@fusebase/fusebase-gate-sdk 2.3.28-sdk.1 → 2.3.28-sdk.3

package/dist/apis/AppMagicLinksApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: app-magic-links
  */
 import type { Client } from "../runtime/transport";
-import type { ActivateAppMagicLinkResponseContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, orgIdInPathRequired, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract } from "../types";
+import type { ActivateAppMagicLinkResponseContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, orgIdInPathRequired, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract } from "../types";
 export declare class AppMagicLinksApi {
     private client;
     constructor(client: Client);
@@ -19,6 +19,18 @@ export declare class AppMagicLinksApi {
         };
         headers?: Record<string, string>;
     }): Promise<ActivateAppMagicLinkResponseContract>;
+    /**
+     * Create app magic links for multiple users in one call
+     * Invites a batch of users to a single app in one request, replacing N sequential createAppMagicLink calls. Invites are processed with bounded concurrency (default 5, max 5); the rest are queued. With background=false (default) the response waits for all invites and returns aggregated per-invitation results (status='completed'). With background=true the response returns immediately (status='processing') and invites run in the background without blocking the caller. Per-invitation redirectPath/addToAccessPrincipals semantics match createAppMagicLink; a single failed invitee never aborts the batch. Requires app_magic_link.write and org access.
+     */
+    bulkCreateAppMagicLinks(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            appId: string;
+        };
+        headers?: Record<string, string>;
+        body: BulkCreateAppMagicLinksRequestContract;
+    }): Promise<BulkCreateAppMagicLinksResponseContract>;
     /**
      * Create an app magic link (invite flow)
      * Owner/admin invite flow. Issues a 24h magic link for the recipient email and dispatches it via the magic_link_app email template. When addToAccessPrincipals is true (default), provisions a brand-new user record if needed and appends a user principal to every feature of the app. Requires app_magic_link.write and org access.

package/dist/apis/AppMagicLinksApi.js

@@ -25,6 +25,21 @@ class AppMagicLinksApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Create app magic links for multiple users in one call
+     * Invites a batch of users to a single app in one request, replacing N sequential createAppMagicLink calls. Invites are processed with bounded concurrency (default 5, max 5); the rest are queued. With background=false (default) the response waits for all invites and returns aggregated per-invitation results (status='completed'). With background=true the response returns immediately (status='processing') and invites run in the background without blocking the caller. Per-invitation redirectPath/addToAccessPrincipals semantics match createAppMagicLink; a single failed invitee never aborts the batch. Requires app_magic_link.write and org access.
+     */
+    async bulkCreateAppMagicLinks(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/apps/:appId/magic-links/bulk",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "bulkCreateAppMagicLinks",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Create an app magic link (invite flow)
      * Owner/admin invite flow. Issues a 24h magic link for the recipient email and dispatches it via the magic_link_app email template. When addToAccessPrincipals is true (default), provisions a brand-new user record if needed and appends a user principal to every feature of the app. Requires app_magic_link.write and org access.

package/dist/apis/OrgUsersApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: org-users
  */
 import type { Client } from "../runtime/transport";
-import type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, orgIdInPathRequired, OrgMemberRemoveResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, WorkspaceMemberRemoveResponseContract } from "../types";
+import type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, orgIdInPathRequired, OrgMemberRemoveResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "../types";
 export declare class OrgUsersApi {
     private client;
     constructor(client: Client);
@@ -30,6 +30,28 @@ export declare class OrgUsersApi {
         };
         headers?: Record<string, string>;
     }): Promise<OrgUserListResponseContract>;
+    /**
+     * List portal members
+     * Returns the members of a portal by its underlying workspaceId. Portal membership is currently represented by workspace membership (same semantics as removePortalMember), so Gate validates the workspace belongs to `orgId` and returns its members, each including the workspaceMember `id` (globalId). Requires org.members.read and org access.
+     */
+    listPortalMembers(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            workspaceId: OrgUserWorkspaceIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<OrgWorkspaceMemberListResponseContract>;
+    /**
+     * List workspace members
+     * Returns the members of a single workspace scoped to the organization. Gate validates that the workspace belongs to `orgId`, then calls org-service. Each member includes the workspaceMember `id` (globalId) needed by removeWorkspaceMember. Requires org.members.read and org access.
+     */
+    listWorkspaceMembers(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            workspaceId: OrgUserWorkspaceIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<OrgWorkspaceMemberListResponseContract>;
     /**
      * Remove organization member
      * Removes an organization member by numeric userId. Gate resolves the internal orgMember.globalId before calling org-service, and org-service cleans up workspace/group memberships for that org. Requires org.members.write and org access.

