@fusebase/fusebase-gate-sdk 2.2.6-sdk.4 → 2.2.9

package/dist/apis/FilesApi.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Files API
+ *
+ * Generated from contract introspection
+ * Domain: files
+ */
+import type { Client } from "../runtime/transport";
+import type { CompleteMultipartFileUploadRequestContract, CompleteMultipartFileUploadResponseContract, DeleteFileRequestContract, DeleteFileResponseContract, GetFileDownloadUrlRequestContract, GetFileDownloadUrlResponseContract, MultipartUploadIdInPathRequired, orgIdInPathRequired, PrepareFileUploadRequestContract, PrepareFileUploadResponseContract, StartMultipartFileUploadResponseContract } from "../types";
+export declare class FilesApi {
+    private client;
+    constructor(client: Client);
+    /**
+     * Complete multipart file upload
+     * Commits the provided Azure block ids for a previously started multipart upload.
+     */
+    completeMultipartFileUpload(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            uploadId: MultipartUploadIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: CompleteMultipartFileUploadRequestContract;
+    }): Promise<CompleteMultipartFileUploadResponseContract>;
+    /**
+     * Delete file
+     * Deletes an org-scoped Azure Blob by the previously returned fileId.
+     */
+    deleteFile(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: DeleteFileRequestContract;
+    }): Promise<DeleteFileResponseContract>;
+    /**
+     * Get file download URL
+     * Creates a short-lived Azure Blob download URL for a previously uploaded org-scoped file. Gate never handles the file bytes.
+     */
+    getFileDownloadUrl(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: GetFileDownloadUrlRequestContract;
+    }): Promise<GetFileDownloadUrlResponseContract>;
+    /**
+     * Prepare direct file upload
+     * Creates a short-lived Azure Blob upload URL for the organization. Gate never handles the file bytes.
+     */
+    prepareFileUpload(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: PrepareFileUploadRequestContract;
+    }): Promise<PrepareFileUploadResponseContract>;
+    /**
+     * Start multipart file upload
+     * Creates a short-lived Azure Blob upload URL for block staging and returns a signed, short-lived uploadId for later completion.
+     */
+    startMultipartFileUpload(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: PrepareFileUploadRequestContract;
+    }): Promise<StartMultipartFileUploadResponseContract>;
+}

package/dist/apis/FilesApi.js

@@ -0,0 +1,90 @@
+"use strict";
+/**
+ * Files API
+ *
+ * Generated from contract introspection
+ * Domain: files
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FilesApi = void 0;
+class FilesApi {
+    constructor(client) {
+        this.client = client;
+    }
+    /**
+     * Complete multipart file upload
+     * Commits the provided Azure block ids for a previously started multipart upload.
+     */
+    async completeMultipartFileUpload(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/files/uploads/:uploadId/complete",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "completeMultipartFileUpload",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Delete file
+     * Deletes an org-scoped Azure Blob by the previously returned fileId.
+     */
+    async deleteFile(params) {
+        return this.client.request({
+            method: "DELETE",
+            path: "/:orgId/files",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "deleteFile",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Get file download URL
+     * Creates a short-lived Azure Blob download URL for a previously uploaded org-scoped file. Gate never handles the file bytes.
+     */
+    async getFileDownloadUrl(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/files/download-url",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "getFileDownloadUrl",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Prepare direct file upload
+     * Creates a short-lived Azure Blob upload URL for the organization. Gate never handles the file bytes.
+     */
+    async prepareFileUpload(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/files/prepare-upload",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "prepareFileUpload",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Start multipart file upload
+     * Creates a short-lived Azure Blob upload URL for block staging and returns a signed, short-lived uploadId for later completion.
+     */
+    async startMultipartFileUpload(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/files/uploads/start",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "startMultipartFileUpload",
+            expectedContentType: "application/json",
+        });
+    }
+}
+exports.FilesApi = FilesApi;

package/dist/index.d.ts

@@ -8,6 +8,7 @@ export * from "./types";
 export { AccessApi } from "./apis/AccessApi";
 export { BillingApi } from "./apis/BillingApi";
 export { EmailsApi } from "./apis/EmailsApi";
+export { FilesApi } from "./apis/FilesApi";
 export { HealthApi } from "./apis/HealthApi";
 export { IsolatedStoresApi } from "./apis/IsolatedStoresApi";
 export { NotesApi } from "./apis/NotesApi";

