busabase-sdk 0.60.0 → 0.71.0

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as AssetTextStatus, A as NodeVO, At as GalleryCardSize, B as UpdatePreviewFileCredentialDTO, Bt as ViewSortVO, C as CommentVO, Ct as ListFormsDTO, D as MentionInboxItemVO, Dt as AssetAttachmentRef, E as LookupRollup, Et as UpdateFormDTO, F as SearchResponseVO, Ft as VIEW_FIELD_MAX_WIDTH, G as VaultItemKind, Gt as cloudContract, H as VaultAccessPolicy, Ht as ViewVO, I as SearchResultKind, It as VIEW_FIELD_MIN_WIDTH, J as VaultScopeType, Jt as CREATABLE_NODE_TYPES, K as VaultItemVO, Kt as NodeIcon, L as SearchResultVO, Lt as ViewConfigVO, M as OperationVO, Mt as GanttScale, N as ReviewVO, Nt as RecordLinkVO, O as MentionInboxPageVO, Ot as BaseFieldVO, P as ReviewVerdict, Pt as RecordVO, Q as AssetDetailVO, R as SourceAttributionVO, Rt as ViewFilterOperator, S as CommentSubjectType, St as FormVO, T as FieldType, Tt as SubmitFormDTO, U as VaultEnvironment, Ut as AttachmentRef, V as UpdateVaultSettingsDTO, Vt as ViewType, W as VaultItemInput, Wt as CloudContract, X as FileNodeMetadata, Xt as NodeType, Y as VaultSettingsVO, Yt as CreatableNodeType, Z as FileNodeVO, Zt as OperationKind, _ as ChangeRequestVO, _t as FormFieldBindingVO, a as createBusabaseClient, at as FilePreviewConfigurationStatus, b as CommentMentionTargetType, bt as FormSubmitResultVO, c as AuditAction, ct as FilePreviewUnavailableReason, d as ChangeRequestBatchFailureVO, dt as FileTreeNodeVO, et as AssetUsageVO, f as ChangeRequestCountsVO, ft as FileTreeReadFileVO, g as ChangeRequestTargetType, gt as FormBoundFieldVO, h as ChangeRequestStatus, ht as CreateFormDTO, i as ResolvedConfig, it as FilePreviewConfigVO, j as OperationStatus, jt as GalleryCoverFit, k as NodeSearchResultVO, kt as BaseVO, l as AuditEventVO, lt as FilePreviewVO, m as ChangeRequestReviewBatchResultVO, mt as ActivityItemVO, n as BusabaseConfig, nt as GrepInputDTO, o as resolveConfig, ot as FilePreviewCredentialSource, p as ChangeRequestMergeBatchResultVO, pt as NodeDetailVO, q as VaultRuntimeEnv, qt as NodeIconSchema, r as DEFAULT_BASE_URL, rt as GrepResultVO, s as AgentTaskVO, st as FilePreviewProvider, t as BusabaseClient, tt as AssetVO, u as BusabaseSourceChannel, ut as FileTreeFileVO, v as CommentMentionDispatchStatus, vt as FormPageSourceVO, w as CommitVO, wt as ListFormsVO, x as CommentMentionVO, xt as FormThemeVO, y as CommentMentionInputDTO, yt as FormShareVO, z as UserRefVO, zt as ViewFilterVO } from "./client-SAiQFoug.js";
+import { $ as AssetTextStatus, A as NodeVO, At as GalleryCardSize, B as UpdatePreviewFileCredentialDTO, Bt as ViewSortVO, C as CommentVO, Ct as ListFormsDTO, D as MentionInboxItemVO, Dt as AssetAttachmentRef, E as LookupRollup, Et as UpdateFormDTO, F as SearchResponseVO, Ft as VIEW_FIELD_MAX_WIDTH, G as VaultItemKind, Gt as cloudContract, H as VaultAccessPolicy, Ht as ViewVO, I as SearchResultKind, It as VIEW_FIELD_MIN_WIDTH, J as VaultScopeType, Jt as CREATABLE_NODE_TYPES, K as VaultItemVO, Kt as NodeIcon, L as SearchResultVO, Lt as ViewConfigVO, M as OperationVO, Mt as GanttScale, N as ReviewVO, Nt as RecordLinkVO, O as MentionInboxPageVO, Ot as BaseFieldVO, P as ReviewVerdict, Pt as RecordVO, Q as AssetDetailVO, R as SourceAttributionVO, Rt as ViewFilterOperator, S as CommentSubjectType, St as FormVO, T as FieldType, Tt as SubmitFormDTO, U as VaultEnvironment, Ut as AttachmentRef, V as UpdateVaultSettingsDTO, Vt as ViewType, W as VaultItemInput, Wt as CloudContract, X as FileNodeMetadata, Xt as NodeType, Y as VaultSettingsVO, Yt as CreatableNodeType, Z as FileNodeVO, Zt as OperationKind, _ as ChangeRequestVO, _t as FormFieldBindingVO, a as createBusabaseClient, at as FilePreviewConfigurationStatus, b as CommentMentionTargetType, bt as FormSubmitResultVO, c as AuditAction, ct as