package/dist/apis/OrgUsersApi.js

@@ -40,6 +40,34 @@ class OrgUsersApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * List portal members
+     * Returns the members of a portal by its underlying workspaceId. Portal membership is currently represented by workspace membership (same semantics as removePortalMember), so Gate validates the workspace belongs to `orgId` and returns its members, each including the workspaceMember `id` (globalId). Requires org.members.read and org access.
+     */
+    async listPortalMembers(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/users/portals/:workspaceId/members",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "listPortalMembers",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * List workspace members
+     * Returns the members of a single workspace scoped to the organization. Gate validates that the workspace belongs to `orgId`, then calls org-service. Each member includes the workspaceMember `id` (globalId) needed by removeWorkspaceMember. Requires org.members.read and org access.
+     */
+    async listWorkspaceMembers(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/users/workspaces/:workspaceId/members",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "listWorkspaceMembers",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Remove organization member
      * Removes an organization member by numeric userId. Gate resolves the internal orgMember.globalId before calling org-service, and org-service cleans up workspace/group memberships for that org. Requires org.members.write and org access.

package/dist/apis/PortalsApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: portals
  */
 import type { Client } from "../runtime/transport";
-import type { AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlockRequestContract, AddPortalBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, globalIdInPathRequired, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalContentResponseContract, orgIdInPathRequired, OrgPortalListResponseContract, PortalDetailContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract } from "../types";
+import type { AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlockRequestContract, AddPortalBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, globalIdInPathRequired, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalContentResponseContract, orgIdInPathRequired, OrgPortalListResponseContract, PortalDetailContract, PublishPortalDraftResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract } from "../types";
 export declare class PortalsApi {
     private client;
     constructor(client: Client);
@@ -173,6 +173,17 @@ export declare class PortalsApi {
         };
         headers?: Record<string, string>;
     }): Promise<OrgPortalListResponseContract>;
+    /**
+     * Publish a portal's staged draft
+     * Publishes all staged changes in the portal's customizer draft to the live portal, applying them through the same content pipeline the customizer's Publish button uses. Use this to make an agent's previously staged content/settings ops (folders, pages, blocks, access mode, custom code) visible to clients without opening the customizer. Returns 400 if the draft is empty and 409 if the portal was published elsewhere since the draft was based (refresh the draft first). Requires portals.write access.
+     */
+    publishPortalDraft(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            portalId: globalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<PublishPortalDraftResponseContract>;
     /**
      * Update portal access mode
      * Sets the portal access mode: 'open' (anyone), 'invite-only' (invited users only), 'email' (visitor enters an email, no verification), or 'email-verified' (email with confirmation). The change is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending change, and publishes it. Returns the staged access mode and the draft branch/seq. Requires portals.write access.

package/dist/apis/PortalsApi.js

@@ -218,6 +218,20 @@ class PortalsApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Publish a portal's staged draft
+     * Publishes all staged changes in the portal's customizer draft to the live portal, applying them through the same content pipeline the customizer's Publish button uses. Use this to make an agent's previously staged content/settings ops (folders, pages, blocks, access mode, custom code) visible to clients without opening the customizer. Returns 400 if the draft is empty and 409 if the portal was published elsewhere since the draft was based (refresh the draft first). Requires portals.write access.
+     */
+    async publishPortalDraft(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/portals/:portalId/publish",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "publishPortalDraft",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Update portal access mode
      * Sets the portal access mode: 'open' (anyone), 'invite-only' (invited users only), 'email' (visitor enters an email, no verification), or 'email-verified' (email with confirmation). The change is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending change, and publishes it. Returns the staged access mode and the draft branch/seq. Requires portals.write access.

