@proveanything/smartlinks 1.15.16 → 1.15.17

package/dist/api/navigation.js

@@ -122,7 +122,7 @@ export var navigation;
                         type: 'smartlinks-navigate',
                         appId: link.appId,
                         path: link.kind === 'deep' ? deepPath(link.deepLinkId) : '/',
-                        params: link.kind === 'deep' ? ((_b = link.params) !== null && _b !== void 0 ? _b : {}) : {},
+                        params: (link.kind === 'deep' || link.kind === 'app') ? ((_b = link.params) !== null && _b !== void 0 ? _b : {}) : {},
                         target: (_c = link.target) !== null && _c !== void 0 ? _c : '_self',
                     }, '*');
                     return;
@@ -134,7 +134,8 @@ export var navigation;
                 const hash = link.kind === 'deep'
                     ? `#${deepPath(link.deepLinkId)}${qs(link.params)}`
                     : `#/`;
-                const url = `${win.location.pathname}?appId=${encodeURIComponent(link.appId)}${hash}`;
+                const appParams = link.kind === 'app' && link.params ? qs(link.params).replace(/^\?/, '&') : '';
+                const url = `${win.location.pathname}?appId=${encodeURIComponent(link.appId)}${appParams}${hash}`;
                 if (link.target === '_blank') {
                     win.open(url, '_blank', windowFeatures());
                 }

package/dist/api/proof.d.ts

@@ -1,4 +1,4 @@
-import { ProofResponse, ProofCreateRequest, ProofUpdateRequest, ProofClaimRequest } from "../types/proof";
+import { ProofResponse, ProofCreateRequest, ProofUpdateRequest, ProofClaimRequest, ProofGrant, CreateGrantOptions, RedeemGrantOptions, RedeemGrantResult } from "../types/proof";
 export declare namespace proof {
     /**
      * Retrieves a single Proof by Collection ID, Product ID, and Proof ID.
@@ -104,4 +104,22 @@ export declare namespace proof {
     data: {
         targetProductId: string;
     }): Promise<ProofResponse>;
+    /**
+     * Create a share grant on a proof (owner / collection admin only). The returned
+     * grant includes `token` — the opaque bearer secret, available ONLY on this
+     * response. Embed it in a share link and hand recipients {@link redeemGrant} /
+     * {@link setGrantToken}.
+     */
+    function createGrant(collectionId: string, productId: string, proofId: string, options: CreateGrantOptions): Promise<ProofGrant>;
+    /** List the active + past grants on a proof (owner / collection admin only). Tokens are never returned here. */
+    function listGrants(collectionId: string, productId: string, proofId: string): Promise<ProofGrant[]>;
+    /** Revoke a grant by id (owner / collection admin only). Takes effect immediately. */
+    function revokeGrant(collectionId: string, productId: string, proofId: string, grantId: string): Promise<void>;
+    /**
+     * Redeem a grant token (anonymous or signed-in). Records the redemption and
+     * returns the granted scope, or — for a `verify_owner` grant — an ownership
+     * assertion (never the account). After redeeming, call
+     * {@link setGrantToken} so subsequent data requests carry the token.
+     */
+    function redeemGrant(collectionId: string, productId: string, proofId: string, token: string, options?: RedeemGrantOptions): Promise<RedeemGrantResult>;
 }

