busabase-sdk 0.19.2 → 0.21.0

package/dist/index.js

@@ -136,13 +136,15 @@ const AgentSessionVOSchema = z.object({
 	/** Set when status is "failed"; surfaced verbatim to the user. */
 	error: z.string().nullable().default(null)
 });
-/** One connected agent backend in the current space and authenticated user's scope. */
+/** One connected agent backend visible in the requested workspace scope. */
 const AgentConnectionVOSchema = z.object({
 	slug: z.string(),
 	agentName: z.string(),
 	transport: AgentTransportSchema,
 	sessionCount: z.number().int().nonnegative(),
-	latest: AgentSessionVOSchema.nullable()
+	latest: AgentSessionVOSchema.nullable(),
+	/** Controls owner-only actions such as deleting the saved OAuth grant. */
+	ownedByCurrentUser: z.boolean()
 });
 /**
 * One streamed event from a session.
@@ -178,17 +180,34 @@ const AgentSessionEventVOSchema = z.object({
 	permissionOptionId: z.string().optional(),
 	at: z.string()
 });
+const AgentConnectionScopeSchema = z.enum(["mine", "space"]);
+const ListAgentConnectionsInputSchema = z.object({ scope: AgentConnectionScopeSchema.default("mine") });
 const CreateAgentSessionInputSchema = z.object({ 
 /** Must name a catalog entry. Deliberately NOT a command line — see below. */
 slug: z.string().min(1) });
 const DisconnectAgentInputSchema = z.object({ 
 /** The exact connected-agent slug shown by the sessions/catalog surfaces. */
 slug: z.string().min(1) });
-/** Base64 image/audio the browser attached — ACP's `ImageContent`/`AudioContent` shape verbatim. */
+/**
+* A base64 payload the browser attached.
+*
+* `image`/`audio` map to ACP's `ImageContent`/`AudioContent` verbatim; `file`
+* is everything else (a PDF, a spreadsheet, a Markdown note) and becomes an
+* ACP embedded `resource` block at send time. `data` is base64 for every kind
+* — including textual files — so the browser never has to guess an encoding;
+* whether a file travels to the agent as ACP text or as an ACP blob is decided
+* server-side from the payload itself.
+*/
 const PromptAttachmentInputSchema = z.object({
-	kind: z.enum(["image", "audio"]),
-	data: z.string().min(1),
-	mimeType: z.string().min(1)
+	kind: z.enum([
+		"image",
+		"audio",
+		"file"
+	]),
+	data: z.string().min(1).max(2e7),
+	mimeType: z.string().min(1),
+	/** The original filename, carried for `file` so the agent and the transcript can name it. */
+	filename: z.string().max(255).optional()
 });
 const PromptAgentSessionInputSchema = z.object({
 	sessionId: z.string().min(1),
@@ -219,8 +238,8 @@ const agentsContract = {
 		deletedSessionCount: z.number().int().nonnegative()
 	})),
 	connections: { 
-	/** Connected backends, scoped to the current space and authenticated user. */
-list: oc.output(AgentConnectionVOSchema.array()) },
+	/** Connected backends in the current user's personal or active-space scope. */
+list: oc.input(ListAgentConnectionsInputSchema).output(AgentConnectionVOSchema.array()) },
 	sessions: {
 		list: oc.output(AgentSessionVOSchema.array()),
 		create: oc.input(CreateAgentSessionInputSchema).output(AgentSessionVOSchema),
@@ -663,7 +682,8 @@ const makeFileTreeNodeType = (config) => ({
 	icon: config.icon,
 	capabilities: {
 		hasDetail: true,
-		creatable: true
+		creatable: true,
+		publicAccess: config.publicAccess
 	},
 	operations: fileTreeOperations(config.type)
 });
@@ -681,7 +701,8 @@ const airappNodeType = makeFileTreeNodeType({
 	icon: "app-window",
 	routeBase: "airapps",
 	tag: "AirApps",
-	entryFile: "package.json"
+	entryFile: "package.json",
+	publicAccess: "no"
 });
 //#endregion
 //#region ../../packages/busabase-contract/src/domains/base/definition.ts
