@squadbase/vite-server 0.1.3 → 0.1.4-dev.1

package/dist/connectors/attio.js

@@ -78,72 +78,255 @@ function createClient(params) {
       );
     }
   }
+  function buildQuery(params2) {
+    if (!params2) return "";
+    const entries = Object.entries(params2).filter(
+      ([, v]) => v !== void 0 && v !== null
+    );
+    if (entries.length === 0) return "";
+    const usp = new URLSearchParams();
+    for (const [k, v] of entries) usp.set(k, String(v));
+    return `?${usp.toString()}`;
+  }
+  async function httpJson(method, path2, label, body) {
+    const res = await fetch(`${BASE_URL}${path2}`, {
+      method,
+      headers: authHeaders(),
+      body: body === void 0 ? void 0 : JSON.stringify(body)
+    });
+    await assertOk(res, label);
+    return await res.json();
+  }
+  async function httpVoid(method, path2, label) {
+    const res = await fetch(`${BASE_URL}${path2}`, {
+      method,
+      headers: authHeaders()
+    });
+    await assertOk(res, label);
+  }
+  function queryBody(options) {
+    const body = {};
+    if (options?.filter) body.filter = options.filter;
+    if (options?.sorts) body.sorts = options.sorts;
+    if (options?.limit) body.limit = options.limit;
+    if (options?.offset) body.offset = options.offset;
+    return body;
+  }
+  const enc = encodeURIComponent;
   return {
     request(path2, init) {
       const url = `${BASE_URL}${path2}`;
       const headers = new Headers(init?.headers);
       headers.set("Authorization", `Bearer ${apiKey}`);
-      headers.set("Content-Type", "application/json");
+      if (!headers.has("Content-Type"))
+        headers.set("Content-Type", "application/json");
       return fetch(url, { ...init, headers });
     },
-    async listObjects() {
-      const res = await fetch(`${BASE_URL}/objects`, {
-        method: "GET",
-        headers: authHeaders()
-      });
-      await assertOk(res, "listObjects");
-      return await res.json();
-    },
-    async listAttributes(object) {
-      const res = await fetch(
-        `${BASE_URL}/objects/${encodeURIComponent(object)}/attributes`,
-        { method: "GET", headers: authHeaders() }
-      );
-      await assertOk(res, "listAttributes");
-      return await res.json();
-    },
-    async queryRecords(object, options) {
-      const body = {};
-      if (options?.filter) body.filter = options.filter;
-      if (options?.sorts) body.sorts = options.sorts;
-      if (options?.limit) body.limit = options.limit;
-      if (options?.offset) body.offset = options.offset;
-      const res = await fetch(
-        `${BASE_URL}/objects/${encodeURIComponent(object)}/records/query`,
-        {
-          method: "POST",
-          headers: authHeaders(),
-          body: JSON.stringify(body)
-        }
+    // ---- Meta ----
+    self: () => httpJson("GET", "/self", "self"),
+    // ---- Objects ----
+    listObjects: () => httpJson("GET", "/objects", "listObjects"),
+    getObject: (object) => httpJson("GET", `/objects/${enc(object)}`, "getObject"),
+    listObjectViews: (object) => httpJson(
+      "GET",
+      `/objects/${enc(object)}/views`,
+      "listObjectViews"
+    ),
+    // ---- Attributes ----
+    listAttributes: (object) => httpJson(
+      "GET",
+      `/objects/${enc(object)}/attributes`,
+      "listAttributes"
+    ),
+    getAttribute: (object, attribute) => httpJson(
+      "GET",
+      `/objects/${enc(object)}/attributes/${enc(attribute)}`,
+      "getAttribute"
+    ),
+    listSelectOptions: (object, attribute) => httpJson(
+      "GET",
+      `/objects/${enc(object)}/attributes/${enc(attribute)}/options`,
+      "listSelectOptions"
+    ),
+    listStatuses: (object, attribute) => httpJson(
+      "GET",
+      `/objects/${enc(object)}/attributes/${enc(attribute)}/statuses`,
+      "listStatuses"
+    ),
+    // ---- Records ----
+    queryRecords: (object, options) => httpJson(
+      "POST",
+      `/objects/${enc(object)}/records/query`,
+      "queryRecords",
+      queryBody(options)
+    ),
+    getRecord: (object, recordId) => httpJson(
+      "GET",
+      `/objects/${enc(object)}/records/${enc(recordId)}`,
+      "getRecord"
+    ),
+    createRecord: (object, data) => httpJson(
+      "POST",
+      `/objects/${enc(object)}/records`,
+      "createRecord",
+      { data }
+    ),
+    updateRecord: (object, recordId, data) => httpJson(
+      "PATCH",
+      `/objects/${enc(object)}/records/${enc(recordId)}`,
+      "updateRecord",
+      { data }
+    ),
+    overwriteRecord: (object, recordId, data) => httpJson(
+      "PUT",
+      `/objects/${enc(object)}/records/${enc(recordId)}`,
+      "overwriteRecord",
+      { data }
+    ),
+    deleteRecord: (object, recordId) => httpVoid(
+      "DELETE",
+      `/objects/${enc(object)}/records/${enc(recordId)}`,
+      "deleteRecord"
+    ),
+    assertRecord: (object, data) => httpJson(
+      "PUT",
+      `/objects/${enc(object)}/records`,
+      "assertRecord",
+      { data }
+    ),
+    listRecordEntries: (object, recordId) => httpJson(
+      "GET",
+      `/objects/${enc(object)}/records/${enc(recordId)}/entries`,
+      "listRecordEntries"
+    ),
+    // ---- Lists ----
+    listLists: () => httpJson("GET", "/lists", "listLists"),
+    getList: (listId) => httpJson("GET", `/lists/${enc(listId)}`, "getList"),
+    listListViews: (listId) => httpJson(
+      "GET",
+      `/lists/${enc(listId)}/views`,
+      "listListViews"
+    ),
+    queryListEntries: (listId, options) => httpJson(
+      "POST",
+      `/lists/${enc(listId)}/entries/query`,
+      "queryListEntries",
+      queryBody(options)
+    ),
+    getListEntry: (listId, entryId) => httpJson(
+      "GET",
+      `/lists/${enc(listId)}/entries/${enc(entryId)}`,
+      "getListEntry"
+    ),
+    createListEntry: (listId, data) => httpJson(
+      "POST",
+      `/lists/${enc(listId)}/entries`,
+      "createListEntry",
+      { data }
+    ),
+    updateListEntry: (listId, entryId, data) => httpJson(
+      "PATCH",
+      `/lists/${enc(listId)}/entries/${enc(entryId)}`,
+      "updateListEntry",
+      { data }
+    ),
+    overwriteListEntry: (listId, entryId, data) => httpJson(
+      "PUT",
+      `/lists/${enc(listId)}/entries/${enc(entryId)}`,
+      "overwriteListEntry",
+      { data }
+    ),
+    deleteListEntry: (listId, entryId) => httpVoid(
+      "DELETE",
+      `/lists/${enc(listId)}/entries/${enc(entryId)}`,
+      "deleteListEntry"
+    ),
+    assertListEntry: (listId, data) => httpJson(
+      "PUT",
+      `/lists/${enc(listId)}/entries`,
+      "assertListEntry",
+      { data }
+    ),
+    // ---- Workspace Members ----
+    listWorkspaceMembers: () => httpJson("GET", "/workspace_members", "listWorkspaceMembers"),
+    getWorkspaceMember: (workspaceMemberId) => httpJson(
+      "GET",
+      `/workspace_members/${enc(workspaceMemberId)}`,
+      "getWorkspaceMember"
+    ),
+    async getWorkspaceMemberMap() {
+      const { data } = await httpJson(
+        "GET",
+        "/workspace_members",
+        "getWorkspaceMemberMap"
       );
-      await assertOk(res, "queryRecords");
-      return await res.json();
-    },
-    async getRecord(object, recordId) {
-      const res = await fetch(
-        `${BASE_URL}/objects/${encodeURIComponent(object)}/records/${encodeURIComponent(recordId)}`,
-        { method: "GET", headers: authHeaders() }
-      );
-      await assertOk(res, "getRecord");
-      return await res.json();
+      const map = /* @__PURE__ */ new Map();
+      for (const m of data) {
+        const id = m?.id?.workspace_member_id;
+        if (!id) continue;
+        const name = [m.first_name, m.last_name].filter(Boolean).join(" ").trim() || m.email_address || id;
+        map.set(id, { id, name, email: m.email_address });
+      }
+      return map;
     },
-    async queryListEntries(listId, options) {
-      const body = {};
-      if (options?.filter) body.filter = options.filter;
-      if (options?.sorts) body.sorts = options.sorts;
-      if (options?.limit) body.limit = options.limit;
-      if (options?.offset) body.offset = options.offset;
-      const res = await fetch(
-        `${BASE_URL}/lists/${encodeURIComponent(listId)}/entries/query`,
-        {
-          method: "POST",
-          headers: authHeaders(),
-          body: JSON.stringify(body)
-        }
-      );
-      await assertOk(res, "queryListEntries");
-      return await res.json();
-    }
+    // ---- Notes ----
+    listNotes: (options) => httpJson("GET", `/notes${buildQuery(options)}`, "listNotes"),
+    getNote: (noteId) => httpJson("GET", `/notes/${enc(noteId)}`, "getNote"),
+    createNote: (data) => httpJson("POST", "/notes", "createNote", { data }),
+    updateNote: (noteId, data) => httpJson("PATCH", `/notes/${enc(noteId)}`, "updateNote", {
+      data
+    }),
+    deleteNote: (noteId) => httpVoid("DELETE", `/notes/${enc(noteId)}`, "deleteNote"),
+    // ---- Tasks ----
+    listTasks: (options) => httpJson("GET", `/tasks${buildQuery(options)}`, "listTasks"),
+    getTask: (taskId) => httpJson("GET", `/tasks/${enc(taskId)}`, "getTask"),
+    createTask: (data) => httpJson("POST", "/tasks", "createTask", { data }),
+    updateTask: (taskId, data) => httpJson("PATCH", `/tasks/${enc(taskId)}`, "updateTask", {
+      data
+    }),
+    deleteTask: (taskId) => httpVoid("DELETE", `/tasks/${enc(taskId)}`, "deleteTask"),
+    // ---- Threads & Comments ----
+    listThreads: (options) => httpJson(
+      "GET",
+      `/threads${buildQuery(options)}`,
+      "listThreads"
+    ),
+    getThread: (threadId) => httpJson("GET", `/threads/${enc(threadId)}`, "getThread"),
+    createComment: (data) => httpJson("POST", "/comments", "createComment", { data }),
+    getComment: (commentId) => httpJson("GET", `/comments/${enc(commentId)}`, "getComment"),
+    updateComment: (commentId, data) => httpJson(
+      "PATCH",
+      `/comments/${enc(commentId)}`,
+      "updateComment",
+      { data }
+    ),
+    deleteComment: (commentId) => httpVoid(
+      "DELETE",
+      `/comments/${enc(commentId)}`,
+      "deleteComment"
+    ),
+    // ---- Webhooks ----
+    listWebhooks: () => httpJson("GET", "/webhooks", "listWebhooks"),
+    getWebhook: (webhookId) => httpJson("GET", `/webhooks/${enc(webhookId)}`, "getWebhook"),
+    createWebhook: (data) => httpJson("POST", "/webhooks", "createWebhook", { data }),
+    updateWebhook: (webhookId, data) => httpJson(
+      "PATCH",
+      `/webhooks/${enc(webhookId)}`,
+      "updateWebhook",
+      { data }
+    ),
+    deleteWebhook: (webhookId) => httpVoid(
+      "DELETE",
+      `/webhooks/${enc(webhookId)}`,
+      "deleteWebhook"
+    ),
+    // ---- Meetings ----
+    listMeetings: (options) => httpJson(
+      "GET",
+      `/meetings${buildQuery(options)}`,
+      "listMeetings"
+    ),
+    getMeeting: (meetingId) => httpJson("GET", `/meetings/${enc(meetingId)}`, "getMeeting")
   };
 }
 
