busabase-sdk 0.54.0 → 0.70.0

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as AssetTextStatus, A as NodeVO, At as GalleryCardSize, B as UpdatePreviewFileCredentialDTO, Bt as ViewSortVO, C as CommentVO, Ct as ListFormsDTO, D as MentionInboxItemVO, Dt as AssetAttachmentRef, E as LookupRollup, Et as UpdateFormDTO, F as SearchResponseVO, Ft as VIEW_FIELD_MAX_WIDTH, G as VaultItemKind, Gt as cloudContract, H as VaultAccessPolicy, Ht as ViewVO, I as SearchResultKind, It as VIEW_FIELD_MIN_WIDTH, J as VaultScopeType, Jt as CREATABLE_NODE_TYPES, K as VaultItemVO, Kt as NodeIcon, L as SearchResultVO, Lt as ViewConfigVO, M as OperationVO, Mt as GanttScale, N as ReviewVO, Nt as RecordLinkVO, O as MentionInboxPageVO, Ot as BaseFieldVO, P as ReviewVerdict, Pt as RecordVO, Q as AssetDetailVO, R as SourceAttributionVO, Rt as ViewFilterOperator, S as CommentSubjectType, St as FormVO, T as FieldType, Tt as SubmitFormDTO, U as VaultEnvironment, Ut as AttachmentRef, V as UpdateVaultSettingsDTO, Vt as ViewType, W as VaultItemInput, Wt as CloudContract, X as FileNodeMetadata, Xt as NodeType, Y as VaultSettingsVO, Yt as CreatableNodeType, Z as FileNodeVO, Zt as OperationKind, _ as ChangeRequestVO, _t as FormFieldBindingVO, a as createBusabaseClient, at as FilePreviewConfigurationStatus, b as CommentMentionTargetType, bt as FormSubmitResultVO, c as AuditAction, ct as FilePreviewUnavailableReason, d as ChangeRequestBatchFailureVO, dt as FileTreeNodeVO, et as AssetUsageVO, f as ChangeRequestCountsVO, ft as FileTreeReadFileVO, g as ChangeRequestTargetType, gt as FormBoundFieldVO, h as ChangeRequestStatus, ht as CreateFormDTO, i as ResolvedConfig, it as FilePreviewConfigVO, j as OperationStatus, jt as GalleryCoverFit, k as NodeSearchResultVO, kt as BaseVO, l as AuditEventVO, lt as FilePreviewVO, m as ChangeRequestReviewBatchResultVO, mt as ActivityItemVO, n as BusabaseConfig, nt as GrepInputDTO, o as resolveConfig, ot as FilePreviewCredentialSource, p as ChangeRequestMergeBatchResultVO, pt as NodeDetailVO, q as VaultRuntimeEnv, qt as NodeIconSchema, r as DEFAULT_BASE_URL, rt as GrepResultVO, s as AgentTaskVO, st as FilePreviewProvider, t as BusabaseClient, tt as AssetVO, u as BusabaseSourceChannel, ut as FileTreeFileVO, v as CommentMentionDispatchStatus, vt as FormPageSourceVO, w as CommitVO, wt as ListFormsVO, x as CommentMentionVO, xt as FormThemeVO, y as CommentMentionInputDTO, yt as FormShareVO, z as UserRefVO, zt as ViewFilterVO } from "./client-CaeGnNfw.js";
+import { $ as AssetTextStatus, A as NodeVO, At as GalleryCardSize, B as UpdatePreviewFileCredentialDTO, Bt as ViewSortVO, C as CommentVO, Ct as ListFormsDTO, D as MentionInboxItemVO, Dt as AssetAttachmentRef, E as LookupRollup, Et as UpdateFormDTO, F as SearchResponseVO, Ft as VIEW_FIELD_MAX_WIDTH, G as VaultItemKind, Gt as cloudContract, H as VaultAccessPolicy, Ht as ViewVO, I as SearchResultKind, It as VIEW_FIELD_MIN_WIDTH, J as VaultScopeType, Jt as CREATABLE_NODE_TYPES, K as VaultItemVO, Kt as NodeIcon, L as SearchResultVO, Lt as ViewConfigVO, M as OperationVO, Mt as GanttScale, N as ReviewVO, Nt as RecordLinkVO, O as MentionInboxPageVO, Ot as BaseFieldVO, P as ReviewVerdict, Pt as RecordVO, Q as AssetDetailVO, R as SourceAttributionVO, Rt as ViewFilterOperator, S as CommentSubjectType, St as FormVO, T as