FilePreviewUnavailableReason, d as ChangeRequestBatchFailureVO, dt as FileTreeNodeVO, et as AssetUsageVO, f as ChangeRequestCountsVO, ft as FileTreeReadFileVO, g as ChangeRequestTargetType, gt as FormBoundFieldVO, h as ChangeRequestStatus, ht as CreateFormDTO, i as ResolvedConfig, it as FilePreviewConfigVO, j as OperationStatus, jt as GalleryCoverFit, k as NodeSearchResultVO, kt as BaseVO, l as AuditEventVO, lt as FilePreviewVO, m as ChangeRequestReviewBatchResultVO, mt as ActivityItemVO, n as BusabaseConfig, nt as GrepInputDTO, o as resolveConfig, ot as FilePreviewCredentialSource, p as ChangeRequestMergeBatchResultVO, pt as NodeDetailVO, q as VaultRuntimeEnv, qt as NodeIconSchema, r as DEFAULT_BASE_URL, rt as GrepResultVO, s as AgentTaskVO, st as FilePreviewProvider, t as BusabaseClient, tt as AssetVO, u as BusabaseSourceChannel, ut as FileTreeFileVO, v as CommentMentionDispatchStatus, vt as FormPageSourceVO, w as CommitVO, wt as ListFormsVO, x as CommentMentionVO, xt as FormThemeVO, y as CommentMentionInputDTO, yt as FormShareVO, z as UserRefVO, zt as ViewFilterVO } from "./client-DUJ67kpK.js";
 import { z } from "zod";
 //#region src/url.d.ts
 /**
@@ -114,6 +114,53 @@ declare const toFilesOnlyGrepResult: (result: UnifiedGrepResultVO) => GrepResult
 /** Call unified grep as files-only while preserving the former asset helper result shape. */
 declare const grepAssets: (client: Pick<BusabaseClient, "grep">, input: GrepInputDTO) => Promise<GrepResultVO>;
 //#endregion
+//#region src/asset-upload.d.ts
+/** An uploaded file, as the rest of the SDK needs to refer to it. */
+interface BusabaseUploadedAsset {
+  /** What a file-tree operation references. Absent on hosts with no Asset library. */
+  assetId?: string;
+  /** What a record's attachment cell references. */
+  attachmentId: string;
+  /** Publicly resolvable URL — safe to embed in Markdown. */
+  url: string;
+  fileName: string;
+  mimeType: string;
+  size: number;
+  /** `sha256:<hex>`, when this runtime could compute one. */
+  contentHash?: string;
+}
+interface UploadAssetOptions {
+  fileName: string;
+  mimeType: string;
+  /** Optional grouping hint the server records alongside the asset. */
+  context?: string;
+  spaceId?: string;
+}
+/** The slice of the client an upload needs — keeps this testable with a stub. */
+type AssetUploadClient = Pick<BusabaseClient, "assets">;
+/**
+ * SHA-256 of the bytes, or `undefined` where WebCrypto is unavailable.
+ *
+ * Undefined is a real answer, not a failure: the hash only buys deduplication,
+ * so a runtime without WebCrypto uploads the bytes it would otherwise have
+ * skipped. Failing the upload over a missing optimization would be worse.
+ */
+declare function hashBytes(bytes: Uint8Array): Promise<string | undefined>;
+/**
+ * Upload bytes and get back every id the rest of the SDK might need.
+ *
+ * @example
+ * ```ts
+ * const asset = await uploadAsset(client, png, {
+ *   fileName: "user-journey.png",
+ *   mimeType: "image/png",
+ * });
+ * // asset.assetId  -> reference it from a Skill/Drive/AirApp file operation
+ * // asset.url      -> embed it in Markdown
+ * ```
+ */
+declare function uploadAsset(client: AssetUploadClient, bytes: Uint8Array, options: UploadAssetOptions, fetchImpl?: typeof fetch): Promise<BusabaseUploadedAsset>;
+//#endregion
 //#region src/record-get.d.ts
 interface RecordByFieldInput {
   baseId: string;
@@ -403,6 +450,25 @@ declare class Busabase {
    * ```
    */
   putText(assetId: string, text: string): Promise<Awaited<ReturnType<BusabaseClient["assets"]["putText"]>>>;
+  /**
+   * Put a file into this Space's Asset library in one call, and get back every
+   * id the rest of the SDK asks for: `assetId` for a file-tree entry,
+   * `attachmentId` for a record's attachment cell, `url` to embed in Markdown.
