@proveanything/smartlinks 1.16.1 → 1.16.3

package/dist/api/proof.d.ts

@@ -1,4 +1,4 @@
-import { ProofResponse, ProofCreateRequest, ProofUpdateRequest, ProofClaimRequest, ProofGrant, CreateGrantOptions, RedeemGrantOptions, RedeemGrantResult, ProofTransfer, TransferProofOptions, TransferProofResult } from "../types/proof";
+import { ProofResponse, ProofCreateRequest, ProofUpdateRequest, ProofValuesUpdateRequest, ProofClaimRequest, ProofGrant, CreateGrantOptions, RedeemGrantOptions, RedeemGrantResult, ProofTransfer, TransferProofOptions, TransferProofResult } from "../types/proof";
 export declare namespace proof {
     /**
      * Retrieves a single Proof by Collection ID, Product ID, and Proof ID.
@@ -42,6 +42,27 @@ export declare namespace proof {
      * Object zones deep-merge, so you can change one field without wiping the rest.
      */
     function update(collectionId: string, productId: string, proofId: string, values: ProofUpdateRequest): Promise<ProofResponse>;
+    /**
+     * Owner self-service update of a proof's owner-writable data.
+     * PUT /public/collection/:collectionId/product/:productId/proof/:proofId/values
+     *
+     * The public counterpart to admin `update` — the current OWNER (or a collection
+     * admin) editing their own proof, no admin credentials required. Only owner-writable
+     * zones are honoured (see {@link ProofValuesUpdateRequest}):
+     * ```ts
+     * proof.updateValues(collectionId, productId, proofId, {
+     *   colour:   'blue',            // → proof.values.colour   (public)
+     *   owner:    { warranty: '2y' }, // → proof.values.owner    (owner-scoped)
+     *   personal: { nickname: 'Bo' }, // → proof.values.personal[callerUid] (private, own slot only)
+     * })
+     * ```
+     * `personal` always targets the caller's OWN slot — you cannot write another
+     * user's personal data, even as an admin. Object zones deep-merge (owner/personal
+     * merge field-by-field), so you can change one field without wiping the rest.
+     * Business-only zones (`data`/`admin`/`private`) are not writable here — use the
+     * admin `update` for those.
+     */
+    function updateValues(collectionId: string, productId: string, proofId: string, values: ProofValuesUpdateRequest): Promise<ProofResponse>;
     /**
      * Claim a proof for a product using a proof ID (serial number, NFC tag, etc.).
      * PUT /public/collection/:collectionId/product/:productId/proof/:proofId/claim

package/dist/api/proof.js

@@ -64,6 +64,31 @@ export var proof;
         return put(path, values);
     }
     proof.update = update;
+    /**
+     * Owner self-service update of a proof's owner-writable data.
+     * PUT /public/collection/:collectionId/product/:productId/proof/:proofId/values
+     *
+     * The public counterpart to admin `update` — the current OWNER (or a collection
+     * admin) editing their own proof, no admin credentials required. Only owner-writable
+     * zones are honoured (see {@link ProofValuesUpdateRequest}):
+     * ```ts
+     * proof.updateValues(collectionId, productId, proofId, {
+     *   colour:   'blue',            // → proof.values.colour   (public)
+     *   owner:    { warranty: '2y' }, // → proof.values.owner    (owner-scoped)
+     *   personal: { nickname: 'Bo' }, // → proof.values.personal[callerUid] (private, own slot only)
+     * })
+     * ```
+     * `personal` always targets the caller's OWN slot — you cannot write another
+     * user's personal data, even as an admin. Object zones deep-merge (owner/personal
+     * merge field-by-field), so you can change one field without wiping the rest.
+     * Business-only zones (`data`/`admin`/`private`) are not writable here — use the
+     * admin `update` for those.
+     */
+    async function updateValues(collectionId, productId, proofId, values) {
+        const path = `/public/collection/${encodeURIComponent(collectionId)}/product/${encodeURIComponent(productId)}/proof/${encodeURIComponent(proofId)}/values`;
+        return put(path, values);
+    }
+    proof.updateValues = updateValues;
     /**
      * Claim a proof for a product using a proof ID (serial number, NFC tag, etc.).
      * PUT /public/collection/:collectionId/product/:productId/proof/:proofId/claim