package/dist/types/app-magic-link/app-magic-link.d.ts

@@ -39,6 +39,24 @@ export interface CreateAppMagicLinkResponseContract {
      */
     expiresAt: number;
 }
+/**
+ * Request body for createAppClientInviteMagicLink (client→client invite flow).
+ * No role/access selectors: the invitee is always a client inheriting the
+ * inviter's app scope, enforced downstream in nimbus-ai.
+ */
+export interface CreateAppClientInviteRequestContract {
+    /**
+     * Recipient email address. The link is dispatched to this address.
+     * @format email
+     */
+    email: string;
+    /**
+     * Relative app path to land on after activation (e.g. /proposals/abc).
+     * Omit for root.
+     * @nullable true
+     */
+    redirectPath?: string | null;
+}
 /**
  * Request body for requestAppMagicLink (visitor self-service flow).
  */
@@ -104,3 +122,68 @@ export interface ActivateAppMagicLinkResponseContract {
      */
     appFeatureId: string;
 }
+/** A single invitee in a bulk app magic-link request. */
+export interface BulkAppMagicLinkInvitationContract {
+    /**
+     * Recipient email address. The link is dispatched to this address.
+     * @format email
+     */
+    email: string;
+    /**
+     * Relative app path to land on after activation (e.g. /proposals/abc).
+     * Omit for root.
+     * @nullable true
+     */
+    redirectPath?: string | null;
+    /**
+     * When true (default), append a user principal to every feature of the app
+     * and provision a new user record if the email is not yet known.
+     * When false, the user must already exist or the invite fails with NotFound.
+     */
+    addToAccessPrincipals?: boolean;
+}
+export interface BulkCreateAppMagicLinksRequestContract {
+    /** Users to invite to the app in a single call. */
+    invitations: BulkAppMagicLinkInvitationContract[];
+    /**
+     * Max number of invites processed in parallel.
+     * Default 5, clamped to the 1..5 range; the rest are queued.
+     */
+    concurrency?: number;
+    /**
+     * When true, respond immediately ("processing") and run the invites in the
+     * background without blocking the caller. Default false: wait for all
+     * invites and return aggregated per-invitation results ("completed").
+     */
+    background?: boolean;
+}
+/** Per-invitation outcome in a completed bulk app magic-link request. */
+export interface BulkAppMagicLinkResultItemContract {
+    email: string;
+    status: "success" | "error";
+    /** Present on success. globalId of the magic link row. */
+    id?: string;
+    /** Present on success. Fully qualified magic link URL. */
+    magicLinkUrl?: string;
+    /** Present on success. Unix timestamp (seconds) when the link expires. */
+    expiresAt?: number;
+    /** Present on error. Failure reason. */
+    error?: string;
+}
+export interface BulkCreateAppMagicLinksResponseContract {
+    /** Total number of invitations received. */
+    total: number;
+    /**
+     * "completed" — invites finished synchronously, `results` is populated.
+     * "processing" — invites accepted and running in the background.
+     */
+    status: "completed" | "processing";
+    /** Background mode only: number of invitations accepted for processing. */
+    accepted?: number;
+    /** Completed mode only: count of successful invites. */
+    succeeded?: number;
+    /** Completed mode only: count of failed invites. */
+    failed?: number;
+    /** Completed mode only: per-invitation results, in request order. */
+    results?: BulkAppMagicLinkResultItemContract[];
+}