package/dist/api/proof.js

@@ -156,4 +156,48 @@ export var proof;
         return post(path, data);
     }
     proof.migrate = migrate;
+    // ---------------------------------------------------------------------------
+    // Share grants — delegated, scoped, revocable bearer access to this proof
+    // ---------------------------------------------------------------------------
+    function grantBase(collectionId, productId, proofId) {
+        return `/public/collection/${encodeURIComponent(collectionId)}/product/${encodeURIComponent(productId)}/proof/${encodeURIComponent(proofId)}/grant`;
+    }
+    /**
+     * Create a share grant on a proof (owner / collection admin only). The returned
+     * grant includes `token` — the opaque bearer secret, available ONLY on this
+     * response. Embed it in a share link and hand recipients {@link redeemGrant} /
+     * {@link setGrantToken}.
+     */
+    async function createGrant(collectionId, productId, proofId, options) {
+        const body = { scope: options.scope };
+        if (options.audience)
+            body.audience = options.audience;
+        if (options.expiresAt)
+            body.expiresAt = options.expiresAt instanceof Date ? options.expiresAt.toISOString() : options.expiresAt;
+        return post(grantBase(collectionId, productId, proofId), body);
+    }
+    proof.createGrant = createGrant;
+    /** List the active + past grants on a proof (owner / collection admin only). Tokens are never returned here. */
+    async function listGrants(collectionId, productId, proofId) {
+        return request(grantBase(collectionId, productId, proofId));
+    }
+    proof.listGrants = listGrants;
+    /** Revoke a grant by id (owner / collection admin only). Takes effect immediately. */
+    async function revokeGrant(collectionId, productId, proofId, grantId) {
+        return del(`${grantBase(collectionId, productId, proofId)}/${encodeURIComponent(grantId)}`);
+    }
+    proof.revokeGrant = revokeGrant;
+    /**
+     * Redeem a grant token (anonymous or signed-in). Records the redemption and
+     * returns the granted scope, or — for a `verify_owner` grant — an ownership
+     * assertion (never the account). After redeeming, call
+     * {@link setGrantToken} so subsequent data requests carry the token.
+     */
+    async function redeemGrant(collectionId, productId, proofId, token, options) {
+        const body = { token };
+        if (options === null || options === void 0 ? void 0 : options.guestName)
+            body.guestName = options.guestName;
+        return post(`${grantBase(collectionId, productId, proofId)}/redeem`, body);
+    }
+    proof.redeemGrant = redeemGrant;
 })(proof || (proof = {}));

package/dist/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 1.15.16  |  Generated: 2026-08-15T11:42:50.997Z
+Version: 1.15.17  |  Generated: 2026-08-18T08:10:50.608Z
 
 This is a concise summary of all available API functions and types.
 
@@ -170,6 +170,12 @@ Replace or augment globally applied custom headers.
 **setBearerToken**(token: string | undefined) → `void`
 Allows setting the bearerToken at runtime (e.g. after login/logout). Clears the HTTP cache whenever the token actually changes so that stale user-scoped responses (e.g. /account/profile) are not served after a login or logout event.
 
+**setGrantToken**(token: string | undefined) → `void`
+Set (or clear) the per-proof share-grant token. When set, it is attached as the `X-Grant-Token` header on every request, so a recipient who has opened a shared link can read/comment on the granted proof's data. Pass `undefined` to clear it. The server re-checks the grant against the database on every request, so calling `revokeGrant` invalidates an in-flight token immediately. Clears the GET cache on change so grant-tier responses are not served after the token changes. ```ts // On opening ?proofId=…&shareToken=abc setGrantToken(shareToken) const { attestations } = await proof.get(...)  // now sees owner-tier memories ```
+
+**getGrantToken**() → `string | undefined`
+Returns the currently-set share-grant token, or `undefined`.
+
 **getBearerToken**() → `string | undefined`
 Returns the bearer token currently held by the SDK, or `undefined` if none is set. In proxy mode, credentials are held by the parent frame, not the local SDK, so this returns `undefined` even when the caller is authenticated.
 