+   *
+   * Hides the three-step flow (`assets.createUploadUrl` → PUT →
+   * `assets.confirm`) and its dedup short-circuit, the same way `putText`
+   * does for text slots.
+   *
+   * @example
+   * ```ts
+   * const shot = await bb.uploadAsset(png, {
+   *   fileName: "user-journey.png",
+   *   mimeType: "image/png",
+   * });
+   * body += `![user journey](${shot.url})`;
+   * ```
+   */
+  uploadAsset(bytes: Uint8Array, options: UploadAssetOptions): Promise<BusabaseUploadedAsset>;
   /** Service health — reaches the server without requiring auth. */
   health(): import("@orpc/client").ClientPromiseResult<{
     status: string;
@@ -427,4 +493,4 @@ declare class Busabase {
   }>>>>;
 }
 //#endregion
-export { type ActivityItemVO, type AgentTaskVO, type FileTreeFileVO as AirAppFileVO, type FileTreeFileVO as DriveFileVO, type FileTreeFileVO, type FileTreeFileVO as SkillFileVO, type FileTreeReadFileVO as AirAppReadFileVO, type FileTreeReadFileVO as DriveReadFileVO, type FileTreeReadFileVO, type FileTreeReadFileVO as SkillReadFileVO, type FileTreeNodeVO as AirAppVO, type FileTreeNodeVO as DriveVO, type FileTreeNodeVO, type FileTreeNodeVO as SkillVO, type AssetAttachmentRef, type AssetDetailVO, type AssetTextStatus, type AssetUsageVO, type AssetVO, type AttachmentRef, type AuditAction, type AuditEventVO, type BaseFieldVO, type BaseVO, Busabase, type BusabaseAssetsClient, BusabaseChangeRequestsClient, type BusabaseClient, type BusabaseConfig, type BusabaseRecordsClient, type BusabaseSourceChannel, CREATABLE_NODE_TYPES, type ChangeRequestBatchFailureVO, type ChangeRequestCountsVO, type ChangeRequestMergeBatchResultVO, type ChangeRequestReviewBatchResultVO, type ChangeRequestStatus, type ChangeRequestTargetType, type ChangeRequestVO, type CloudContract, type CommentMentionDispatchStatus, type CommentMentionInputDTO, type CommentMentionTargetType, type CommentMentionVO, type CommentSubjectType, type CommentVO, type CommitVO, type CreatableNodeType, type CreateFormDTO, DEFAULT_BASE_URL, type FieldType, type FileNodeMetadata, type FileNodeVO, type FilePreviewConfigVO, type FilePreviewConfigurationStatus, type FilePreviewCredentialSource, type FilePreviewProvider, type FilePreviewUnavailableReason, type FilePreviewVO, type FormBoundFieldVO, type FormFieldBindingVO, type FormPageSourceVO, type FormShareVO, type FormSubmitResultVO, type FormThemeVO, type FormVO, type GalleryCardSize, type GalleryCoverFit, type GanttScale, type ListFormsDTO, type ListFormsVO, type LookupRollup, type MentionInboxItemVO, type MentionInboxPageVO, type NodeDetailVO, type NodeIcon, type NodeIconSchema, type NodeSearchResultVO, type NodeType, type NodeVO, type NodeWebUrlInput, type OperationKind, type OperationStatus, type OperationVO, type RecordByFieldInput, type RecordLinkVO, type RecordVO, type ResolvedConfig, type ReviewVO, type ReviewVerdict, type SearchResponseVO, type SearchResultKind, type SearchResultVO, type SourceAttributionVO, type SubmitFormDTO, type UpdateFormDTO, type UpdatePreviewFileCredentialDTO, type UpdateVaultSettingsDTO, type UserRefVO, type VIEW_FIELD_MAX_WIDTH, type VIEW_FIELD_MIN_WIDTH, type VaultAccessPolicy, type VaultEnvironment, type VaultItemInput, type VaultItemKind, type VaultItemVO, type VaultRuntimeEnv, type VaultScopeType, type VaultSettingsVO, type ViewConfigVO, type ViewFilterOperator, type ViewFilterVO, type ViewSortVO, type ViewType, type ViewVO, cloudContract, createBusabaseClient, getRecordByField, grepAssets, nodeWebUrl, normalizeBaseUrl, resolveConfig, toFilesOnlyGrepResult, toUnifiedFilesGrepInput };