@@ -297,14 +480,18 @@ var AUTH_TYPES = {
 // ../connectors/src/connectors/attio/setup.ts
 var attioOnboarding = new ConnectorOnboarding({
   dataOverviewInstructions: {
-    en: `1. Call attio_request with GET /objects to list all available objects (people, companies, deals, etc.)
-2. Call attio_request with GET /objects/people/attributes to explore the people object attributes
-3. Call attio_request with POST /objects/people/records/query with { "limit": 5 } to sample people records
-4. Explore other objects (companies, deals) as needed`,
-    ja: `1. attio_request \u3067 GET /objects \u3092\u547C\u3073\u51FA\u3057\u3001\u5229\u7528\u53EF\u80FD\u306A\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u4E00\u89A7\u3092\u53D6\u5F97\uFF08people\u3001companies\u3001deals\u306A\u3069\uFF09
-2. attio_request \u3067 GET /objects/people/attributes \u3092\u547C\u3073\u51FA\u3057\u3001people\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E\u5C5E\u6027\u3092\u78BA\u8A8D
-3. attio_request \u3067 POST /objects/people/records/query \u3092 { "limit": 5 } \u3067\u547C\u3073\u51FA\u3057\u3001people\u30EC\u30B3\u30FC\u30C9\u3092\u30B5\u30F3\u30D7\u30EA\u30F3\u30B0
-4. \u5FC5\u8981\u306B\u5FDC\u3058\u3066\u4ED6\u306E\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\uFF08companies\u3001deals\uFF09\u3092\u63A2\u7D22`
+    en: `1. Call attio_request with GET /objects to discover the object slugs actually configured in this workspace (typically people, companies, deals, plus any custom objects).
+2. For each object you plan to use, call attio_request with GET /objects/{slug}/attributes to explore its attributes
+3. Call attio_request with POST /objects/{slug}/records/query with { "limit": 5 } to sample records
+4. Call attio_request with GET /workspace_members (top-level, snake_case) to list team members. The response shape is \`{ data: [{ id: { workspace_member_id }, first_name, last_name, email_address, ... }] }\`. You need this mapping in dashboard handlers to resolve \`owner\` and other actor-reference fields (which return \`referenced_actor_id\`, not a name). Sample one record that has an \`owner\` and confirm the shape \`{ referenced_actor_type, referenced_actor_id }\`, then use \`client.getWorkspaceMemberMap()\` in handlers to resolve IDs to names.
+5. If an endpoint later returns 403 (tasks / threads / webhooks / meetings require specific scopes), call GET /self to inspect the token's active scopes.
+6. Explore lists via GET /lists as needed, and use /notes, /tasks, /threads, /comments, /webhooks, /meetings when the question requires them.`,
+    ja: `1. attio_request \u3067 GET /objects \u3092\u547C\u3073\u51FA\u3057\u3001\u3053\u306E\u30EF\u30FC\u30AF\u30B9\u30DA\u30FC\u30B9\u306B\u5B9F\u5728\u3059\u308B\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8slug\u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044\uFF08\u901A\u5E38\u306F people / companies / deals\u3001\u52A0\u3048\u3066\u8A2D\u5B9A\u6E08\u307F\u306E\u30AB\u30B9\u30BF\u30E0\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\uFF09
+2. \u4F7F\u3046\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3054\u3068\u306B attio_request \u3067 GET /objects/{slug}/attributes \u3092\u547C\u3073\u51FA\u3057\u3001\u5C5E\u6027\u3092\u78BA\u8A8D
+3. attio_request \u3067 POST /objects/{slug}/records/query \u3092 { "limit": 5 } \u3067\u547C\u3073\u51FA\u3057\u3001\u30EC\u30B3\u30FC\u30C9\u3092\u30B5\u30F3\u30D7\u30EA\u30F3\u30B0
+4. attio_request \u3067 GET /workspace_members\uFF08\u30C8\u30C3\u30D7\u30EC\u30D9\u30EB\u3001\u30B9\u30CD\u30FC\u30AF\u30B1\u30FC\u30B9\uFF09\u3092\u547C\u3073\u51FA\u3057\u3001\u30C1\u30FC\u30E0\u30E1\u30F3\u30D0\u30FC\u4E00\u89A7\u3092\u53D6\u5F97\u3002\u30EC\u30B9\u30DD\u30F3\u30B9\u306F \`{ data: [{ id: { workspace_member_id }, first_name, last_name, email_address, ... }] }\` \u306E\u5F62\u5F0F\u3067\u3059\u3002\u3053\u306E\u30DE\u30C3\u30D4\u30F3\u30B0\u306F\u3001\`owner\` \u306A\u3069\u306E actor-reference \u30D5\u30A3\u30FC\u30EB\u30C9\uFF08\`referenced_actor_id\` \u3092\u8FD4\u3059\uFF09\u3092\u540D\u524D\u306B\u89E3\u6C7A\u3059\u308B\u305F\u3081\u306B\u30C0\u30C3\u30B7\u30E5\u30DC\u30FC\u30C9\u30CF\u30F3\u30C9\u30E9\u3067\u5FC5\u9808\u3067\u3059\u3002\`owner\` \u3092\u6301\u3064\u30EC\u30B3\u30FC\u30C9\u30921\u4EF6\u30B5\u30F3\u30D7\u30EA\u30F3\u30B0\u3057\u3001\`{ referenced_actor_type, referenced_actor_id }\` \u306E\u5F62\u3092\u78BA\u8A8D\u3057\u305F\u4E0A\u3067\u3001\u30CF\u30F3\u30C9\u30E9\u3067\u306F \`client.getWorkspaceMemberMap()\` \u3092\u4F7F\u3063\u3066 ID \u2192 \u540D\u524D \u306B\u89E3\u6C7A\u3057\u3066\u304F\u3060\u3055\u3044
+5. \u5F8C\u6BB5\u3067 403 \u304C\u51FA\u305F\u5834\u5408\uFF08tasks / threads / webhooks / meetings \u306A\u3069\u306F\u500B\u5225\u306E scope \u304C\u5FC5\u8981\uFF09\u306F\u3001GET /self \u3092\u547C\u3073\u51FA\u3057\u3066API\u30C8\u30FC\u30AF\u30F3\u306E\u6709\u52B9 scope \u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044
+6. \u5FC5\u8981\u306B\u5FDC\u3058\u3066 GET /lists \u3067\u30EA\u30B9\u30C8\u3092\u63A2\u7D22\u3057\u3001/notes\u3001/tasks\u3001/threads\u3001/comments\u3001/webhooks\u3001/meetings \u3082\u6D3B\u7528\u3057\u3066\u304F\u3060\u3055\u3044`
   }
 });
 