@@ -7287,6 +7293,50 @@ interface ProofFieldsConfig {
 }
 ```
 
+**GrantAudience** (interface)
+```typescript
+interface GrantAudience {
+  kind: 'public_link' | 'named'
+  email?: string
+  userId?: string
+}
+```
+
+**ProofGrant** (interface)
+```typescript
+interface ProofGrant {
+  grantId: string
+  proofId: string
+  productId?: string | null
+  scope: GrantScope[]
+  audience: GrantAudience
+  createdBy: string
+  expiresAt?: string | null
+  revokedAt?: string | null
+  redeemedBy?: { userId?: string; guestName?: string; redeemedAt: string }
+  redeemCount: number
+  createdAt: string
+  updatedAt: string
+  token?: string
+}
+```
+
+**CreateGrantOptions** (interface)
+```typescript
+interface CreateGrantOptions {
+  scope: GrantScope[]
+  audience?: GrantAudience
+  expiresAt?: Date | string
+}
+```
+
+**RedeemGrantOptions** (interface)
+```typescript
+interface RedeemGrantOptions {
+  guestName?: string
+}
+```
+
 **ProofResponse** = `Proof`
 
 **ProofUpdateRequest** = `Partial<ProofCreateRequest>`
@@ -7297,6 +7347,10 @@ interface ProofFieldsConfig {
 
 **ProofFieldDef** = `ScopedFieldDef & { scope?: ProofFieldScope }`
 
+**GrantScope** = `'read' | 'comment' | 'admin' | 'verify_owner'`
+
+**RedeemGrantResult** = ``
+
 ### qr
 
 **QrShortCodeLookupResponse** (interface)
@@ -9937,6 +9991,30 @@ Get proofs for a batch (admin only). GET /admin/collection/:collectionId/product
     data: { targetProductId: string }) → `Promise<ProofResponse>`
 Migrate a proof to a different product within the same collection (admin only). Because the Firestore ledger document ID is `{productId}-{proofId}`, a proof cannot simply be re-assigned to another product by updating a field — the document must be re-keyed. This endpoint handles that atomically: 1. Reads the source ledger document (`{sourceProductId}-{proofId}`). 2. Writes a new document (`{targetProductId}-{proofId}`) with `productId` and `proofGroup` updated. The short `proofId` (nanoid) is unchanged. 3. Writes a migration history entry to the new document's `history` subcollection (snapshot of the original proof + migration metadata). 4. Copies all subcollections — `assets`, `attestations`, `history` — from the old document to the new one. 5. Deletes the old subcollections and then the old document. Repeated migrations are safe — each one appends a history record; no migration metadata is stored on the proof document itself. ```typescript const migrated = await proof.migrate('coll_123', 'prod_old', 'proof_abc', { targetProductId: 'prod_new', }) console.log(migrated.productId) // 'prod_new' ```
 
+**createGrant**(collectionId: string,
+    productId: string,
+    proofId: string,
+    options: CreateGrantOptions) → `Promise<ProofGrant>`
+Create a share grant on a proof (owner / collection admin only). The returned grant includes `token` — the opaque bearer secret, available ONLY on this response. Embed it in a share link and hand recipients {@link redeemGrant} / {@link setGrantToken}.
+
+**listGrants**(collectionId: string,
+    productId: string,
+    proofId: string) → `Promise<ProofGrant[]>`
+List the active + past grants on a proof (owner / collection admin only). Tokens are never returned here.
+
+**revokeGrant**(collectionId: string,
+    productId: string,
+    proofId: string,
+    grantId: string) → `Promise<void>`
+Revoke a grant by id (owner / collection admin only). Takes effect immediately.
+
+**redeemGrant**(collectionId: string,
+    productId: string,
+    proofId: string,
+    token: string,
+    options?: RedeemGrantOptions) → `Promise<RedeemGrantResult>`
+Redeem a grant token (anonymous or signed-in). Records the redemption and returns the granted scope, or — for a `verify_owner` grant — an ownership assertion (never the account). After redeeming, call {@link setGrantToken} so subsequent data requests carry the token.
+
 ### publicClient
 
 **chat**(collectionId: string,

package/dist/http.d.ts

@@ -49,6 +49,25 @@ export declare function setExtraHeaders(headers: Record<string, string>): void;
  * login or logout event.
  */
 export declare function setBearerToken(token: string | undefined): void;
+/**
+ * Set (or clear) the per-proof share-grant token. When set, it is attached as the
+ * `X-Grant-Token` header on every request, so a recipient who has opened a shared
+ * link can read/comment on the granted proof's data. Pass `undefined` to clear it.
+ *
+ * The server re-checks the grant against the database on every request, so calling
+ * `revokeGrant` invalidates an in-flight token immediately. Clears the GET cache on
+ * change so grant-tier responses are not served after the token changes.
+ *
+ * @example
+ * ```ts
+ * // On opening ?proofId=…&shareToken=abc
+ * setGrantToken(shareToken)
+ * const { attestations } = await proof.get(...)  // now sees owner-tier memories
+ * ```
+ */
+export declare function setGrantToken(token: string | undefined): void;
+/** Returns the currently-set share-grant token, or `undefined`. */
+export declare function getGrantToken(): string | undefined;
 /**
  * Returns the bearer token currently held by the SDK, or `undefined` if none is set.