package/dist/index.js

@@ -19,7 +19,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.PortalsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.IsolatedStoresApi = exports.HealthApi = exports.EmailsApi = exports.BillingApi = exports.AccessApi = void 0;
+exports.WorkspacesApi = exports.TokensApi = exports.SystemApi = exports.PortalsApi = exports.OrgUsersApi = exports.OrgGroupsApi = exports.NotesApi = exports.IsolatedStoresApi = exports.HealthApi = exports.FilesApi = exports.EmailsApi = exports.BillingApi = exports.AccessApi = void 0;
 __exportStar(require("./runtime"), exports);
 __exportStar(require("./types"), exports);
 var AccessApi_1 = require("./apis/AccessApi");
@@ -28,6 +28,8 @@ var BillingApi_1 = require("./apis/BillingApi");
 Object.defineProperty(exports, "BillingApi", { enumerable: true, get: function () { return BillingApi_1.BillingApi; } });
 var EmailsApi_1 = require("./apis/EmailsApi");
 Object.defineProperty(exports, "EmailsApi", { enumerable: true, get: function () { return EmailsApi_1.EmailsApi; } });
+var FilesApi_1 = require("./apis/FilesApi");
+Object.defineProperty(exports, "FilesApi", { enumerable: true, get: function () { return FilesApi_1.FilesApi; } });
 var HealthApi_1 = require("./apis/HealthApi");
 Object.defineProperty(exports, "HealthApi", { enumerable: true, get: function () { return HealthApi_1.HealthApi; } });
 var IsolatedStoresApi_1 = require("./apis/IsolatedStoresApi");

package/dist/types/file/file.d.ts

@@ -0,0 +1,84 @@
+export type FileIdInPathRequired = string;
+export type MultipartUploadIdInPathRequired = string;
+export type FileUploadMethodContract = "PUT";
+export type FileDownloadMethodContract = "GET";
+export interface PrepareFileUploadRequestContract {
+    filename: string;
+    contentType?: string | null;
+    folder?: string | null;
+}
+export interface DeleteFileRequestContract {
+    fileId: string;
+}
+export interface GetFileDownloadUrlRequestContract {
+    fileId: string;
+}
+export interface FileUploadHeadersContract {
+    "x-ms-blob-type": "BlockBlob";
+    "Content-Type": string;
+}
+export interface PrepareFileUploadResponseContract {
+    /**
+     * Blob path in Azure Storage. Use this exact value as `fileId` for deletion.
+     */
+    fileId: string;
+    /**
+     * @format uri
+     */
+    uploadUrl: string;
+    method: FileUploadMethodContract;
+    headers: FileUploadHeadersContract;
+    /**
+     * @format date-time
+     */
+    expiresAt: string;
+}
+export interface DeleteFileResponseContract {
+    fileId: string;
+    deleted: boolean;
+}
+export interface GetFileDownloadUrlResponseContract {
+    fileId: string;
+    /**
+     * @format uri
+     */
+    downloadUrl: string;
+    method: FileDownloadMethodContract;
+    /**
+     * @format date-time
+     */
+    expiresAt: string;
+}
+export interface StartMultipartFileUploadResponseContract {
+    /**
+     * Signed short-lived multipart token. Treat as opaque and send it back unchanged.
+     */
+    uploadId: string;
+    fileId: string;
+    /**
+     * @format uri
+     */
+    uploadUrl: string;
+    method: FileUploadMethodContract;
+    /**
+     * @format date-time
+     */
+    expiresAt: string;
+}
+export interface CompleteMultipartFileUploadRequestContract {
+    /**
+     * Base64-encoded block ids in the exact order they should be committed.
+     */
+    blockIds: string[];
+}
+export interface CompleteMultipartFileUploadResponseContract {
+    fileId: string;
+    committed: boolean;
+    blockCount: number;
+}
+export declare const FileUploadMethodContract: {
+    readonly Put: "PUT";
+};
+export declare const FileDownloadMethodContract: {
+    readonly Get: "GET";
+};

package/dist/types/file/file.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileDownloadMethodContract = exports.FileUploadMethodContract = void 0;
+exports.FileUploadMethodContract = {
+    Put: "PUT"
+};
+exports.FileDownloadMethodContract = {
+    Get: "GET"
+};

package/dist/types/index.d.ts

@@ -7,6 +7,7 @@
 export type { AuthenticatedUserSummaryContract, MyOrgAccessResponseContract } from "./access/access";
 export * from "./billing/billing";
 export type { OrgEmailSendRequestContract, OrgEmailSendResponseContract } from "./email/email";
+export * from "./file/file";
 export * from "./isolated-store/isolated-store";
 export type { MeAuthContract, MeOrgGroupContract, MeResponseContract, MeScopeContract, MeUserContract } from "./me/me";
 export * from "./note/note";

package/dist/types/index.js

@@ -21,6 +21,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./billing/billing"), exports);
+__exportStar(require("./file/file"), exports);
 __exportStar(require("./isolated-store/isolated-store"), exports);
 __exportStar(require("./note/note"), exports);
 __exportStar(require("./org-group/org-group"), exports);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.2.6-sdk.4",
+  "version": "2.2.9",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.2.6-sdk.4.md

