@fusebase/fusebase-gate-sdk 2.3.34-sdk.1 → 2.3.34-sdk.10

package/dist/apis/AppApisApi.d.ts

@@ -11,7 +11,7 @@ export declare class AppApisApi {
     constructor(client: Client);
     /**
      * Call app API operation
-     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context.
+     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user.
      */
     callAppApi(params: {
         path: {

package/dist/apis/AppApisApi.js

@@ -13,7 +13,7 @@ class AppApisApi {
     }
     /**
      * Call app API operation
-     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context.
+     * Invokes a published app API operation through the owner app runtime using a runtime app token minted for the current authenticated caller context. Pass `onBehalfOfUserToken` (a platform app token, i.e. the user's `fbsfeaturetoken`) to run the call on behalf of an end user: Gate verifies it fail-closed and forwards the resolved user to the runtime as `X-Fusebase-Verified-User-Id` / `X-Fusebase-Verified-User-Source: obo`, so apps no longer need to hand-roll dual-token forwarding. The operation's `allowedCallers` / `requiredPermissions` are still evaluated against the calling identity, not the on-behalf-of user.
      */
     async callAppApi(params) {
         return this.client.request({

package/dist/apis/AppMagicLinksApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: app-magic-links
  */
 import type { Client } from "../runtime/transport";
-import type { ActivateAppMagicLinkResponseContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, ListAppMagicLinksResponseContract, orgIdInPathRequired, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract, RevokeAppMagicLinkResponseContract } from "../types";
+import type { ActivateAppMagicLinkResponseContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, ListAppMagicLinksResponseContract, orgIdInPathRequired, RemoveAppAccessPrincipalRequestContract, RemoveAppAccessPrincipalResponseContract, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract, RevokeAppMagicLinkResponseContract } from "../types";
 export declare class AppMagicLinksApi {
     private client;
     constructor(client: Client);
@@ -57,6 +57,18 @@ export declare class AppMagicLinksApi {
         };
         headers?: Record<string, string>;
     }): Promise<ListAppMagicLinksResponseContract>;
+    /**
+     * Remove an app access principal
+     * Owner/admin flow. Removes an access principal from every feature (App) of the product — the symmetric inverse of the invite grant that appends a principal to every feature. appId is the Product id. Idempotent: removing a principal that is not present returns removed=false. Returns 404 when the product has no apps. Requires app_magic_link.write and org access.
+     */
+    removeAppAccessPrincipal(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            appId: string;
+        };
+        headers?: Record<string, string>;
+        body: RemoveAppAccessPrincipalRequestContract;
+    }): Promise<RemoveAppAccessPrincipalResponseContract>;
     /**
      * Request an app magic link (visitor self-service flow)
      * Unauthenticated visitor flow. The link is dispatched only when the email already has access to the app under its current accessPrincipals; otherwise the call is a no-op. Always returns 200 with `{ ok: true }` so the response cannot be used to enumerate emails or access. Apply per-IP rate limiting upstream of this call.
@@ -68,6 +80,18 @@ export declare class AppMagicLinksApi {
         headers?: Record<string, string>;
         body: RequestAppMagicLinkRequestContract;
     }): Promise<RequestAppMagicLinkResponseContract>;
+    /**
+     * Create an app magic link without sending the platform email
+     * No-email sibling of createAppMagicLink. Same input/output and side effects (user provisioning, principal + org-member grants), but the platform does NOT send the magic_link_app email — the response carries magicLinkUrl so a white-label app can deliver its own branded email. Requires app_magic_link.write and org access. appId is the Product id.
+     */
+    requestAppMagicLinkURL(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            appId: string;
+        };
+        headers?: Record<string, string>;
+        body: CreateAppMagicLinkRequestContract;
+    }): Promise<CreateAppMagicLinkResponseContract>;
     /**
      * Revoke an app magic link
      * Owner/admin revoke flow. Soft-deletes the magic link identified by globalId so it can no longer be activated (activation then returns 404) and the recipient email can be invited again — the fix for orphaned invites that block re-invites for 24h. Returns 404 when the link does not exist under the org/app on the path or is already revoked. Requires app_magic_link.write and org access. appId is the Product id.

package/dist/apis/AppMagicLinksApi.js

@@ -70,6 +70,21 @@ class AppMagicLinksApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Remove an app access principal
+     * Owner/admin flow. Removes an access principal from every feature (App) of the product — the symmetric inverse of the invite grant that appends a principal to every feature. appId is the Product id. Idempotent: removing a principal that is not present returns removed=false. Returns 404 when the product has no apps. Requires app_magic_link.write and org access.
+     */
+    async removeAppAccessPrincipal(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/apps/:appId/access-principals/remove",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "removeAppAccessPrincipal",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Request an app magic link (visitor self-service flow)
      * Unauthenticated visitor flow. The link is dispatched only when the email already has access to the app under its current accessPrincipals; otherwise the call is a no-op. Always returns 200 with `{ ok: true }` so the response cannot be used to enumerate emails or access. Apply per-IP rate limiting upstream of this call.
@@ -85,6 +100,21 @@ class AppMagicLinksApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Create an app magic link without sending the platform email
+     * No-email sibling of createAppMagicLink. Same input/output and side effects (user provisioning, principal + org-member grants), but the platform does NOT send the magic_link_app email — the response carries magicLinkUrl so a white-label app can deliver its own branded email. Requires app_magic_link.write and org access. appId is the Product id.
+     */
+    async requestAppMagicLinkURL(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/apps/:appId/magic-link-url",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "requestAppMagicLinkURL",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Revoke an app magic link
      * Owner/admin revoke flow. Soft-deletes the magic link identified by globalId so it can no longer be activated (activation then returns 404) and the recipient email can be invited again — the fix for orphaned invites that block re-invites for 24h. Returns 404 when the link does not exist under the org/app on the path or is already revoked. Requires app_magic_link.write and org access. appId is the Product id.

package/dist/apis/FusebaseAuthApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: fusebase-auth
  */
 import type { Client } from "../runtime/transport";
-import type { FusebaseAuthChallengeRequestContract, FusebaseAuthChallengeResponseContract, FusebaseAuthLoginRequestContract, FusebaseAuthLoginResponseContract, FusebaseAuthLogoutResponseContract, FusebaseAuthPasswordResetRequestContract, FusebaseAuthPasswordResetResponseContract, FusebaseAuthPasswordRestoreKeyResponseContract, FusebaseAuthPasswordRestoreRequestContract, FusebaseAuthPasswordRestoreResponseContract, FusebaseAuthRegisterMemberRequestContract, FusebaseAuthRegisterMemberResponseContract, FusebaseAuthRegisterRequestContract, FusebaseAuthRegisterResponseContract, orgIdInPathRequired } from "../types";
+import type { FusebaseAuthChallengeRequestContract, FusebaseAuthChallengeResponseContract, FusebaseAuthLoginRequestContract, FusebaseAuthLoginResponseContract, FusebaseAuthLogoutResponseContract, FusebaseAuthPasswordResetRequestContract, FusebaseAuthPasswordResetResponseContract, FusebaseAuthPasswordRestoreKeyResponseContract, FusebaseAuthPasswordRestoreRequestContract, FusebaseAuthPasswordRestoreResponseContract, FusebaseAuthRegisterMemberRequestContract, FusebaseAuthRegisterMemberResponseContract, FusebaseAuthRegisterRequestContract, FusebaseAuthRegisterResponseContract, FusebaseAuthRestoreKeyRequestContract, FusebaseAuthRestoreKeyResponseContract, orgIdInPathRequired } from "../types";
 export declare class FusebaseAuthApi {
     private client;
     constructor(client: Client);
@@ -63,12 +63,23 @@ export declare class FusebaseAuthApi {
     }): Promise<FusebaseAuthRegisterResponseContract>;
     /**
      * Request Fusebase password restore
-     * Visitor-safe password restore request. Forwards to auth-form `/auth/api/remind` and always returns a generic success shape so the route does not enumerate accounts.
+     * Visitor-safe password restore request. Forwards to auth-form `/auth/api/remind` and always returns a generic success shape so the route does not enumerate accounts. The email and its reset link are rendered by the platform mail template; the link is not part of this contract. Set BOTH `portalId` and `workspaceId` for portal white-label branding. To control the reset URL yourself, use `requestFusebaseRestoreKey` and send your own email.
      */
     requestFusebasePasswordRestore(params: {
         headers?: Record<string, string>;
         body: FusebaseAuthPasswordRestoreRequestContract;
     }): Promise<FusebaseAuthPasswordRestoreResponseContract>;
+    /**
+     * Mint a Fusebase password-restore key (no email)
+     * Mints a password-restore key without sending the platform email, so an app backend can send its own branded reset mail. The key works with `checkFusebasePasswordRestoreKey` / `resetFusebasePassword` at the same TTL and one-time-use as the email flow, and is not bound to any URL — build whatever reset link you want around it, or use the returned `platformResetUrl` if the app has no reset page of its own. Requires `auth.restore_key.write` and an app service token scoped to the path `orgId`; user, visitor and anonymous callers get 403, as does a token scoped to another org. Backend only — the app-wrapper `fbsfeaturetoken` cookie also resolves as a token subject, so the calling credential must never be reachable from frontend code. A key resets the target's GLOBAL FuseBase password, so it is minted only when the path `orgId` is the user's ONLY org; any footprint elsewhere is an independent account and 404s, as do unknown emails. NOT visitor-safe — it exposes the key.
+     */
+    requestFusebaseRestoreKey(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: FusebaseAuthRestoreKeyRequestContract;
+    }): Promise<FusebaseAuthRestoreKeyResponseContract>;
     /**
      * Reset Fusebase password
      * Completes a password restore session by setting a new password through user-service.