  * In proxy mode, credentials are held by the parent frame, not the local SDK,

package/dist/http.js

@@ -39,6 +39,12 @@ let extraHeadersGlobal = {};
  * issue refresh tokens and short-lived access tokens. Undefined → web behaviour.
  */
 let clientPlatform = undefined;
+/**
+ * Per-proof share-grant bearer token. When set (via setGrantToken), it is attached
+ * as `X-Grant-Token` on every request so the server can evaluate the grant on any
+ * data call that touches the granted proof (attestations, threads, app data).
+ */
+let grantToken = undefined;
 /** Whether initializeApi has been successfully called at least once. */
 let initialized = false;
 /** Safely returns the current browser hostname, or an empty string in non-browser / Node environments. */
@@ -466,6 +472,34 @@ export function setBearerToken(token) {
     if (cachePersistence !== 'none')
         idbClear().catch(() => { });
 }
+/**
+ * Set (or clear) the per-proof share-grant token. When set, it is attached as the
+ * `X-Grant-Token` header on every request, so a recipient who has opened a shared
+ * link can read/comment on the granted proof's data. Pass `undefined` to clear it.
+ *
+ * The server re-checks the grant against the database on every request, so calling
+ * `revokeGrant` invalidates an in-flight token immediately. Clears the GET cache on
+ * change so grant-tier responses are not served after the token changes.
+ *
+ * @example
+ * ```ts
+ * // On opening ?proofId=…&shareToken=abc
+ * setGrantToken(shareToken)
+ * const { attestations } = await proof.get(...)  // now sees owner-tier memories
+ * ```
+ */
+export function setGrantToken(token) {
+    if (token === grantToken)
+        return;
+    grantToken = token;
+    httpCache.clear();
+    if (cachePersistence !== 'none')
+        idbClear().catch(() => { });
+}
+/** Returns the currently-set share-grant token, or `undefined`. */
+export function getGrantToken() {
+    return grantToken;
+}
 /**
  * Returns the bearer token currently held by the SDK, or `undefined` if none is set.
  * In proxy mode, credentials are held by the parent frame, not the local SDK,
@@ -1107,6 +1141,10 @@ export async function request(path) {
                     headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
                 if (clientPlatform)
                     headers["X-Client-Platform"] = clientPlatform;
+                if (grantToken)
+                    headers["X-Grant-Token"] = grantToken;
+                if (grantToken)
+                    headers["X-Grant-Token"] = grantToken;
                 if (ngrokSkipBrowserWarning)
                     headers["ngrok-skip-browser-warning"] = "true";
                 const _getDomain = getSourceDomain();
@@ -1182,6 +1220,8 @@ export async function post(path, body, extraHeaders) {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const _postDomain = getSourceDomain();
@@ -1241,6 +1281,8 @@ export async function put(path, body, extraHeaders) {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const _putDomain = getSourceDomain();
@@ -1300,6 +1342,8 @@ export async function patch(path, body, extraHeaders) {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const _patchDomain = getSourceDomain();
@@ -1404,7 +1448,7 @@ export async function requestWithOptions(path, options) {
                 }
             }
             const _rwoDomain = getSourceDomain();
-            const headers = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ "Content-Type": "application/json" }, (apiKey ? { "X-API-Key": apiKey } : {})), (bearerToken ? { "AUTHORIZATION": `Bearer ${bearerToken}` } : {})), (clientPlatform ? { "X-Client-Platform": clientPlatform } : {})), (ngrokSkipBrowserWarning ? { "ngrok-skip-browser-warning": "true" } : {})), (_rwoDomain ? { "X-Source-Domain": _rwoDomain } : {})), extraHeaders);
+            const headers = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ "Content-Type": "application/json" }, (apiKey ? { "X-API-Key": apiKey } : {})), (bearerToken ? { "AUTHORIZATION": `Bearer ${bearerToken}` } : {})), (clientPlatform ? { "X-Client-Platform": clientPlatform } : {})), (grantToken ? { "X-Grant-Token": grantToken } : {})), (ngrokSkipBrowserWarning ? { "ngrok-skip-browser-warning": "true" } : {})), (_rwoDomain ? { "X-Source-Domain": _rwoDomain } : {})), extraHeaders);
             // Merge global custom headers (do not override existing keys from options.headers)
             for (const [k, v] of Object.entries(extraHeadersGlobal))
                 if (!(k in headers))
@@ -1510,6 +1554,8 @@ export async function del(path, extraHeaders) {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const _delDomain = getSourceDomain();
@@ -1552,6 +1598,8 @@ export function getApiHeaders() {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const sourceDomain = getSourceDomain();

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { initializeApi, isInitialized, hasAuthCredentials, configureSdkCache, invalidateCache, request, post, put, patch, del, sendCustomProxyMessage, getApiHeaders, isProxyEnabled, setBearerToken, getBearerToken } from "./http";