@@ -317,11 +504,11 @@ var inputSchema = z.object({
     "Brief description of what you intend to accomplish with this tool call"
   ),
   connectionId: z.string().describe("ID of the Attio connection to use"),
-  method: z.enum(["GET", "POST", "PATCH", "DELETE"]).describe(
-    "HTTP method. GET for reading resources, POST for creating or querying records, PATCH for updating, DELETE for removing."
+  method: z.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).describe(
+    "HTTP method. GET for reading resources and list endpoints, POST for creating records/querying/asserting, PATCH for partial updates (append multiselect), PUT for full updates (overwrite multiselect), DELETE for removing."
   ),
   path: z.string().describe(
-    "API path (e.g., '/objects', '/objects/people/records/query', '/objects/companies/records/{record_id}')"
+    "Attio REST API path relative to https://api.attio.com/v2 (include the leading slash). Examples: '/self', '/objects', '/objects/people/attributes', '/objects/people/records/query', '/objects/companies/records/{record_id}', '/workspace_members', '/workspace_members/{workspace_member_id}', '/lists', '/lists/{list_id}/entries/query', '/notes', '/tasks', '/threads', '/comments', '/webhooks', '/meetings'."
   ),
   body: z.record(z.string(), z.unknown()).optional().describe("Request body (JSON) for POST/PATCH requests")
 });
@@ -338,10 +525,10 @@ var outputSchema = z.discriminatedUnion("success", [
 ]);
 var requestTool = new ConnectorTool({
   name: "request",
-  description: `Send authenticated requests to the Attio REST API.
+  description: `Send authenticated requests to the Attio REST API (base URL: https://api.attio.com/v2).
 Authentication is handled automatically using the API Key (Bearer token).
-Use this tool for all Attio API interactions: querying records (people, companies, deals), listing objects and attributes, managing list entries, and working with notes.
-Note that querying records uses POST (not GET) with a request body for filters.`,
+Use this tool for every Attio API interaction, including: querying records (people, companies, deals, and any custom objects configured in the workspace) and their attributes, listing/getting/creating/updating/deleting records and list entries, reading workspace members, and working with notes, tasks, threads, comments, webhooks, and meetings. Call GET /self to introspect the current API token.
+Record queries use POST /objects/{object}/records/query with a JSON body containing \`filter\`, \`sorts\`, \`limit\`, and \`offset\`. Record updates use PATCH (append multiselect) or PUT (overwrite multiselect). Workspace members, tasks, webhooks, notes, threads, comments, and meetings live at top-level paths \u2014 the workspace-members path uses a snake_case underscore: /workspace_members.`,
   inputSchema,
   outputSchema,
   async execute({ connectionId, method, path: path2, body }, connections) {
@@ -400,19 +587,69 @@ var attioConnector = new ConnectorPlugin({
   systemPrompt: {
     en: `### Tools
 
-- \`attio_request\`: The only way to call the Attio REST API. Use it to query records (people, companies, deals), list objects and attributes, manage list entries, and work with notes. Authentication (Bearer token) is configured automatically. Note that querying records uses POST (not GET) with a request body containing filters.
+- \`attio_request\`: The only way to call the Attio REST API. Use it for every Attio resource \u2014 records (people, companies, deals, and any custom objects configured in the workspace), their attributes, lists and entries, workspace members, notes, tasks, threads, comments, webhooks, and meetings. Authentication (Bearer token) is configured automatically. Querying records uses POST \`/objects/{object}/records/query\` with a JSON body. Use PATCH for partial updates (append multiselect) and PUT for full updates (overwrite multiselect). Always call GET \`/objects\` first to discover the actual object slugs in this workspace.
 