@@ -692,7 +713,8 @@ const baseNodeType = {
 	icon: "table",
 	capabilities: {
 		hasDetail: true,
-		creatable: true
+		creatable: true,
+		publicAccess: "detail"
 	},
 	operations: [
 		{
@@ -795,7 +817,8 @@ const docNodeType = {
 	icon: "file-text",
 	capabilities: {
 		hasDetail: true,
-		creatable: true
+		creatable: true,
+		publicAccess: "detail"
 	},
 	operations: [{
 		kind: "doc_update",
@@ -812,7 +835,8 @@ const driveNodeType = makeFileTreeNodeType({
 	icon: "hard-drive",
 	routeBase: "drives",
 	tag: "Drives",
-	entryFile: "README.md"
+	entryFile: "README.md",
+	publicAccess: "no"
 });
 //#endregion
 //#region ../../packages/busabase-contract/src/domains/file-node/definition.ts
@@ -824,7 +848,8 @@ const fileNodeType = {
 	icon: "file",
 	capabilities: {
 		hasDetail: true,
-		creatable: true
+		creatable: true,
+		publicAccess: "detail"
 	},
 	operations: []
 };
@@ -839,7 +864,8 @@ const folderNodeType = {
 	capabilities: {
 		container: true,
 		creatable: true,
-		hasDetail: true
+		hasDetail: true,
+		publicAccess: "detail"
 	},
 	operations: []
 };
@@ -860,7 +886,8 @@ const formNodeType = {
 	icon: "form",
 	capabilities: {
 		hasDetail: true,
-		creatable: true
+		creatable: true,
+		publicAccess: "submit"
 	},
 	operations: []
 };
@@ -879,7 +906,8 @@ const htmlNodeType = {
 	icon: "code-xml",
 	capabilities: {
 		hasDetail: true,
-		creatable: true
+		creatable: true,
+		publicAccess: "no"
 	},
 	operations: [{
 		kind: "html_document_update",
@@ -896,7 +924,8 @@ const skillNodeType = makeFileTreeNodeType({
 	icon: "sparkles",
 	routeBase: "skills",
 	tag: "Skills",
-	entryFile: "SKILL.md"
+	entryFile: "SKILL.md",
+	publicAccess: "no"
 });
 //#endregion
 //#region ../../packages/busabase-contract/src/domains/whiteboard/definition.ts
@@ -912,7 +941,8 @@ const whiteboardNodeType = {
 	icon: "pen-tool",
 	capabilities: {
 		hasDetail: true,
-		creatable: true
+		creatable: true,
+		publicAccess: "detail"
 	},
 	operations: [{
 		kind: "whiteboard_document_update",
@@ -935,7 +965,8 @@ const workflowNodeType = {
 	icon: "workflow",
 	capabilities: {
 		hasDetail: true,
-		creatable: true
+		creatable: true,
+		publicAccess: "detail"
 	},
 	operations: [{
 		kind: "workflow_document_update",
@@ -1161,6 +1192,23 @@ const userRefSchema = z.object({
 	image: z.string().nullable(),
 	role: z.string().nullable().optional()
 });
+const sourceChannelSchema = z.enum([
+	"web_ui",
+	"browser",
+	"openapi",
+	"sdk",
+	"cli",
+	"mcp",
+	"skill",
+	"webhook",
+	"automation",
+	"import"
+]);
+const sourceAttributionSchema = z.object({
+	displayName: z.string().nullable(),
+	ownerName: z.string().nullable(),
+	channel: sourceChannelSchema.nullable()
+});
 const commitSchema = z.object({
 	id: z.string(),
 	baseId: z.string().nullable(),
@@ -1252,6 +1300,7 @@ const changeRequestSchema = z.object({
 	status: changeRequestStatusSchema,
 	submittedBy: z.string(),
 	submittedByUser: userRefSchema.nullable().optional().default(null),
+	sourceAttribution: sourceAttributionSchema.nullable().optional(),
 	sourceMeta: z.record(z.string(), z.unknown()),
 	reviewPolicySnapshot: z.record(z.string(), z.unknown()),
 	mergeSummary: z.record(z.string(), z.unknown()),
@@ -1275,11 +1324,18 @@ const agentTaskSchema = z.object({
 });
 const searchResultSchema = z.object({
 	id: z.string(),
+	/**
+	* `node` covers the CONTENT of a content-bearing node (doc / html /
+	* whiteboard / workflow). Purely additive — callers that do not know it can
+	* ignore the kind, and callers that never asked for it (an explicit
+	* `sources` list without `nodes`) never receive it.