FieldType, Tt as SubmitFormDTO, U as VaultEnvironment, Ut as AttachmentRef, V as UpdateVaultSettingsDTO, Vt as ViewType, W as VaultItemInput, Wt as CloudContract, X as FileNodeMetadata, Xt as NodeType, Y as VaultSettingsVO, Yt as CreatableNodeType, Z as FileNodeVO, Zt as OperationKind, _ as ChangeRequestVO, _t as FormFieldBindingVO, a as createBusabaseClient, at as FilePreviewConfigurationStatus, b as CommentMentionTargetType, bt as FormSubmitResultVO, c as AuditAction, ct as FilePreviewUnavailableReason, d as ChangeRequestBatchFailureVO, dt as FileTreeNodeVO, et as AssetUsageVO, f as ChangeRequestCountsVO, ft as FileTreeReadFileVO, g as ChangeRequestTargetType, gt as FormBoundFieldVO, h as ChangeRequestStatus, ht as CreateFormDTO, i as ResolvedConfig, it as FilePreviewConfigVO, j as OperationStatus, jt as GalleryCoverFit, k as NodeSearchResultVO, kt as BaseVO, l as AuditEventVO, lt as FilePreviewVO, m as ChangeRequestReviewBatchResultVO, mt as ActivityItemVO, n as BusabaseConfig, nt as GrepInputDTO, o as resolveConfig, ot as FilePreviewCredentialSource, p as ChangeRequestMergeBatchResultVO, pt as NodeDetailVO, q as VaultRuntimeEnv, qt as NodeIconSchema, r as DEFAULT_BASE_URL, rt as GrepResultVO, s as AgentTaskVO, st as FilePreviewProvider, t as BusabaseClient, tt as AssetVO, u as BusabaseSourceChannel, ut as FileTreeFileVO, v as CommentMentionDispatchStatus, vt as FormPageSourceVO, w as CommitVO, wt as ListFormsVO, x as CommentMentionVO, xt as FormThemeVO, y as CommentMentionInputDTO, yt as FormShareVO, z as UserRefVO, zt as ViewFilterVO } from "./client-RSU_7-Nn.js";
 import { z } from "zod";
 //#region src/url.d.ts
 /**
@@ -323,6 +323,7 @@ declare class Busabase {
       eyebrow: string;
       href: string;
       updatedAt: string | null;
+      createdBy: string | null;
     }[];
     contentTruncated: boolean;
   }, Error>;

package/dist/index.js

@@ -164,6 +164,15 @@ const AgentSessionVOSchema = z.object({
 	*/
 	modelOption: AgentSessionModelOptionVOSchema.nullable().default(null)
 });
+const ListAgentSessionsPagedInputSchema = z.object({
+	slug: z.string().min(1),
+	limit: z.number().int().min(1).max(50).default(20),
+	cursor: z.string().min(1).optional()
+});
+const AgentSessionsPageVOSchema = z.object({
+	items: AgentSessionVOSchema.array(),
+	nextCursor: z.string().nullable()
+});
 /** One connected agent backend visible in the requested workspace scope. */
 const AgentConnectionVOSchema = z.object({
 	slug: z.string(),
@@ -171,6 +180,8 @@ const AgentConnectionVOSchema = z.object({
 	transport: AgentTransportSchema,
 	sessionCount: z.number().int().nonnegative(),
 	latest: AgentSessionVOSchema.nullable(),
+	/** Whether Busabase can start another conversation with this agent right now. */
+	connected: z.boolean(),
 	/** Controls owner-only actions such as deleting the saved OAuth grant. */
 	ownedByCurrentUser: z.boolean()
 });
@@ -216,6 +227,9 @@ slug: z.string().min(1) });
 const DisconnectAgentInputSchema = z.object({ 
 /** The exact connected-agent slug shown by the sessions/catalog surfaces. */
 slug: z.string().min(1) });
+const DeleteAgentHistoryInputSchema = z.object({ 
+/** Deletes only the current actor's sessions for this agent in the active space. */
+slug: z.string().min(1) });
 /**
 * A base64 payload the browser attached.