package/dist/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 1.16.1  |  Generated: 2026-09-01T15:57:41.258Z
+Version: 1.16.3  |  Generated: 2026-09-05T10:57:07.719Z
 
 This is a concise summary of all available API functions and types.
 
@@ -3058,63 +3058,6 @@ interface AccountInfoResponse {
 
 ### authKit
 
-**AuthTelemetryEvent** (interface)
-```typescript
-interface AuthTelemetryEvent {
-  eventId: string
-  correlationId: string
-  clientId: string
-  collectionId?: string
-  type: AuthEventType
-  flow: AuthFlow
-  ts: string
-  durationMs?: number
-  outcome?: 'success' | 'error' | 'stalled' | 'abandoned'
-  error?: {
-  code?: string
-  statusCode?: number
-  message?: string
-  name?: string
-  stack?: string
-  endpoint?: string
-  }
-  context: {
-  sdkVersion: string
-  authKitVersion: string
-  mode: 'standalone' | 'embedded' | 'proxy' | 'native'
-  route?: string
-  deepLinkMode?: string
-  userAgent: string
-  platform?: string
-  language?: string
-  online: boolean
-  viewport?: { w: number; h: number }
-  darkMode?: boolean
-  }
-  subject?: { uid?: string; emailHash?: string }
-}
-```
-
-**TelemetryIngestResponse** (interface)
-```typescript
-interface TelemetryIngestResponse {
-  accepted: number
-  rejected: number
-  rejectedIds: string[]
-}
-```
-
-**AuthKitTelemetryConfig** (interface)
-```typescript
-interface AuthKitTelemetryConfig {
-  enabled?: boolean
-  successSampleRate?: number
-  captureJsErrors?: boolean
-  stallThresholdMs?: number
-  retentionDays?: number
-}
-```
-
 **AuthKitUser** (interface)
 ```typescript
 interface AuthKitUser {
@@ -3578,10 +3521,6 @@ interface AuthKitLockoutPolicy {
 }
 ```
 
-**AuthEventType** = ``
-
-**AuthFlow** = ``
-
 **RefreshErrorCode** = ``
 
 **AuthKitErrorCode** = ``
@@ -3610,20 +3549,25 @@ interface FirebaseTimestamp {
 ```typescript
 interface BatchResponse {
   id: string                      // Batch ID
-  name?: string                   // Batch name
-  expiryDate?: FirebaseTimestamp | string  // Firebase timestamp or ISO 8601 date
-  productId?: string              // Product ID (for collection-level searches)
+  name?: string | null            // Batch name
+  expiryDate?: string | null
+  productId?: string              // Product ID
   collectionId?: string           // Collection ID
-  [key: string]: any              // Additional batch fields
+  createdAt?: string              // ISO 8601
+  updatedAt?: string              // ISO 8601
+  deleted?: boolean
+  deletedAt?: string              // ISO 8601
+  admin?: Record<string, any>
+  [key: string]: any              // Additional (schemaless) batch fields
 }
 ```
 