+	*/
 	kind: z.enum([
 		"record",
 		"change_request",
 		"base",
-		"file"
+		"file",
+		"node"
 	]),
 	title: z.string(),
 	body: z.string(),
@@ -1292,7 +1348,17 @@ const searchResponseSchema = z.object({
 	limit: z.number(),
 	offset: z.number(),
 	hasMore: z.boolean(),
-	results: z.array(searchResultSchema)
+	results: z.array(searchResultSchema),
+	/**
+	* True when at least one in-scope node's content was indexed only up to the
+	* projection cap, so this search could not see all of it.
+	*
+	* Exists so an empty result can be reported honestly: without it, "no
+	* results" is ambiguous between "the workspace does not contain this" and
+	* "we did not look at all of it". Clients should surface it — and point at
+	* `grep`, which has no such cap — rather than implying absence.
+	*/
+	contentTruncated: z.boolean().default(false)
 });
 const liveEventSchema = z.object({
 	kind: z.enum([
@@ -1340,6 +1406,7 @@ const auditEventSchema = z.object({
 	action: auditActionSchema,
 	actorId: z.string(),
 	actor: userRefSchema.nullable().optional().default(null),
+	sourceAttribution: sourceAttributionSchema.nullable().optional(),
 	baseId: z.string().nullable(),
 	recordId: z.string().nullable(),
 	changeRequestId: z.string().nullable(),
@@ -1461,21 +1528,30 @@ const listChangeRequestsPagedInputSchema = z.object({
 	/** Opaque base64 cursor (`createdAt|id`) for keyset pagination. */
 	cursor: z.string().optional(),
 	status: z.array(changeRequestStatusSchema).optional(),
-	mine: z.boolean().optional()
+	mine: z.boolean().optional(),
+	affectsNodeId: z.string().min(1).optional()
 }).optional().default({ limit: 50 });
 const listChangeRequestsResponseSchema = z.object({
 	changeRequests: z.array(changeRequestSchema),
 	nextCursor: z.string().nullable()
 });
-const listChangeRequestsPageInputSchema = z.object({
+const changeRequestPageInputShape = {
 	page: z.coerce.number().int().min(1).optional().default(1),
 	pageSize: z.coerce.number().int().min(1).max(100).optional().default(50),
 	status: z.array(changeRequestStatusSchema).optional(),
 	mine: z.boolean().optional()
+};
+const listChangeRequestsPageInputSchema = z.object({
+	...changeRequestPageInputShape,
+	affectsNodeId: z.string().min(1).optional()
 }).optional().default({
 	page: 1,
 	pageSize: 50
 });
+const inboxSnapshotInputSchema = z.object(changeRequestPageInputShape).optional().default({
+	page: 1,
+	pageSize: 50
+});
 const listChangeRequestsPageResponseSchema = z.object({
 	changeRequests: z.array(changeRequestSchema),
 	total: z.number().int().nonnegative(),
@@ -1495,7 +1571,8 @@ const inboxSnapshotResponseSchema = listChangeRequestsPageResponseSchema.extend(
 const SEARCH_SOURCES = [
 	"records",
 	"files",
-	"names"
+	"names",
+	"nodes"
 ];
 const searchInputSchema = z.object({
 	query: z.string().default(""),
@@ -2763,6 +2840,19 @@ const ExportAssetTextVOSchema = z.object({
 	textContentHash: z.string().nullable(),
 	byteCount: z.number().int().nonnegative()
 });
+const ImportBeginInputSchema = z.object({ 
+/**
+* The space id the archive was ORIGINALLY exported from (`manifest.spaceId`
+* in the `.bbdump`, already integrity-verified before this is called).
+* `importTableRows`'s "nodes" handling needs this to recognize the
+* archive's own root-node row deterministically (`rootNodeIdForSpace`) —
+* scanning each batch's rows for "the one with a null `parentId`" only
+* works when that row happens to land in the SAME batch as its children,
+* which cursor pagination (id-ordered, not tree-ordered) does not
+* guarantee once a space has more nodes than one page. See the matching
+* comment in `import-logic.ts`.