 *
@@ -268,6 +282,10 @@ const agentsContract = {
 	/** Connectable backends. Availability is resolved per request, not cached in the client. */
 	catalog: oc.output(AgentCatalogEntryVOSchema.array()),
 	disconnect: oc.input(DisconnectAgentInputSchema).output(z.object({
+		ok: z.boolean(),
+		endedSessionCount: z.number().int().nonnegative()
+	})),
+	deleteHistory: oc.input(DeleteAgentHistoryInputSchema).output(z.object({
 		ok: z.boolean(),
 		deletedSessionCount: z.number().int().nonnegative()
 	})),
@@ -276,11 +294,15 @@ const agentsContract = {
 list: oc.input(ListAgentConnectionsInputSchema).output(AgentConnectionVOSchema.array()) },
 	sessions: {
 		list: oc.output(AgentSessionVOSchema.array()),
+		listPaged: oc.input(ListAgentSessionsPagedInputSchema).output(AgentSessionsPageVOSchema),
 		create: oc.input(CreateAgentSessionInputSchema).output(AgentSessionVOSchema),
 		/**
-		* Send a message. A terminal session returns `accepted: false` instead of
-		* relying on error text; `promptRecorded` tells the caller whether automatic
-		* continuation can resend without duplicating a server echo.
+		* Accept a message for asynchronous execution. `accepted: true` means the
+		* prompt is durable and the turn slot is owned; progress and completion
+		* arrive through `subscribe`, so this RPC never spans the whole agent run.
+		* A terminal session returns `accepted: false` instead of relying on error
+		* text; `promptRecorded` tells the caller whether automatic continuation
+		* can resend without duplicating a server echo.
 		*/
 		prompt: oc.input(PromptAgentSessionInputSchema).output(z.discriminatedUnion("accepted", [z.object({
 			accepted: z.literal(true),
@@ -447,6 +469,7 @@ const fieldTypeSchema = z.enum([
 	"html",
 	"attachment",
 	"relation",
+	"member",
 	"number",
 	"date",
 	"checkbox",
@@ -553,8 +576,7 @@ const baseSchema = z.object({
 		requiredApprovals: z.number()
 	}),
 	createdAt: z.string(),
-	fields: z.array(baseFieldSchema),
-	metadata: z.record(z.string(), z.unknown()).default({})
+	fields: z.array(baseFieldSchema)
 });
 const createBaseInputSchema = z.object({
 	parentNodeId: z.string().optional().describe("Parent node id. Must be a folder or the space root; container-incapable node types (Base, Doc, AirApp, etc.) cannot hold children."),
@@ -968,22 +990,34 @@ const formNodeType = {
 	label: "Form",
 	icon: "form",
 	/**
-	* `hidden` until a Form can be created from a create surface at all.
+	* No longer `hidden`. The two conditions that hid it are both met:
+	*
+	* 1. The New-item flow ASKS FOR THE TARGET BASE — `create-node-modal.tsx`
+	*    renders a "Writes into" Base picker (plus the field checklist) whenever
+	*    `form` is the selected type, and keeps its submit disabled until one is
+	*    chosen, the same way it already does for `file` and its asset.
+	* 2. A MATERIALIZER WRITES THE CONFIG ROW — `materializeFormNode`
+	*    (busabase-core `domains/form/logic/form-ops.ts`) inserts the
+	*    `busabase_forms` row inside the merge transaction, from the
+	*    `node_create` operation's `metadata.targetBaseId` / `metadata.formBindings`.
+	*    Both create paths run it, so a Form merged after review is configured
+	*    exactly like one created immediately.
+	*
+	* A Form that still arrives unconfigured (an API caller that sent only the
+	* generic node fields) is no longer a dead end either: the detail view's
+	* "not set up yet" state now carries a "Connect this form to a Base" action.