package/dist/apis/FusebaseAuthApi.js

@@ -97,7 +97,7 @@ class FusebaseAuthApi {
     }
     /**
      * Request Fusebase password restore
-     * Visitor-safe password restore request. Forwards to auth-form `/auth/api/remind` and always returns a generic success shape so the route does not enumerate accounts.
+     * Visitor-safe password restore request. Forwards to auth-form `/auth/api/remind` and always returns a generic success shape so the route does not enumerate accounts. The email and its reset link are rendered by the platform mail template; the link is not part of this contract. Set BOTH `portalId` and `workspaceId` for portal white-label branding. To control the reset URL yourself, use `requestFusebaseRestoreKey` and send your own email.
      */
     async requestFusebasePasswordRestore(params) {
         return this.client.request({
@@ -109,6 +109,21 @@ class FusebaseAuthApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Mint a Fusebase password-restore key (no email)
+     * Mints a password-restore key without sending the platform email, so an app backend can send its own branded reset mail. The key works with `checkFusebasePasswordRestoreKey` / `resetFusebasePassword` at the same TTL and one-time-use as the email flow, and is not bound to any URL — build whatever reset link you want around it, or use the returned `platformResetUrl` if the app has no reset page of its own. Requires `auth.restore_key.write` and an app service token scoped to the path `orgId`; user, visitor and anonymous callers get 403, as does a token scoped to another org. Backend only — the app-wrapper `fbsfeaturetoken` cookie also resolves as a token subject, so the calling credential must never be reachable from frontend code. A key resets the target's GLOBAL FuseBase password, so it is minted only when the path `orgId` is the user's ONLY org; any footprint elsewhere is an independent account and 404s, as do unknown emails. NOT visitor-safe — it exposes the key.
+     */
+    async requestFusebaseRestoreKey(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/auth/fusebase/restore-key",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "requestFusebaseRestoreKey",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Reset Fusebase password
      * Completes a password restore session by setting a new password through user-service.

package/dist/apis/NotesApi.d.ts

@@ -5,12 +5,25 @@
  * Domain: notes
  */
 import type { Client } from "../runtime/transport";
-import type { AddWorkspaceNoteAttachmentRequestContract, AddWorkspaceNoteAttachmentResponseContract, AppendWorkspaceMarkdownNoteContentRequestContract, AppendWorkspaceNoteContentRequestContract, CreateWorkspaceMarkdownNoteRequestContract, CreateWorkspaceNoteFolderRequestContract, CreateWorkspaceNoteFolderResponseContract, CreateWorkspaceNoteRequestContract, CreateWorkspaceNoteResponseContract, orgIdInPathRequired, UpdateWorkspaceMarkdownNoteContentRequestContract, WorkspaceIdInPathRequired, WorkspaceMarkdownNoteResponseContract, WorkspaceNoteContentResponseContract, WorkspaceNoteFolderListResponseContract, WorkspaceNoteIdInPathRequired, WorkspaceNoteListResponseContract, WorkspaceNoteParentIdInQueryOptional } from "../types";
+import type { AddWorkspaceMarkdownNoteAttachmentRequestContract, AddWorkspaceMarkdownNoteAttachmentResponseContract, AddWorkspaceNoteAttachmentRequestContract, AddWorkspaceNoteAttachmentResponseContract, AppendWorkspaceMarkdownNoteContentRequestContract, AppendWorkspaceNoteContentRequestContract, CreateWorkspaceMarkdownNoteRequestContract, CreateWorkspaceNoteFolderRequestContract, CreateWorkspaceNoteFolderResponseContract, CreateWorkspaceNoteRequestContract, CreateWorkspaceNoteResponseContract, orgIdInPathRequired, UpdateWorkspaceMarkdownNoteContentRequestContract, WorkspaceIdInPathRequired, WorkspaceMarkdownNoteResponseContract, WorkspaceNoteContentResponseContract, WorkspaceNoteFolderListResponseContract, WorkspaceNoteIdInPathRequired, WorkspaceNoteListResponseContract, WorkspaceNoteParentIdInQueryOptional } from "../types";
 export declare class NotesApi {
     private client;
     constructor(client: Client);
     /**
-     * Add workspace note attachment
+     * Add markdown (v3) note attachment
+     * Attaches a stored-file UUID from the files upload flow to a v3 markdown note and appends the matching markdown to the note body: an image for image attachments, a link for every other type. Never touches the v2 editor document — use this op for notes whose `contentVersion` is `markdown_v3` and `addWorkspaceNoteAttachment` for v2 notes. The response carries the canonical attachment `url` and the appended `markdown` snippet, so clients do not have to build the link format themselves.
+     */
+    addWorkspaceMarkdownNoteAttachment(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            workspaceId: WorkspaceIdInPathRequired;
+            noteId: WorkspaceNoteIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: AddWorkspaceMarkdownNoteAttachmentRequestContract;
+    }): Promise<AddWorkspaceMarkdownNoteAttachmentResponseContract>;
+    /**
+     * Add workspace note attachment (v2 notes)
      * Attaches a stored-file UUID from the files upload flow to a workspace note, then appends an image blot for image attachments or a file blot for all other attachment types. Prefer a real workspace id; when the path workspaceId is `default`, gate resolves it to the organization's default workspace before calling note-service and editor-server.
      */
     addWorkspaceNoteAttachment(params: {

package/dist/apis/NotesApi.js

@@ -12,7 +12,22 @@ class NotesApi {
         this.client = client;
     }
     /**
-     * Add workspace note attachment
+     * Add markdown (v3) note attachment
+     * Attaches a stored-file UUID from the files upload flow to a v3 markdown note and appends the matching markdown to the note body: an image for image attachments, a link for every other type. Never touches the v2 editor document — use this op for notes whose `contentVersion` is `markdown_v3` and `addWorkspaceNoteAttachment` for v2 notes. The response carries the canonical attachment `url` and the appended `markdown` snippet, so clients do not have to build the link format themselves.
+     */
+    async addWorkspaceMarkdownNoteAttachment(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/workspaces/:workspaceId/markdown-notes/:noteId/attachments",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "addWorkspaceMarkdownNoteAttachment",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Add workspace note attachment (v2 notes)
      * Attaches a stored-file UUID from the files upload flow to a workspace note, then appends an image blot for image attachments or a file blot for all other attachment types. Prefer a real workspace id; when the path workspaceId is `default`, gate resolves it to the organization's default workspace before calling note-service and editor-server.
      */
     async addWorkspaceNoteAttachment(params) {

package/dist/apis/OrgUsersApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: org-users
  */
 import type { Client } from "../runtime/transport";
-import type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, orgIdInPathRequired, OrgMemberRemoveResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "../types";
+import type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, orgIdInPathRequired, OrgMemberExpectedJoinedAfterInQueryOptional, OrgMemberExpectedRoleInQueryOptional, OrgMemberRemoveResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "../types";
 export declare class OrgUsersApi {
     private client;
     constructor(client: Client);
@@ -32,7 +32,7 @@ export declare class OrgUsersApi {
     }): Promise<OrgUserListResponseContract>;
     /**
      * List portal members
-     * Returns the members of a portal by its underlying workspaceId. Portal membership is currently represented by workspace membership (same semantics as removePortalMember), so Gate validates the workspace belongs to `orgId` and returns its members, each including the workspaceMember `id` (globalId). Requires org.members.read and org access.
+     * Returns the members of a portal by its underlying workspaceId. Portal membership is currently represented by workspace membership (same semantics as removePortalMember), so Gate validates the workspace belongs to `orgId` and returns its members, each including the workspaceMember `id` (globalId). Each member is enriched from org membership (joined by `userId`) with `orgRole` (guest|client|member|manager|owner), `email`, `firstname`, `lastname`, and `isPortalManager`. `isPortalManager` is the official flag for a portal manager (org role `manager`, what invitePortalManager grants, or `owner`); use it — plus `orgRole === 'client'` for clients — to answer 'client vs portal manager' and to build a 'Chat with <name | email>' channel name in one call, without a separate listOrgUsers roundtrip. Requires org.members.read and org access.
      */
     listPortalMembers(params: {
         path: {
@@ -43,7 +43,7 @@ export declare class OrgUsersApi {
     }): Promise<OrgWorkspaceMemberListResponseContract>;
     /**
      * List workspace members
-     * Returns the members of a single workspace scoped to the organization. Gate validates that the workspace belongs to `orgId`, then calls org-service. Each member includes the workspaceMember `id` (globalId) needed by removeWorkspaceMember. Requires org.members.read and org access.
+     * Returns the members of a single workspace scoped to the organization. Gate validates that the workspace belongs to `orgId`, then calls org-service. Each member includes the workspaceMember `id` (globalId) needed by removeWorkspaceMember. Each member is enriched from org membership (joined by `userId`) with `orgRole` (guest|client|member|manager|owner), `email`, `firstname`, `lastname`, and `isPortalManager` — the official flag for a portal manager (org role `manager`, what invitePortalManager grants, or `owner`); prefer it over re-deriving the formula. Requires org.members.read and org access.
      */
     listWorkspaceMembers(params: {
         path: {
@@ -54,13 +54,17 @@ export declare class OrgUsersApi {
     }): Promise<OrgWorkspaceMemberListResponseContract>;
     /**
      * Remove organization member
-     * Removes an organization member by numeric userId. Gate resolves the internal orgMember.globalId before calling org-service, and org-service cleans up workspace/group memberships for that org. Requires org.members.write and org access.
+     * Removes an organization member by numeric userId. Gate resolves the internal orgMember.globalId before calling org-service, and org-service cleans up workspace/group memberships for that org. Optional query preconditions make the removal conditional instead of unconditional: `expectedRole` requires the member to still hold that org role, and `expectedJoinedAfter` (unix seconds) requires the membership to have been created at or after that moment — use it when cancelling an invite so a pre-existing member is never dropped. Either mismatch fails with 409 and removes nothing; a precondition sent with an empty or unparsable value fails with 400 rather than degrading into an unconditional removal. Requires org.members.write and org access.
      */
     removeOrgMember(params: {
         path: {
             orgId: orgIdInPathRequired;
             userId: OrgUserIdInPathRequired;
         };
+        query?: {
+            expectedRole?: OrgMemberExpectedRoleInQueryOptional;
+            expectedJoinedAfter?: OrgMemberExpectedJoinedAfterInQueryOptional;
+        };
         headers?: Record<string, string>;
     }): Promise<OrgMemberRemoveResponseContract>;
     /**