+*/
+sourceSpaceId: z.string() });
 const ImportBeginVOSchema = z.object({ sessionId: z.string() });
 /**
 * `docBodies`, `attachmentBlobs` and `assetTextBlobs` are pseudo-tables: doc
@@ -2826,7 +2916,7 @@ const dumpContract = {
 		tags: ["Dump"],
 		summary: "Begin a full-fidelity import session",
 		successDescription: "Created an import session for the current space. Refused unless the space's node tree is empty (full-fidelity import preserves original ids and cannot merge into existing data)."
-	}).output(ImportBeginVOSchema),
+	}).input(ImportBeginInputSchema).output(ImportBeginVOSchema),
 	importTables: oc.route({
 		method: "POST",
 		path: "/dump/import/tables",
@@ -3671,6 +3761,104 @@ const listRecordActivityInputSchema = z.object({
 	recordId: z.string().min(1),
 	limit: z.coerce.number().int().min(1).max(100).optional().default(50)
 });
+const EMBED_LINK_MAX_MINUTES = 1440;
+const EmbedNodeTypeSchema = z.enum([
+	"base",
+	"doc",
+	"file",
+	"drive",
+	"skill",
+	"folder",
+	"airapp"
+]);
+const EmbedTargetTypeSchema = z.enum([
+	"node",
+	"change-request",
+	"record-detail"
+]);
+const EmbedFrameModeSchema = z.enum([
+	"anywhere",
+	"origins",
+	"top-level-only"
+]);
+const EmbedAllowedOriginSchema = z.string().trim().min(1).superRefine((value, ctx) => {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		ctx.addIssue({
+			code: "custom",
+			message: "Allowed origins must be valid URLs"
+		});
+		return;
+	}
+	const isLocalHttp = url.protocol === "http:" && (url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]");
+	if (url.protocol !== "https:" && !isLocalHttp) ctx.addIssue({
+		code: "custom",
+		message: "Allowed origins must use HTTPS"
+	});
+	if (url.username || url.password || url.pathname !== "/" || url.search || url.hash || url.hostname.includes("*")) ctx.addIssue({
+		code: "custom",
+		message: "Allowed origins must be exact origins"
+	});
+}).transform((value) => new URL(value).origin);
+const EmbedFramePolicyInputSchema = z.discriminatedUnion("mode", [
+	z.object({
+		mode: z.literal("anywhere"),
+		allowedOrigins: z.array(EmbedAllowedOriginSchema).max(0).optional()
+	}),
+	z.object({
+		mode: z.literal("origins"),
+		allowedOrigins: z.array(EmbedAllowedOriginSchema).min(1).max(20)
+	}),
+	z.object({
+		mode: z.literal("top-level-only"),
+		allowedOrigins: z.array(EmbedAllowedOriginSchema).max(0).optional()
+	})
+]).transform((policy) => ({
+	mode: policy.mode,
+	allowedOrigins: [...new Set(policy.allowedOrigins ?? [])]
+}));
+const EmbedFramePolicyVOSchema = z.object({
+	mode: EmbedFrameModeSchema,
+	allowedOrigins: z.array(z.string().url())
+}).superRefine((policy, ctx) => {
+	if (!(policy.mode === "origins" ? policy.allowedOrigins.length > 0 : policy.allowedOrigins.length === 0)) ctx.addIssue({
+		code: "custom",
+		message: "Stored frame policy is invalid"
+	});
+});
+const CreateEmbedLinkInputSchema = z.object({
+	type: EmbedTargetTypeSchema,
+	typeId: z.string().min(1),
+	expiresInMinutes: z.number().int().min(1).max(EMBED_LINK_MAX_MINUTES).optional().default(15),
+	framePolicy: EmbedFramePolicyInputSchema.optional().default({
+		mode: "anywhere",
+		allowedOrigins: []
+	})
+});
+const ListEmbedLinksInputSchema = z.object({
+	type: EmbedTargetTypeSchema.optional(),
+	typeId: z.string().min(1).optional()
+}).optional().default({});
+const RevokeEmbedLinkInputSchema = z.object({ id: z.string().min(1) });
+const EmbedLinkVOSchema = z.object({
+	id: z.string(),
+	type: EmbedTargetTypeSchema,
+	typeId: z.string(),
+	targetName: z.string(),
+	nodeType: EmbedNodeTypeSchema.nullable(),
+	createdAt: z.string().datetime(),
+	expiresAt: z.string().datetime(),
+	revokedAt: z.string().datetime().nullable(),
+	active: z.boolean(),
+	framePolicy: EmbedFramePolicyVOSchema
+});
+const CreatedEmbedLinkVOSchema = EmbedLinkVOSchema.extend({
+	url: z.string().url(),
+	iframeUrl: z.string().url()
+});
+const RevokeEmbedLinkVOSchema = z.object({ revoked: z.literal(true) });
 //#endregion
 //#region ../../packages/busabase-contract/src/contract/grep-schemas.ts
 /**
@@ -4107,6 +4295,14 @@ const NodeDetailVOSchema = z.discriminatedUnion("type", [
 * hint. An ambiguous slug with no `type` is refused rather than silently
 * resolved to whichever row sorts first.
