@proveanything/smartlinks 1.15.16 → 1.15.18

package/dist/docs/proof-share-grants.md

@@ -0,0 +1,232 @@
+# Proof Share Grants
+
+Delegated, scoped, **revocable** bearer access to a single proof — the middle tier
+between "public" (everyone) and "owner" (only the signed-in owner).
+
+A grant lets an owner hand out a link that lets specific recipients **see or do
+specific things on one proof for a limited time**, without those recipients needing
+a SmartLinks account or a proof claim. Typical uses: sharing a private photo album,
+letting guests comment on it, or publishing a verifiable "I own this" assertion.
+
+---
+
+## Concepts
+
+A **grant** is a row issued by the proof owner (or a collection admin) and redeemed
+by a bearer holding an opaque token. Every data request that touches the proof
+re-checks the grant **server-side** against the database, so revocation is immediate.
+
+### Scopes — what a grant authorises
+
+| Scope | Grants the bearer… |
+|-------|--------------------|
+| `read` | read owner-tier data on the proof (attestations, threads, records, cases) |
+| `comment` | create threads/replies on the proof (guest comments) |
+| `admin` | read owner-tier data (reserved for elevated share cases; never exposes the platform admin zone) |
+| `verify_owner` | redeem a shareable ownership **assertion** (not the account) |
+
+A grant can carry several scopes, e.g. `['read', 'comment']` for a shareable,
+commentable album.
+
+### Security & lifecycle
+
+- The token is opaque, unguessable, and returned to the issuer **exactly once** (on `createGrant`). It is never returned by `listGrants`.
+- **Revocation is immediate** — the grant is re-checked on every request, so `revokeGrant` invalidates a token across all clients at once.
+- **Auto-invalidation on transfer** — every grant is voided the moment the proof's `ownerId` changes (e.g. a resale/re-claim), so a stale "I own this" link cannot keep resolving.
+- A grant is scoped to **one proof**; it can never widen access to other proofs or collection-level data.
+
+---
+
+## Owner flow — create, list, revoke
+
+```typescript
+import { proof } from '@proveanything/smartlinks'
+
+// Create a read+comment grant that expires in 7 days.
+const grant = await proof.createGrant(collectionId, productId, proofId, {
+  scope: ['read', 'comment'],
+  audience: { kind: 'public_link' },
+  expiresAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000),
+})
+
+// `grant.token` is available ONLY here — embed it in your share link now.
+const shareUrl = `https://app.example.com/album?proofId=${proofId}&shareToken=${grant.token}`
+
+// List active + past grants (tokens are never included).
+const grants = await proof.listGrants(collectionId, productId, proofId)
+
+// Stop sharing — takes effect on the very next request from any client.
+await proof.revokeGrant(collectionId, productId, proofId, grant.grantId)
+```
+
+`createGrant` / `listGrants` / `revokeGrant` require the caller to be the **proof
+owner** (or a collection admin) — i.e. a signed-in user whose `bearerToken` is set.
+
+---
+
+## Recipient flow — redeem, then carry the token
+
+A recipient opens the share link, redeems the token once, then sets it as the
+active grant token. From then on **every** SDK request carries the token
+(`X-Grant-Token`), so all proof reads/writes are evaluated against the grant.
+
+```typescript
+import { proof, setGrantToken } from '@proveanything/smartlinks'
+
+const shareToken = new URLSearchParams(location.search).get('shareToken')!
+
+// Redeem once (anonymous or signed-in). Records the redemption; optionally names the guest.
+await proof.redeemGrant(collectionId, productId, proofId, shareToken, {
+  guestName: 'Sam',            // stamped on guest activity when not signed in
+})
+
+// Attach the token to every subsequent request.
+setGrantToken(shareToken)
+
+// Now grant-tier reads succeed — e.g. owner-visibility memories on the proof:
+const { attestations } = await attestation.publicList(collectionId, {
+  subjectType: 'proof', subjectId: proofId,
+})
+
+// Clear it when leaving the shared view:
+setGrantToken(undefined)
+```
+
+> **Persisting across reloads.** `setGrantToken` holds the token in memory. To keep a
+> shared session across reloads, persist `shareToken` yourself (e.g. in `localStorage`)
+> and call `setGrantToken` again on load.
+
+---
+
+## Guest commenting
+
+With a `comment` scope grant, a bearer can post comments even when they are not
+signed in. The app must enable the **grant branch** of the thread create policy
