `getWorkspaceNote` for `GET /:orgId/workspaces/:workspaceId/notes/:noteId`.
+- Added `createWorkspaceNoteFolder` for `POST /:orgId/workspaces/:workspaceId/notes/folders`.
+- Added `createWorkspaceNote` for `POST /:orgId/workspaces/:workspaceId/notes`.
+- Added the `notes.read` and `notes.write` service permissions for the new note operations.
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+- MCP notes tools no longer require UUID-formatted values for note-service IDs.
+- `GET /:orgId/workspaces/:workspaceId/notes/folders` now resolves to the folder-list operation instead of being captured by `/:noteId`.
+- Service runtime schema registration now overlays explicit opaque-string schemas for notes path/query params.
+
+
+## Consumer Impact
+
+### 2026-03-30-notes-list-ops
+
+- Consumers can now discover workspace note folders, fetch notes under a specific folder, read rendered html for a single note, and create folders or notes through Gate.
+- `listWorkspaceNotes` defaults to the workspace root when `parentId` is omitted.
+- `createWorkspaceNoteFolder` defaults `parentId` to `root`.
+- `createWorkspaceNote` defaults `parentId` to `default` and can append initial text or html content after creation.
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+- MCP consumers can pass real note-service IDs like `workspace-default-1` or `folder-projects-1` without hitting `INVALID_ARGS` UUID validation failures.
+- SDK and raw HTTP consumers can call the notes folder-list endpoint without it being misrouted into note-content fetching.
+- Notes E2E suites now reset fake note fixtures between tests so SDK/MCP coverage stays order-independent.
+
+
+## Verification
+
+### 2026-03-30-notes-list-ops
+
+- `npm run build`
+- `node --loader tsx scripts/build-sdk.mts`
+- `node --loader tsx scripts/generate-mcp-skills.mts`
+- `node --loader tsx scripts/validate-mcp-skills.mts`
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+- `npm run lint -- src/api/contracts/ops/notes/notes.ts src/api/contracts/schemas/runtime-schema-defs.ts src/api/contracts/schemas/runtime-schema-overrides.ts tests/unit/notes-contracts.test.ts tests/unit/notes-controller.test.ts`
+- `npm run test:unit -- --runTestsByPath tests/unit/notes-contracts.test.ts tests/unit/notes-controller.test.ts`
+- `npm run lint -- src/controllers/notes/notes.ts tests/helpers/fake-notes-store.ts tests/helpers/fake-note-service.ts tests/helpers/reset-fake-notes.ts tests/e2e-sdk/notes/0.list-workspace-notes.test.ts tests/e2e-sdk/notes/1.get-workspace-note.test.ts tests/e2e-sdk/notes/2.create-workspace-note.test.ts tests/mcp-e2e/notes/0.list-workspace-notes.test.ts tests/mcp-e2e/notes/1.get-workspace-note.test.ts tests/mcp-e2e/notes/2.create-workspace-note.test.ts tests/unit/notes-controller.test.ts tests/unit/notes-contracts.test.ts tests/unit/notes-routes.test.ts`
+- `npm run test:unit -- --runTestsByPath tests/unit/notes-controller.test.ts tests/unit/notes-contracts.test.ts tests/unit/notes-routes.test.ts`
+- `npm run mcp:skills:generate`
+- `npm run mcp:skills:validate`
+- Blocked locally: `env USE_BUILD_ARTIFACT=true npm run test:mcp-e2e:full` failed because `db:migrate:test` could not connect to MySQL at `localhost:3306`
+
+
+## Follow-ups
+
+### 2026-03-30-notes-list-ops
+
+- Confirm whether client and visitor roles should receive `notes.read` or `notes.write` in read-only org contexts.
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+- Re-run the MCP E2E suite in CI or an environment with the test MySQL instance available to confirm the notes MCP failures are resolved end to end.

package/release-notes/latest.md

@@ -1,9 +1,85 @@
-# Release Notes 2.2.2-sdk.1
+# Release Notes 2.2.2-sdk.3
 
 - Current ref: `HEAD`
-- Previous tag: `v2.2.2-sdk.1`
-- Generated at: 2026-03-27T16:03:26.172Z
+- Previous tag: `v2.2.2-sdk.2`
+- Generated at: 2026-03-30T12:29:12.945Z
 