 ### Business Logic
 
-The business logic type for this connector is "typescript". Use the connector SDK in your handler. Do NOT read credentials from environment variables.
+The business logic type for this connector is "typescript". Use the connector SDK in your handler; authentication is handled by the SDK client.
 
 SDK methods (client created via \`connection(connectionId)\`):
 - \`client.request(path, init?)\` \u2014 low-level authenticated fetch
-- \`client.listObjects()\` \u2014 list all objects (people, companies, deals, etc.)
-- \`client.listAttributes(object)\` \u2014 list attributes for an object
-- \`client.queryRecords(object, options?)\` \u2014 query records with filter/sort/pagination
-- \`client.getRecord(object, recordId)\` \u2014 fetch a single record
-- \`client.queryListEntries(listId, options?)\` \u2014 query list entries with filter/sort/pagination
+- \`client.self()\` \u2014 current API token introspection (GET /self) \u2014 returns workspace id, scopes, token status
+- Objects: \`client.listObjects()\`, \`client.getObject(object)\`, \`client.listObjectViews(object)\`
+- Attributes: \`client.listAttributes(object)\`, \`client.getAttribute(object, attribute)\`, \`client.listSelectOptions(object, attribute)\`, \`client.listStatuses(object, attribute)\`
+- Records: \`client.queryRecords(object, options?)\`, \`client.getRecord(object, recordId)\`, \`client.createRecord(object, data)\`, \`client.updateRecord(object, recordId, data)\` (PATCH), \`client.overwriteRecord(object, recordId, data)\` (PUT), \`client.deleteRecord(object, recordId)\`, \`client.assertRecord(object, data)\`, \`client.listRecordEntries(object, recordId)\`
+- Lists & entries: \`client.listLists()\`, \`client.getList(listId)\`, \`client.listListViews(listId)\`, \`client.queryListEntries(listId, options?)\`, \`client.getListEntry(listId, entryId)\`, \`client.createListEntry(listId, data)\`, \`client.updateListEntry(listId, entryId, data)\`, \`client.overwriteListEntry(listId, entryId, data)\`, \`client.deleteListEntry(listId, entryId)\`, \`client.assertListEntry(listId, data)\`
+- Workspace members: \`client.listWorkspaceMembers()\`, \`client.getWorkspaceMember(workspaceMemberId)\`, \`client.getWorkspaceMemberMap()\` (returns \`Map<workspace_member_id, { id, name, email }>\` \u2014 use to resolve \`owner\` / actor-reference fields to names)
+- Notes: \`client.listNotes(options?)\`, \`client.getNote(noteId)\`, \`client.createNote(data)\`, \`client.updateNote(noteId, data)\`, \`client.deleteNote(noteId)\`
+- Tasks: \`client.listTasks(options?)\`, \`client.getTask(taskId)\`, \`client.createTask(data)\`, \`client.updateTask(taskId, data)\`, \`client.deleteTask(taskId)\`
+- Threads & comments: \`client.listThreads(options?)\`, \`client.getThread(threadId)\`, \`client.createComment(data)\`, \`client.getComment(commentId)\`, \`client.updateComment(commentId, data)\`, \`client.deleteComment(commentId)\`
+- Webhooks: \`client.listWebhooks()\`, \`client.getWebhook(webhookId)\`, \`client.createWebhook(data)\`, \`client.updateWebhook(webhookId, data)\`, \`client.deleteWebhook(webhookId)\`
+- Meetings: \`client.listMeetings(options?)\`, \`client.getMeeting(meetingId)\`
+
+### CRITICAL: Owner / Actor reference resolution
+
+Fields like \`owner\` \u2014 and any \`actor-reference\` attribute \u2014 in Attio record \`values\` do **not** contain names. They carry actor IDs shaped like:
+\`\`\`json
+{ "referenced_actor_type": "workspace-member", "referenced_actor_id": "<workspace_member_id>" }
+\`\`\`
+Rendering that raw leaves opaque IDs in the UI (e.g. \`owner_name\` stays as a UUID). **Always** resolve these IDs to names before returning them. Do this by fetching workspace members once and joining on \`workspace_member_id\`.
+
+- Use \`client.getWorkspaceMemberMap()\` \u2014 it returns a typed \`Map<workspace_member_id, { id, name, email }>\` ready to join with actor references.
+- The workspace-member endpoint is top-level: \`GET /workspace_members\`.
+- Fetch \`client.getWorkspaceMemberMap()\` in parallel with \`queryRecords\` via \`Promise.all\` (single fetch, joined in-memory).
+
+Example \u2014 owner-based performance with names resolved:
+\`\`\`ts
+import type { Context } from "hono";
+import { connection } from "@squadbase/vite-server/connectors/attio";
+
+const attio = connection("<connectionId>");
+
+export default async function handler(c: Context) {
+  const [{ data: deals }, memberMap] = await Promise.all([
+    attio.queryRecords("deals", { limit: 500 }),
+    attio.getWorkspaceMemberMap(),
+  ]);
+
+  const byOwner = new Map<string, { owner_name: string; count: number }>();
+  for (const deal of deals) {
+    const values = (deal as { values?: Record<string, unknown[]> }).values ?? {};
+    const ownerCell = (values.owner ?? [])[0] as
+      | { referenced_actor_id?: string }
+      | undefined;
+    const ownerId = ownerCell?.referenced_actor_id ?? "unassigned";
+    const ownerName = memberMap.get(ownerId)?.name ?? "Unassigned";
+    const prev = byOwner.get(ownerId) ?? { owner_name: ownerName, count: 0 };
+    prev.count += 1;
+    byOwner.set(ownerId, prev);
+  }
+
+  return c.json({ rows: Array.from(byOwner.values()) });
+}
+\`\`\`
+
+### Minimal example
 
 \`\`\`ts
 import type { Context } from "hono";
@@ -437,39 +674,129 @@ export default async function handler(c: Context) {
 - Base URL: \`https://api.attio.com/v2\`
 - Authentication: Bearer token (handled automatically)
 - Querying records uses POST with JSON body (not GET with query params)
+- Update semantics: PATCH appends multiselect values, PUT overwrites them
+- Many list endpoints support \`limit\` and \`offset\` for pagination
 