+(see [App config](#app-config)); comments are then created at `visibility: 'owner'`
+(private to the proof) and stamped `authorType: 'guest'`.
+
+```typescript
+import { app } from '@proveanything/smartlinks'
+// setGrantToken(shareToken) has already been called.
+
+// One atomic call — no separate create-then-reply round trip.
+await app.threads.create(collectionId, 'photo-memory', {
+  parentType: 'memory',
+  parentId: memoryId,          // text — SmartLinks short ids are fine (not just UUIDs)
+  proofId,                     // anchor to the proof so grant readers see it
+  firstReply: { text: 'Lovely photo', authorName: 'Sam' },
+})
+```
+
+Other grant holders (and the owner) see these comments because a `read` grant reveals
+`owner`-visibility threads for the proof. See
+[App Objects → Threads](app-objects.md#threads) for the full threads API.
+
+---
+
+## Proof of ownership — `verify_owner`
+
+Ownership itself is **not** a grant — it is `proof.ownerId`, established via the
+existing [claim flow](proof-claiming-methods.md). A `verify_owner` grant only
+publishes a shareable, verifiable **assertion** derived from that ownership, without
+handing over the account:
+
+```typescript
+const grant = await proof.createGrant(collectionId, productId, proofId, {
+  scope: ['verify_owner'],
+})
+
+// The recipient redeems it and gets the assertion — never the account:
+const result = await proof.redeemGrant(collectionId, productId, proofId, grant.token)
+// { proofId, assertsOwnership: true, ownerDisplayName?, issuedAt, expiresAt }
+```
+
+Because grants auto-invalidate on transfer, a resale cannot leave a stale
+"I own this" link in circulation.
+
+---
+
+## What a grant gates
+
+When a valid grant token is present, these public reads elevate to owner-tier for the
+granted proof (and only that proof):
+
+- **Attestations** — `attestation.publicList({ subjectType: 'proof', subjectId })`
+- **Threads / Records / Cases** — `app.threads.list`, `app.records.*`, `app.cases.list`, and the single-item GETs, filtered to the granted proof
+- **Thread creation / replies** — with a `comment` scope grant (see below)
+
+The token never exposes the platform `admin` zone, and only reveals `owner`-visibility
+rows for the granted `proofId`.
+
+---
+
+## App config
+
+Grant-based commenting is opt-in per app, configured on the app's Firestore config
+at `sites/{collectionId}/apps/{appId}` — a `grant` branch alongside
+`anonymous` / `authenticated`:
+
+```jsonc
+{
+  "publicCreate": {
+    "threads": {
+      "grant": {
+        "allow": true,
+        "requireScope": "comment",
+        "enforce": { "visibility": "owner", "status": "open" }
+      }
+    }
+  }
+}
+```
+
+This enables grant-scoped commenting **without** opening up anonymous creation. The
+`enforce.visibility: "owner"` keeps comments private to the proof (visible to the
+owner and other grant holders, not the wider public).
+
+---
+
+## API reference
+
+```typescript
+namespace proof {
+  createGrant(collectionId, productId, proofId, options: CreateGrantOptions): Promise<ProofGrant>
+  listGrants(collectionId, productId, proofId): Promise<ProofGrant[]>
+  revokeGrant(collectionId, productId, proofId, grantId): Promise<void>
+  redeemGrant(collectionId, productId, proofId, token, options?: RedeemGrantOptions): Promise<RedeemGrantResult>
+}
+
+// Attach / clear the active grant token (sent as X-Grant-Token on every request).
+function setGrantToken(token: string | undefined): void
+function getGrantToken(): string | undefined
+
+type GrantScope = 'read' | 'comment' | 'admin' | 'verify_owner'
+
+interface CreateGrantOptions {
+  scope: GrantScope[]                                   // at least one
+  audience?: { kind: 'public_link' } | { kind: 'named'; email?: string; userId?: string }
+  expiresAt?: Date | string
+}
+
+interface RedeemGrantOptions { guestName?: string }
+
+type RedeemGrantResult =
+  | { scope: GrantScope[]; redeemedAt: string }
+  | { proofId: string; assertsOwnership: true; ownerDisplayName?: string; issuedAt?: string; expiresAt?: string }
+
+interface ProofGrant {
+  grantId: string
+  proofId: string
+  productId?: string | null
+  scope: GrantScope[]
+  audience: { kind: 'public_link' | 'named'; email?: string; userId?: string }
+  createdBy: string
+  expiresAt?: string | null
+  revokedAt?: string | null
+  redeemedBy?: { userId?: string; guestName?: string; redeemedAt: string }
+  redeemCount: number
+  createdAt: string
+  updatedAt: string
+  token?: string   // present ONLY on the createGrant response
+}
+```