+export { initializeApi, isInitialized, hasAuthCredentials, configureSdkCache, invalidateCache, request, post, put, patch, del, sendCustomProxyMessage, getApiHeaders, isProxyEnabled, setBearerToken, getBearerToken, setGrantToken, getGrantToken } from "./http";
 export * from "./api";
 export * from "./types";
 export { iframe } from "./iframe";
@@ -17,7 +17,7 @@ export type { AdditionalGtin, ISODateString, JsonPrimitive, JsonValue, ProductCr
 export type { TranslationLookupMode, TranslationContentType, TranslationQuality, TranslationItemStatus, TranslationContextValue, TranslationContext, TranslationLookupRequestBase, TranslationLookupSingleRequest, TranslationLookupBatchRequest, TranslationLookupRequest, TranslationLookupItem, TranslationLookupResponse, ResolvedTranslationItem, ResolvedTranslationResponse, TranslationHashOptions, TranslationResolveOptions, TranslationRecord, TranslationListParams, TranslationListResponse, TranslationUpdateRequest, } from "./types/translations";
 export type { FacetBucket, FacetDefinition, FacetDefinitionWriteInput, FacetGetParams, FacetListParams, FacetListResponse, FacetNamespaceListResponse, FacetQueryRequest, FacetQueryResponse, FacetValue, FacetValueDefinition, FacetValueGetParams, FacetValueListParams, FacetValueListResponse, FacetValueResponse, FacetValueWriteInput, PublicFacetListParams, } from "./types/facets";
 export type { Collection, CollectionResponse, CollectionCreateRequest, CollectionUpdateRequest, DomainTarget, HubAvailabilityResponse, } from "./types/collection";
-export type { Proof, ProofResponse, ProofCreateRequest, ProofUpdateRequest, ProofClaimRequest, } from "./types/proof";
+export type { Proof, ProofResponse, ProofCreateRequest, ProofUpdateRequest, ProofClaimRequest, ProofGrant, GrantScope, GrantAudience, CreateGrantOptions, RedeemGrantOptions, RedeemGrantResult, } from "./types/proof";
 export type { QrShortCodeLookupResponse, } from "./types/qr";
 export type { ReverseTagLookupParams, ReverseTagLookupResponse, } from "./types/tags";
 export type { AdminMobileCapability, ActionableCapability, AdminMobileHostId, AdminMobileEvent, AdminMobileEventCallback, AdminMobileEventSubscriber, ScannerEventSubscriber, // @deprecated — use AdminMobileEventCallback

package/dist/index.js

@@ -1,6 +1,6 @@
 // src/index.ts
 // Top-level entrypoint of the npm package. Re-export initializeApi + all namespaces.
-export { initializeApi, isInitialized, hasAuthCredentials, configureSdkCache, invalidateCache, request, post, put, patch, del, sendCustomProxyMessage, getApiHeaders, isProxyEnabled, setBearerToken, getBearerToken } from "./http";
+export { initializeApi, isInitialized, hasAuthCredentials, configureSdkCache, invalidateCache, request, post, put, patch, del, sendCustomProxyMessage, getApiHeaders, isProxyEnabled, setBearerToken, getBearerToken, setGrantToken, getGrantToken } from "./http";
 export * from "./api";
 export * from "./types";
 // Iframe namespace

package/dist/openapi.yaml

@@ -12183,6 +12183,90 @@ paths:
           application/json:
             schema:
               $ref: "#/components/schemas/ProofClaimRequest"
+  /public/collection/{collectionId}/product/{productId}/proof/{proofId}/grant/redeem:
+    post:
+      tags:
+        - proof
+      summary: Redeem a grant token (anonymous or signed-in).
+      operationId: proof_redeemGrant
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: productId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: proofId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/RedeemGrantResult"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/RedeemGrantOptions"
+  /public/collection/{collectionId}/product/{productId}/proof/{proofId}/grant/{grantId}:
+    delete:
+      tags:
+        - proof
+      summary: Revoke a grant by id (owner / collection admin only).
+      operationId: proof_revokeGrant
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: productId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: proofId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: grantId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: true
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
   /public/collection/{collectionId}/products/{productId}/createClaim:
     post:
       tags:
@@ -24865,6 +24949,80 @@ components:
             $ref: "#/components/schemas/ProofFieldDef"
       required:
         - fields
+    GrantAudience:
+      type: object
+      properties:
+        kind:
+          type: string
+          enum:
+            - public_link
+            - named
+        email:
+          type: string
+        userId:
+          type: string
+      required:
+        - kind
+    ProofGrant:
+      type: object
+      properties:
+        grantId:
+          type: string
+        proofId:
+          type: string
+        productId:
+          type: string
+        scope:
+          type: array
+          items:
+            $ref: "#/components/schemas/GrantScope"
+        audience:
+          $ref: "#/components/schemas/GrantAudience"
+        createdBy:
+          type: string