+export { type ActivityItemVO, type AgentTaskVO, type FileTreeFileVO as AirAppFileVO, type FileTreeFileVO as DriveFileVO, type FileTreeFileVO, type FileTreeFileVO as SkillFileVO, type FileTreeReadFileVO as AirAppReadFileVO, type FileTreeReadFileVO as DriveReadFileVO, type FileTreeReadFileVO, type FileTreeReadFileVO as SkillReadFileVO, type FileTreeNodeVO as AirAppVO, type FileTreeNodeVO as DriveVO, type FileTreeNodeVO, type FileTreeNodeVO as SkillVO, type AssetAttachmentRef, type AssetDetailVO, type AssetTextStatus, type AssetUsageVO, type AssetVO, type AttachmentRef, type AuditAction, type AuditEventVO, type BaseFieldVO, type BaseVO, Busabase, type BusabaseAssetsClient, BusabaseChangeRequestsClient, type BusabaseClient, type BusabaseConfig, type BusabaseRecordsClient, type BusabaseSourceChannel, type BusabaseUploadedAsset, CREATABLE_NODE_TYPES, type ChangeRequestBatchFailureVO, type ChangeRequestCountsVO, type ChangeRequestMergeBatchResultVO, type ChangeRequestReviewBatchResultVO, type ChangeRequestStatus, type ChangeRequestTargetType, type ChangeRequestVO, type CloudContract, type CommentMentionDispatchStatus, type CommentMentionInputDTO, type CommentMentionTargetType, type CommentMentionVO, type CommentSubjectType, type CommentVO, type CommitVO, type CreatableNodeType, type CreateFormDTO, DEFAULT_BASE_URL, type FieldType, type FileNodeMetadata, type FileNodeVO, type FilePreviewConfigVO, type FilePreviewConfigurationStatus, type FilePreviewCredentialSource, type FilePreviewProvider, type FilePreviewUnavailableReason, type FilePreviewVO, type FormBoundFieldVO, type FormFieldBindingVO, type FormPageSourceVO, type FormShareVO, type FormSubmitResultVO, type FormThemeVO, type FormVO, type GalleryCardSize, type GalleryCoverFit, type GanttScale, type ListFormsDTO, type ListFormsVO, type LookupRollup, type MentionInboxItemVO, type MentionInboxPageVO, type NodeDetailVO, type NodeIcon, type NodeIconSchema, type NodeSearchResultVO, type NodeType, type NodeVO, type NodeWebUrlInput, type OperationKind, type OperationStatus, type OperationVO, type RecordByFieldInput, type RecordLinkVO, type RecordVO, type ResolvedConfig, type ReviewVO, type ReviewVerdict, type SearchResponseVO, type SearchResultKind, type SearchResultVO, type SourceAttributionVO, type SubmitFormDTO, type UpdateFormDTO, type UpdatePreviewFileCredentialDTO, type UpdateVaultSettingsDTO, type UploadAssetOptions, type UserRefVO, type VIEW_FIELD_MAX_WIDTH, type VIEW_FIELD_MIN_WIDTH, type VaultAccessPolicy, type VaultEnvironment, type VaultItemInput, type VaultItemKind, type VaultItemVO, type VaultRuntimeEnv, type VaultScopeType, type VaultSettingsVO, type ViewConfigVO, type ViewFilterOperator, type ViewFilterVO, type ViewSortVO, type ViewType, type ViewVO, cloudContract, createBusabaseClient, getRecordByField, grepAssets, hashBytes, nodeWebUrl, normalizeBaseUrl, resolveConfig, toFilesOnlyGrepResult, toUnifiedFilesGrepInput, uploadAsset };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { n as TemplateRiskLevelSchema } from "./template-D10kjpd-.js";
+import { i as uploadAsset, n as TemplateRiskLevelSchema, r as hashBytes } from "./template-DRMp6tKv.js";
 import { t as normalizeBaseUrl } from "./url-B8GMXalA.js";
 import { ORPCError, createORPCClient } from "@orpc/client";
 import { OpenAPILink } from "@orpc/openapi-client/fetch";
@@ -164,6 +164,15 @@ const AgentSessionVOSchema = z.object({
 	*/
 	modelOption: AgentSessionModelOptionVOSchema.nullable().default(null)
 });
+const ListAgentSessionsPagedInputSchema = z.object({
+	slug: z.string().min(1),
+	limit: z.number().int().min(1).max(50).default(20),
+	cursor: z.string().min(1).optional()
+});
+const AgentSessionsPageVOSchema = z.object({
+	items: AgentSessionVOSchema.array(),
+	nextCursor: z.string().nullable()
+});
 /** One connected agent backend visible in the requested workspace scope. */
 const AgentConnectionVOSchema = z.object({
 	slug: z.string(),
@@ -171,6 +180,8 @@ const AgentConnectionVOSchema = z.object({
 	transport: AgentTransportSchema,
 	sessionCount: z.number().int().nonnegative(),
 	latest: AgentSessionVOSchema.nullable(),
+	/** Whether Busabase can start another conversation with this agent right now. */
+	connected: z.boolean(),
 	/** Controls owner-only actions such as deleting the saved OAuth grant. */
 	ownedByCurrentUser: z.boolean()
 });
@@ -216,6 +227,9 @@ slug: z.string().min(1) });
 const DisconnectAgentInputSchema = z.object({ 
 /** The exact connected-agent slug shown by the sessions/catalog surfaces. */
 slug: z.string().min(1) });
+const DeleteAgentHistoryInputSchema = z.object({ 
+/** Deletes only the current actor's sessions for this agent in the active space. */
+slug: z.string().min(1) });
 /**
 * A base64 payload the browser attached.