package/dist/types/index.d.ts

@@ -7,20 +7,20 @@
 export type { AuthenticatedUserSummaryContract, MyOrgAccessResponseContract } from "./access/access";
 export type { AppApiOperationContract, AppApiOperationListResponseContract, CallAppApiRequestContract, CallAppApiResponseContract, PublishedAppContract, PublishedAppListResponseContract, VerifyAppApiContractsRequestContract, VerifyAppApiContractsResponseContract, VerifyCaseResultContract } from "./app-api/app-api";
 export type { AppPortalEmbedContract, ListAppPortalEmbedsResponseContract } from "./app-embed-targets/app-embed-targets";
-export type { ActivateAppMagicLinkResponseContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract } from "./app-magic-link/app-magic-link";
+export type { ActivateAppMagicLinkResponseContract, BulkAppMagicLinkInvitationContract, BulkAppMagicLinkResultItemContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppClientInviteRequestContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract } from "./app-magic-link/app-magic-link";
 export * from "./billing/billing";
 export type { OrgEmailSendRequestContract, OrgEmailSendResponseContract } from "./email/email";
 export * from "./file/file";
 export type { FusebaseAuthChallengeContract, FusebaseAuthChallengeRequestContract, FusebaseAuthChallengeResponseContract, FusebaseAuthConflictErrorBodyContract, FusebaseAuthLoginRequestContract, FusebaseAuthLoginResponseContract, FusebaseAuthLogoutResponseContract, FusebaseAuthPasswordResetRequestContract, FusebaseAuthPasswordResetResponseContract, FusebaseAuthPasswordRestoreKeyResponseContract, FusebaseAuthPasswordRestoreRequestContract, FusebaseAuthPasswordRestoreResponseContract, FusebaseAuthRegisterMemberRequestContract, FusebaseAuthRegisterMemberResponseContract, FusebaseAuthRegisterRequestContract, FusebaseAuthRegisterResponseContract, FusebaseAuthSessionContract } from "./fusebase-auth/fusebase-auth";
 export * from "./isolated-store/isolated-store";
 export * from "./mcp-manager/mcp-manager";
-export type { MeAuthContract, MeOrgGroupContract, MeResponseContract, MeScopeContract, MeUserContract } from "./me/me";
+export type { MeAuthContract, MeOrgGroupContract, MePreferencesContract, MeResponseContract, MeScopeContract, MeUserContract } from "./me/me";
 export * from "./note/note";
 export * from "./org-group/org-group";
-export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
+export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
 export * from "./orgs/orgs";
 export type { VerifyPortalFeatureContextTokenRequestContract, VerifyPortalFeatureContextTokenResponseContract } from "./portal-feature-context/portal-feature-context";
-export type { AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlockRequestContract, AddPortalBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, BulkInviteResultItemContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, BulkPortalInvitationContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalContentResponseContract, PortalContentItemContract, PortalDetailContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract, globalIdInPathRequired } from "./portals/portals";
+export type { AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlockRequestContract, AddPortalBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, BulkInviteResultItemContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, BulkPortalInvitationContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalContentResponseContract, PortalContentItemContract, PortalDetailContract, PublishPortalDraftResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract, globalIdInPathRequired } from "./portals/portals";
 export * from "./shared/common";
 export * from "./shared/enums";
 export type { GetHealth200ResponseContract } from "./shared/health";