 **BatchCreateRequest** (interface)
 ```typescript
 interface BatchCreateRequest {
-  id: string                      // Batch ID
-  name?: string                   // Batch name
-  expiryDate?: FirebaseTimestamp | string  // Firebase timestamp or ISO 8601 date
+  id?: string
+  name?: string
+  expiryDate?: FirebaseTimestamp | string | Date
   [key: string]: any              // Additional batch fields
 }
 ```
@@ -3631,8 +3575,8 @@ interface BatchCreateRequest {
 **BatchUpdateRequest** (interface)
 ```typescript
 interface BatchUpdateRequest {
-  name?: string                   // Batch name
-  expiryDate?: FirebaseTimestamp | string  // Firebase timestamp or ISO 8601 date
+  name?: string
+  expiryDate?: FirebaseTimestamp | string | Date
   [key: string]: any              // Additional batch fields
 }
 ```
@@ -7494,6 +7438,9 @@ interface ProductFieldsConfig {
 ```typescript
 interface ProofValues {
   [key: string]: JsonValue | Record<string, JsonValue> | Record<string, Record<string, JsonValue>> | undefined
+  * Owner-scoped: read/write by business + current owner; transfers with ownership.
+  * Read exception: while the proof is `claimable`, this bag is also readable by everyone
+  * (so a prospective claimer sees pre-set owner data); it reverts to owner-only once claimed.
   owner?: Record<string, JsonValue>
   personal?: Record<string, Record<string, JsonValue>>
 }
@@ -7552,6 +7499,15 @@ interface ProofCreateRequest {
 }
 ```
 