 */
+/**
+* `nodes.ancestors` output — the node's ancestor ids, ROOT-FIRST, excluding
+* the node itself. Ids only, deliberately: the sidebar already has (or can
+* lazily fetch) each ancestor's own row, and it only needs to know WHICH
+* folders to expand. Returning full nodes here would duplicate `nodes.list`
+* and make a cheap navigational lookup expensive.
+*/
+const nodeAncestorsVOSchema = z.object({ ancestorIds: z.array(z.string()) });
 const getNodeInputSchema = z.object({
 	nodeId: z.string().describe("Node id, or a slug that is unique within its type."),
 	type: z.enum(NODE_TYPES).optional().describe("Optional disambiguation hint, only needed when `nodeId` is a slug that exists under more than one node type.")
@@ -4134,6 +4330,29 @@ const changeRequestBatchFailureSchema = z.object({
 	code: z.string().optional(),
 	data: z.unknown().optional()
 });
+const embedLinkErrorResponseSchema = z.object({ error: z.string() });
+const embedLinkErrors = {
+	BAD_REQUEST: {
+		status: 400,
+		message: "Bad Request",
+		data: embedLinkErrorResponseSchema
+	},
+	UNAUTHORIZED: {
+		status: 401,
+		message: "Unauthorized",
+		data: embedLinkErrorResponseSchema
+	},
+	FORBIDDEN: {
+		status: 403,
+		message: "Forbidden",
+		data: embedLinkErrorResponseSchema
+	},
+	NOT_FOUND: {
+		status: 404,
+		message: "Not Found",
+		data: embedLinkErrorResponseSchema
+	}
+};
 const changeRequestReviewBatchResultSchema = z.object({ results: z.array(z.discriminatedUnion("ok", [z.object({
 	changeRequestId: z.string(),
 	ok: z.literal(true),
@@ -4170,6 +4389,29 @@ const busabaseContractRoutes = {
 		summary: "Search files, Docs, and Base records with one pattern (unified grep)",
 		successDescription: "Streaming regex/literal matches across every in-scope source — Drive/Skill files, Doc bodies, and Base records (canonical headCommit.payload, never the truncated search projection) — with one shared pattern, one shared maxMatches/deadline budget (files scanned first, then docs, then whatever budget remains goes to records), and a per-source honest coverage report (files keeps its existing missing/stale/unsearchable/errored/notReached; docs and records report scanned/errored/notReached). truncated is set when any source truncated or has notReached > 0."
 	}).input(UnifiedGrepInputSchema).output(UnifiedGrepResultVOSchema),
+	embedLinks: {
+		create: oc.route({
+			method: "POST",
+			path: "/embed-links",
+			tags: ["Embed Links"],
+			summary: "Create a polymorphic read-only embed link",
+			successDescription: "The capability URL is returned once; only its secret hash is stored."
+		}).errors(embedLinkErrors).input(CreateEmbedLinkInputSchema).output(CreatedEmbedLinkVOSchema),
+		list: oc.route({
+			method: "GET",
+			path: "/embed-links",
+			tags: ["Embed Links"],
+			summary: "List embed links the caller can manage",
+			successDescription: "Embed link metadata without capability secrets."