 	*
-	* `busabase_forms.target_base_id` is NOT NULL and `form` registers no
-	* `node_create` materializer, so a Form built through the generic New-item
-	* flow (which only collects name/slug/description) is a node row with no form
-	* config behind it — it opens to a dead end, every time, for everyone. The
-	* type stays fully `creatable` so `forms.create` (which does take a target
-	* Base) and the REST/MCP surface are untouched; it just no longer offers an
-	* entry point that cannot succeed. Drop this once the New-item flow asks for
-	* the target Base and a materializer writes the config row.
+	* `hidden` is read by THREE create surfaces — web's `create-node-modal.tsx`,
+	* `node-agent-prompts.ts`, and React Native's
+	* `apps/busabase-mobile/.../CreateNodeModal.tsx`. Mobile has no Base picker,
+	* so it names `form` in its own `UNSUPPORTED_TYPES` set (alongside `file`,
+	* which is excluded there for the same "can't collect the required input"
+	* reason) rather than re-creating the dead end on another platform.
 	*/
 	capabilities: {
 		hasDetail: true,
 		creatable: true,
-		publicAccess: "submit",
-		hidden: true
+		publicAccess: "submit"
 	},
 	operations: []
 };
@@ -1179,17 +1213,17 @@ const NodeIconSchema = z.discriminatedUnion("type", [z.object({
 //#endregion
 //#region ../../packages/busabase-contract/src/contract/node-agent-prompt-schemas.ts
 /**
-* Per-node custom scenario prompts (`node.metadata.agentPrompts`) — the single
+* Per-node custom scenario prompts (`node.agentPrompts`) — the single
 * schema shared by BOTH write and read paths, per the node-agent-prompts
 * design (v2) §7.3:
 *
 * - Write: `busabase-cli nodes set-agent-prompts` validates a file against this
-*   schema client-side, before calling `nodes.updateMetadata` — a malformed file
-*   never reaches the network.
+*   schema client-side, before calling `nodes.updateAgentPrompts` — a malformed
+*   file never reaches the network.
 * - Read: `buildNodeAgentPrompts` (`packages/busabase-core/.../node-agent-prompts.ts`)
-*   `.safeParse`s whatever is stored in `metadata.agentPrompts` and falls back to
-*   the node type's default scenarios on failure, so a bad write (or a manual
-*   jsonb edit) can never crash the Agent Prompts dialog.
+*   `.safeParse`s whatever is stored in the node's `agentPrompts` column and
+*   ignores invalid custom entries, so a bad write (or a manual jsonb edit) can
+*   never crash the Agent Prompts dialog or hide its built-in scenarios.
 *
 * One schema, one place to edit the limits — do not duplicate this validation on
 * either side.
@@ -1239,7 +1273,7 @@ const customPromptDefSchema = z.object({
 	body: customPromptBodySchema
 });
 /**
-* The full `metadata.agentPrompts` array. `.max` bounds the list; the
+* The full `agentPrompts` array. `.max` bounds the list; the
 * `superRefine` catches duplicate keys with an issue path pointing at the
 * offending entry, so a CLI/server validation error names which entry and
 * which key collided instead of a bare "keys must be unique".
@@ -1677,7 +1711,16 @@ const searchResultSchema = z.object({
 	body: z.string(),
 	eyebrow: z.string(),
 	href: z.string(),
-	updatedAt: z.string().nullable()
+	updatedAt: z.string().nullable(),
+	/**
+	* The actor that created this, or null when the source cannot say.
+	*
+	* Present so a result can SHOW its author and so the author filter can be
+	* driven by clicking one — you can only filter by a creator you can actually
+	* see, which beats a free-text box you have to guess the spelling of. Null is
+	* rendered as "unknown", never as a person.
+	*/
+	createdBy: z.string().nullable().default(null)
 });
 const searchResponseSchema = z.object({
 	query: z.string(),
@@ -1696,6 +1739,43 @@ const searchResponseSchema = z.object({
 	*/
 	contentTruncated: z.boolean().default(false)
 });
+/**
+* Payload-free interaction events for search quality measurement.
+*
+* Every object is strict on purpose: accepting and stripping an accidental
+* `query` property would make the transport look privacy-safe while callers
+* were still sending search text over the wire.