+        expiresAt:
+          type: string
+        revokedAt:
+          type: string
+        redeemedBy:
+          type: object
+          additionalProperties: true
+        redeemCount:
+          type: number
+        createdAt:
+          type: string
+        updatedAt:
+          type: string
+        token:
+          type: string
+      required:
+        - grantId
+        - proofId
+        - scope
+        - audience
+        - createdBy
+        - redeemCount
+        - createdAt
+        - updatedAt
+    CreateGrantOptions:
+      type: object
+      properties:
+        scope:
+          type: array
+          items:
+            $ref: "#/components/schemas/GrantScope"
+        audience:
+          $ref: "#/components/schemas/GrantAudience"
+        expiresAt:
+          type: object
+          additionalProperties: true
+      required:
+        - scope
+    RedeemGrantOptions:
+      type: object
+      properties:
+        guestName:
+          type: string
     ProofResponse:
       type: object
       additionalProperties: true

package/dist/types/navigation.d.ts

@@ -37,6 +37,11 @@ export type LinkTarget = {
     kind: 'app';
     /** The target app's `appId`. */
     appId: string;
+    /**
+     * App-specific query params (e.g. `{ proofId, shareToken }` for a share link).
+     * Platform context params are injected automatically.
+     */
+    params?: Record<string, string>;
     target?: LinkOpenTarget;
 } | {
     kind: 'deep';

package/dist/types/proof.d.ts

@@ -65,3 +65,58 @@ export type ProofFieldDef = ScopedFieldDef & {
 export interface ProofFieldsConfig {
     fields: ProofFieldDef[];
 }
+/** What a grant authorises the bearer to do on the proof. */
+export type GrantScope = 'read' | 'comment' | 'admin' | 'verify_owner';
+/** Who may redeem a grant. */
+export interface GrantAudience {
+    kind: 'public_link' | 'named';
+    email?: string;
+    userId?: string;
+}
+/** A share grant issued on a proof. */
+export interface ProofGrant {
+    grantId: string;
+    proofId: string;
+    productId?: string | null;
+    scope: GrantScope[];
+    audience: GrantAudience;
+    createdBy: string;
+    expiresAt?: string | null;
+    revokedAt?: string | null;
+    redeemedBy?: {
+        userId?: string;
+        guestName?: string;
+        redeemedAt: string;
+    };
+    redeemCount: number;
+    createdAt: string;
+    updatedAt: string;
+    /** The opaque bearer token — present ONLY on the `createGrant` response, never on `listGrants`. */
+    token?: string;
+}
+export interface CreateGrantOptions {
+    /** At least one scope is required. */
+    scope: GrantScope[];
+    /** Defaults to `{ kind: 'public_link' }`. */
+    audience?: GrantAudience;
+    /** Optional expiry — a `Date` or ISO string. */
+    expiresAt?: Date | string;
+}
+export interface RedeemGrantOptions {
+    /** Display name to stamp on guest activity when the redeemer is not signed in. */
+    guestName?: string;
+}
+/**
+ * Result of redeeming a grant. For read/comment/admin grants this is the granted
+ * scope; for a `verify_owner` grant it is an ownership assertion (never the account).
+ */
+export type RedeemGrantResult = {
+    scope: GrantScope[];
+    redeemedAt: string;
+} | {
+    proofId: string;
+    assertsOwnership: true;
+    ownerDisplayName?: string;
+    issuedAt?: string;
+    expiresAt?: string;
+};

package/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 1.15.16  |  Generated: 2026-08-15T11:42:50.997Z
+Version: 1.15.17  |  Generated: 2026-08-18T08:10:50.608Z
 
 This is a concise summary of all available API functions and types.
 
@@ -170,6 +170,12 @@ Replace or augment globally applied custom headers.
 **setBearerToken**(token: string | undefined) → `void`
 Allows setting the bearerToken at runtime (e.g. after login/logout). Clears the HTTP cache whenever the token actually changes so that stale user-scoped responses (e.g. /account/profile) are not served after a login or logout event.
 
+**setGrantToken**(token: string | undefined) → `void`
+Set (or clear) the per-proof share-grant token. When set, it is attached as the `X-Grant-Token` header on every request, so a recipient who has opened a shared link can read/comment on the granted proof's data. Pass `undefined` to clear it. The server re-checks the grant against the database on every request, so calling `revokeGrant` invalidates an in-flight token immediately. Clears the GET cache on change so grant-tier responses are not served after the token changes. ```ts // On opening ?proofId=…&shareToken=abc setGrantToken(shareToken) const { attestations } = await proof.get(...)  // now sees owner-tier memories ```
+
+**getGrantToken**() → `string | undefined`
+Returns the currently-set share-grant token, or `undefined`.
+
 **getBearerToken**() → `string | undefined`
 Returns the bearer token currently held by the SDK, or `undefined` if none is set. In proxy mode, credentials are held by the parent frame, not the local SDK, so this returns `undefined` even when the caller is authenticated.
 
@@ -7287,6 +7293,50 @@ interface ProofFieldsConfig {
 }
 ```
 