 *
@@ -268,6 +282,10 @@ const agentsContract = {
 	/** Connectable backends. Availability is resolved per request, not cached in the client. */
 	catalog: oc.output(AgentCatalogEntryVOSchema.array()),
 	disconnect: oc.input(DisconnectAgentInputSchema).output(z.object({
+		ok: z.boolean(),
+		endedSessionCount: z.number().int().nonnegative()
+	})),
+	deleteHistory: oc.input(DeleteAgentHistoryInputSchema).output(z.object({
 		ok: z.boolean(),
 		deletedSessionCount: z.number().int().nonnegative()
 	})),
@@ -276,11 +294,15 @@ const agentsContract = {
 list: oc.input(ListAgentConnectionsInputSchema).output(AgentConnectionVOSchema.array()) },
 	sessions: {
 		list: oc.output(AgentSessionVOSchema.array()),
+		listPaged: oc.input(ListAgentSessionsPagedInputSchema).output(AgentSessionsPageVOSchema),
 		create: oc.input(CreateAgentSessionInputSchema).output(AgentSessionVOSchema),
 		/**
-		* Send a message. A terminal session returns `accepted: false` instead of
-		* relying on error text; `promptRecorded` tells the caller whether automatic
-		* continuation can resend without duplicating a server echo.
+		* Accept a message for asynchronous execution. `accepted: true` means the
+		* prompt is durable and the turn slot is owned; progress and completion
+		* arrive through `subscribe`, so this RPC never spans the whole agent run.
+		* A terminal session returns `accepted: false` instead of relying on error
+		* text; `promptRecorded` tells the caller whether automatic continuation
+		* can resend without duplicating a server echo.
 		*/
 		prompt: oc.input(PromptAgentSessionInputSchema).output(z.discriminatedUnion("accepted", [z.object({
 			accepted: z.literal(true),
@@ -447,6 +469,7 @@ const fieldTypeSchema = z.enum([
 	"html",
 	"attachment",
 	"relation",
+	"member",
 	"number",
 	"date",
 	"checkbox",
@@ -553,8 +576,7 @@ const baseSchema = z.object({
 		requiredApprovals: z.number()
 	}),
 	createdAt: z.string(),
-	fields: z.array(baseFieldSchema),
-	metadata: z.record(z.string(), z.unknown()).default({})
+	fields: z.array(baseFieldSchema)
 });
 const createBaseInputSchema = z.object({
 	parentNodeId: z.string().optional().describe("Parent node id. Must be a folder or the space root; container-incapable node types (Base, Doc, AirApp, etc.) cannot hold children."),
@@ -968,22 +990,34 @@ const formNodeType = {
 	label: "Form",
 	icon: "form",
 	/**
-	* `hidden` until a Form can be created from a create surface at all.
+	* No longer `hidden`. The two conditions that hid it are both met:
+	*
+	* 1. The New-item flow ASKS FOR THE TARGET BASE — `create-node-modal.tsx`
+	*    renders a "Writes into" Base picker (plus the field checklist) whenever
+	*    `form` is the selected type, and keeps its submit disabled until one is
+	*    chosen, the same way it already does for `file` and its asset.
+	* 2. A MATERIALIZER WRITES THE CONFIG ROW — `materializeFormNode`
+	*    (busabase-core `domains/form/logic/form-ops.ts`) inserts the
+	*    `busabase_forms` row inside the merge transaction, from the
+	*    `node_create` operation's `metadata.targetBaseId` / `metadata.formBindings`.
+	*    Both create paths run it, so a Form merged after review is configured
+	*    exactly like one created immediately.
 	*
-	* `busabase_forms.target_base_id` is NOT NULL and `form` registers no
-	* `node_create` materializer, so a Form built through the generic New-item
-	* flow (which only collects name/slug/description) is a node row with no form
-	* config behind it — it opens to a dead end, every time, for everyone. The
-	* type stays fully `creatable` so `forms.create` (which does take a target
-	* Base) and the REST/MCP surface are untouched; it just no longer offers an
-	* entry point that cannot succeed. Drop this once the New-item flow asks for
-	* the target Base and a materializer writes the config row.
+	* A Form that still arrives unconfigured (an API caller that sent only the
+	* generic node fields) is no longer a dead end either: the detail view's
+	* "not set up yet" state now carries a "Connect this form to a Base" action.