package/dist/apis/OrgUsersApi.js

@@ -42,7 +42,7 @@ class OrgUsersApi {
     }
     /**
      * List portal members
-     * Returns the members of a portal by its underlying workspaceId. Portal membership is currently represented by workspace membership (same semantics as removePortalMember), so Gate validates the workspace belongs to `orgId` and returns its members, each including the workspaceMember `id` (globalId). Requires org.members.read and org access.
+     * Returns the members of a portal by its underlying workspaceId. Portal membership is currently represented by workspace membership (same semantics as removePortalMember), so Gate validates the workspace belongs to `orgId` and returns its members, each including the workspaceMember `id` (globalId). Each member is enriched from org membership (joined by `userId`) with `orgRole` (guest|client|member|manager|owner), `email`, `firstname`, `lastname`, and `isPortalManager`. `isPortalManager` is the official flag for a portal manager (org role `manager`, what invitePortalManager grants, or `owner`); use it — plus `orgRole === 'client'` for clients — to answer 'client vs portal manager' and to build a 'Chat with <name | email>' channel name in one call, without a separate listOrgUsers roundtrip. Requires org.members.read and org access.
      */
     async listPortalMembers(params) {
         return this.client.request({
@@ -56,7 +56,7 @@ class OrgUsersApi {
     }
     /**
      * List workspace members
-     * Returns the members of a single workspace scoped to the organization. Gate validates that the workspace belongs to `orgId`, then calls org-service. Each member includes the workspaceMember `id` (globalId) needed by removeWorkspaceMember. Requires org.members.read and org access.
+     * Returns the members of a single workspace scoped to the organization. Gate validates that the workspace belongs to `orgId`, then calls org-service. Each member includes the workspaceMember `id` (globalId) needed by removeWorkspaceMember. Each member is enriched from org membership (joined by `userId`) with `orgRole` (guest|client|member|manager|owner), `email`, `firstname`, `lastname`, and `isPortalManager` — the official flag for a portal manager (org role `manager`, what invitePortalManager grants, or `owner`); prefer it over re-deriving the formula. Requires org.members.read and org access.
      */
     async listWorkspaceMembers(params) {
         return this.client.request({
@@ -70,13 +70,14 @@ class OrgUsersApi {
     }
     /**
      * Remove organization member
-     * Removes an organization member by numeric userId. Gate resolves the internal orgMember.globalId before calling org-service, and org-service cleans up workspace/group memberships for that org. Requires org.members.write and org access.
+     * Removes an organization member by numeric userId. Gate resolves the internal orgMember.globalId before calling org-service, and org-service cleans up workspace/group memberships for that org. Optional query preconditions make the removal conditional instead of unconditional: `expectedRole` requires the member to still hold that org role, and `expectedJoinedAfter` (unix seconds) requires the membership to have been created at or after that moment — use it when cancelling an invite so a pre-existing member is never dropped. Either mismatch fails with 409 and removes nothing; a precondition sent with an empty or unparsable value fails with 400 rather than degrading into an unconditional removal. Requires org.members.write and org access.
      */
     async removeOrgMember(params) {
         return this.client.request({
             method: "DELETE",
             path: "/:orgId/users/:userId",
             pathParams: params.path,
+            query: params.query,
             headers: params.headers,
             opId: "removeOrgMember",
             expectedContentType: "application/json",