+**ProofValuesUpdateRequest** (interface)
+```typescript
+interface ProofValuesUpdateRequest {
+  [key: string]: JsonValue | Record<string, JsonValue> | undefined
+  owner?: Record<string, JsonValue>
+  personal?: Record<string, JsonValue>
+}
+```
+
 **ProofFieldsConfig** (interface)
 ```typescript
 interface ProofFieldsConfig {
@@ -8214,11 +8170,38 @@ interface TranslationUpdateRequest {
 
 ### variant
 
-**VariantResponse** = `any`
+**VariantResponse** (interface)
+```typescript
+interface VariantResponse {
+  id: string
+  name?: string | null
+  productId?: string
+  collectionId?: string
+  createdAt?: string              // ISO 8601
+  updatedAt?: string              // ISO 8601
+  deleted?: boolean
+  deletedAt?: string              // ISO 8601
+  admin?: Record<string, any>
+  [key: string]: any              // Additional (schemaless) variant fields
+}
+```
 
-**VariantCreateRequest** = `any`
+**VariantCreateRequest** (interface)
+```typescript
+interface VariantCreateRequest {
+  id?: string
+  name?: string
+  [key: string]: any
+}
+```
 
-**VariantUpdateRequest** = `any`
+**VariantUpdateRequest** (interface)
+```typescript
+interface VariantUpdateRequest {
+  name?: string
+  [key: string]: any
+}
+```
 
 ### widgets
 
@@ -10370,6 +10353,12 @@ Create a proof for a product (admin only). POST /admin/collection/:collectionId/
     values: ProofUpdateRequest) → `Promise<ProofResponse>`
 Update a proof for a product (admin only). PUT /admin/collection/:collectionId/product/:productId/proof/:proofId Pass the fields to change **at the root**, keyed by zone (see {@link ProofWrite}): ```ts proof.update(collectionId, productId, proofId, { data:   { serialNo: 1002 },   // → proof.data (admin-only writable) values: { colour: 'blue' },   // → proof.values }) ``` Object zones deep-merge, so you can change one field without wiping the rest.
 
+**updateValues**(collectionId: string,
+    productId: string,
+    proofId: string,
+    values: ProofValuesUpdateRequest) → `Promise<ProofResponse>`
+Owner self-service update of a proof's owner-writable data. PUT /public/collection/:collectionId/product/:productId/proof/:proofId/values The public counterpart to admin `update` — the current OWNER (or a collection admin) editing their own proof, no admin credentials required. Only owner-writable zones are honoured (see {@link ProofValuesUpdateRequest}): ```ts proof.updateValues(collectionId, productId, proofId, { colour:   'blue',            // → proof.values.colour   (public) owner:    { warranty: '2y' }, // → proof.values.owner    (owner-scoped) personal: { nickname: 'Bo' }, // → proof.values.personal[callerUid] (private, own slot only) }) ``` `personal` always targets the caller's OWN slot — you cannot write another user's personal data, even as an admin. Object zones deep-merge (owner/personal merge field-by-field), so you can change one field without wiping the rest. Business-only zones (`data`/`admin`/`private`) are not writable here — use the admin `update` for those.
+
 **claim**(collectionId: string,
     productId: string,
     proofId: string,

package/dist/docs/proof-product-data-scoping.md

@@ -37,7 +37,8 @@ proof.admin = { … }        // BUSINESS-ONLY → read: business,       write: b
 proof.values = {           // consumer bag — owner + business-writable
   <anyKey>: …,              // PUBLIC        → read: everyone,
                              //                write: business + current owner
-  owner: { … },              // OWNER-SCOPED  → read: business + current owner,
+  owner: { … },              // OWNER-SCOPED  → read: business + current owner
+                             //                (also everyone while `claimable`, see below),
                              //                write: business + current owner,
                              //                transfers with ownership
   personal: {                // PER-USER      → read/write: only the specific user,
@@ -75,10 +76,12 @@ The field-config editor and SDK write helpers MUST reject attempts to create top
 | `proof.data.*`                    |         ✅          |             ✅             |       ✅       |        ✅       |
 | `proof.admin.*`                   |         ❌          |             ❌             |       ❌       |        ✅       |
 | `proof.values.<publicKey>`        |         ✅          |             ✅             |       ✅       |        ✅       |
-| `proof.values.owner.*`            |         ❌          |             ❌             |       ✅       |        ✅       |
+| `proof.values.owner.*`            |        ❌ †         |            ❌ †            |       ✅       |        ✅       |
 | `proof.values.personal[me].*`     |         ❌          |     ✅ (own slot only)     | ✅ (own slot)  | ❌ (see note)   |