+	*
+	* `hidden` is read by THREE create surfaces — web's `create-node-modal.tsx`,
+	* `node-agent-prompts.ts`, and React Native's
+	* `apps/busabase-mobile/.../CreateNodeModal.tsx`. Mobile has no Base picker,
+	* so it names `form` in its own `UNSUPPORTED_TYPES` set (alongside `file`,
+	* which is excluded there for the same "can't collect the required input"
+	* reason) rather than re-creating the dead end on another platform.
 	*/
 	capabilities: {
 		hasDetail: true,
 		creatable: true,
-		publicAccess: "submit",
-		hidden: true
+		publicAccess: "submit"
 	},
 	operations: []
 };
@@ -1311,6 +1345,25 @@ const nodeShareSchema = z.object({
 	expiresAt: z.string().nullable(),
 	updatedAt: z.string()
 });
+const sharedNodeSchema = z.object({
+	nodeId: z.string(),
+	name: z.string(),
+	slug: z.string(),
+	type: z.enum(NODE_TYPES),
+	icon: NodeIconSchema.nullable().default(null),
+	capability: z.enum(["read", "submit"]),
+	hasPassword: z.boolean(),
+	expiresAt: z.string().nullable(),
+	/**
+	* When this share ROW was first created — NOT "public continuously since".
+	* `disableNodeShare` flips `scope` to `"none"` and keeps the row, so a node
+	* that was shared, revoked, and shared again still reports the original
+	* date. There is no column recording when `scope` last became `"public"`,
+	* so the UI says "first shared {time}" rather than claiming an exposure
+	* window the data cannot support. Adding that column is the follow-up.
+	*/
+	createdAt: z.string()
+});
 const listNodesInputSchema = z.object({
 	parentId: z.string().nullable().optional().describe("Node to start from. Omit or null to start from the space root."),
 	depth: z.coerce.number().int().min(1).max(5).optional().describe("How many levels beneath the start point to eagerly include (default 2 once either field is set). Capped at 5."),
@@ -1705,6 +1758,43 @@ const searchResponseSchema = z.object({
 	*/
 	contentTruncated: z.boolean().default(false)
 });
+/**
+* Payload-free interaction events for search quality measurement.
+*
+* Every object is strict on purpose: accepting and stripping an accidental
+* `query` property would make the transport look privacy-safe while callers
+* were still sending search text over the wire.
+*/
+const searchInteractionInputSchema = z.discriminatedUnion("event", [
+	z.object({
+		event: z.literal("result_click"),
+		sessionId: z.string().uuid(),
+		surface: z.enum(["quick", "advanced"]),
+		position: z.number().int().min(1).max(100),
+		resultKind: z.enum([
+			"record",
+			"change_request",
+			"base",
+			"file",
+			"node"
+		])
+	}).strict(),
+	z.object({
+		event: z.literal("quick_to_advanced"),
+		sessionId: z.string().uuid(),
+		surface: z.literal("quick"),
+		resultCount: z.number().int().min(0).max(100)
+	}).strict(),
+	z.object({
+		event: z.literal("results_shown"),
+		sessionId: z.string().uuid(),
+		surface: z.enum(["quick", "advanced"]),
+		resultCount: z.number().int().min(0).max(100),
+		durationMs: z.number().int().min(0).max(12e4),
+		hasMore: z.boolean()
+	}).strict()
+]);
+const searchInteractionResponseSchema = z.object({ accepted: z.literal(true) });
 const liveEventSchema = z.object({
 	kind: z.enum([
 		"change_request.created",
@@ -1935,6 +2025,8 @@ const SearchSortSchema = z.enum([
 ]);
 const searchInputSchema = z.object({
 	query: z.string().default("").describe("Full-text query. An empty string matches nothing."),
+	mode: z.enum(["quick", "full"]).optional().default("full").describe("Search depth. `quick` skips live file-body scans for typeahead; `full` preserves complete search behavior."),
+	surface: z.enum(["quick", "advanced"]).optional().describe("Optional first-party UI surface for aggregate quality metrics. API/CLI callers should omit it."),
 	limit: z.coerce.number().int().min(1).max(100).optional().default(20).describe("Results per page. Capped at 100; note the default is 20, not 50."),
 	offset: z.coerce.number().int().min(0).optional().default(0).describe("0-indexed skip count. This endpoint pages by offset, not by cursor."),
 	/**
@@ -2031,7 +2123,21 @@ const authInfoSchema = z.object({
 	/** Cloud only: the server created this user's first Space during this exact request. */
 	createdSpace: z.boolean().optional(),
 	/** Cloud only: this auto-created Space still needs its idempotent starter initialization. */
-	bootstrapRequired: z.boolean().optional()
+	bootstrapRequired: z.boolean().optional(),
+	/** Cloud only: effective permission ceiling of the credential used for this request. */
+	credentialPermissionLevel: z.enum([
+		"read",
+		"changeRequest",
+		"write",
+		"manage"
+	]).optional(),
+	/** Cloud only: credential ceiling capped by the selected Space membership role. */
+	effectivePermissionLevel: z.enum([
+		"read",
+		"changeRequest",
+		"write",
+		"manage"
+	]).optional()
 });
 //#endregion
 //#region ../../packages/busabase-contract/src/domains/filetree/contract.ts
@@ -2832,6 +2938,7 @@ const recordSchema = z.object({
 	status: z.enum(["active", "archived"]),
 	createdBy: z.string(),
 	createdByUser: userRefSchema.nullable().optional().default(null),
+	fieldUsers: z.record(z.string(), userRefSchema).optional().default({}),
 	archivedAt: z.string().nullable(),
 	createdAt: z.string(),
 	updatedAt: z.string(),
@@ -5201,6 +5308,7 @@ const busabaseContractRoutes = {
 		summary: "Search Busabase",
 		successDescription: "Paginated search results across records, change requests, Bases, File nodes, and Assets."