package/dist/apis/PortalsApi.d.ts

@@ -5,7 +5,7 @@
  * Domain: portals
  */
 import type { Client } from "../runtime/transport";
-import type { AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlockRequestContract, AddPortalBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, globalIdInPathRequired, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalContentResponseContract, orgIdInPathRequired, OrgPortalListResponseContract, PortalDetailContract, PublishPortalDraftResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract } from "../types";
+import type { AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlankNoteBlockRequestContract, AddPortalBlankNoteBlockResponseContract, AddPortalBlockRequestContract, AddPortalBlockResponseContract, AddPortalChatBlockRequestContract, AddPortalChatBlockResponseContract, AddPortalEmbedBlockRequestContract, AddPortalEmbedBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalPageRequestContract, CreatePortalPageResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, globalIdInPathRequired, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalChatChannelsResponseContract, ListPortalChatUsersResponseContract, ListPortalContentResponseContract, orgIdInPathRequired, OrgPortalListResponseContract, PortalDetailContract, PublishPortalDraftResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract } from "../types";
 export declare class PortalsApi {
     private client;
     constructor(client: Client);
@@ -21,9 +21,22 @@ export declare class PortalsApi {
         headers?: Record<string, string>;
         body: AddPortalAppPageRequestContract;
     }): Promise<AddPortalAppPageResponseContract>;
+    /**
+     * Add an empty Fusebase note as a block to a portal page
+     * Creates a new EMPTY Fusebase note, shares it into the portal and adds it as a note block to an existing portal page — the programmatic equivalent of the customizer's "Blank Block" action. No new page and no sidebar menu item is created. For a published page resolve pageId from listPortalContent; for a page created earlier in the active draft use the pageId that operation returned. The block is appended after the last block of the page body and is staged in the portal's customizer draft (not published immediately). Use addPortalNoteBlock when the note already exists and is already shared into the portal, and createPortalPageWithNote when a new sidebar page backed by a note is wanted. Returns the note/block ids and the draft branch/seqs. Requires portals.write access.
+     */
+    addPortalBlankNoteBlock(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            portalId: globalIdInPathRequired;
+            pageId: globalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body?: AddPortalBlankNoteBlockRequestContract;
+    }): Promise<AddPortalBlankNoteBlockResponseContract>;
     /**
      * Add a block of any palette type to a portal page
-     * Stages a single block of any supported type onto an existing portal page — the universal building block behind the customizer's 'Add new block' palette (no new page or sidebar item is created). Pass pageId (the target page node id from listPortalContent) and type. Supported types: note, content, embed, chat, info, docs, help, request, meetings, links, task-list, projection, files-dashboard, tasks-dashboard, chats-dashboard, files-recent, files-bucket, flexible. Type-specific fields: note/content require noteId; flexible requires template (e.g. {type:'text'|'image'|'title'|'code'|'form'|'dashboard'|'ai-agent'|'app-feature'|...}) and may carry bricks; embed/info/projection/task-list and others take their fields via the free-form `properties` object (e.g. embedType/content/contentUrl, image/link, sourcePortalId/sourcePageId/sourceBlockId, taskListIds). Use addPortalNoteBlock for the common note case or addPortalAppPage for an app on its own page. Note: a `content` block renames the page to its title, so leave title empty for content blocks. The block is staged in the portal's customizer draft (not published immediately); the owner reviews and publishes it. Returns the block id and the draft branch/seqs. Requires portals.write access.
+     * Stages a single block of any supported type onto an existing portal page — the universal building block behind the customizer's 'Add new block' palette (no new page or sidebar item is created). Pass pageId (the target page node id from listPortalContent) and type. Supported types: note, content, info, docs, help, request, meetings, links, task-list, projection, files-dashboard, tasks-dashboard, chats-dashboard, files-recent, files-bucket, flexible. Type-specific fields: note/content require noteId; flexible requires template (e.g. {type:'text'|'image'|'title'|'code'|'form'|'dashboard'|'ai-agent'|'app-feature'|...}) and may carry bricks; info/projection/task-list and others take their fields via the free-form `properties` object (e.g. image/link, sourcePortalId/sourcePageId/sourceBlockId, taskListIds). This op does NOT accept type='embed' or type='chat' — use addPortalEmbedBlock for Embed blocks and addPortalChatBlock for Chat blocks. Use addPortalNoteBlock for the common note case or addPortalAppPage for an app on its own page. Note: a `content` block renames the page to its title, so leave title empty for content blocks. The block is staged in the portal's customizer draft (not published immediately); the owner reviews and publishes it. Returns the block id and the draft branch/seqs. Requires portals.write access.
      */
     addPortalBlock(params: {
         path: {
@@ -33,6 +46,32 @@ export declare class PortalsApi {
         headers?: Record<string, string>;
         body: AddPortalBlockRequestContract;
     }): Promise<AddPortalBlockResponseContract>;
+    /**
+     * Add a Chat block to a portal page
+     * Stages one Customizer-compatible Chat block on an EXISTING portal page — the programmatic equivalent of the customizer's "Chat" action. Pass exactly one target: { type: 'channel', channelId } (id from listPortalChatChannels) or { type: 'dm', userId } (an active org member's userId). membersOnly is channel-only (default true; a private channel requires true; forbidden for dm). One active Chat block is allowed per page — a second returns 409. Creates one chat widget configuration and stages the block in the customizer draft (not published immediately). This is a Chat WIDGET on a page, distinct from the portal's system chat menu item and the chats-dashboard block. For a published page resolve pageId from listPortalContent; for a page created earlier in the active draft use the pageId that operation returned. Returns the block id and the draft branch/seqs. Requires portals.write access.
+     */
+    addPortalChatBlock(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            portalId: globalIdInPathRequired;
+            pageId: globalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: AddPortalChatBlockRequestContract;
+    }): Promise<AddPortalChatBlockResponseContract>;
+    /**
+     * Add an Embeds & Integrations block to a portal page
+     * Stages one Customizer-compatible Embed block on an EXISTING portal page — the programmatic equivalent of the customizer's "Embeds & Integrations" action. No new page and no sidebar menu item is created. embedType is one of the 11 chooser variants (custom, youtube, google-drive, ms-doc, calendly, hubspot, airtable, loom, data-studio, figma, miro). For `custom` pass `content` (URL or embed code) and NOT `url`; for every named variant pass `url` and NOT `content` — the service builds the canonical iframe. hubspot here is an iframe Embed block, not a Flexible Block integration brick. For a published page resolve pageId from listPortalContent; for a page created earlier in the active draft use the pageId that operation returned. The block is staged in the portal's customizer draft (not published immediately). Returns the block id and the draft branch/seqs. Requires portals.write access.
+     */
+    addPortalEmbedBlock(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            portalId: globalIdInPathRequired;
+            pageId: globalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: AddPortalEmbedBlockRequestContract;
+    }): Promise<AddPortalEmbedBlockResponseContract>;
     /**
      * Add an existing Fusebase note as a block to a portal page
      * Embeds an existing Fusebase note as a content block on an existing portal page (no new page or sidebar item is created). The note must already exist in the portal's workspace and be shared into the portal (e.g. created via createPortalPageWithNote). Pass pageId (the target page node id, obtained from listPortalContent) and noteId. The block is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending block, and publishes it. Returns the created block id and the draft branch/seqs. Requires portals.write access.
@@ -80,6 +119,18 @@ export declare class PortalsApi {
         headers?: Record<string, string>;
         body: CreatePortalFolderRequestContract;
     }): Promise<CreatePortalFolderResponseContract>;
+    /**
+     * Create an empty portal page
+     * Creates a new EMPTY sidebar page in the portal — a page node plus its sidebar menu item, with no Fusebase note and no block. The page is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass parentId to nest the page under an existing published or active-draft folder. The returned pageId can immediately be passed to semantic block operations to add content before publishing. Use createPortalPageWithNote instead when a page backed by a new Fusebase note is wanted. Returns the page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
+     */
+    createPortalPage(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            portalId: globalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+        body: CreatePortalPageRequestContract;
+    }): Promise<CreatePortalPageResponseContract>;
     /**
      * Create a portal page backed by a Fusebase note
      * Creates a new sidebar page in the portal backed by a freshly created Fusebase note. The note is created in the portal's workspace and shared into the portal; optional initial text or html can be appended to it. The page (page node + note menu item + note content block) is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass parentId to nest the page under an existing folder. Returns the note/page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
@@ -152,6 +203,33 @@ export declare class PortalsApi {
         headers?: Record<string, string>;
         body: InviteToPortalRequestContract;
     }): Promise<InviteToPortalResponseContract>;
+    /**
+     * List a portal's chat channels for the Chat block picker
+     * Lists the real, listable chat channels of a portal so a Chat block can target one by exact id. DMs, group DMs and hidden channels are excluded; the default channel is returned first. ALWAYS call this before addPortalChatBlock with a channel target — never guess a channel id and never assume `general` exists. This is the Chat widget's channel list, distinct from the portal's system chat menu item and the chats-dashboard block. Requires portals.write access.
+     */
+    listPortalChatChannels(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            portalId: globalIdInPathRequired;
+        };
+        headers?: Record<string, string>;
+    }): Promise<ListPortalChatChannelsResponseContract>;
+    /**
+     * Search or browse a portal's DM target users for the Chat block picker
+     * Searches a portal org's active members + owner by name, username or email so a Chat block can target a DM by exact user id. Call this before addPortalChatBlock with a `dm` target — never guess a user id. `query` is optional: omit it to browse the first bounded page. Returns a single page of { id, displayName, username?, email? }, the matching `total`, and an opaque nextCursor when more pages exist. Show one page at a time and ask before fetching the next; never request or aggregate the full org user list. Requires portals.write access.
+     */
+    listPortalChatUsers(params: {
+        path: {
+            orgId: orgIdInPathRequired;
+            portalId: globalIdInPathRequired;
+        };
+        query?: {
+            query?: string;
+            limit?: number;
+            cursor?: string;
+        };
+        headers?: Record<string, string>;
+    }): Promise<ListPortalChatUsersResponseContract>;
     /**
      * List portal content (folders and pages)
      * Returns the menu tree of a portal: folders, note pages, portal pages, and system items. Use this operation to discover existing content before creating new folders or pages. Item types match portal-service values: notesFolder, note, portalPage, home, link, etc. For items of type 'note', the noteId field contains the Fusebase note id. Requires portals.read access.

