@fusebase/fusebase-gate-sdk 2.3.32-sdk.3 → 2.3.34-sdk.1

package/dist/apis/AppMagicLinksApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: app-magic-links
  */
 import type { Client } from "../runtime/transport";
-import type { ActivateAppMagicLinkResponseContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, orgIdInPathRequired, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract } from "../types";
+import type { ActivateAppMagicLinkResponseContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, ListAppMagicLinksResponseContract, orgIdInPathRequired, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract, RevokeAppMagicLinkResponseContract } from "../types";
 export declare class AppMagicLinksApi {
     private client;
     constructor(client: Client);
@@ -43,6 +43,20 @@ export declare class AppMagicLinksApi {
         headers?: Record<string, string>;
         body: CreateAppMagicLinkRequestContract;
     }): Promise<CreateAppMagicLinkResponseContract>;
+    /**
+     * List app magic links (support/debug)
+     * Owner/admin support/debug flow. Lists the app's active (non-revoked) magic links, newest first, with an optional email filter. Never returns token material — only row metadata (email, mode, redirectPath, timestamps). Pair with revokeAppMagicLink to find and clear an orphaned invite. Requires app_magic_link.write and org access. appId is the Product id.
+     */
+    listAppMagicLinks(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            appId: string;
+        };
+        query?: {
+            email?: string;
+        };
+        headers?: Record<string, string>;
+    }): Promise<ListAppMagicLinksResponseContract>;
     /**
      * Request an app magic link (visitor self-service flow)
      * Unauthenticated visitor flow. The link is dispatched only when the email already has access to the app under its current accessPrincipals; otherwise the call is a no-op. Always returns 200 with `{ ok: true }` so the response cannot be used to enumerate emails or access. Apply per-IP rate limiting upstream of this call.
@@ -54,4 +68,16 @@ export declare class AppMagicLinksApi {
         headers?: Record<string, string>;
         body: RequestAppMagicLinkRequestContract;
     }): Promise<RequestAppMagicLinkResponseContract>;
+    /**
+     * Revoke an app magic link
+     * Owner/admin revoke flow. Soft-deletes the magic link identified by globalId so it can no longer be activated (activation then returns 404) and the recipient email can be invited again — the fix for orphaned invites that block re-invites for 24h. Returns 404 when the link does not exist under the org/app on the path or is already revoked. Requires app_magic_link.write and org access. appId is the Product id.
+     */
+    revokeAppMagicLink(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            appId: string;
+            globalId: string;
+        };
+        headers?: Record<string, string>;
+    }): Promise<RevokeAppMagicLinkResponseContract>;
 }

package/dist/apis/AppMagicLinksApi.js

@@ -55,6 +55,21 @@ class AppMagicLinksApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * List app magic links (support/debug)
+     * Owner/admin support/debug flow. Lists the app's active (non-revoked) magic links, newest first, with an optional email filter. Never returns token material — only row metadata (email, mode, redirectPath, timestamps). Pair with revokeAppMagicLink to find and clear an orphaned invite. Requires app_magic_link.write and org access. appId is the Product id.
+     */
+    async listAppMagicLinks(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/apps/:appId/magic-links",
+            pathParams: params.path,
+            query: params.query,
+            headers: params.headers,
+            opId: "listAppMagicLinks",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Request an app magic link (visitor self-service flow)
      * Unauthenticated visitor flow. The link is dispatched only when the email already has access to the app under its current accessPrincipals; otherwise the call is a no-op. Always returns 200 with `{ ok: true }` so the response cannot be used to enumerate emails or access. Apply per-IP rate limiting upstream of this call.
@@ -70,5 +85,19 @@ class AppMagicLinksApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Revoke an app magic link
+     * Owner/admin revoke flow. Soft-deletes the magic link identified by globalId so it can no longer be activated (activation then returns 404) and the recipient email can be invited again — the fix for orphaned invites that block re-invites for 24h. Returns 404 when the link does not exist under the org/app on the path or is already revoked. Requires app_magic_link.write and org access. appId is the Product id.
+     */
+    async revokeAppMagicLink(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/apps/:appId/magic-links/:globalId/revoke",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "revokeAppMagicLink",
+            expectedContentType: "application/json",
+        });
+    }
 }
 exports.AppMagicLinksApi = AppMagicLinksApi;