+		}).errors(embedLinkErrors).input(ListEmbedLinksInputSchema).output(z.array(EmbedLinkVOSchema)),
+		revoke: oc.route({
+			method: "DELETE",
+			path: "/embed-links/{id}",
+			tags: ["Embed Links"],
+			summary: "Revoke an embed link",
+			successDescription: "The capability stops resolving immediately."
+		}).errors(embedLinkErrors).input(RevokeEmbedLinkInputSchema).output(RevokeEmbedLinkVOSchema)
+	},
 	nodes: {
 		list: oc.route({
 			method: "GET",
@@ -4183,7 +4425,7 @@ const busabaseContractRoutes = {
 			path: "/nodes/search",
 			tags: ["Nodes", "Search"],
 			summary: "Search nodes by name/slug (cheap, name-only quick-jump)",
-			successDescription: "Plain ilike match on name/slug across every registered node type, scoped by the same node-visibility ACL as `nodes.list`. No content scan and no full-text ranking — ordered exact-slug-match first, then by name. Backs the dashboard search dialog's 'Recent' tab cache-miss path; the heavier `search` endpoint remains the dedicated full-text content search."
+			successDescription: "Plain ilike match on name/slug across every registered node type, scoped by the same node-visibility ACL as `nodes.list`. No content scan and no full-text ranking — ordered exact-slug-match first, then by name. Backs the dashboard search dialog's 'Recent' tab cache-miss path. To search what is written INSIDE nodes, use `search` with the `nodes` source (indexed, paginated) or `grep` (exhaustive, no index)."
 		}).input(searchNodesByNameInputSchema).output(z.array(nodeSearchResultSchema)),
 		isDescendant: oc.route({
 			method: "GET",
@@ -4192,6 +4434,13 @@ const busabaseContractRoutes = {
 			summary: "Check whether a node is a descendant of another",
 			successDescription: "Server-authoritative parentId-chain walk from nodeId up to potentialAncestorId. Used to gate cross-branch drag-and-drop drops in the sidebar, since the full tree is no longer guaranteed to be loaded client-side (depth-bounded lazy load) — a purely local walk could wrongly allow dropping a folder into its own unloaded descendant."
 		}).input(isDescendantInputSchema).output(isDescendantOutputSchema),
+		ancestors: oc.route({
+			method: "GET",
+			path: "/nodes/{nodeId}/ancestors",
+			tags: ["Nodes"],
+			summary: "List a node's ancestor ids",
+			successDescription: "The node's ancestor ids, root-first, excluding the node itself (`[]` directly under the workspace root). `nodeId` accepts an id or a slug, same as `nodes.get`; pass `type` when a slug exists under more than one type. Lets a depth-bounded, lazily-expanded tree open straight to a deep node on a cold load (a refresh, a bookmark, a shared link) without one round trip per level."
+		}).input(getNodeInputSchema).output(nodeAncestorsVOSchema),
 		createChangeRequest: oc.route({
 			method: "POST",
 			path: "/nodes/change-requests",
@@ -4435,16 +4684,16 @@ const busabaseContractRoutes = {
 			path: "/change-requests",
 			tags: ["Change Requests"],
 			summary: "List change requests",
-			successDescription: "A page of change requests plus an opaque nextCursor (null at the end). Filter with `status` and/or `mine`."
+			successDescription: "A page of change requests plus an opaque nextCursor (null at the end). Filter with `status`, `mine`, and/or `affectsNodeId`."
 		}).input(listChangeRequestsPagedInputSchema).output(listChangeRequestsResponseSchema),
 		listPage: oc.route({
 			method: "GET",
 			path: "/change-requests/page",
 			tags: ["Change Requests"],
 			summary: "List a numbered change request page",
-			successDescription: "A random-access page of change requests plus the total across the whole filter. Same `status` / `mine` filters as the cursor listing."
+			successDescription: "A random-access page of change requests plus the total across the whole filter. Same `status`, `mine`, and `affectsNodeId` filters as the cursor listing."