-#### Common Endpoints
-- GET \`/objects\` \u2014 List all objects
-- GET \`/objects/{object}/attributes\` \u2014 List attributes of an object
-- POST \`/objects/{object}/records/query\` \u2014 Query records (people, companies, deals, etc.)
-- GET \`/objects/{object}/records/{record_id}\` \u2014 Get a record
-- POST \`/objects/{object}/records\` \u2014 Create a record
-- PATCH \`/objects/{object}/records/{record_id}\` \u2014 Update a record
-- DELETE \`/objects/{object}/records/{record_id}\` \u2014 Delete a record
-- POST \`/lists/{list_id}/entries/query\` \u2014 Query list entries
-- POST \`/notes\` \u2014 Create a note
-- GET \`/notes?parent_object={object}&parent_record_id={id}\` \u2014 Get notes for a record
-
-#### Query Body (for POST /objects/{object}/records/query)
-- \`filter\` \u2014 Filter conditions
-- \`sorts\` \u2014 Array of sort specifications
-- \`limit\` \u2014 Max records per page (default 25)
-- \`offset\` \u2014 Pagination offset`,
+#### Meta
+- GET \`/self\` \u2014 current API token introspection (workspace id, scopes, token status)
+
+#### Objects & Attributes
+- GET \`/objects\` \u2014 list all objects in the workspace (default: people, companies, deals; plus any custom objects configured)
+- GET \`/objects/{object}\` \u2014 get a single object
+- GET \`/objects/{object}/views\` \u2014 list views for an object
+- GET \`/objects/{object}/attributes\` \u2014 list attributes for an object
+- GET \`/objects/{object}/attributes/{attribute}\` \u2014 get an attribute
+- GET \`/objects/{object}/attributes/{attribute}/options\` \u2014 list select options
+- GET \`/objects/{object}/attributes/{attribute}/statuses\` \u2014 list statuses
+
+#### Records
+- POST \`/objects/{object}/records/query\` \u2014 query records (filter / sorts / limit / offset)
+- GET \`/objects/{object}/records/{record_id}\` \u2014 get a record
+- POST \`/objects/{object}/records\` \u2014 create a record (body: \`{ "data": { ... } }\`)
+- PATCH \`/objects/{object}/records/{record_id}\` \u2014 update (append multiselect)
+- PUT \`/objects/{object}/records/{record_id}\` \u2014 update (overwrite multiselect)
+- DELETE \`/objects/{object}/records/{record_id}\` \u2014 delete a record
+- PUT \`/objects/{object}/records\` \u2014 assert (upsert) by matching attribute
+- GET \`/objects/{object}/records/{record_id}/entries\` \u2014 list list entries that reference the record
+
+#### Lists & Entries
+- GET \`/lists\` \u2014 list all lists
+- GET \`/lists/{list_id}\` \u2014 get a list
+- GET \`/lists/{list_id}/views\` \u2014 list views for a list
+- POST \`/lists/{list_id}/entries/query\` \u2014 query list entries
+- GET \`/lists/{list_id}/entries/{entry_id}\` \u2014 get a list entry
+- POST \`/lists/{list_id}/entries\` \u2014 create an entry
+- PATCH \`/lists/{list_id}/entries/{entry_id}\` \u2014 update (append multiselect)
+- PUT \`/lists/{list_id}/entries/{entry_id}\` \u2014 update (overwrite multiselect)
+- DELETE \`/lists/{list_id}/entries/{entry_id}\` \u2014 delete an entry
+- PUT \`/lists/{list_id}/entries\` \u2014 assert (upsert) a list entry by parent
+
+#### Workspace Members
+- GET \`/workspace_members\` \u2014 list every member of the workspace (team members, their roles, and access levels)
+- GET \`/workspace_members/{workspace_member_id}\` \u2014 get a single workspace member
+
+#### Notes, Tasks, Threads & Comments
+- \`/notes\` (GET list, POST create) and \`/notes/{note_id}\` (GET / PATCH / DELETE). Filter list notes with \`?parent_object={object}&parent_record_id={id}\`.
+- \`/tasks\` (GET list, POST create) and \`/tasks/{task_id}\` (GET / PATCH / DELETE)
+- \`/threads\` (GET list) and \`/threads/{thread_id}\` (GET)
+- \`/comments\` (POST create) and \`/comments/{comment_id}\` (GET / PATCH / DELETE)
+
+#### Webhooks
+- GET \`/webhooks\`, POST \`/webhooks\`, GET/PATCH/DELETE \`/webhooks/{webhook_id}\`
+
+#### Meetings
+- GET \`/meetings\`, GET \`/meetings/{meeting_id}\`
+
+#### Query Body (for POST /objects/{object}/records/query and /lists/{list_id}/entries/query)
+- \`filter\` \u2014 filter conditions
+- \`sorts\` \u2014 array of sort specifications
+- \`limit\` \u2014 max records per page (default 25)
+- \`offset\` \u2014 pagination offset`,
     ja: `### \u30C4\u30FC\u30EB
 
-- \`attio_request\`: Attio REST API\u3092\u547C\u3073\u51FA\u3059\u552F\u4E00\u306E\u624B\u6BB5\u3067\u3059\u3002\u30EC\u30B3\u30FC\u30C9\uFF08people\u3001companies\u3001deals\uFF09\u306E\u30AF\u30A8\u30EA\u3001\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3084\u5C5E\u6027\u306E\u4E00\u89A7\u8868\u793A\u3001\u30EA\u30B9\u30C8\u30A8\u30F3\u30C8\u30EA\u306E\u7BA1\u7406\u3001\u30CE\u30FC\u30C8\u306E\u64CD\u4F5C\u306B\u4F7F\u7528\u3057\u307E\u3059\u3002\u8A8D\u8A3C\uFF08Bearer\u30C8\u30FC\u30AF\u30F3\uFF09\u306F\u81EA\u52D5\u7684\u306B\u8A2D\u5B9A\u3055\u308C\u307E\u3059\u3002\u30EC\u30B3\u30FC\u30C9\u306E\u30AF\u30A8\u30EA\u306B\u306FGET\u3067\u306F\u306A\u304FPOST\u3092\u30D5\u30A3\u30EB\u30BF\u4ED8\u304D\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u30DC\u30C7\u30A3\u3067\u4F7F\u7528\u3059\u308B\u70B9\u306B\u6CE8\u610F\u3057\u3066\u304F\u3060\u3055\u3044\u3002
+- \`attio_request\`: Attio REST API\u3092\u547C\u3073\u51FA\u3059\u552F\u4E00\u306E\u624B\u6BB5\u3067\u3059\u3002\u30EC\u30B3\u30FC\u30C9\uFF08people\u3001companies\u3001deals\u3001\u304A\u3088\u3073\u30EF\u30FC\u30AF\u30B9\u30DA\u30FC\u30B9\u306B\u8A2D\u5B9A\u3055\u308C\u305F\u30AB\u30B9\u30BF\u30E0\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\uFF09\u3068\u305D\u306E\u5C5E\u6027\u3001\u30EA\u30B9\u30C8\u3068\u30A8\u30F3\u30C8\u30EA\u3001\u30EF\u30FC\u30AF\u30B9\u30DA\u30FC\u30B9\u30E1\u30F3\u30D0\u30FC\u3001\u30CE\u30FC\u30C8\u3001\u30BF\u30B9\u30AF\u3001\u30B9\u30EC\u30C3\u30C9\u3001\u30B3\u30E1\u30F3\u30C8\u3001Webhook\u3001\u30DF\u30FC\u30C6\u30A3\u30F3\u30B0\u306A\u3069\u3001\u3059\u3079\u3066\u306EAttio\u30EA\u30BD\u30FC\u30B9\u306E\u64CD\u4F5C\u306B\u4F7F\u7528\u3057\u307E\u3059\u3002\u8A8D\u8A3C\uFF08Bearer\u30C8\u30FC\u30AF\u30F3\uFF09\u306F\u81EA\u52D5\u7684\u306B\u8A2D\u5B9A\u3055\u308C\u307E\u3059\u3002\u30EC\u30B3\u30FC\u30C9\u306E\u30AF\u30A8\u30EA\u306B\u306F POST \`/objects/{object}/records/query\` \u3092\u30D5\u30A3\u30EB\u30BF\u4ED8\u304D\u306EJSON\u30DC\u30C7\u30A3\u3067\u4F7F\u7528\u3057\u307E\u3059\u3002\u90E8\u5206\u66F4\u65B0\uFF08multiselect\u306E\u8FFD\u52A0\uFF09\u306B\u306FPATCH\u3001\u5168\u7F6E\u63DB\uFF08multiselect\u306E\u4E0A\u66F8\u304D\uFF09\u306B\u306FPUT\u3092\u4F7F\u3044\u307E\u3059\u3002**\u5FC5\u305A** \u6700\u521D\u306B GET \`/objects\` \u3092\u547C\u3073\u51FA\u3057\u3066\u3001\u3053\u306E\u30EF\u30FC\u30AF\u30B9\u30DA\u30FC\u30B9\u306B\u5B9F\u5728\u3059\u308B\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8slug\u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044\u3002
 