+*/
+const searchInteractionInputSchema = z.discriminatedUnion("event", [
+	z.object({
+		event: z.literal("result_click"),
+		sessionId: z.string().uuid(),
+		surface: z.enum(["quick", "advanced"]),
+		position: z.number().int().min(1).max(100),
+		resultKind: z.enum([
+			"record",
+			"change_request",
+			"base",
+			"file",
+			"node"
+		])
+	}).strict(),
+	z.object({
+		event: z.literal("quick_to_advanced"),
+		sessionId: z.string().uuid(),
+		surface: z.literal("quick"),
+		resultCount: z.number().int().min(0).max(100)
+	}).strict(),
+	z.object({
+		event: z.literal("results_shown"),
+		sessionId: z.string().uuid(),
+		surface: z.enum(["quick", "advanced"]),
+		resultCount: z.number().int().min(0).max(100),
+		durationMs: z.number().int().min(0).max(12e4),
+		hasMore: z.boolean()
+	}).strict()
+]);
+const searchInteractionResponseSchema = z.object({ accepted: z.literal(true) });
 const liveEventSchema = z.object({
 	kind: z.enum([
 		"change_request.created",
@@ -1926,6 +2006,8 @@ const SearchSortSchema = z.enum([
 ]);
 const searchInputSchema = z.object({
 	query: z.string().default("").describe("Full-text query. An empty string matches nothing."),
+	mode: z.enum(["quick", "full"]).optional().default("full").describe("Search depth. `quick` skips live file-body scans for typeahead; `full` preserves complete search behavior."),
+	surface: z.enum(["quick", "advanced"]).optional().describe("Optional first-party UI surface for aggregate quality metrics. API/CLI callers should omit it."),
 	limit: z.coerce.number().int().min(1).max(100).optional().default(20).describe("Results per page. Capped at 100; note the default is 20, not 50."),
 	offset: z.coerce.number().int().min(0).optional().default(0).describe("0-indexed skip count. This endpoint pages by offset, not by cursor."),
 	/**
@@ -1950,6 +2032,23 @@ const searchInputSchema = z.object({
 	updatedAfter: z.string().datetime({ offset: true }).optional().describe("Inclusive lower bound, ISO 8601. A UTC `Z` or an explicit offset; not a bare local time."),
 	updatedBefore: z.string().datetime({ offset: true }).optional().describe("Inclusive upper bound, ISO 8601. A UTC `Z` or an explicit offset; not a bare local time."),
 	/**
+	* Restrict to what one actor created.
+	*
+	* Every source answers from a real column, which is what made this filter
+	* shippable: records and assets carry their own `created_by`, node CONTENT
+	* reads `busabase_nodes.created_by` (added with this change, backfilled from
+	* each node's `node_create` commit), and Bases resolve through the owning
+	* node the Base query already joins for its dates and sort.
+	*
+	* A free-form actor id, not a user id — agents and API keys create things
+	* too, and filtering by "user" would silently drop everything an agent made.
+	*
+	* Nodes whose creating commit is gone have a NULL `created_by` and match no
+	* author. That is deliberate: "this row cannot tell" must not render as
+	* "nobody made it".
+	*/
+	createdBy: z.string().optional().describe("Restrict to one creator. Matches the actor id, which may be an agent or API key."),
+	/**
 	* Restrict to a subtree: this node and everything beneath it.
 	*
 	* Resolved by walking the tree in application code (`collectSubtreeIds`),
@@ -2005,7 +2104,21 @@ const authInfoSchema = z.object({
 	/** Cloud only: the server created this user's first Space during this exact request. */
 	createdSpace: z.boolean().optional(),
 	/** Cloud only: this auto-created Space still needs its idempotent starter initialization. */
-	bootstrapRequired: z.boolean().optional()
+	bootstrapRequired: z.boolean().optional(),
+	/** Cloud only: effective permission ceiling of the credential used for this request. */
+	credentialPermissionLevel: z.enum([
+		"read",
+		"changeRequest",
+		"write",
+		"manage"
+	]).optional(),
+	/** Cloud only: credential ceiling capped by the selected Space membership role. */
+	effectivePermissionLevel: z.enum([
+		"read",
+		"changeRequest",
+		"write",
+		"manage"
+	]).optional()
 });
 //#endregion
 //#region ../../packages/busabase-contract/src/domains/filetree/contract.ts
@@ -2806,6 +2919,7 @@ const recordSchema = z.object({
 	status: z.enum(["active", "archived"]),
 	createdBy: z.string(),
 	createdByUser: userRefSchema.nullable().optional().default(null),
+	fieldUsers: z.record(z.string(), userRefSchema).optional().default({}),
 	archivedAt: z.string().nullable(),
 	createdAt: z.string(),
 	updatedAt: z.string(),
@@ -5175,6 +5289,7 @@ const busabaseContractRoutes = {
 		summary: "Search Busabase",
 		successDescription: "Paginated search results across records, change requests, Bases, File nodes, and Assets."