package/dist/apis/PortalsApi.js

@@ -26,9 +26,24 @@ class PortalsApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Add an empty Fusebase note as a block to a portal page
+     * Creates a new EMPTY Fusebase note, shares it into the portal and adds it as a note block to an existing portal page — the programmatic equivalent of the customizer's "Blank Block" action. No new page and no sidebar menu item is created. For a published page resolve pageId from listPortalContent; for a page created earlier in the active draft use the pageId that operation returned. The block is appended after the last block of the page body and is staged in the portal's customizer draft (not published immediately). Use addPortalNoteBlock when the note already exists and is already shared into the portal, and createPortalPageWithNote when a new sidebar page backed by a note is wanted. Returns the note/block ids and the draft branch/seqs. Requires portals.write access.
+     */
+    async addPortalBlankNoteBlock(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/portals/:portalId/pages/:pageId/blocks/blank-note",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "addPortalBlankNoteBlock",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Add a block of any palette type to a portal page
-     * Stages a single block of any supported type onto an existing portal page — the universal building block behind the customizer's 'Add new block' palette (no new page or sidebar item is created). Pass pageId (the target page node id from listPortalContent) and type. Supported types: note, content, embed, chat, info, docs, help, request, meetings, links, task-list, projection, files-dashboard, tasks-dashboard, chats-dashboard, files-recent, files-bucket, flexible. Type-specific fields: note/content require noteId; flexible requires template (e.g. {type:'text'|'image'|'title'|'code'|'form'|'dashboard'|'ai-agent'|'app-feature'|...}) and may carry bricks; embed/info/projection/task-list and others take their fields via the free-form `properties` object (e.g. embedType/content/contentUrl, image/link, sourcePortalId/sourcePageId/sourceBlockId, taskListIds). Use addPortalNoteBlock for the common note case or addPortalAppPage for an app on its own page. Note: a `content` block renames the page to its title, so leave title empty for content blocks. The block is staged in the portal's customizer draft (not published immediately); the owner reviews and publishes it. Returns the block id and the draft branch/seqs. Requires portals.write access.
+     * Stages a single block of any supported type onto an existing portal page — the universal building block behind the customizer's 'Add new block' palette (no new page or sidebar item is created). Pass pageId (the target page node id from listPortalContent) and type. Supported types: note, content, info, docs, help, request, meetings, links, task-list, projection, files-dashboard, tasks-dashboard, chats-dashboard, files-recent, files-bucket, flexible. Type-specific fields: note/content require noteId; flexible requires template (e.g. {type:'text'|'image'|'title'|'code'|'form'|'dashboard'|'ai-agent'|'app-feature'|...}) and may carry bricks; info/projection/task-list and others take their fields via the free-form `properties` object (e.g. image/link, sourcePortalId/sourcePageId/sourceBlockId, taskListIds). This op does NOT accept type='embed' or type='chat' — use addPortalEmbedBlock for Embed blocks and addPortalChatBlock for Chat blocks. Use addPortalNoteBlock for the common note case or addPortalAppPage for an app on its own page. Note: a `content` block renames the page to its title, so leave title empty for content blocks. The block is staged in the portal's customizer draft (not published immediately); the owner reviews and publishes it. Returns the block id and the draft branch/seqs. Requires portals.write access.
      */
     async addPortalBlock(params) {
         return this.client.request({
@@ -41,6 +56,36 @@ class PortalsApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Add a Chat block to a portal page
+     * Stages one Customizer-compatible Chat block on an EXISTING portal page — the programmatic equivalent of the customizer's "Chat" action. Pass exactly one target: { type: 'channel', channelId } (id from listPortalChatChannels) or { type: 'dm', userId } (an active org member's userId). membersOnly is channel-only (default true; a private channel requires true; forbidden for dm). One active Chat block is allowed per page — a second returns 409. Creates one chat widget configuration and stages the block in the customizer draft (not published immediately). This is a Chat WIDGET on a page, distinct from the portal's system chat menu item and the chats-dashboard block. For a published page resolve pageId from listPortalContent; for a page created earlier in the active draft use the pageId that operation returned. Returns the block id and the draft branch/seqs. Requires portals.write access.
+     */
+    async addPortalChatBlock(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/portals/:portalId/pages/:pageId/blocks/chat",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "addPortalChatBlock",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Add an Embeds & Integrations block to a portal page
+     * Stages one Customizer-compatible Embed block on an EXISTING portal page — the programmatic equivalent of the customizer's "Embeds & Integrations" action. No new page and no sidebar menu item is created. embedType is one of the 11 chooser variants (custom, youtube, google-drive, ms-doc, calendly, hubspot, airtable, loom, data-studio, figma, miro). For `custom` pass `content` (URL or embed code) and NOT `url`; for every named variant pass `url` and NOT `content` — the service builds the canonical iframe. hubspot here is an iframe Embed block, not a Flexible Block integration brick. For a published page resolve pageId from listPortalContent; for a page created earlier in the active draft use the pageId that operation returned. The block is staged in the portal's customizer draft (not published immediately). Returns the block id and the draft branch/seqs. Requires portals.write access.
+     */
+    async addPortalEmbedBlock(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/portals/:portalId/pages/:pageId/blocks/embed",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "addPortalEmbedBlock",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Add an existing Fusebase note as a block to a portal page
      * Embeds an existing Fusebase note as a content block on an existing portal page (no new page or sidebar item is created). The note must already exist in the portal's workspace and be shared into the portal (e.g. created via createPortalPageWithNote). Pass pageId (the target page node id, obtained from listPortalContent) and noteId. The block is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending block, and publishes it. Returns the created block id and the draft branch/seqs. Requires portals.write access.
@@ -101,6 +146,21 @@ class PortalsApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * Create an empty portal page
+     * Creates a new EMPTY sidebar page in the portal — a page node plus its sidebar menu item, with no Fusebase note and no block. The page is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass parentId to nest the page under an existing published or active-draft folder. The returned pageId can immediately be passed to semantic block operations to add content before publishing. Use createPortalPageWithNote instead when a page backed by a new Fusebase note is wanted. Returns the page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
+     */
+    async createPortalPage(params) {
+        return this.client.request({
+            method: "POST",
+            path: "/:orgId/portals/:portalId/pages",
+            pathParams: params.path,
+            headers: params.headers,
+            body: params.body,
+            opId: "createPortalPage",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * Create a portal page backed by a Fusebase note
      * Creates a new sidebar page in the portal backed by a freshly created Fusebase note. The note is created in the portal's workspace and shared into the portal; optional initial text or html can be appended to it. The page (page node + note menu item + note content block) is staged in the portal's customizer draft (not published immediately): the portal owner opens the customizer, reviews the pending page, and publishes it. Pass parentId to nest the page under an existing folder. Returns the note/page/menu-item ids, the page url, and the draft branch/seqs. Requires portals.write access.
@@ -190,6 +250,35 @@ class PortalsApi {
             expectedContentType: "application/json",
         });
     }
+    /**
+     * List a portal's chat channels for the Chat block picker
+     * Lists the real, listable chat channels of a portal so a Chat block can target one by exact id. DMs, group DMs and hidden channels are excluded; the default channel is returned first. ALWAYS call this before addPortalChatBlock with a channel target — never guess a channel id and never assume `general` exists. This is the Chat widget's channel list, distinct from the portal's system chat menu item and the chats-dashboard block. Requires portals.write access.
+     */
+    async listPortalChatChannels(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/portals/:portalId/chat/channels",
+            pathParams: params.path,
+            headers: params.headers,
+            opId: "listPortalChatChannels",
+            expectedContentType: "application/json",
+        });
+    }
+    /**
+     * Search or browse a portal's DM target users for the Chat block picker
+     * Searches a portal org's active members + owner by name, username or email so a Chat block can target a DM by exact user id. Call this before addPortalChatBlock with a `dm` target — never guess a user id. `query` is optional: omit it to browse the first bounded page. Returns a single page of { id, displayName, username?, email? }, the matching `total`, and an opaque nextCursor when more pages exist. Show one page at a time and ask before fetching the next; never request or aggregate the full org user list. Requires portals.write access.
+     */
+    async listPortalChatUsers(params) {
+        return this.client.request({
+            method: "GET",
+            path: "/:orgId/portals/:portalId/chat/users",
+            pathParams: params.path,
+            query: params.query,
+            headers: params.headers,
+            opId: "listPortalChatUsers",
+            expectedContentType: "application/json",
+        });
+    }
     /**
      * List portal content (folders and pages)
      * Returns the menu tree of a portal: folders, note pages, portal pages, and system items. Use this operation to discover existing content before creating new folders or pages. Item types match portal-service values: notesFolder, note, portalPage, home, link, etc. For items of type 'note', the noteId field contains the Fusebase note id. Requires portals.read access.

package/dist/types/app-access-principal/app-access-principal.d.ts

@@ -0,0 +1,28 @@
+/**
+ * An access principal on an AI App's features. Mirrors nimbus-ai's
+ * `AppAccessPrincipal` (`type` + `id`). `id` is required for
+ * user/orgRole/orgGroup and optional (ignored) for visitor.
+ */
+export interface AppAccessPrincipalContract {
+    type: "user" | "orgRole" | "orgGroup" | "visitor";
+    /**
+     * Principal id: the user id, org role name, or org group id. Optional for
+     * visitor.
+     * @nullable true
+     */
+    id?: string | null;
+}
+/**
+ * Request body for removeAppAccessPrincipal. The principal to strip from every
+ * feature (App) of the product.
+ */
+export type RemoveAppAccessPrincipalRequestContract = AppAccessPrincipalContract;
+/**
+ * Response body for removeAppAccessPrincipal.
+ */
+export interface RemoveAppAccessPrincipalResponseContract {
+    /** True when the principal was present on at least one App and removed. */
+    removed: boolean;
+    /** Number of Apps (features) the principal was removed from. */
+    appsAffected: number;
+}

package/dist/types/app-access-principal/app-access-principal.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/app-api/app-api.d.ts

@@ -37,6 +37,13 @@ export interface CallAppApiRequestContract {
     path?: Record<string, string>;
     query?: Record<string, string | number | boolean>;
     body?: unknown;
+    /**
+     * On-behalf-of: a platform app token (`fbsfeaturetoken` / `x-app-feature-token`)
+     * identifying the end user this call runs for. Gate verifies it fail-closed and
+     * forwards the resolved user to the runtime as `X-Fusebase-Verified-User-*`
+     * headers; the calling identity still governs the operation's access policy.
+     */
+    onBehalfOfUserToken?: string;
 }
 export interface CallAppApiResponseContract {
     ok: boolean;