 ### Business Logic
 
-\u3053\u306E\u30B3\u30CD\u30AF\u30BF\u306E\u30D3\u30B8\u30CD\u30B9\u30ED\u30B8\u30C3\u30AF\u30BF\u30A4\u30D7\u306F "typescript" \u3067\u3059\u3002\u30CF\u30F3\u30C9\u30E9\u5185\u3067\u306F\u30B3\u30CD\u30AF\u30BFSDK\u3092\u4F7F\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u74B0\u5883\u5909\u6570\u304B\u3089\u8A8D\u8A3C\u60C5\u5831\u3092\u8AAD\u307F\u53D6\u3089\u306A\u3044\u3067\u304F\u3060\u3055\u3044\u3002
+\u3053\u306E\u30B3\u30CD\u30AF\u30BF\u306E\u30D3\u30B8\u30CD\u30B9\u30ED\u30B8\u30C3\u30AF\u30BF\u30A4\u30D7\u306F "typescript" \u3067\u3059\u3002\u30CF\u30F3\u30C9\u30E9\u5185\u3067\u306F\u30B3\u30CD\u30AF\u30BFSDK\u3092\u4F7F\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u8A8D\u8A3C\u306FSDK\u30AF\u30E9\u30A4\u30A2\u30F3\u30C8\u5074\u3067\u81EA\u52D5\u7684\u306B\u8A2D\u5B9A\u3055\u308C\u307E\u3059\u3002
 
 SDK\u30E1\u30BD\u30C3\u30C9 (\`connection(connectionId)\` \u3067\u4F5C\u6210\u3057\u305F\u30AF\u30E9\u30A4\u30A2\u30F3\u30C8):
 - \`client.request(path, init?)\` \u2014 \u4F4E\u30EC\u30D9\u30EB\u306E\u8A8D\u8A3C\u4ED8\u304Dfetch
-- \`client.listObjects()\` \u2014 \u5168\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E\u4E00\u89A7\uFF08people\u3001companies\u3001deals\u306A\u3069\uFF09
-- \`client.listAttributes(object)\` \u2014 \u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E\u5C5E\u6027\u4E00\u89A7
-- \`client.queryRecords(object, options?)\` \u2014 \u30D5\u30A3\u30EB\u30BF/\u30BD\u30FC\u30C8/\u30DA\u30FC\u30B8\u30CD\u30FC\u30B7\u30E7\u30F3\u4ED8\u304D\u3067\u30EC\u30B3\u30FC\u30C9\u3092\u30AF\u30A8\u30EA
-- \`client.getRecord(object, recordId)\` \u2014 \u5358\u4E00\u30EC\u30B3\u30FC\u30C9\u3092\u53D6\u5F97
-- \`client.queryListEntries(listId, options?)\` \u2014 \u30D5\u30A3\u30EB\u30BF/\u30BD\u30FC\u30C8/\u30DA\u30FC\u30B8\u30CD\u30FC\u30B7\u30E7\u30F3\u4ED8\u304D\u3067\u30EA\u30B9\u30C8\u30A8\u30F3\u30C8\u30EA\u3092\u30AF\u30A8\u30EA
+- \`client.identify()\` \u2014 \u30EF\u30FC\u30AF\u30B9\u30DA\u30FC\u30B9/\u30C8\u30FC\u30AF\u30F3\u60C5\u5831\uFF08GET /meta/identify\uFF09
+- Objects: \`client.listObjects()\`, \`client.getObject(object)\`, \`client.listObjectViews(object)\`
+- Attributes: \`client.listAttributes(object)\`, \`client.getAttribute(object, attribute)\`, \`client.listSelectOptions(object, attribute)\`, \`client.listStatuses(object, attribute)\`
+- Records: \`client.queryRecords(object, options?)\`, \`client.getRecord(object, recordId)\`, \`client.createRecord(object, data)\`, \`client.updateRecord(object, recordId, data)\` (PATCH), \`client.overwriteRecord(object, recordId, data)\` (PUT), \`client.deleteRecord(object, recordId)\`, \`client.assertRecord(object, data)\`, \`client.listRecordEntries(object, recordId)\`
+- Lists & entries: \`client.listLists()\`, \`client.getList(listId)\`, \`client.listListViews(listId)\`, \`client.queryListEntries(listId, options?)\`, \`client.getListEntry(listId, entryId)\`, \`client.createListEntry(listId, data)\`, \`client.updateListEntry(listId, entryId, data)\`, \`client.overwriteListEntry(listId, entryId, data)\`, \`client.deleteListEntry(listId, entryId)\`, \`client.assertListEntry(listId, data)\`
+- Workspace members: \`client.listWorkspaceMembers()\`, \`client.getWorkspaceMember(workspaceMemberId)\`, \`client.getWorkspaceMemberMap()\` (returns \`Map<workspace_member_id, { id, name, email }>\` \u2014 use to resolve \`owner\` / actor-reference fields to names)
+- Notes: \`client.listNotes(options?)\`, \`client.getNote(noteId)\`, \`client.createNote(data)\`, \`client.updateNote(noteId, data)\`, \`client.deleteNote(noteId)\`
+- Tasks: \`client.listTasks(options?)\`, \`client.getTask(taskId)\`, \`client.createTask(data)\`, \`client.updateTask(taskId, data)\`, \`client.deleteTask(taskId)\`
+- Threads & comments: \`client.listThreads(options?)\`, \`client.getThread(threadId)\`, \`client.createComment(data)\`, \`client.getComment(commentId)\`, \`client.updateComment(commentId, data)\`, \`client.deleteComment(commentId)\`
+- Webhooks: \`client.listWebhooks()\`, \`client.getWebhook(webhookId)\`, \`client.createWebhook(data)\`, \`client.updateWebhook(webhookId, data)\`, \`client.deleteWebhook(webhookId)\`
+- Meetings: \`client.listMeetings(options?)\`, \`client.getMeeting(meetingId)\`
+
+### \u91CD\u8981: Owner / Actor reference \u306E\u540D\u524D\u89E3\u6C7A
+
+\u30EC\u30B3\u30FC\u30C9\u5024\u306E \`owner\`\uFF08\u304A\u3088\u3073 \`actor-reference\` \u578B\u306E\u5C5E\u6027\uFF09\u306F\u540D\u524D\u3067\u306F\u306A\u304F\u3001\u6B21\u306E\u3088\u3046\u306Aactor ID\u3092\u542B\u307F\u307E\u3059\uFF1A
+\`\`\`json
+{ "referenced_actor_type": "workspace-member", "referenced_actor_id": "<workspace_member_id>" }
+\`\`\`
+\u3053\u308C\u3092\u305D\u306E\u307E\u307E\u8FD4\u3059\u3068UI\u306B\u4E0D\u900F\u660E\u306AID\uFF08\`owner_name\` \u304CUUID\u306E\u307E\u307E\u7B49\uFF09\u304C\u8868\u793A\u3055\u308C\u307E\u3059\u3002**\u5FC5\u305A** \u30CF\u30F3\u30C9\u30E9\u5185\u3067 \`workspace_member_id\` \u2192 \u540D\u524D\u3078\u89E3\u6C7A\u3057\u3066\u304B\u3089\u8FD4\u3057\u3066\u304F\u3060\u3055\u3044\u3002
+
+- \u89E3\u6C7A\u306B\u306F \`client.getWorkspaceMemberMap()\` \u3092\u4F7F\u3063\u3066\u304F\u3060\u3055\u3044\u3002\u3053\u308C\u306F \`Map<workspace_member_id, { id, name, email }>\` \u3092\u8FD4\u3057\u3001\u305D\u306E\u307E\u307Eactor reference\u3068\u7D50\u5408\u3067\u304D\u307E\u3059\u3002
+- \u30EF\u30FC\u30AF\u30B9\u30DA\u30FC\u30B9\u30E1\u30F3\u30D0\u30FC\u306E\u30A8\u30F3\u30C9\u30DD\u30A4\u30F3\u30C8\u306F\u30C8\u30C3\u30D7\u30EC\u30D9\u30EB\u306E \`GET /workspace_members\` \u3067\u3059\u3002
+- \`queryRecords\` \u3068 \`getWorkspaceMemberMap\` \u306F \`Promise.all\` \u3067\u4E26\u5217\u53D6\u5F97\u3057\u3001\u30E1\u30E2\u30EA\u4E0A\u3067\u7D50\u5408\u3057\u3066\u304F\u3060\u3055\u3044\uFF08\u90FD\u5EA6\u53D6\u5F97\u305B\u305A\u4E00\u62EC\u53D6\u5F97\uFF09\u3002
+
+\u4F8B \u2014 owner\u3054\u3068\u306E\u30D1\u30D5\u30A9\u30FC\u30DE\u30F3\u30B9\uFF08\u540D\u524D\u89E3\u6C7A\u8FBC\u307F\uFF09:
+\`\`\`ts
+import type { Context } from "hono";
+import { connection } from "@squadbase/vite-server/connectors/attio";
+
+const attio = connection("<connectionId>");
+
+export default async function handler(c: Context) {
+  const [{ data: deals }, memberMap] = await Promise.all([
+    attio.queryRecords("deals", { limit: 500 }),
+    attio.getWorkspaceMemberMap(),
+  ]);
+
+  const byOwner = new Map<string, { owner_name: string; count: number }>();
+  for (const deal of deals) {
+    const values = (deal as { values?: Record<string, unknown[]> }).values ?? {};
+    const ownerCell = (values.owner ?? [])[0] as
+      | { referenced_actor_id?: string }
+      | undefined;
+    const ownerId = ownerCell?.referenced_actor_id ?? "unassigned";
+    const ownerName = memberMap.get(ownerId)?.name ?? "\u672A\u5272\u5F53";
+    const prev = byOwner.get(ownerId) ?? { owner_name: ownerName, count: 0 };
+    prev.count += 1;
+    byOwner.set(ownerId, prev);
+  }
+
+  return c.json({ rows: Array.from(byOwner.values()) });
+}
+\`\`\`
+
+### \u6700\u5C0F\u30B5\u30F3\u30D7\u30EB
 