 		}).input(listChangeRequestsPageInputSchema).output(listChangeRequestsPageResponseSchema),
-		inboxSnapshot: oc.input(listChangeRequestsPageInputSchema).output(inboxSnapshotResponseSchema),
+		inboxSnapshot: oc.input(inboxSnapshotInputSchema).output(inboxSnapshotResponseSchema),
 		counts: oc.route({
 			method: "GET",
 			path: "/change-requests/counts",
@@ -4495,94 +4744,6 @@ const busabaseContractRoutes = {
 	views: viewContract
 };
 oc.prefix("/api/v1").router(busabaseContractRoutes);
-const EMBED_LINK_MAX_MINUTES = 1440;
-const EmbedNodeTypeSchema = z.enum([
-	"base",
-	"doc",
-	"file",
-	"drive",
-	"skill",
-	"folder",
-	"airapp"
-]);
-const EmbedFrameModeSchema = z.enum([
-	"anywhere",
-	"origins",
-	"top-level-only"
-]);
-const EmbedAllowedOriginSchema = z.string().trim().min(1).superRefine((value, ctx) => {
-	let url;
-	try {
-		url = new URL(value);
-	} catch {
-		ctx.addIssue({
-			code: "custom",
-			message: "Allowed origins must be valid URLs"
-		});
-		return;
-	}
-	const isLocalHttp = url.protocol === "http:" && (url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]");
-	if (url.protocol !== "https:" && !isLocalHttp) ctx.addIssue({
-		code: "custom",
-		message: "Allowed origins must use HTTPS"
-	});
-	if (url.username || url.password || url.pathname !== "/" || url.search || url.hash || url.hostname.includes("*")) ctx.addIssue({
-		code: "custom",
-		message: "Allowed origins must be exact origins"
-	});
-}).transform((value) => new URL(value).origin);
-const EmbedFramePolicyInputSchema = z.discriminatedUnion("mode", [
-	z.object({
-		mode: z.literal("anywhere"),
-		allowedOrigins: z.array(EmbedAllowedOriginSchema).max(0).optional()
-	}),
-	z.object({
-		mode: z.literal("origins"),
-		allowedOrigins: z.array(EmbedAllowedOriginSchema).min(1).max(20)
-	}),
-	z.object({
-		mode: z.literal("top-level-only"),
-		allowedOrigins: z.array(EmbedAllowedOriginSchema).max(0).optional()
-	})
-]).transform((policy) => ({
-	mode: policy.mode,
-	allowedOrigins: [...new Set(policy.allowedOrigins ?? [])]
-}));
-const EmbedFramePolicyVOSchema = z.object({
-	mode: EmbedFrameModeSchema,
-	allowedOrigins: z.array(z.string().url())
-}).superRefine((policy, ctx) => {
-	if (!(policy.mode === "origins" ? policy.allowedOrigins.length > 0 : policy.allowedOrigins.length === 0)) ctx.addIssue({
-		code: "custom",
-		message: "Stored frame policy is invalid"
-	});
-});
-const CreateEmbedLinkInputSchema = z.object({
-	nodeId: z.string().min(1),
-	expiresInMinutes: z.number().int().min(1).max(EMBED_LINK_MAX_MINUTES).optional().default(15),
-	framePolicy: EmbedFramePolicyInputSchema.optional().default({
-		mode: "anywhere",
-		allowedOrigins: []
-	})
-});
-const ListEmbedLinksInputSchema = z.object({ nodeId: z.string().min(1).optional() }).optional().default({});
-const RevokeEmbedLinkInputSchema = z.object({ id: z.string().min(1) });
-const EmbedLinkVOSchema = z.object({
-	id: z.string(),
-	nodeId: z.string(),
-	nodeName: z.string(),
-	nodeType: EmbedNodeTypeSchema,
-	createdAt: z.string().datetime(),
-	expiresAt: z.string().datetime(),
-	revokedAt: z.string().datetime().nullable(),
-	active: z.boolean(),
-	framePolicy: EmbedFramePolicyVOSchema
-});
-const CreatedEmbedLinkVOSchema = EmbedLinkVOSchema.extend({
-	url: z.string().url(),
-	iframeUrl: z.string().url()
-});
-const RevokeEmbedLinkVOSchema = z.object({ revoked: z.literal(true) });