 	}).input(searchInputSchema).output(searchResponseSchema),
+	searchMetrics: { report: oc.input(searchInteractionInputSchema).output(searchInteractionResponseSchema) },
 	grep: oc.route({
 		method: "POST",
 		path: "/grep",
@@ -5274,14 +5389,14 @@ const busabaseContractRoutes = {
 			path: "/nodes/{nodeId}/agent-prompts",
 			tags: ["Nodes"],
 			summary: "Get node custom agent prompts",
-			successDescription: "This node's custom scenario prompts, which replace the node type's default prompts in the Ask-agent dialog. `null` means the node has never had any set, which is not the same as an empty list. Read separately from the node itself because the list is large enough (50 prompts x 8 KiB per locale) that carrying it on every node listing would be its own problem. Requires read access on the node."
+			successDescription: "This node's custom scenario prompts, which appear alongside the node type's built-in prompts in the Ask-agent dialog. `null` means the node has never had any set, which is not the same as an empty list. Read separately from the node itself because the list is large enough (50 prompts x 8 KiB per locale) that carrying it on every node listing would be its own problem. Requires read access on the node."
 		}).input(getNodeAgentPromptsInputSchema).output(nodeAgentPromptsSchema),
 		updateAgentPrompts: oc.route({
 			method: "PUT",
 			path: "/nodes/{nodeId}/agent-prompts",
 			tags: ["Nodes"],
 			summary: "Replace node custom agent prompts",
-			successDescription: "Replaced this node's custom scenario prompts — the whole list, not a merge. Send `null` to clear them and return the node to its type's default prompts. Requires write access on the node."
+			successDescription: "Replaced this node's custom scenario prompts — the whole custom list, not a merge. Send `null` to clear custom prompts; built-in prompts are always retained. Requires write access on the node."
 		}).input(updateNodeAgentPromptsInputSchema).output(nodeAgentPromptsSchema),
 		updateContent: oc.route({
 			method: "PUT",
@@ -5505,6 +5620,18 @@ const busabaseContractRoutes = {
 		summary: "List agent revision tasks",
 		successDescription: "Change requests awaiting an external agent (request-changes or @ai mentions)."
 	}).output(z.array(agentTaskSchema)) },
+	spaces: { 
+	/**
+	* The member roster of the space this request is scoped to — the people a
+	* `member` field's picker may offer.
+	*
+	* RPC-only by design (no `.route(...)`). A procedure WITH a path is
+	* published into `/api/v1` and into every agent's MCP tool catalog; a
+	* workspace member directory belongs in neither. Resolution is delegated to
+	* the host (`BusabaseContext.listMembers`), because membership lives in the
+	* host, not in this engine.
+	*/
+members: oc.output(z.array(userRefSchema)) },
 	live: { subscribe: oc.output(eventIterator(liveEventSchema)) },
 	bases: baseContract,
 	fileTrees: fileTreeContract,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "busabase-sdk",
-  "version": "0.54.0",
+  "version": "0.70.0",
   "description": "Typed TypeScript/JavaScript SDK for the Busabase OpenAPI REST API. Talks to a local or remote `busabase server` (or Busabase Cloud).",
   "license": "MIT",
   "homepage": "https://github.com/busabase/busabase/tree/main/apps/busabase-sdk",
@@ -67,9 +67,9 @@
     "tsx": "^4.20.5",
     "typescript": "^7.0.2",
     "vitest": "^4.1.11",
-    "open-domains": "0.0.2",
+    "busabase-contract": "0.70.0",
     "openlib": "0.1.1",
-    "busabase-contract": "0.54.0"
+    "open-domains": "0.0.2"
   },
   "engines": {
     "node": ">=24.18.0"