+**GrantAudience** (interface)
+```typescript
+interface GrantAudience {
+  kind: 'public_link' | 'named'
+  email?: string
+  userId?: string
+}
+```
+
+**ProofGrant** (interface)
+```typescript
+interface ProofGrant {
+  grantId: string
+  proofId: string
+  productId?: string | null
+  scope: GrantScope[]
+  audience: GrantAudience
+  createdBy: string
+  expiresAt?: string | null
+  revokedAt?: string | null
+  redeemedBy?: { userId?: string; guestName?: string; redeemedAt: string }
+  redeemCount: number
+  createdAt: string
+  updatedAt: string
+  token?: string
+}
+```
+
+**CreateGrantOptions** (interface)
+```typescript
+interface CreateGrantOptions {
+  scope: GrantScope[]
+  audience?: GrantAudience
+  expiresAt?: Date | string
+}
+```
+
+**RedeemGrantOptions** (interface)
+```typescript
+interface RedeemGrantOptions {
+  guestName?: string
+}
+```
+
 **ProofResponse** = `Proof`
 
 **ProofUpdateRequest** = `Partial<ProofCreateRequest>`
@@ -7297,6 +7347,10 @@ interface ProofFieldsConfig {
 
 **ProofFieldDef** = `ScopedFieldDef & { scope?: ProofFieldScope }`
 
+**GrantScope** = `'read' | 'comment' | 'admin' | 'verify_owner'`
+
+**RedeemGrantResult** = ``
+
 ### qr
 
 **QrShortCodeLookupResponse** (interface)
@@ -9937,6 +9991,30 @@ Get proofs for a batch (admin only). GET /admin/collection/:collectionId/product
     data: { targetProductId: string }) → `Promise<ProofResponse>`
 Migrate a proof to a different product within the same collection (admin only). Because the Firestore ledger document ID is `{productId}-{proofId}`, a proof cannot simply be re-assigned to another product by updating a field — the document must be re-keyed. This endpoint handles that atomically: 1. Reads the source ledger document (`{sourceProductId}-{proofId}`). 2. Writes a new document (`{targetProductId}-{proofId}`) with `productId` and `proofGroup` updated. The short `proofId` (nanoid) is unchanged. 3. Writes a migration history entry to the new document's `history` subcollection (snapshot of the original proof + migration metadata). 4. Copies all subcollections — `assets`, `attestations`, `history` — from the old document to the new one. 5. Deletes the old subcollections and then the old document. Repeated migrations are safe — each one appends a history record; no migration metadata is stored on the proof document itself. ```typescript const migrated = await proof.migrate('coll_123', 'prod_old', 'proof_abc', { targetProductId: 'prod_new', }) console.log(migrated.productId) // 'prod_new' ```
 