 | `proof.values.personal[other].*`  |         ❌          |             ❌             |       ❌       | ❌ (see note)   |
 
+> **† Claimable exception (`proof.values.owner.*`):** while a proof is **claimable** (`proof.claimable === true` *or* `proof.values.claimable === true`), its `owner` bag is returned to **everyone** — public/anonymous and authenticated non-owners included — so a prospective claimer can see pre-set owner data before claiming. Once the proof is claimed (`claimable` flips off) it reverts to owner-only (unless re-marked claimable). This is **read-only** exposure — write authority is unchanged (still owner + business). Implication: don't put anything in `values.owner` on a claimable proof that shouldn't be visible before it's claimed.
+>
 > **Note on `personal`:** the default rule is that `personal` slots are readable *only* by the user whose `userId` matches the slot key — not even business admins. If the platform ever needs an admin-visible variant, it should be a separate mechanism, not a relaxation of this rule.
 
 ## Who writes what (authority matrix)

package/dist/openapi.yaml

@@ -12643,6 +12643,48 @@ paths:
           description: Unauthorized
         404:
           description: Not found
+  /public/collection/{collectionId}/product/{productId}/proof/{proofId}/values:
+    put:
+      tags:
+        - proof
+      summary: proof.updateValues
+      operationId: proof_updateValues
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: productId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: proofId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ProofResponse"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/ProofValuesUpdateRequest"
   /public/collection/{collectionId}/products/{productId}/createClaim:
     post:
       tags:
@@ -19137,122 +19179,6 @@ components:
         - auth_time
         - iat
         - features
-    AuthTelemetryEvent:
-      type: object
-      properties:
-        eventId:
-          type: string
-        correlationId:
-          type: string
-        clientId:
-          type: string
-        collectionId:
-          type: string
-        type:
-          $ref: "#/components/schemas/AuthEventType"
-        flow:
-          $ref: "#/components/schemas/AuthFlow"
-        ts:
-          type: string
-        durationMs:
-          type: number
-        outcome:
-          type: string
-          enum:
-            - success
-            - error
-            - stalled
-            - abandoned
-        error:
-          type: object
-          additionalProperties: true
-        code:
-          type: string
-        statusCode:
-          type: number
-        message:
-          type: string
-        name:
-          type: string
-        stack:
-          type: string
-        endpoint:
-          type: string
-        context:
-          type: object
-          additionalProperties: true
-        sdkVersion:
-          type: string
-        authKitVersion:
-          type: string
-        mode:
-          type: string
-          enum:
-            - standalone
-            - embedded
-            - proxy
-            - native
-        route:
-          type: string
-        deepLinkMode:
-          type: string
-        userAgent:
-          type: string
-        platform:
-          type: string
-        language:
-          type: string
-        online:
-          type: boolean
-        viewport:
-          type: object
-          additionalProperties: true
-        darkMode:
-          type: boolean
-        subject:
-          type: object
-          additionalProperties: true
-      required:
-        - eventId
-        - correlationId
-        - clientId
-        - type
-        - flow
-        - ts
-        - context
-        - sdkVersion
-        - authKitVersion
-        - mode
-        - userAgent
-        - online
-    TelemetryIngestResponse:
-      type: object
-      properties:
-        accepted:
-          type: number
-        rejected:
-          type: number
-        rejectedIds:
-          type: array
-          items:
-            type: string
-      required:
-        - accepted
-        - rejected
-        - rejectedIds
-    AuthKitTelemetryConfig:
-      type: object
-      properties:
-        enabled:
-          type: boolean
-        successSampleRate:
-          type: number
-        captureJsErrors:
-          type: boolean
-        stallThresholdMs:
-          type: number
-        retentionDays:
-          type: number
     AuthKitUser:
       type: object
       properties:
@@ -19958,12 +19884,22 @@ components:
         name:
           type: string
         expiryDate:
-          type: object
-          additionalProperties: true
+          type: string