 	}).input(searchInputSchema).output(searchResponseSchema),
+	searchMetrics: { report: oc.input(searchInteractionInputSchema).output(searchInteractionResponseSchema) },
 	grep: oc.route({
 		method: "POST",
 		path: "/grep",
@@ -5403,6 +5511,13 @@ const busabaseContractRoutes = {
 			})).output(z.object({ removed: z.boolean() }))
 		},
 		share: {
+			list: oc.route({
+				method: "GET",
+				path: "/node-shares",
+				tags: ["Nodes", "Sharing"],
+				summary: "List every node in the space carrying its own live public share",
+				successDescription: "One row per node that someone explicitly published and that is still live — `scope: \"public\"` and unexpired — joined to just enough of the node (name, slug, type, icon) to render and open it. Rows the caller cannot see are omitted (same node-visibility ACL as `nodes.list`), and the stored share password is never returned, only a `hasPassword` flag. Deliberately does NOT include nodes that are merely reachable because an ANCESTOR is shared: this is the list of grants a person made, each revocable on its own with `nodes.share.disable`, which is the same set the workbench sidebar marks with a globe (`NodeVO.shared`)."
+			}).output(z.array(sharedNodeSchema)),
 			get: oc.route({
 				method: "GET",
 				path: "/nodes/{nodeId}/share",
@@ -5531,6 +5646,18 @@ const busabaseContractRoutes = {
 		summary: "List agent revision tasks",
 		successDescription: "Change requests awaiting an external agent (request-changes or @ai mentions)."
 	}).output(z.array(agentTaskSchema)) },
+	spaces: { 
+	/**
+	* The member roster of the space this request is scoped to — the people a
+	* `member` field's picker may offer.
+	*
+	* RPC-only by design (no `.route(...)`). A procedure WITH a path is
+	* published into `/api/v1` and into every agent's MCP tool catalog; a
+	* workspace member directory belongs in neither. Resolution is delegated to
+	* the host (`BusabaseContext.listMembers`), because membership lives in the
+	* host, not in this engine.
+	*/
+members: oc.output(z.array(userRefSchema)) },
 	live: { subscribe: oc.output(eventIterator(liveEventSchema)) },
 	bases: baseContract,
 	fileTrees: fileTreeContract,
@@ -6089,6 +6216,27 @@ var Busabase = class {
 			storageKey: upload.storageKey
 		});
 	}
+	/**
+	* Put a file into this Space's Asset library in one call, and get back every
+	* id the rest of the SDK asks for: `assetId` for a file-tree entry,
+	* `attachmentId` for a record's attachment cell, `url` to embed in Markdown.
+	*
+	* Hides the three-step flow (`assets.createUploadUrl` → PUT →
+	* `assets.confirm`) and its dedup short-circuit, the same way `putText`
+	* does for text slots.
+	*
+	* @example
+	* ```ts
+	* const shot = await bb.uploadAsset(png, {
+	*   fileName: "user-journey.png",
+	*   mimeType: "image/png",
+	* });
+	* body += `![user journey](${shot.url})`;
+	* ```
+	*/
+	uploadAsset(bytes, options) {
+		return uploadAsset(this.client, bytes, options, this.config.fetch ?? fetch);
+	}
 	/** Service health — reaches the server without requiring auth. */
 	health() {
 		return this.client.system.health();
@@ -6099,4 +6247,4 @@ var Busabase = class {
 	}
 };
 //#endregion
-export { Busabase, CREATABLE_NODE_TYPES, DEFAULT_BASE_URL, cloudContract, createBusabaseClient, getRecordByField, grepAssets, nodeWebUrl, normalizeBaseUrl, resolveConfig, toFilesOnlyGrepResult, toUnifiedFilesGrepInput };
+export { Busabase, CREATABLE_NODE_TYPES, DEFAULT_BASE_URL, cloudContract, createBusabaseClient, getRecordByField, grepAssets, hashBytes, nodeWebUrl, normalizeBaseUrl, resolveConfig, toFilesOnlyGrepResult, toUnifiedFilesGrepInput, uploadAsset };

package/dist/{template-D10kjpd-.js → template-DRMp6tKv.js}

@@ -1,4 +1,82 @@
 import { z } from "zod";
+//#region src/asset-upload.ts
+/**
+* SHA-256 of the bytes, or `undefined` where WebCrypto is unavailable.