 ## Included Drafts
 
-- None
+- `docs/release-notes/2026-03-30-notes-list-ops.md` - 2026-03-30-notes-list-ops
+- `docs/release-notes/2026-03-30-notes-mcp-opaque-ids.md` - 2026-03-30-notes-mcp-opaque-ids
+
+## Summary
+
+### 2026-03-30-notes-list-ops
+
+Add Gate notes read and write endpoints for listing, reading, and creating workspace notes and folders.
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+Notes notes-tool validation and HTTP routing now match the note-service behavior more closely: MCP no longer treats note-service IDs as UUIDs, and the HTTP/SDK notes folder listing route no longer gets shadowed by the generic note-read route.
+
+
+## API / SDK Changes
+
+### 2026-03-30-notes-list-ops
+
+- Added `listWorkspaceNoteFolders` for `GET /:orgId/workspaces/:workspaceId/notes/folders`.
+- Added `listWorkspaceNotes` for `GET /:orgId/workspaces/:workspaceId/notes`.
+- Added `getWorkspaceNote` for `GET /:orgId/workspaces/:workspaceId/notes/:noteId`.
+- Added `createWorkspaceNoteFolder` for `POST /:orgId/workspaces/:workspaceId/notes/folders`.
+- Added `createWorkspaceNote` for `POST /:orgId/workspaces/:workspaceId/notes`.
+- Added the `notes.read` and `notes.write` service permissions for the new note operations.
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+- MCP notes tools no longer require UUID-formatted values for note-service IDs.
+- `GET /:orgId/workspaces/:workspaceId/notes/folders` now resolves to the folder-list operation instead of being captured by `/:noteId`.
+- Service runtime schema registration now overlays explicit opaque-string schemas for notes path/query params.
+
+
+## Consumer Impact
+
+### 2026-03-30-notes-list-ops
+
+- Consumers can now discover workspace note folders, fetch notes under a specific folder, read rendered html for a single note, and create folders or notes through Gate.
+- `listWorkspaceNotes` defaults to the workspace root when `parentId` is omitted.
+- `createWorkspaceNoteFolder` defaults `parentId` to `root`.
+- `createWorkspaceNote` defaults `parentId` to `default` and can append initial text or html content after creation.
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+- MCP consumers can pass real note-service IDs like `workspace-default-1` or `folder-projects-1` without hitting `INVALID_ARGS` UUID validation failures.
+- SDK and raw HTTP consumers can call the notes folder-list endpoint without it being misrouted into note-content fetching.
+- Notes E2E suites now reset fake note fixtures between tests so SDK/MCP coverage stays order-independent.
+
+
+## Verification
+
+### 2026-03-30-notes-list-ops
+
+- `npm run build`
+- `node --loader tsx scripts/build-sdk.mts`
+- `node --loader tsx scripts/generate-mcp-skills.mts`
+- `node --loader tsx scripts/validate-mcp-skills.mts`
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+- `npm run lint -- src/api/contracts/ops/notes/notes.ts src/api/contracts/schemas/runtime-schema-defs.ts src/api/contracts/schemas/runtime-schema-overrides.ts tests/unit/notes-contracts.test.ts tests/unit/notes-controller.test.ts`
+- `npm run test:unit -- --runTestsByPath tests/unit/notes-contracts.test.ts tests/unit/notes-controller.test.ts`
+- `npm run lint -- src/controllers/notes/notes.ts tests/helpers/fake-notes-store.ts tests/helpers/fake-note-service.ts tests/helpers/reset-fake-notes.ts tests/e2e-sdk/notes/0.list-workspace-notes.test.ts tests/e2e-sdk/notes/1.get-workspace-note.test.ts tests/e2e-sdk/notes/2.create-workspace-note.test.ts tests/mcp-e2e/notes/0.list-workspace-notes.test.ts tests/mcp-e2e/notes/1.get-workspace-note.test.ts tests/mcp-e2e/notes/2.create-workspace-note.test.ts tests/unit/notes-controller.test.ts tests/unit/notes-contracts.test.ts tests/unit/notes-routes.test.ts`
+- `npm run test:unit -- --runTestsByPath tests/unit/notes-controller.test.ts tests/unit/notes-contracts.test.ts tests/unit/notes-routes.test.ts`
+- `npm run mcp:skills:generate`
+- `npm run mcp:skills:validate`
+- Blocked locally: `env USE_BUILD_ARTIFACT=true npm run test:mcp-e2e:full` failed because `db:migrate:test` could not connect to MySQL at `localhost:3306`
+
+
+## Follow-ups
+
+### 2026-03-30-notes-list-ops
+
+- Confirm whether client and visitor roles should receive `notes.read` or `notes.write` in read-only org contexts.
+
+### 2026-03-30-notes-mcp-opaque-ids
+
+- Re-run the MCP E2E suite in CI or an environment with the test MySQL instance available to confirm the notes MCP failures are resolved end to end.

package/release-notes/2.2.2-sdk.1.md

@@ -1,9 +0,0 @@
-# Release Notes 2.2.2-sdk.1
-
-- Current ref: `HEAD`
-- Previous tag: `v2.2.2-sdk.1`
-- Generated at: 2026-03-27T16:03:26.172Z
-
-## Included Drafts
-
-- None