package/dist/http.d.ts

@@ -49,6 +49,25 @@ export declare function setExtraHeaders(headers: Record<string, string>): void;
  * login or logout event.
  */
 export declare function setBearerToken(token: string | undefined): void;
+/**
+ * Set (or clear) the per-proof share-grant token. When set, it is attached as the
+ * `X-Grant-Token` header on every request, so a recipient who has opened a shared
+ * link can read/comment on the granted proof's data. Pass `undefined` to clear it.
+ *
+ * The server re-checks the grant against the database on every request, so calling
+ * `revokeGrant` invalidates an in-flight token immediately. Clears the GET cache on
+ * change so grant-tier responses are not served after the token changes.
+ *
+ * @example
+ * ```ts
+ * // On opening ?proofId=…&shareToken=abc
+ * setGrantToken(shareToken)
+ * const { attestations } = await proof.get(...)  // now sees owner-tier memories
+ * ```
+ */
+export declare function setGrantToken(token: string | undefined): void;
+/** Returns the currently-set share-grant token, or `undefined`. */
+export declare function getGrantToken(): string | undefined;
 /**
  * Returns the bearer token currently held by the SDK, or `undefined` if none is set.
  * In proxy mode, credentials are held by the parent frame, not the local SDK,

package/dist/http.js

@@ -39,6 +39,12 @@ let extraHeadersGlobal = {};
  * issue refresh tokens and short-lived access tokens. Undefined → web behaviour.
  */
 let clientPlatform = undefined;
+/**
+ * Per-proof share-grant bearer token. When set (via setGrantToken), it is attached
+ * as `X-Grant-Token` on every request so the server can evaluate the grant on any
+ * data call that touches the granted proof (attestations, threads, app data).
+ */
+let grantToken = undefined;
 /** Whether initializeApi has been successfully called at least once. */
 let initialized = false;
 /** Safely returns the current browser hostname, or an empty string in non-browser / Node environments. */
@@ -466,6 +472,34 @@ export function setBearerToken(token) {
     if (cachePersistence !== 'none')
         idbClear().catch(() => { });
 }
+/**
+ * Set (or clear) the per-proof share-grant token. When set, it is attached as the
+ * `X-Grant-Token` header on every request, so a recipient who has opened a shared
+ * link can read/comment on the granted proof's data. Pass `undefined` to clear it.
+ *
+ * The server re-checks the grant against the database on every request, so calling
+ * `revokeGrant` invalidates an in-flight token immediately. Clears the GET cache on
+ * change so grant-tier responses are not served after the token changes.
+ *
+ * @example
+ * ```ts
+ * // On opening ?proofId=…&shareToken=abc
+ * setGrantToken(shareToken)
+ * const { attestations } = await proof.get(...)  // now sees owner-tier memories
+ * ```
+ */
+export function setGrantToken(token) {
+    if (token === grantToken)
+        return;
+    grantToken = token;
+    httpCache.clear();
+    if (cachePersistence !== 'none')
+        idbClear().catch(() => { });
+}
+/** Returns the currently-set share-grant token, or `undefined`. */
+export function getGrantToken() {
+    return grantToken;
+}
 /**
  * Returns the bearer token currently held by the SDK, or `undefined` if none is set.
  * In proxy mode, credentials are held by the parent frame, not the local SDK,
@@ -1107,6 +1141,10 @@ export async function request(path) {
                     headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
                 if (clientPlatform)
                     headers["X-Client-Platform"] = clientPlatform;
+                if (grantToken)
+                    headers["X-Grant-Token"] = grantToken;
+                if (grantToken)
+                    headers["X-Grant-Token"] = grantToken;
                 if (ngrokSkipBrowserWarning)
                     headers["ngrok-skip-browser-warning"] = "true";
                 const _getDomain = getSourceDomain();
@@ -1182,6 +1220,8 @@ export async function post(path, body, extraHeaders) {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const _postDomain = getSourceDomain();
@@ -1241,6 +1281,8 @@ export async function put(path, body, extraHeaders) {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const _putDomain = getSourceDomain();
@@ -1300,6 +1342,8 @@ export async function patch(path, body, extraHeaders) {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const _patchDomain = getSourceDomain();
@@ -1404,7 +1448,7 @@ export async function requestWithOptions(path, options) {
                 }
             }
             const _rwoDomain = getSourceDomain();
-            const headers = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ "Content-Type": "application/json" }, (apiKey ? { "X-API-Key": apiKey } : {})), (bearerToken ? { "AUTHORIZATION": `Bearer ${bearerToken}` } : {})), (clientPlatform ? { "X-Client-Platform": clientPlatform } : {})), (ngrokSkipBrowserWarning ? { "ngrok-skip-browser-warning": "true" } : {})), (_rwoDomain ? { "X-Source-Domain": _rwoDomain } : {})), extraHeaders);
+            const headers = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ "Content-Type": "application/json" }, (apiKey ? { "X-API-Key": apiKey } : {})), (bearerToken ? { "AUTHORIZATION": `Bearer ${bearerToken}` } : {})), (clientPlatform ? { "X-Client-Platform": clientPlatform } : {})), (grantToken ? { "X-Grant-Token": grantToken } : {})), (ngrokSkipBrowserWarning ? { "ngrok-skip-browser-warning": "true" } : {})), (_rwoDomain ? { "X-Source-Domain": _rwoDomain } : {})), extraHeaders);
             // Merge global custom headers (do not override existing keys from options.headers)
             for (const [k, v] of Object.entries(extraHeadersGlobal))
                 if (!(k in headers))
@@ -1510,6 +1554,8 @@ export async function del(path, extraHeaders) {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const _delDomain = getSourceDomain();
@@ -1552,6 +1598,8 @@ export function getApiHeaders() {
         headers["AUTHORIZATION"] = `Bearer ${bearerToken}`;
     if (clientPlatform)
         headers["X-Client-Platform"] = clientPlatform;
+    if (grantToken)
+        headers["X-Grant-Token"] = grantToken;
     if (ngrokSkipBrowserWarning)
         headers["ngrok-skip-browser-warning"] = "true";
     const sourceDomain = getSourceDomain();