+*
+* Undefined is a real answer, not a failure: the hash only buys deduplication,
+* so a runtime without WebCrypto uploads the bytes it would otherwise have
+* skipped. Failing the upload over a missing optimization would be worse.
+*/
+async function hashBytes(bytes) {
+	const subtle = globalThis.crypto?.subtle;
+	if (!subtle) return void 0;
+	const buffer = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+	const digest = await subtle.digest("SHA-256", buffer);
+	return `sha256:${Array.from(new Uint8Array(digest)).map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+/**
+* Upload bytes and get back every id the rest of the SDK might need.
+*
+* @example
+* ```ts
+* const asset = await uploadAsset(client, png, {
+*   fileName: "user-journey.png",
+*   mimeType: "image/png",
+* });
+* // asset.assetId  -> reference it from a Skill/Drive/AirApp file operation
+* // asset.url      -> embed it in Markdown
+* ```
+*/
+async function uploadAsset(client, bytes, options, fetchImpl = fetch) {
+	const { fileName, mimeType, context, spaceId } = options;
+	if (!bytes.byteLength) throw new Error(`uploadAsset: ${fileName} is empty — there are no bytes to upload`);
+	const contentHash = await hashBytes(bytes);
+	const upload = await client.assets.createUploadUrl({
+		fileName,
+		mimeType,
+		sizeBytes: bytes.byteLength,
+		...context ? { context } : {},
+		...spaceId ? { spaceId } : {},
+		...contentHash ? { contentHash } : {}
+	});
+	if (upload.duplicate && upload.attachmentId) return {
+		...upload.assetId ? { assetId: upload.assetId } : {},
+		attachmentId: upload.attachmentId,
+		url: upload.publicUrl,
+		fileName,
+		mimeType,
+		size: bytes.byteLength,
+		...contentHash ? { contentHash } : {}
+	};
+	const response = await fetchImpl(upload.uploadUrl, {
+		method: "PUT",
+		headers: { "content-type": mimeType },
+		body: bytes
+	});
+	if (!response.ok) {
+		const detail = await response.text().catch(() => "");
+		throw new Error(`uploadAsset: presigned upload of ${fileName} failed (${response.status} ${response.statusText})${detail ? `: ${detail}` : ""}`);
+	}
+	const confirmed = await client.assets.confirm({
+		storageKey: upload.storageKey,
+		fileName,
+		mimeType,
+		sizeBytes: bytes.byteLength,
+		...context ? { context } : {},
+		...spaceId ? { spaceId } : {},
+		...contentHash ? { contentHash } : {}
+	});
+	return {
+		...confirmed.assetId ? { assetId: confirmed.assetId } : {},
+		attachmentId: confirmed.attachmentId,
+		url: confirmed.publicUrl,
+		fileName,
+		mimeType,
+		size: bytes.byteLength,
+		...contentHash ? { contentHash } : {}
+	};
+}
+//#endregion
 //#region ../../packages/busabase-contract/src/domains/skill/frontmatter.ts
 /**
 * `SKILL.md` frontmatter — the generic shape, independent of Busabase.
@@ -157,4 +235,4 @@ z.object({
 	["isTemplateSkill"]: z.literal(true)
 });
 //#endregion
-export { TemplateRiskLevelSchema as n, APP_ROOT_RESOURCE_KEY as t };
+export { uploadAsset as i, TemplateRiskLevelSchema as n, hashBytes as r, APP_ROOT_RESOURCE_KEY as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "busabase-sdk",
-  "version": "0.60.0",
+  "version": "0.71.0",
   "description": "Typed TypeScript/JavaScript SDK for the Busabase OpenAPI REST API. Talks to a local or remote `busabase server` (or Busabase Cloud).",
   "license": "MIT",
   "homepage": "https://github.com/busabase/busabase/tree/main/apps/busabase-sdk",
@@ -67,9 +67,9 @@
     "tsx": "^4.20.5",
     "typescript": "^7.0.2",
     "vitest": "^4.1.11",
-    "open-domains": "0.0.2",
-    "busabase-contract": "0.60.0",
-    "openlib": "0.1.1"
+    "openlib": "0.1.1",
+    "busabase-contract": "0.71.0",
+    "open-domains": "0.0.2"
   },
   "engines": {
     "node": ">=24.18.0"