         productId:
           type: string
         collectionId:
           type: string
+        createdAt:
+          type: string
+        updatedAt:
+          type: string
+        deleted:
+          type: boolean
+        deletedAt:
+          type: string
+        admin:
+          type: object
+          additionalProperties: true
       required:
         - id
     BatchCreateRequest:
@@ -19976,8 +19912,6 @@ components:
         expiryDate:
           type: object
           additionalProperties: true
-      required:
-        - id
     BatchUpdateRequest:
       type: object
       properties:
@@ -25772,6 +25706,17 @@ components:
           type: object
           additionalProperties:
             $ref: "#/components/schemas/JsonValue"
+    ProofValuesUpdateRequest:
+      type: object
+      properties:
+        owner:
+          type: object
+          additionalProperties:
+            $ref: "#/components/schemas/JsonValue"
+        personal:
+          type: object
+          additionalProperties:
+            $ref: "#/components/schemas/JsonValue"
     ProofFieldsConfig:
       type: object
       properties:
@@ -26806,6 +26751,42 @@ components:
         metadata:
           type: object
           additionalProperties: true
+    VariantResponse:
+      type: object
+      properties:
+        id:
+          type: string
+        name:
+          type: string
+        productId:
+          type: string
+        collectionId:
+          type: string
+        createdAt:
+          type: string
+        updatedAt:
+          type: string
+        deleted:
+          type: boolean
+        deletedAt:
+          type: string
+        admin:
+          type: object
+          additionalProperties: true
+      required:
+        - id
+    VariantCreateRequest:
+      type: object
+      properties:
+        id:
+          type: string
+        name:
+          type: string
+    VariantUpdateRequest:
+      type: object
+      properties:
+        name:
+          type: string
     NavigationRequest:
       type: object
       properties:

package/dist/types/batch.d.ts

@@ -1,28 +1,39 @@
 /**
- * Firebase Timestamp object.
+ * @deprecated Batches moved to Postgres — dates now come back as ISO 8601 strings, never
+ * Firestore Timestamp objects. Kept only so request bodies can still pass a legacy value.
  */
 export interface FirebaseTimestamp {
     seconds: number;
     nanoseconds?: number;
 }
 /**
- * Represents a Batch object.
+ * Represents a Batch object. Dates are **ISO 8601 strings**.
  */
 export interface BatchResponse {
     id: string;
-    name?: string;
-    expiryDate?: FirebaseTimestamp | string;
+    name?: string | null;
+    /** ISO 8601 date-time (was a Firebase Timestamp; now normalised to a string). */
+    expiryDate?: string | null;
     productId?: string;
     collectionId?: string;
+    createdAt?: string;
+    updatedAt?: string;
+    /** Present only on soft-deleted batches. */
+    deleted?: boolean;
+    deletedAt?: string;
+    /** Admin-only zone (e.g. `lastSerialId`). Returned on admin reads only — never on public reads. */
+    admin?: Record<string, any>;
     [key: string]: any;
 }
 /**
  * Request payload for creating a new batch.
  */
 export interface BatchCreateRequest {
-    id: string;
+    /** @deprecated Ignored — the server generates the batch id. */
+    id?: string;
     name?: string;
-    expiryDate?: FirebaseTimestamp | string;
+    /** A `Date`, ISO 8601 string, or legacy Firebase Timestamp — all accepted. */
+    expiryDate?: FirebaseTimestamp | string | Date;
     [key: string]: any;
 }
 /**
@@ -30,7 +41,7 @@ export interface BatchCreateRequest {
  */
 export interface BatchUpdateRequest {
     name?: string;
-    expiryDate?: FirebaseTimestamp | string;
+    expiryDate?: FirebaseTimestamp | string | Date;
     [key: string]: any;
 }
 /**

package/dist/types/proof.d.ts

@@ -7,7 +7,11 @@ import { JsonValue, ScopedFieldDef } from './product';
  */
 export interface ProofValues {
     [key: string]: JsonValue | Record<string, JsonValue> | Record<string, Record<string, JsonValue>> | undefined;
-    /** Owner-scoped: read/write by business + current owner; transfers with ownership. */
+    /**
+     * Owner-scoped: read/write by business + current owner; transfers with ownership.
+     * Read exception: while the proof is `claimable`, this bag is also readable by everyone
+     * (so a prospective claimer sees pre-set owner data); it reverts to owner-only once claimed.
+     */
     owner?: Record<string, JsonValue>;
     /** Per-user: read/write only by the matching userId; not visible to the next owner, not even business admins. */
     personal?: Record<string, Record<string, JsonValue>>;
@@ -111,6 +115,27 @@ export interface ProofCreateRequest {