package/dist/types/app-magic-link/app-magic-link.d.ts

@@ -19,6 +19,34 @@ export interface CreateAppMagicLinkRequestContract {
      * When false, the user must already exist or the call rejects with NotFound.
      */
     addToAccessPrincipals?: boolean;
+    /**
+     * Optional link lifetime in seconds. Omit for the 24h (86400) default.
+     * A provided value is clamped server-side to the 3600 (1h)..604800 (7d)
+     * range rather than rejected, so a slightly out-of-range value still yields
+     * a usable link.
+     * `0` or a negative value is NOT "no expiry" and does NOT expire the link
+     * immediately — it clamps UP to the 3600 (1h) minimum, so 1h is the
+     * shortest lifetime you can create.
+     * Whole seconds: a fractional value is floored server-side.
+     * @TJS-type integer
+     */
+    ttlSeconds?: number;
+    /**
+     * Opaque app payload (not interpreted by the platform) stored on the link and
+     * echoed back byte-for-byte at activation. Use it to bind the link to an
+     * app-side entity (e.g. an invitation id) instead of overloading redirectPath.
+     * @maxLength 4096
+     * @nullable true
+     */
+    meta?: string | null;
+    /**
+     * Optional child App (feature) globalId the link should target, so a
+     * multi-app product can route sign-in per app. The email URL and activation
+     * tokens are scoped to this App's host. Omit to fall back to the product's
+     * first App (no behavior change).
+     * @nullable true
+     */
+    appFeatureId?: string | null;
 }
 /**
  * Response body for createAppMagicLink.
@@ -35,7 +63,8 @@ export interface CreateAppMagicLinkResponseContract {
      */
     magicLinkUrl: string;
     /**
-     * Unix timestamp (seconds) when the link expires (createdAt + 24h).
+     * Unix timestamp (seconds) when the link expires (createdAt + ttlSeconds,
+     * defaulting to 24h when ttlSeconds is omitted).
      */
     expiresAt: number;
 }
@@ -121,6 +150,12 @@ export interface ActivateAppMagicLinkResponseContract {
      * globalId of the resolved app feature whose access the tokens are scoped to.
      */
     appFeatureId: string;
+    /**
+     * Opaque app payload supplied when the link was created, echoed back
+     * byte-for-byte. Null for links created without `meta` (backward compatible).
+     * @nullable true
+     */
+    meta?: string | null;
 }
 /**
  * Response body for revokeAppMagicLink.
@@ -174,6 +209,11 @@ export interface AppMagicLinkSummaryContract {
     usedAt?: number | null;
     /** Unix timestamp (seconds) when the link was created. */
     createdAt: number;
+    /**
+     * Opaque app payload stored on the link, or null when none was supplied.
+     * @nullable true
+     */
+    meta?: string | null;
 }
 /**
  * Response body for listAppMagicLinks (support/debug).
@@ -201,6 +241,31 @@ export interface BulkAppMagicLinkInvitationContract {
      * When false, the user must already exist or the invite fails with NotFound.
      */
     addToAccessPrincipals?: boolean;
+    /**
+     * Optional link lifetime in seconds. Omit for the 24h (86400) default.
+     * A provided value is clamped server-side to the 3600 (1h)..604800 (7d)
+     * range rather than rejected.
+     * `0` or a negative value is NOT "no expiry" and does NOT expire the link
+     * immediately — it clamps UP to the 3600 (1h) minimum, so 1h is the
+     * shortest lifetime you can create.
+     * Whole seconds: a fractional value is floored server-side.
+     * @TJS-type integer
+     */
+    ttlSeconds?: number;
+    /**
+     * Opaque app payload (not interpreted by the platform) stored on the link and
+     * echoed back byte-for-byte at activation.
+     * @maxLength 4096
+     * @nullable true
+     */
+    meta?: string | null;
+    /**
+     * Optional child App (feature) globalId the link should target, so a
+     * multi-app product can route sign-in per app. Omit to fall back to the
+     * product's first App (no behavior change).
+     * @nullable true
+     */
+    appFeatureId?: string | null;
 }
 export interface BulkCreateAppMagicLinksRequestContract {
     /** Users to invite to the app in a single call. */

package/dist/types/email/email.d.ts

@@ -1,5 +1,10 @@
 export interface OrgEmailSendRequestContract {
     subject: string;
+    /**
+     * Email body as HTML or plain text. Bare URLs are auto-linked and the
+     * content is sanitized before delivery. Sent through the unbranded app
+     * layout with a noreply sender — no FuseBase logo, footer, or branding.
+     */
     body: string;
     /**
      * Recipient user id or email.
@@ -8,16 +13,6 @@ export interface OrgEmailSendRequestContract {
      * The resolved user must already belong to the organization.
      */
     recipient: string;
-    /**
-     * Optional variables that the mail rendering layer may use.
-     * Currently accepted for forward compatibility and not yet applied during sending.
-     */
-    variables?: Record<string, string>;
-    /**
-     * Optional link variables that the mail rendering layer may use.
-     * Currently accepted for forward compatibility and not yet applied during sending.
-     */
-    links?: Record<string, string>;
 }
 export interface OrgEmailSendResponseContract {
     requestId: string;

package/dist/types/fusebase-auth/fusebase-auth.d.ts

@@ -68,6 +68,21 @@ export interface FusebaseAuthConflictErrorBodyContract {
         upstreamErrorCode?: number;
     };
 }
+/**
+ * Body returned with HTTP 401 when auth-form rejects the supplied credentials
+ * or challenge answer. `data.errorCode` says which:
+ * `fusebase_auth_invalid_credentials` (wrong email/password — do not retry),
+ * `fusebase_auth_challenge_failed` (wrong verification code — re-prompt) or
+ * `fusebase_auth_challenge_expired` (restart the sign-in).
+ */
+export interface FusebaseAuthUnauthorizedErrorBodyContract {
+    success: false;
+    message: string;
+    data: {
+        code: string;
+        errorCode: string;
+    };
+}
 export interface FusebaseAuthLoginRequestContract {
     /**
      * User email. Forwarded to auth-form as `login`.
@@ -101,13 +116,42 @@ export interface FusebaseAuthPasswordRestoreRequestContract {
      * @format email
      */
     email: string;
-    customAuthUrl?: string;
+    /**
+     * Portal white-label branding. When BOTH `portalId` and `workspaceId` are set,
+     * user-service switches to portal branding: it resolves the portal domain
+     * itself, uses the portal name, and sends the `restore_portal_password`
+     * template instead of the default one.
+     */
     portalId?: string;
     workspaceId?: string;
 }
 export interface FusebaseAuthPasswordRestoreResponseContract {
     ok: true;
 }
+export interface FusebaseAuthRestoreKeyRequestContract {
+    /**
+     * User email whose password-restore key to mint.
+     * @format email
+     */
+    email: string;
+}
+export interface FusebaseAuthRestoreKeyResponseContract {
+    /**
+     * Raw restore key. Passes `checkFusebasePasswordRestoreKey` /
+     * `resetFusebasePassword`. Not bound to any URL — an app hosting its own reset
+     * page puts this key wherever it likes and reads it back from there.
+     */
+    key: string;
+    /**
+     * Reset link on the platform auth-form page,
+     * `https://app.<fusebase-host>/auth/?f=resetpass&key=<key>&parentOrigin=`.
+     * Use it when the app has no reset page of its own; it saves callers from
+     * hardcoding the per-environment host.
+     */
+    platformResetUrl: string;
+    /** Session expiry as a Unix epoch in milliseconds. */
+    expiresAt: number;
+}
 export interface FusebaseAuthPasswordRestoreKeyResponseContract {
     valid: boolean;
 }