 //#endregion
 //#region ../../packages/busabase-contract/src/contract/cloud.ts
 /**
@@ -4638,25 +4799,7 @@ const notFoundErrors = { NOT_FOUND: {
 	message: "Not Found",
 	data: ErrorResponseSchema
 } };
-const embedLinksErrors = {
-	BAD_REQUEST: {
-		status: 400,
-		message: "Bad Request",
-		data: ErrorResponseSchema
-	},
-	...authenticatedErrors,
-	FORBIDDEN: {
-		status: 403,
-		message: "Forbidden",
-		data: ErrorResponseSchema
-	},
-	...notFoundErrors
-};
-const securedRoute = (operation) => ({
-	...operation,
-	security: [{ bearerAuth: [] }]
-});
-const { vault: _localVault, ...cloudWorkbenchRoutes } = busabaseContractRoutes;
+const { embedLinks: _embedLinksAlreadyPublishedAtRoot, vault: _localVault, ...cloudWorkbenchRoutes } = busabaseContractRoutes;
 const cloudExtraRoutes = {
 	system: {
 		health: oc.route({
@@ -4721,32 +4864,7 @@ const cloudExtraRoutes = {
 			...notFoundErrors
 		}).input(z.object({ params: z.object({ id: z.string() }) })).output(AgentTaskDetailSchema)
 	},
-	embedLinks: {
-		create: oc.route({
-			method: "POST",
-			path: "/embed-links",
-			tags: ["Embed Links"],
-			summary: "Create a short-lived read-only embed link for one node",
-			successDescription: "The capability URL is returned once; only its secret hash is stored.",
-			spec: securedRoute
-		}).errors(embedLinksErrors).input(CreateEmbedLinkInputSchema).output(CreatedEmbedLinkVOSchema),
-		list: oc.route({
-			method: "GET",
-			path: "/embed-links",
-			tags: ["Embed Links"],
-			summary: "List embed links the caller can manage",
-			successDescription: "Embed link metadata without capability secrets.",
-			spec: securedRoute
-		}).errors(embedLinksErrors).input(ListEmbedLinksInputSchema).output(z.array(EmbedLinkVOSchema)),
-		revoke: oc.route({
-			method: "DELETE",
-			path: "/embed-links/{id}",
-			tags: ["Embed Links"],
-			summary: "Revoke an embed link",
-			successDescription: "The capability stops resolving immediately.",
-			spec: securedRoute
-		}).errors(embedLinksErrors).input(RevokeEmbedLinkInputSchema).output(RevokeEmbedLinkVOSchema)
-	}
+	embedLinks: busabaseContractRoutes.embedLinks
 };
 const cloudContract = oc.prefix("/api/v1").router({
 	...cloudWorkbenchRoutes,
@@ -4775,6 +4893,7 @@ function resolveConfig(config = {}) {
 		webUrl: normalizeBaseUrl(config.webUrl ?? env("BUSABASE_WEB_URL") ?? baseUrl),
 		apiKey: config.apiKey ?? env("BUSABASE_API_KEY"),
 		spaceId: config.spaceId ?? env("BUSABASE_SPACE_ID"),
+		sourceChannel: config.sourceChannel ?? "sdk",
 		headers: config.headers,
 		fetch: config.fetch
 	};
@@ -4845,6 +4964,7 @@ function createBusabaseClient(config = {}) {
 			return {
 				...resolved.apiKey ? { authorization: `Bearer ${resolved.apiKey}` } : {},
 				...resolved.spaceId ? { "x-busabase-space": resolved.spaceId } : {},
+				"x-busabase-channel": resolved.sourceChannel ?? "sdk",
 				...extra
 			};
 		}
@@ -5031,7 +5151,7 @@ var Busabase = class {
 	* This is the *authenticated*, durable link: it never expires, but the reader
 	* needs a session unless the node has public sharing enabled. For a no-login
 	* link, mint a Cloud embed link instead —
-	* `bb.embedLinks.create({ nodeId })` returns `{ url, iframeUrl }`.
+	* `bb.embedLinks.create({ type: "node", typeId: nodeId })` returns `{ url, iframeUrl }`.
 	*
 	* @example
 	* ```ts