package/dist/types/me/me.d.ts

@@ -9,6 +9,21 @@ export interface MeOrgGroupContract {
 export interface MeUserContract {
     id: number | null;
 }
+export type MeTimeFormat = "12h" | "24h";
+export interface MePreferencesContract {
+    /** IANA timezone name, e.g. "Europe/Moscow" or "America/New_York". */
+    timezone: string | null;
+    /** Current UTC offset for the timezone at request time, e.g. "+03:00". */
+    timezoneOffset: string | null;
+    /**
+     * Resolved clock preference derived from the user's `dateTimeLocale`.
+     * Defaults to `12h` when the locale is unset or unresolvable (matches the
+     * webnotes client's `en-US` default).
+     */
+    timeFormat: MeTimeFormat;
+    /** Raw locale used for date/time display, e.g. "en-US" (12h) or "en-GB" (24h). */
+    dateTimeLocale: string | null;
+}
 export interface MeAuthContract {
     type: string;
     source: string | null;
@@ -23,4 +38,9 @@ export interface MeResponseContract {
     authenticated: true;
     user: MeUserContract;
     auth: MeAuthContract;
+    /**
+     * Locale/display preferences for the authenticated user. `null` when the
+     * auth context is not bound to a user (e.g. an app token without a user).
+     */
+    preferences: MePreferencesContract | null;
 }

package/dist/types/org-user/org-user.d.ts

@@ -113,6 +113,9 @@ export interface OrgWorkspaceMemberContract {
     privileges?: string[] | null;
     magicLink?: string | null;
 }
+export interface OrgWorkspaceMemberListResponseContract {
+    members: OrgWorkspaceMemberContract[];
+}
 export interface OrgMagicLinkContract {
     id: string;
     type: string;

package/dist/types/portals/portals.d.ts

@@ -72,6 +72,18 @@ export interface CreatePortalFolderResponseContract {
      */
     staged: boolean;
 }
+export interface PublishPortalDraftResponseContract {
+    /** Id of the draft branch that was published (now archived). */
+    branchId: string;
+    /** Id of the fresh empty draft branch that replaced it. */
+    newBranchId: string;
+    /** Number of change events applied to the published portal. */
+    appliedEventCount: number;
+    /** Unix timestamp of the publish. */
+    lastPublishedAt: number;
+    /** Always true: the staged draft is now live on the portal. */
+    published: boolean;
+}
 export interface CreatePortalPageWithNoteRequestContract {
     /** Title for the new page (also used as the backing Fusebase note title). */
     title: string;
@@ -152,11 +164,13 @@ export interface AddPortalBlockRequestContract {
     /** Optional bricks for `flexible` blocks. */
     bricks?: unknown[];
     /**
-     * Optional type-specific fields merged into the staged block verbatim, e.g.
+     * Optional type-specific fields for the staged block, e.g. flat strings
      * `embedType`/`content`/`contentUrl` for embed, `image`/`link` for info,
      * `sourcePortalId`/`sourcePageId`/`sourceBlockId` for projection,
      * `taskListIds` for task-list. Also overrides scaffold defaults (colspan,
-     * rowspan, …) when provided.
+     * rowspan, …) when provided. Every field is validated against the block's
+     * real customizer shape — an unknown field or a wrong-typed value (e.g. an
+     * object where a flat string is expected) is rejected with 400.
      */
     properties?: Record<string, unknown>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.3.28-sdk.1",
+  "version": "2.3.28-sdk.3",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.3.28-sdk.3.md

@@ -0,0 +1,9 @@
+# Release Notes 2.3.28-sdk.3
+
+- Current ref: `HEAD`
+- Previous tag: `v2.3.28-sdk.3`
+- Generated at: 2026-07-09T11:27:39.832Z
+
+## Included Drafts
+
+- None

package/release-notes/latest.md

@@ -1,8 +1,8 @@
-# Release Notes 2.3.28-sdk.1
+# Release Notes 2.3.28-sdk.3
 
 - Current ref: `HEAD`
-- Previous tag: `v2.3.28-sdk.1`
-- Generated at: 2026-07-06T11:24:32.041Z
+- Previous tag: `v2.3.28-sdk.3`
+- Generated at: 2026-07-09T11:27:39.832Z
 
 ## Included Drafts
 

package/release-notes/2.3.28-sdk.1.md

@@ -1,9 +0,0 @@
-# Release Notes 2.3.28-sdk.1
-
-- Current ref: `HEAD`
-- Previous tag: `v2.3.28-sdk.1`
-- Generated at: 2026-07-06T11:24:32.041Z
-
-## Included Drafts
-
-- None