package/dist/types/index.d.ts

@@ -5,22 +5,23 @@
  * Generated by SDK codegen
  */
 export type { AuthenticatedUserSummaryContract, MyOrgAccessResponseContract } from "./access/access";
+export type { AppAccessPrincipalContract, RemoveAppAccessPrincipalRequestContract, RemoveAppAccessPrincipalResponseContract } from "./app-access-principal/app-access-principal";
 export type { AppApiOperationContract, AppApiOperationListResponseContract, CallAppApiRequestContract, CallAppApiResponseContract, PublishedAppContract, PublishedAppListResponseContract, VerifyAppApiContractsRequestContract, VerifyAppApiContractsResponseContract, VerifyCaseResultContract } from "./app-api/app-api";
 export type { AppPortalEmbedContract, ListAppPortalEmbedsResponseContract } from "./app-embed-targets/app-embed-targets";
 export type { ActivateAppMagicLinkResponseContract, AppMagicLinkSummaryContract, BulkAppMagicLinkInvitationContract, BulkAppMagicLinkResultItemContract, BulkCreateAppMagicLinksRequestContract, BulkCreateAppMagicLinksResponseContract, CreateAppClientInviteRequestContract, CreateAppMagicLinkRequestContract, CreateAppMagicLinkResponseContract, ListAppMagicLinksResponseContract, RequestAppMagicLinkRequestContract, RequestAppMagicLinkResponseContract, RevokeAppMagicLinkResponseContract } from "./app-magic-link/app-magic-link";
 export * from "./billing/billing";
 export type { OrgEmailSendRequestContract, OrgEmailSendResponseContract } from "./email/email";
 export * from "./file/file";
-export type { FusebaseAuthChallengeContract, FusebaseAuthChallengeRequestContract, FusebaseAuthChallengeResponseContract, FusebaseAuthConflictErrorBodyContract, FusebaseAuthLoginRequestContract, FusebaseAuthLoginResponseContract, FusebaseAuthLogoutResponseContract, FusebaseAuthPasswordResetRequestContract, FusebaseAuthPasswordResetResponseContract, FusebaseAuthPasswordRestoreKeyResponseContract, FusebaseAuthPasswordRestoreRequestContract, FusebaseAuthPasswordRestoreResponseContract, FusebaseAuthRegisterMemberRequestContract, FusebaseAuthRegisterMemberResponseContract, FusebaseAuthRegisterRequestContract, FusebaseAuthRegisterResponseContract, FusebaseAuthSessionContract } from "./fusebase-auth/fusebase-auth";
+export type { FusebaseAuthChallengeContract, FusebaseAuthChallengeRequestContract, FusebaseAuthChallengeResponseContract, FusebaseAuthConflictErrorBodyContract, FusebaseAuthLoginRequestContract, FusebaseAuthLoginResponseContract, FusebaseAuthLogoutResponseContract, FusebaseAuthPasswordResetRequestContract, FusebaseAuthPasswordResetResponseContract, FusebaseAuthPasswordRestoreKeyResponseContract, FusebaseAuthPasswordRestoreRequestContract, FusebaseAuthPasswordRestoreResponseContract, FusebaseAuthRegisterMemberRequestContract, FusebaseAuthRegisterMemberResponseContract, FusebaseAuthRegisterRequestContract, FusebaseAuthRegisterResponseContract, FusebaseAuthRestoreKeyRequestContract, FusebaseAuthRestoreKeyResponseContract, FusebaseAuthSessionContract, FusebaseAuthUnauthorizedErrorBodyContract } from "./fusebase-auth/fusebase-auth";
 export * from "./isolated-store/isolated-store";
 export * from "./mcp-manager/mcp-manager";
 export type { MeAuthContract, MeOrgGroupContract, MePreferencesContract, MeResponseContract, MeScopeContract, MeUserContract } from "./me/me";
 export * from "./note/note";
 export * from "./org-group/org-group";
-export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
+export type { ClientAccountScheduledDeletionRequestContract, ClientAccountScheduledDeletionResponseContract, CreateWorkspaceRequestContract, OrgInviteContract, OrgMagicLinkContract, OrgMemberExpectedJoinedAfterInQueryOptional, OrgMemberExpectedRoleInQueryOptional, OrgMemberRemoveResponseContract, OrgPortalContract, OrgPortalListResponseContract, OrgUserAddRequestContract, OrgUserAddResponseContract, OrgUserContract, OrgUserIdInPathRequired, OrgUserListResponseContract, OrgUserWorkspaceIdInPathRequired, OrgWorkspaceContract, OrgWorkspaceInviteContract, OrgWorkspaceListResponseContract, OrgWorkspaceMemberContract, OrgWorkspaceMemberListResponseContract, WorkspaceMemberRemoveResponseContract } from "./org-user/org-user";
 export * from "./orgs/orgs";
 export type { VerifyPortalFeatureContextTokenRequestContract, VerifyPortalFeatureContextTokenResponseContract } from "./portal-feature-context/portal-feature-context";
-export type { AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlockRequestContract, AddPortalBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, BulkInviteResultItemContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, BulkPortalInvitationContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalContentResponseContract, PortalContentItemContract, PortalDetailContract, PublishPortalDraftResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract, globalIdInPathRequired } from "./portals/portals";
+export type { AddPortalAppPageRequestContract, AddPortalAppPageResponseContract, AddPortalBlankNoteBlockRequestContract, AddPortalBlankNoteBlockResponseContract, AddPortalBlockRequestContract, AddPortalBlockResponseContract, AddPortalChatBlockRequestContract, AddPortalChatBlockResponseContract, AddPortalEmbedBlockRequestContract, AddPortalEmbedBlockResponseContract, AddPortalNoteBlockRequestContract, AddPortalNoteBlockResponseContract, BulkInviteResultItemContract, BulkInviteToPortalRequestContract, BulkInviteToPortalResponseContract, BulkPortalInvitationContract, CreatePortalFolderRequestContract, CreatePortalFolderResponseContract, CreatePortalPageRequestContract, CreatePortalPageResponseContract, CreatePortalPageWithNoteRequestContract, CreatePortalPageWithNoteResponseContract, CreatePortalRequestContract, CreatePortalResponseContract, DuplicatePortalItemRequestContract, DuplicatePortalItemResponseContract, DuplicatePortalRequestContract, InvitePortalManagerRequestContract, InvitePortalManagerResponseContract, InviteToPortalRequestContract, InviteToPortalResponseContract, ListPortalChatChannelsResponseContract, ListPortalChatUsersResponseContract, ListPortalContentResponseContract, PortalChatChannelContract, PortalChatUserContract, PortalContentItemContract, PortalDetailContract, PublishPortalDraftResponseContract, UpdatePortalAccessRequestContract, UpdatePortalAccessResponseContract, UpdatePortalCustomCodeRequestContract, UpdatePortalCustomCodeResponseContract, globalIdInPathRequired } from "./portals/portals";
 export * from "./shared/common";
 export * from "./shared/enums";
 export type { GetHealth200ResponseContract } from "./shared/health";

package/dist/types/note/note.d.ts

@@ -143,6 +143,33 @@ export interface WorkspaceNoteAttachmentContract {
 export interface AddWorkspaceNoteAttachmentResponseContract {
     attachment: WorkspaceNoteAttachmentContract;
 }
+export interface AddWorkspaceMarkdownNoteAttachmentRequestContract {
+    /**
+     * Stored-file UUID returned by completeMultipartFileUpload.
+     */
+    storedFileUUID: string;
+    /**
+     * Alt text for image attachments / link text for other files. Defaults to
+     * the attachment display name.
+     */
+    alt?: string | null;
+}
+export interface AddWorkspaceMarkdownNoteAttachmentResponseContract {
+    attachment: WorkspaceNoteAttachmentContract;
+    /**
+     * Canonical attachment URL. Use it as-is inside the note markdown.
+     */
+    url: string;
+    /**
+     * Markdown snippet that was appended to the note: an image for image
+     * attachments, a link for everything else.
+     */
+    markdown: string;
+    /**
+     * The note after the append, including its new revision.
+     */
+    note: WorkspaceMarkdownNoteContract;
+}
 export declare const WorkspaceNoteContentFormatContract: {
     readonly Text: "text";
     readonly Html: "html";

package/dist/types/org-user/org-user.d.ts

@@ -112,6 +112,29 @@ export interface OrgWorkspaceMemberContract {
     type?: string | null;
     privileges?: string[] | null;
     magicLink?: string | null;
+    /**
+     * Organization role of this member, joined from org membership by `userId`
+     * (one of `guest`|`client`|`member`|`manager`|`owner`). `null` when no org
+     * membership record resolves for the user. Lets callers tell portal clients
+     * (`client`) from portal managers without a separate listOrgUsers call.
+     */
+    orgRole?: string | null;
+    /** Member email from the org user profile. `null` when unknown. */
+    email?: string | null;
+    /** Member first name from the org user profile. `null` when unknown. */
+    firstname?: string | null;
+    /** Member last name from the org user profile. `null` when unknown. */
+    lastname?: string | null;
+    /**
+     * Whether this member is a portal manager, per the official platform
+     * contract: a portal manager is a member whose org role is `manager` (which
+     * is exactly what `invitePortalManager` grants) or `owner` (who outranks a
+     * manager and has full authority over every portal). Rely on this flag
+     * instead of re-deriving the formula in app code, so the check does not
+     * silently break if the internal representation of a portal manager ever
+     * changes. `false` when the org role cannot be resolved.
+     */
+    isPortalManager?: boolean;
 }
 export interface OrgWorkspaceMemberListResponseContract {
     members: OrgWorkspaceMemberContract[];
@@ -146,6 +169,17 @@ export interface OrgUserAddResponseContract {
     workspaceMember?: OrgWorkspaceMemberContract;
     magicLink?: OrgMagicLinkContract;
 }
+/**
+ * Optional CAS guard for removeOrgMember: the membership is only removed when
+ * its current org role still equals this value.
+ */
+export type OrgMemberExpectedRoleInQueryOptional = string;
+/**
+ * Optional provenance guard for removeOrgMember (unix timestamp in seconds):
+ * the membership is only removed when it was created at or after this moment,
+ * so cancelling an invite can never drop a pre-existing member.
+ */
+export type OrgMemberExpectedJoinedAfterInQueryOptional = number;
 export interface OrgMemberRemoveResponseContract {
     ok: true;
     userId: number;

package/dist/types/portal-feature-context/portal-feature-context.d.ts

@@ -7,6 +7,12 @@ export interface VerifyPortalFeatureContextTokenRequestContract {
 }
 /**
  * Trusted portal/workspace context extracted from a verified embed token.
+ *
+ * `userId`/`orgRole` describe WHO is calling and come from the live,
+ * user-bound session token that authenticated the request (not from the
+ * static per-brick `portalFeatureContextToken`), so one verify yields the
+ * trusted "user × portal × app" triple. Absent for unauthenticated/visitor
+ * (open/email) portal sessions.
  */
 export interface VerifyPortalFeatureContextTokenResponseContract {
     portalId: string;
@@ -15,4 +21,8 @@ export interface VerifyPortalFeatureContextTokenResponseContract {
     productId: string;
     /** App (feature) id (legacy payload field `featureId`). */
     appId: string;
+    /** Native id of the authenticated caller. Absent for visitor sessions. */
+    userId?: number;
+    /** Org role of the authenticated caller at verify time. */
+    orgRole?: string;
 }