 \`\`\`ts
 import type { Context } from "hono";
@@ -494,20 +821,60 @@ export default async function handler(c: Context) {
 - \u30D9\u30FC\u30B9URL: \`https://api.attio.com/v2\`
 - \u8A8D\u8A3C: Bearer\u30C8\u30FC\u30AF\u30F3\uFF08\u81EA\u52D5\u8A2D\u5B9A\uFF09
 - \u30EC\u30B3\u30FC\u30C9\u306E\u30AF\u30A8\u30EA\u306B\u306FGET\u30AF\u30A8\u30EA\u30D1\u30E9\u30E1\u30FC\u30BF\u3067\u306F\u306A\u304FPOST\u3067JSON\u30DC\u30C7\u30A3\u3092\u4F7F\u7528\u3057\u307E\u3059
+- \u66F4\u65B0\u30BB\u30DE\u30F3\u30C6\u30A3\u30AF\u30B9: PATCH\u306Fmultiselect\u5024\u3092\u8FFD\u52A0\u3001PUT\u306F\u4E0A\u66F8\u304D
+- \u591A\u304F\u306E\u4E00\u89A7\u30A8\u30F3\u30C9\u30DD\u30A4\u30F3\u30C8\u306F \`limit\` \u3068 \`offset\` \u306B\u3088\u308B\u30DA\u30FC\u30B8\u30CD\u30FC\u30B7\u30E7\u30F3\u3092\u30B5\u30DD\u30FC\u30C8
 