package/dist/types/app-magic-link/app-magic-link.d.ts

@@ -122,6 +122,66 @@ export interface ActivateAppMagicLinkResponseContract {
      */
     appFeatureId: string;
 }
+/**
+ * Response body for revokeAppMagicLink.
+ */
+export interface RevokeAppMagicLinkResponseContract {
+    /** Always true on success. */
+    ok: boolean;
+    /** globalId of the revoked magic link. */
+    id: string;
+    /**
+     * Unix timestamp (seconds) when the link was revoked (its deletedAt value).
+     */
+    revokedAt: number;
+}
+/**
+ * A single app magic-link row in the support/debug listing. Never carries token
+ * material — only metadata safe for an owner/support view.
+ */
+export interface AppMagicLinkSummaryContract {
+    /** globalId of the magic link row. */
+    id: string;
+    /**
+     * Recipient email the link was issued to.
+     * @nullable true
+     */
+    email?: string | null;
+    /** How the link was created: `invite` (owner/admin) or `self_service`. */
+    mode: string;
+    /**
+     * Relative app path the recipient lands on after activation, or null for root.
+     * @nullable true
+     */
+    redirectPath?: string | null;
+    /**
+     * Child app (feature) globalId the link is scoped to; null for legacy rows.
+     * @nullable true
+     */
+    appFeatureId?: string | null;
+    /**
+     * User id of the owner/admin who created the invite; null for self-service.
+     * @nullable true
+     */
+    createdByUserId?: number | null;
+    /** Unix timestamp (seconds) when the link expires. */
+    expiresAt: number;
+    /**
+     * Unix timestamp (seconds) of the most recent activation, or null if never
+     * activated.
+     * @nullable true
+     */
+    usedAt?: number | null;
+    /** Unix timestamp (seconds) when the link was created. */
+    createdAt: number;
+}
+/**
+ * Response body for listAppMagicLinks (support/debug).
+ */
+export interface ListAppMagicLinksResponseContract {
+    /** Active (non-revoked) magic links for the product, newest first. */
+    links: AppMagicLinkSummaryContract[];
+}
 /** A single invitee in a bulk app magic-link request. */
 export interface BulkAppMagicLinkInvitationContract {
     /**

package/dist/types/index.d.ts

@@ -7,7 +7,7 @@
 export type { AuthenticatedUserSummaryContract, MyOrgAccessResponseContract } from "./access/access";
 export type { AppApiOperationContract, AppApiOperationListResponseContract, CallAppApiRequestContract, CallAppApiResponseContract, PublishedAppContract, PublishedAppListResponseContract, VerifyAppApiContractsRequestContract, VerifyAppApiContractsResponseContract, VerifyCaseResultContract } from "./app-api/app-api";
 export type { AppPortalEmbedContract, ListAppPortalEmbedsResponseContract } from "./app-embed-targets/app-embed-targets";
-export type { ActivateAppMagicLinkResponseContract, BulkAppMagicLinkInvitationContract, BulkAppMagicLinkResultItemContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppClientInviteRequestContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract } from "./app-magic-link/app-magic-link";
+export type { ActivateAppMagicLinkResponseContract, AppMagicLinkSummaryContract, BulkAppMagicLinkInvitationContract, BulkAppMagicLinkResultItemContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppClientInviteRequestContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, ListAppMagicLinksResponseContract, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract, RevokeAppMagicLinkResponseContract } from "./app-magic-link/app-magic-link";
 export * from "./billing/billing";
 export type { OrgEmailSendRequestContract, OrgEmailSendResponseContract } from "./email/email";
 export * from "./file/file";

package/dist/types/portals/portals.d.ts

@@ -317,6 +317,11 @@ export interface InviteToPortalRequestContract {
      * For orgRole "member" and "manager" this is always true and the field is ignored.
      */
     isFullAccess?: boolean;
+    /**
+     * Portal page the magic link should open, e.g. "/pricing" (must start with
+     * a single "/"). Defaults to the portal home page.
+     */
+    redirectPath?: string;
 }
 export interface InviteToPortalResponseContract {
     /** Magic link for direct portal access (no email confirmation needed). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.3.32-sdk.3",
+  "version": "2.3.34-sdk.1",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.3.34-sdk.1.md

@@ -0,0 +1,9 @@
+# Release Notes 2.3.34-sdk.1
+
+- Current ref: `HEAD`
+- Previous tag: `v2.3.34-sdk.1`
+- Generated at: 2026-07-21T12:11:10.747Z
+
+## Included Drafts
+
+- None

package/release-notes/latest.md

@@ -1,8 +1,8 @@
-# Release Notes 2.3.32-sdk.3
+# Release Notes 2.3.34-sdk.1
 
 - Current ref: `HEAD`
-- Previous tag: `v2.3.32-sdk.3`
-- Generated at: 2026-07-16T08:03:54.968Z
+- Previous tag: `v2.3.34-sdk.1`
+- Generated at: 2026-07-21T12:11:10.747Z
 
 ## Included Drafts
 

package/release-notes/2.3.32-sdk.3.md

@@ -1,9 +0,0 @@
-# Release Notes 2.3.32-sdk.3
-
-- Current ref: `HEAD`
-- Previous tag: `v2.3.32-sdk.3`
-- Generated at: 2026-07-16T08:03:54.968Z
-
-## Included Drafts
-
-- None