package/dist/types/portals/portals.d.ts

@@ -84,8 +84,41 @@ export interface PublishPortalDraftResponseContract {
     /** Always true: the staged draft is now live on the portal. */
     published: boolean;
 }
+export interface CreatePortalPageRequestContract {
+    /**
+     * Title for the new empty page (also used as its sidebar item name).
+     * @maxLength 100
+     */
+    title: string;
+    /**
+     * Optional id of an existing published or active-draft menu item (e.g. a
+     * folder) to nest the page under in the sidebar. When omitted the page is
+     * created at the portal root.
+     */
+    parentId?: string;
+}
+export interface CreatePortalPageResponseContract {
+    /** Id of the created sidebar menu item. */
+    menuItemId: string;
+    /** Id of the created portal page node. */
+    pageId: string;
+    /** URL path assigned to the page (e.g. "/welcome"). */
+    url: string;
+    /** Draft branch the change was staged on. */
+    branchId: string;
+    /** Sequence numbers assigned to the staged change events (addPage, addMenuItem). */
+    seqs: number[];
+    /**
+     * Always true: the page is staged in the portal's customizer draft, not yet
+     * live. The portal owner reviews and publishes it from the customizer.
+     */
+    staged: boolean;
+}
 export interface CreatePortalPageWithNoteRequestContract {
-    /** Title for the new page (also used as the backing Fusebase note title). */
+    /**
+     * Title for the new page (also used as the backing Fusebase note title).
+     * @maxLength 100
+     */
     title: string;
     /**
      * Optional id of an existing menu item (e.g. a folder) to nest the page under
@@ -126,6 +159,27 @@ export interface AddPortalNoteBlockRequestContract {
     /** Optional block title (defaults to the page's current title). */
     title?: string;
 }
+export interface AddPortalBlankNoteBlockRequestContract {
+    /** Optional block title (defaults to "New Document"). */
+    title?: string;
+}
+export interface AddPortalBlankNoteBlockResponseContract {
+    /** Global id of the newly created Fusebase note backing the block. */
+    noteId: string;
+    /** Id of the created note block. */
+    blockId: string;
+    /** Id of the page the block was added to. */
+    pageId: string;
+    /** Draft branch the change was staged on. */
+    branchId: string;
+    /** Sequence numbers assigned to the staged change events (addBlock). */
+    seqs: number[];
+    /**
+     * Always true: the block is staged in the portal's customizer draft, not yet
+     * live. The portal owner reviews and publishes it from the customizer.
+     */
+    staged: boolean;
+}
 export interface AddPortalNoteBlockResponseContract {
     /** Id of the created note content block. */
     blockId: string;
@@ -141,12 +195,132 @@ export interface AddPortalNoteBlockResponseContract {
      */
     staged: boolean;
 }
+/**
+ * The 11 Customizer "Embeds & Integrations" chooser variants. The internal
+ * legacy `unknown` is intentionally excluded — it is not a create option.
+ */
+export type PortalEmbedType = "custom" | "youtube" | "google-drive" | "ms-doc" | "calendly" | "hubspot" | "airtable" | "loom" | "data-studio" | "figma" | "miro";
+export interface AddPortalEmbedBlockRequestContract {
+    /** Required non-empty block title. */
+    title: string;
+    /** Customizer Embed variant. `unknown` is not accepted. */
+    embedType: PortalEmbedType;
+    /** Required for named variants, forbidden for `custom`: the URL to embed. */
+    url?: string;
+    /** Required for `custom`, forbidden for named variants: the embed code/URL. */
+    content?: string;
+    /** Whether to show the "open in new tab" link on the block. Default: true. */
+    showEmbedLink?: boolean;
+    /** Block width in grid columns. Default: 3. */
+    colspan?: 2 | 3 | 4 | 5 | 6;
+    /** Block height in grid rows. Default: 1. */
+    rowspan?: 1 | 2 | 3 | 4;
+    /** Fixed pixel height, or null to auto-size. Default: null. */
+    height?: number | null;
+}
+export interface AddPortalEmbedBlockResponseContract {
+    /** Id of the created embed block. */
+    blockId: string;
+    /** Id of the page the block was added to. */
+    pageId: string;
+    /** Draft branch the change was staged on. */
+    branchId: string;
+    /** Sequence numbers assigned to the staged change events (addBlock). */
+    seqs: number[];
+    /**
+     * Always true: the block is staged in the portal's customizer draft, not yet
+     * live. The portal owner reviews and publishes it from the customizer.
+     */
+    staged: boolean;
+}
+/** Which chat target a Chat block points at. */
+export type PortalChatBlockTargetType = "channel" | "dm";
+/**
+ * Exactly one chat target, as a discriminated union (matches the Customizer).
+ * A `channel` target carries only `channelId`; a `dm` target only `userId`.
+ */
+export type PortalChatBlockTarget = {
+    type: "channel";
+    /** A channel id from listPortalChatChannels. */
+    channelId: string;
+} | {
+    type: "dm";
+    /** An active org member/owner user id. */
+    userId: number;
+};
+export interface AddPortalChatBlockRequestContract {
+    /** Required non-empty block title. */
+    title: string;
+    /** Exactly one of a `channel` (channelId) or `dm` (userId) target. */
+    target: PortalChatBlockTarget;
+    /**
+     * Channels only: restrict posting to members. Defaults to true; forbidden for
+     * a `dm` target; a private channel requires true.
+     */
+    membersOnly?: boolean;
+    /** Block width in grid columns. Default: 6. */
+    colspan?: 3 | 4 | 5 | 6;
+    /** Block height in grid rows. Default: 1. */
+    rowspan?: 1 | 2 | 3 | 4;
+    /** Fixed pixel height, or null to auto-size. Default: null. */
+    height?: number | null;
+}
+export interface AddPortalChatBlockResponseContract {
+    /** Id of the created chat block. */
+    blockId: string;
+    /** Id of the page the block was added to. */
+    pageId: string;
+    /** Draft branch the change was staged on. */
+    branchId: string;
+    /** Sequence numbers assigned to the staged change events (addBlock). */
+    seqs: number[];
+    /**
+     * Always true: the block is staged in the portal's customizer draft, not yet
+     * live. The portal owner reviews and publishes it from the customizer.
+     */
+    staged: boolean;
+}
+export interface PortalChatChannelContract {
+    /** Channel id to pass to addPortalChatBlock as channelId. */
+    id: string;
+    /** Human-readable channel name. */
+    name: string;
+    /** Whether the channel is public (private channels require membersOnly). */
+    isPublic: boolean;
+    /** Whether this is the portal's default channel (returned first). */
+    isDefault: boolean;
+}
+export interface ListPortalChatChannelsResponseContract {
+    /** Listable chat channels, default channel first. */
+    channels: PortalChatChannelContract[];
+}
+export interface PortalChatUserContract {
+    /** User id to pass to addPortalChatBlock as target.userId. */
+    id: number;
+    /** Effective display name (composed name → username → email → id). */
+    displayName: string;
+    /** Username, when the user has one. */
+    username?: string;
+    /** Email, to tell apart users sharing a display name. Always present. */
+    email: string;
+}
+export interface ListPortalChatUsersResponseContract {
+    /** Matched DM target users (a single bounded page). */
+    users: PortalChatUserContract[];
+    /**
+     * Total number of matching users across all pages.
+     * @TJS-type integer
+     */
+    total: number;
+    /** Opaque cursor for the next page; absent when there are no more results. */
+    nextCursor?: string;
+}
 /**
  * Block types the portal-service draft reducer (`blockFromDto`) understands.
  * Any other value is rejected with 400 (the reducer throws on unknown types,
  * which would otherwise fail the whole draft at publish time).
  */
-export type PortalBlockType = "note" | "content" | "embed" | "chat" | "info" | "docs" | "help" | "request" | "meetings" | "links" | "task-list" | "projection" | "files-dashboard" | "tasks-dashboard" | "chats-dashboard" | "files-recent" | "files-bucket" | "flexible";
+export type PortalBlockType = "note" | "content" | "info" | "docs" | "help" | "request" | "meetings" | "links" | "task-list" | "projection" | "files-dashboard" | "tasks-dashboard" | "chats-dashboard" | "files-recent" | "files-bucket" | "flexible";
 export interface AddPortalBlockRequestContract {
     /** Id of the existing portal page node to add the block to. */
     pageId: string;
@@ -165,7 +339,7 @@ export interface AddPortalBlockRequestContract {
     bricks?: unknown[];
     /**
      * Optional type-specific fields for the staged block, e.g. flat strings
-     * `embedType`/`content`/`contentUrl` for embed, `image`/`link` for info,
+     * `image`/`link` for info,
      * `sourcePortalId`/`sourcePageId`/`sourceBlockId` for projection,
      * `taskListIds` for task-list. Also overrides scaffold defaults (colspan,
      * rowspan, …) when provided. Every field is validated against the block's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusebase/fusebase-gate-sdk",
-  "version": "2.3.34-sdk.1",
+  "version": "2.3.34-sdk.10",
   "description": "TypeScript SDK for Fusebase Gate APIs - Generated from contract introspection",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/release-notes/2.3.34-sdk.10.md

@@ -0,0 +1,9 @@
+# Release Notes 2.3.34-sdk.10
+
+- Current ref: `HEAD`
+- Previous tag: `v2.3.34-sdk.10`
+- Generated at: 2026-07-27T04:42:43.276Z
+
+## Included Drafts
+
+- None

package/release-notes/latest.md

@@ -1,8 +1,8 @@
-# Release Notes 2.3.34-sdk.1
+# Release Notes 2.3.34-sdk.10
 
 - Current ref: `HEAD`
-- Previous tag: `v2.3.34-sdk.1`
-- Generated at: 2026-07-21T12:11:10.747Z
+- Previous tag: `v2.3.34-sdk.10`
+- Generated at: 2026-07-27T04:42:43.276Z
 
 ## Included Drafts
 

package/release-notes/2.3.34-sdk.1.md

@@ -1,9 +0,0 @@
-# Release Notes 2.3.34-sdk.1
-
-- Current ref: `HEAD`
-- Previous tag: `v2.3.34-sdk.1`
-- Generated at: 2026-07-21T12:11:10.747Z
-
-## Included Drafts
-
-- None