+**createGrant**(collectionId: string,
+    productId: string,
+    proofId: string,
+    options: CreateGrantOptions) → `Promise<ProofGrant>`
+Create a share grant on a proof (owner / collection admin only). The returned grant includes `token` — the opaque bearer secret, available ONLY on this response. Embed it in a share link and hand recipients {@link redeemGrant} / {@link setGrantToken}.
+
+**listGrants**(collectionId: string,
+    productId: string,
+    proofId: string) → `Promise<ProofGrant[]>`
+List the active + past grants on a proof (owner / collection admin only). Tokens are never returned here.
+
+**revokeGrant**(collectionId: string,
+    productId: string,
+    proofId: string,
+    grantId: string) → `Promise<void>`
+Revoke a grant by id (owner / collection admin only). Takes effect immediately.
+
+**redeemGrant**(collectionId: string,
+    productId: string,
+    proofId: string,
+    token: string,
+    options?: RedeemGrantOptions) → `Promise<RedeemGrantResult>`
+Redeem a grant token (anonymous or signed-in). Records the redemption and returns the granted scope, or — for a `verify_owner` grant — an ownership assertion (never the account). After redeeming, call {@link setGrantToken} so subsequent data requests carry the token.
+
 ### publicClient
 
 **chat**(collectionId: string,

package/openapi.yaml

@@ -12183,6 +12183,90 @@ paths:
           application/json:
             schema:
               $ref: "#/components/schemas/ProofClaimRequest"
+  /public/collection/{collectionId}/product/{productId}/proof/{proofId}/grant/redeem:
+    post:
+      tags:
+        - proof
+      summary: Redeem a grant token (anonymous or signed-in).
+      operationId: proof_redeemGrant
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: productId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: proofId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/RedeemGrantResult"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/RedeemGrantOptions"
+  /public/collection/{collectionId}/product/{productId}/proof/{proofId}/grant/{grantId}:
+    delete:
+      tags:
+        - proof
+      summary: Revoke a grant by id (owner / collection admin only).
+      operationId: proof_revokeGrant
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: productId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: proofId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: grantId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: true
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
   /public/collection/{collectionId}/products/{productId}/createClaim:
     post:
       tags:
@@ -24865,6 +24949,80 @@ components:
             $ref: "#/components/schemas/ProofFieldDef"
       required:
         - fields
+    GrantAudience:
+      type: object
+      properties:
+        kind:
+          type: string
+          enum:
+            - public_link
+            - named
+        email:
+          type: string
+        userId:
+          type: string
+      required:
+        - kind
+    ProofGrant:
+      type: object
+      properties:
+        grantId:
+          type: string
+        proofId:
+          type: string
+        productId:
+          type: string
+        scope:
+          type: array
+          items:
+            $ref: "#/components/schemas/GrantScope"
+        audience:
+          $ref: "#/components/schemas/GrantAudience"
+        createdBy:
+          type: string
+        expiresAt:
+          type: string
+        revokedAt:
+          type: string
+        redeemedBy:
+          type: object
+          additionalProperties: true
+        redeemCount:
+          type: number
+        createdAt:
+          type: string
+        updatedAt:
+          type: string
+        token:
+          type: string
+      required:
+        - grantId
+        - proofId
+        - scope
+        - audience
+        - createdBy
+        - redeemCount
+        - createdAt
+        - updatedAt
+    CreateGrantOptions:
+      type: object
+      properties:
+        scope:
+          type: array
+          items:
+            $ref: "#/components/schemas/GrantScope"
+        audience:
+          $ref: "#/components/schemas/GrantAudience"
+        expiresAt:
+          type: object
+          additionalProperties: true
+      required:
+        - scope
+    RedeemGrantOptions:
+      type: object
+      properties:
+        guestName:
+          type: string
     ProofResponse:
       type: object
       additionalProperties: true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proveanything/smartlinks",
-  "version": "1.15.16",
+  "version": "1.15.17",
   "description": "Official JavaScript/TypeScript SDK for the Smartlinks API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",