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { initializeApi, isInitialized, hasAuthCredentials, configureSdkCache, invalidateCache, request, post, put, patch, del, sendCustomProxyMessage, getApiHeaders, isProxyEnabled, setBearerToken, getBearerToken } from "./http";
+export { initializeApi, isInitialized, hasAuthCredentials, configureSdkCache, invalidateCache, request, post, put, patch, del, sendCustomProxyMessage, getApiHeaders, isProxyEnabled, setBearerToken, getBearerToken, setGrantToken, getGrantToken } from "./http";
 export * from "./api";
 export * from "./types";
 export { iframe } from "./iframe";
@@ -17,7 +17,7 @@ export type { AdditionalGtin, ISODateString, JsonPrimitive, JsonValue, ProductCr
 export type { TranslationLookupMode, TranslationContentType, TranslationQuality, TranslationItemStatus, TranslationContextValue, TranslationContext, TranslationLookupRequestBase, TranslationLookupSingleRequest, TranslationLookupBatchRequest, TranslationLookupRequest, TranslationLookupItem, TranslationLookupResponse, ResolvedTranslationItem, ResolvedTranslationResponse, TranslationHashOptions, TranslationResolveOptions, TranslationRecord, TranslationListParams, TranslationListResponse, TranslationUpdateRequest, } from "./types/translations";
 export type { FacetBucket, FacetDefinition, FacetDefinitionWriteInput, FacetGetParams, FacetListParams, FacetListResponse, FacetNamespaceListResponse, FacetQueryRequest, FacetQueryResponse, FacetValue, FacetValueDefinition, FacetValueGetParams, FacetValueListParams, FacetValueListResponse, FacetValueResponse, FacetValueWriteInput, PublicFacetListParams, } from "./types/facets";
 export type { Collection, CollectionResponse, CollectionCreateRequest, CollectionUpdateRequest, DomainTarget, HubAvailabilityResponse, } from "./types/collection";
-export type { Proof, ProofResponse, ProofCreateRequest, ProofUpdateRequest, ProofClaimRequest, } from "./types/proof";
+export type { Proof, ProofResponse, ProofCreateRequest, ProofUpdateRequest, ProofClaimRequest, ProofGrant, GrantScope, GrantAudience, CreateGrantOptions, RedeemGrantOptions, RedeemGrantResult, } from "./types/proof";
 export type { QrShortCodeLookupResponse, } from "./types/qr";
 export type { ReverseTagLookupParams, ReverseTagLookupResponse, } from "./types/tags";
 export type { AdminMobileCapability, ActionableCapability, AdminMobileHostId, AdminMobileEvent, AdminMobileEventCallback, AdminMobileEventSubscriber, ScannerEventSubscriber, // @deprecated — use AdminMobileEventCallback