@@ -2,8 +2,62 @@
 
 - Current ref: `HEAD`
 - Previous tag: `v2.2.6-sdk.4`
-- Generated at: 2026-04-17T08:03:27.015Z
+- Generated at: 2026-04-21T08:19:38.558Z
 
 ## Included Drafts
 
-- None
+- `docs/release-notes/2026-04-20-azure-file-upload-api.md` - 2026-04-20-azure-file-upload-api
+
+## Summary
+
+### 2026-04-20-azure-file-upload-api
+
+Added org-scoped file upload, download-url, and deletion endpoints for Azure Blob Storage direct transfers, then hardened the multipart token flow and moved container creation out of per-request runtime handling.
+
+
+## API / SDK Changes
+
+### 2026-04-20-azure-file-upload-api
+
+- Added `POST /:orgId/files/prepare-upload` to generate a short-lived SAS upload URL, blob `fileId`, required upload headers, and expiration time.
+- Added `POST /:orgId/files/uploads/start` to start an explicit Azure block-blob multipart upload and return an opaque `uploadId`.
+- Added `POST /:orgId/files/uploads/:uploadId/complete` to commit the staged Azure block ids for a multipart upload.
+- Added `POST /:orgId/files/download-url` to generate a short-lived read-only SAS URL for a previously uploaded org-scoped blob.
+- Added `DELETE /:orgId/files` to delete a previously prepared org-scoped blob by `fileId` in the request body.
+- Added the generated `FilesApi` SDK surface for these operations.
+- Hardened multipart `uploadId` values so they are signed and expiring instead of plain base64 payloads.
+- Removed container creation from the request path; upload preparation now performs only blob-level work.
+- Added optional startup-time container initialization through `AZURE_STORAGE_CREATE_CONTAINER_ON_STARTUP`.
+- Added Gate MCP guidance for file-upload flows and new `files.write` and `files.read` permissions.
+
+
+## Consumer Impact
+
+### 2026-04-20-azure-file-upload-api
+
+- Clients should upload file bytes directly to Azure Blob Storage using the returned `uploadUrl`, `method`, and `headers`; Gate does not proxy file bytes.
+- Clients should download file bytes directly from Azure Blob Storage using the returned `downloadUrl`; Gate does not proxy file bytes for reads either.
+- Multipart clients should stage blocks directly against the returned `uploadUrl`, keep the base64 block ids they used, and send those ids to `completeMultipartFileUpload`.
+- Treat multipart `uploadId` values as opaque short-lived server tokens. Clients must not decode, modify, or synthesize them.
+- Persist the returned `fileId` exactly as-is if the app needs to delete the blob later.
+- Runtime configuration now expects `AZURE_STORAGE_ACCOUNT_NAME` and can optionally use `AZURE_STORAGE_CONTAINER`, `AZURE_STORAGE_ACCOUNT_KEY`, `AZURE_STORAGE_UPLOAD_URL_TTL_SECONDS`, `AZURE_STORAGE_UPLOAD_ID_SECRET`, and `AZURE_STORAGE_CREATE_CONTAINER_ON_STARTUP`.
+- Preferred deployment model is a pre-created container from infrastructure. Startup-time container creation is opt-in for environments that intentionally grant container-management permissions.
+
+
+## Verification
+
+### 2026-04-20-azure-file-upload-api
+
+- `npm run build:sdk`
+- `npm run mcp:skills:generate`
+- `npm run mcp:skills:validate`
+- `npm test`
+- `npm run lint`
+
+
+## Follow-ups
+
+### 2026-04-20-azure-file-upload-api
+
+- Wire the new Azure storage env vars into the active Fusebase Gate Helm chart values and secrets once the deployment chart path and environment-specific account values are confirmed.
+- If the production environment supports Microsoft Entra or managed identity, prefer user delegation SAS over account-key SAS.

package/release-notes/2.2.9.md

@@ -0,0 +1,9 @@
+# Release Notes 2.2.9
+
+- Current ref: `HEAD`
+- Previous tag: `v2.2.9`
+- Generated at: 2026-04-21T08:52:18.461Z
+
+## Included Drafts
+
+- None

package/release-notes/latest.md

@@ -1,8 +1,8 @@
-# Release Notes 2.2.6-sdk.4
+# Release Notes 2.2.9
 
 - Current ref: `HEAD`
-- Previous tag: `v2.2.6-sdk.4`
-- Generated at: 2026-04-17T08:03:27.015Z
+- Previous tag: `v2.2.9`
+- Generated at: 2026-04-21T08:52:18.461Z
 
 ## Included Drafts