-#### \u4E3B\u8981\u30A8\u30F3\u30C9\u30DD\u30A4\u30F3\u30C8
-- GET \`/objects\` \u2014 \u5168\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E\u4E00\u89A7
+#### Meta
+- GET \`/self\` \u2014 \u73FE\u5728\u306EAPI\u30C8\u30FC\u30AF\u30F3\u306E\u60C5\u5831\uFF08workspace id / scopes / \u6709\u52B9\u72B6\u614B\uFF09
+
+#### Objects & Attributes
+- GET \`/objects\` \u2014 \u30EF\u30FC\u30AF\u30B9\u30DA\u30FC\u30B9\u306E\u5168\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u4E00\u89A7\uFF08\u30C7\u30D5\u30A9\u30EB\u30C8\u306F people / companies / deals\u3001\u52A0\u3048\u3066\u8A2D\u5B9A\u6E08\u307F\u306E\u30AB\u30B9\u30BF\u30E0\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\uFF09
+- GET \`/objects/{object}\` \u2014 \u5358\u4E00\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E\u53D6\u5F97
+- GET \`/objects/{object}/views\` \u2014 \u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E\u30D3\u30E5\u30FC\u4E00\u89A7
 - GET \`/objects/{object}/attributes\` \u2014 \u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u306E\u5C5E\u6027\u4E00\u89A7
-- POST \`/objects/{object}/records/query\` \u2014 \u30EC\u30B3\u30FC\u30C9\u306E\u691C\u7D22\uFF08people\u3001companies\u3001deals\u306A\u3069\uFF09
+- GET \`/objects/{object}/attributes/{attribute}\` \u2014 \u5C5E\u6027\u306E\u53D6\u5F97
+- GET \`/objects/{object}/attributes/{attribute}/options\` \u2014 \u30BB\u30EC\u30AF\u30C8\u9078\u629E\u80A2\u306E\u4E00\u89A7
+- GET \`/objects/{object}/attributes/{attribute}/statuses\` \u2014 \u30B9\u30C6\u30FC\u30BF\u30B9\u4E00\u89A7
+
+#### Records
+- POST \`/objects/{object}/records/query\` \u2014 \u30EC\u30B3\u30FC\u30C9\u306E\u691C\u7D22\uFF08filter / sorts / limit / offset\uFF09
 - GET \`/objects/{object}/records/{record_id}\` \u2014 \u30EC\u30B3\u30FC\u30C9\u306E\u53D6\u5F97
-- POST \`/objects/{object}/records\` \u2014 \u30EC\u30B3\u30FC\u30C9\u306E\u4F5C\u6210
-- PATCH \`/objects/{object}/records/{record_id}\` \u2014 \u30EC\u30B3\u30FC\u30C9\u306E\u66F4\u65B0
+- POST \`/objects/{object}/records\` \u2014 \u30EC\u30B3\u30FC\u30C9\u306E\u4F5C\u6210\uFF08body: \`{ "data": { ... } }\`\uFF09
+- PATCH \`/objects/{object}/records/{record_id}\` \u2014 \u66F4\u65B0\uFF08multiselect\u8FFD\u52A0\uFF09
+- PUT \`/objects/{object}/records/{record_id}\` \u2014 \u66F4\u65B0\uFF08multiselect\u4E0A\u66F8\u304D\uFF09
 - DELETE \`/objects/{object}/records/{record_id}\` \u2014 \u30EC\u30B3\u30FC\u30C9\u306E\u524A\u9664
+- PUT \`/objects/{object}/records\` \u2014 \u4E00\u81F4\u5C5E\u6027\u306B\u3088\u308B\u30A2\u30B5\u30FC\u30C8\uFF08upsert\uFF09
+- GET \`/objects/{object}/records/{record_id}/entries\` \u2014 \u30EC\u30B3\u30FC\u30C9\u3092\u53C2\u7167\u3059\u308B\u30EA\u30B9\u30C8\u30A8\u30F3\u30C8\u30EA\u4E00\u89A7
+
+#### Lists & Entries
+- GET \`/lists\` \u2014 \u30EA\u30B9\u30C8\u4E00\u89A7
+- GET \`/lists/{list_id}\` \u2014 \u30EA\u30B9\u30C8\u306E\u53D6\u5F97
+- GET \`/lists/{list_id}/views\` \u2014 \u30EA\u30B9\u30C8\u306E\u30D3\u30E5\u30FC\u4E00\u89A7
 - POST \`/lists/{list_id}/entries/query\` \u2014 \u30EA\u30B9\u30C8\u30A8\u30F3\u30C8\u30EA\u306E\u691C\u7D22
-- POST \`/notes\` \u2014 \u30CE\u30FC\u30C8\u306E\u4F5C\u6210
-- GET \`/notes?parent_object={object}&parent_record_id={id}\` \u2014 \u30EC\u30B3\u30FC\u30C9\u306E\u30CE\u30FC\u30C8\u3092\u53D6\u5F97
+- GET \`/lists/{list_id}/entries/{entry_id}\` \u2014 \u30EA\u30B9\u30C8\u30A8\u30F3\u30C8\u30EA\u306E\u53D6\u5F97
+- POST \`/lists/{list_id}/entries\` \u2014 \u30A8\u30F3\u30C8\u30EA\u4F5C\u6210
+- PATCH \`/lists/{list_id}/entries/{entry_id}\` \u2014 \u66F4\u65B0\uFF08multiselect\u8FFD\u52A0\uFF09
+- PUT \`/lists/{list_id}/entries/{entry_id}\` \u2014 \u66F4\u65B0\uFF08multiselect\u4E0A\u66F8\u304D\uFF09
+- DELETE \`/lists/{list_id}/entries/{entry_id}\` \u2014 \u30A8\u30F3\u30C8\u30EA\u524A\u9664
+- PUT \`/lists/{list_id}/entries\` \u2014 \u89AA\u30EC\u30B3\u30FC\u30C9\u306B\u3088\u308B\u30A2\u30B5\u30FC\u30C8\uFF08upsert\uFF09
+
+#### Workspace Members\uFF08\u30C1\u30FC\u30E0\u30E1\u30F3\u30D0\u30FC\uFF09
+- GET \`/workspace_members\` \u2014 \u30EF\u30FC\u30AF\u30B9\u30DA\u30FC\u30B9\u306E\u5168\u30E1\u30F3\u30D0\u30FC\u4E00\u89A7\uFF08\u30ED\u30FC\u30EB\u3084\u30A2\u30AF\u30BB\u30B9\u30EC\u30D9\u30EB\u3092\u542B\u3080\uFF09
+- GET \`/workspace_members/{workspace_member_id}\` \u2014 \u5358\u4E00\u30E1\u30F3\u30D0\u30FC\u306E\u53D6\u5F97
 
-#### \u30AF\u30A8\u30EA\u30DC\u30C7\u30A3 (POST /objects/{object}/records/query)
+#### Notes, Tasks, Threads & Comments
+- \`/notes\`\uFF08GET \u4E00\u89A7 / POST \u4F5C\u6210\uFF09\u3001\`/notes/{note_id}\`\uFF08GET / PATCH / DELETE\uFF09\u3002\u4E00\u89A7\u306F \`?parent_object={object}&parent_record_id={id}\` \u3067\u7D5E\u308A\u8FBC\u307F\u53EF\u80FD
+- \`/tasks\`\uFF08GET \u4E00\u89A7 / POST \u4F5C\u6210\uFF09\u3001\`/tasks/{task_id}\`\uFF08GET / PATCH / DELETE\uFF09
+- \`/threads\`\uFF08GET \u4E00\u89A7\uFF09\u3001\`/threads/{thread_id}\`\uFF08GET\uFF09
+- \`/comments\`\uFF08POST \u4F5C\u6210\uFF09\u3001\`/comments/{comment_id}\`\uFF08GET / PATCH / DELETE\uFF09
+
+#### Webhooks
+- GET \`/webhooks\`\u3001POST \`/webhooks\`\u3001GET/PATCH/DELETE \`/webhooks/{webhook_id}\`
+
+#### Meetings
+- GET \`/meetings\`\u3001GET \`/meetings/{meeting_id}\`
+
+#### \u30AF\u30A8\u30EA\u30DC\u30C7\u30A3 (POST /objects/{object}/records/query \u304A\u3088\u3073 /lists/{list_id}/entries/query)
 - \`filter\` \u2014 \u30D5\u30A3\u30EB\u30BF\u6761\u4EF6
 - \`sorts\` \u2014 \u30BD\u30FC\u30C8\u6307\u5B9A\u306E\u914D\u5217
 - \`limit\` \u2014 \u30DA\u30FC\u30B8\u3042\u305F\u308A\u306E\u6700\u5927\u30EC\u30B3\u30FC\u30C9\u6570\uFF08\u30C7\u30D5\u30A9\u30EB\u30C825\uFF09
@@ -542,6 +909,14 @@ function resolveEnvVarOptional(entry, key) {
 import { getContext } from "hono/context-storage";
 import { getCookie } from "hono/cookie";
 var APP_SESSION_COOKIE_NAME = "__Host-squadbase-session";
+function normalizeHeaders(input) {
+  const out = {};
+  if (!input) return out;
+  new Headers(input).forEach((value, key) => {
+    out[key] = value;
+  });
+  return out;
+}
 function createSandboxProxyFetch(connectionId) {
   return async (input, init) => {
     const token = process.env.INTERNAL_SQUADBASE_OAUTH_MACHINE_CREDENTIAL;
@@ -565,6 +940,7 @@ function createSandboxProxyFetch(connectionId) {
       body: JSON.stringify({
         url: originalUrl,
         method: originalMethod,
+        headers: normalizeHeaders(init?.headers),
         body: originalBody
       })
     });
@@ -599,6 +975,7 @@ function createDeployedAppProxyFetch(connectionId) {
       body: JSON.stringify({
         url: originalUrl,
         method: originalMethod,
+        headers: normalizeHeaders(init?.headers),
         body: originalBody
       })
     });