package/dist/index.js

@@ -1,6 +1,6 @@
 // src/index.ts
 // Top-level entrypoint of the npm package. Re-export initializeApi + all namespaces.
-export { initializeApi, isInitialized, hasAuthCredentials, configureSdkCache, invalidateCache, request, post, put, patch, del, sendCustomProxyMessage, getApiHeaders, isProxyEnabled, setBearerToken, getBearerToken } from "./http";
+export { initializeApi, isInitialized, hasAuthCredentials, configureSdkCache, invalidateCache, request, post, put, patch, del, sendCustomProxyMessage, getApiHeaders, isProxyEnabled, setBearerToken, getBearerToken, setGrantToken, getGrantToken } from "./http";
 export * from "./api";
 export * from "./types";
 // Iframe namespace

package/dist/openapi.yaml

@@ -12183,6 +12183,90 @@ paths:
           application/json:
             schema:
               $ref: "#/components/schemas/ProofClaimRequest"
+  /public/collection/{collectionId}/product/{productId}/proof/{proofId}/grant/redeem:
+    post:
+      tags:
+        - proof
+      summary: Redeem a grant token (anonymous or signed-in).
+      operationId: proof_redeemGrant
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: productId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: proofId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/RedeemGrantResult"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/RedeemGrantOptions"
+  /public/collection/{collectionId}/product/{productId}/proof/{proofId}/grant/{grantId}:
+    delete:
+      tags:
+        - proof
+      summary: Revoke a grant by id (owner / collection admin only).
+      operationId: proof_revokeGrant
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: productId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: proofId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: grantId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: true
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
   /public/collection/{collectionId}/products/{productId}/createClaim:
     post:
       tags:
@@ -13857,6 +13941,23 @@ paths:
           required: false
           schema:
             type: string
+        - name: parentIds
+          in: query
+          required: false
+          schema:
+            type: array
+            items:
+              type: string
+        - name: proofId
+          in: query
+          required: false
+          schema:
+            type: string
+        - name: productId
+          in: query
+          required: false
+          schema:
+            type: string
         - name: tag
           in: query
           required: false
@@ -14098,6 +14199,52 @@ paths:
           application/json:
             schema:
               $ref: "#/components/schemas/ReplyInput"
+  /{zone}/collection/{collectionId}/app/{appId}/threads/{threadId}/reply/{replyId}:
+    delete:
+      tags:
+        - threads
+      summary: Delete a single reply from a thread by its reply id (moderation).
+      operationId: threads_deleteReply
+      security: []
+      parameters:
+        - name: zone
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: appId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: threadId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: replyId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AppThread"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
 components:
   securitySchemes:
     bearerAuth:
@@ -16883,6 +17030,8 @@ components:
         admin:
           type: object
           additionalProperties: true
+        firstReply:
+          $ref: "#/components/schemas/ReplyInput"
     UpdateThreadInput:
       type: object
       properties:
@@ -16928,6 +17077,14 @@ components:
           type: string
         parentId:
           type: string
+        parentIds:
+          type: array
+          items:
+            type: string
+        proofId:
+          type: string
+        productId:
+          type: string
         tag:
           type: string
         contactId:
@@ -24865,6 +25022,80 @@ components:
             $ref: "#/components/schemas/ProofFieldDef"
       required:
         - fields
+    GrantAudience:
+      type: object
+      properties:
+        kind:
+          type: string
+          enum:
+            - public_link
+            - named
+        email:
+          type: string
+        userId:
+          type: string
+      required:
+        - kind
+    ProofGrant:
+      type: object
+      properties:
+        grantId:
+          type: string
+        proofId:
+          type: string
+        productId:
+          type: string
+        scope:
+          type: array
+          items:
+            $ref: "#/components/schemas/GrantScope"
+        audience:
+          $ref: "#/components/schemas/GrantAudience"
+        createdBy:
+          type: string
+        expiresAt:
+          type: string
+        revokedAt:
+          type: string
+        redeemedBy:
+          type: object
+          additionalProperties: true
+        redeemCount:
+          type: number
+        createdAt:
+          type: string
+        updatedAt:
+          type: string
+        token:
+          type: string
+      required:
+        - grantId
+        - proofId
+        - scope
+        - audience
+        - createdBy
+        - redeemCount
+        - createdAt
+        - updatedAt
+    CreateGrantOptions:
+      type: object
+      properties:
+        scope:
+          type: array
+          items:
+            $ref: "#/components/schemas/GrantScope"
+        audience:
+          $ref: "#/components/schemas/GrantAudience"
+        expiresAt:
+          type: object
+          additionalProperties: true
+      required:
+        - scope
+    RedeemGrantOptions:
+      type: object
+      properties:
+        guestName:
+          type: string
     ProofResponse:
       type: object
       additionalProperties: true