 export type ProofUpdateRequest = Partial<ProofWrite> & {
     proof?: ProofWrite;
 };
+/**
+ * Body for the owner self-service values write (`proof.updateValues`), the
+ * public counterpart to the admin `update`. The caller must be the current
+ * owner (or a collection admin). Only owner-writable zones are honoured:
+ *
+ * - flat keys        → `proof.values.<key>` (public data)
+ * - `owner`          → merged into `proof.values.owner` (owner-scoped)
+ * - `personal`       → merged into `proof.values.personal[callerUid]` — the
+ *                      caller's OWN private slot only, never another user's
+ *                      (owner-only, non-transferring; not even admins can
+ *                      write someone else's slot)
+ *
+ * `private` / `proof` sub-keys are business-only and are ignored here.
+ */
+export interface ProofValuesUpdateRequest {
+    [key: string]: JsonValue | Record<string, JsonValue> | undefined;
+    /** Owner-scoped data, merged into `proof.values.owner`. */
+    owner?: Record<string, JsonValue>;
+    /** The caller's own private slot, merged into `proof.values.personal[callerUid]`. */
+    personal?: Record<string, JsonValue>;
+}
 export type ProofClaimRequest = Record<string, any>;
 /**
  * `'public'` (default, omitted) reads/writes `proof.values[key]`.

package/dist/types/variant.d.ts

@@ -1,12 +1,33 @@
 /**
- * Represents a Variant object.
+ * Represents a Variant object. Dates are ISO 8601 strings (Postgres-backed).
  */
-export type VariantResponse = any;
+export interface VariantResponse {
+    id: string;
+    name?: string | null;
+    productId?: string;
+    collectionId?: string;
+    createdAt?: string;
+    updatedAt?: string;
+    /** Present only on soft-deleted variants. */
+    deleted?: boolean;
+    deletedAt?: string;
+    /** Admin-only zone (e.g. `lastSerialId`). Admin reads only — never on public reads. */
+    admin?: Record<string, any>;
+    [key: string]: any;
+}
 /**
  * Request payload for creating a new variant.
  */
-export type VariantCreateRequest = any;
+export interface VariantCreateRequest {
+    /** @deprecated Ignored — the server generates the variant id. (Use PUT with an id to choose one.) */
+    id?: string;
+    name?: string;
+    [key: string]: any;
+}
 /**
- * Request payload for updating an existing variant.
+ * Request payload for updating a variant. PUT with a new id creates it (upsert).
  */
-export type VariantUpdateRequest = any;
+export interface VariantUpdateRequest {
+    name?: string;
+    [key: string]: any;
+}

package/dist/utils/paths.js

@@ -110,13 +110,9 @@ export function buildPortalPath(params) {
         // Batch object - extract id and expiryDate
         extractedBatchId = batch.id;
         if (batch.expiryDate) {
-            // Handle Firebase timestamp or Date
-            if (typeof batch.expiryDate === 'object' && 'seconds' in batch.expiryDate) {
-                expiryDate = new Date(batch.expiryDate.seconds * 1000);
-            }
-            else {
-                expiryDate = batch.expiryDate;
-            }
+            // Now an ISO string, but stay defensive about a legacy Firebase Timestamp object.
+            const exp = batch.expiryDate;
+            expiryDate = (exp && typeof exp === 'object' && 'seconds' in exp) ? new Date(exp.seconds * 1000) : exp;
         }
     }
     else if (batchId) {

package/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 1.16.1  |  Generated: 2026-09-01T15:57:41.258Z
+Version: 1.16.3  |  Generated: 2026-09-05T10:57:07.719Z
 
 This is a concise summary of all available API functions and types.
 
@@ -3058,63 +3058,6 @@ interface AccountInfoResponse {
 
 ### authKit
 
-**AuthTelemetryEvent** (interface)
-```typescript
-interface AuthTelemetryEvent {
-  eventId: string
-  correlationId: string
-  clientId: string
-  collectionId?: string
-  type: AuthEventType
-  flow: AuthFlow
-  ts: string
-  durationMs?: number
-  outcome?: 'success' | 'error' | 'stalled' | 'abandoned'
-  error?: {
-  code?: string
-  statusCode?: number
-  message?: string
-  name?: string
-  stack?: string
-  endpoint?: string
-  }
-  context: {
-  sdkVersion: string
-  authKitVersion: string
-  mode: 'standalone' | 'embedded' | 'proxy' | 'native'
-  route?: string
-  deepLinkMode?: string
-  userAgent: string
-  platform?: string
-  language?: string
-  online: boolean
-  viewport?: { w: number; h: number }
-  darkMode?: boolean
-  }
-  subject?: { uid?: string; emailHash?: string }
-}
-```
-
-**TelemetryIngestResponse** (interface)
-```typescript
-interface TelemetryIngestResponse {
-  accepted: number
-  rejected: number
-  rejectedIds: string[]
-}
-```
-
-**AuthKitTelemetryConfig** (interface)
-```typescript
-interface AuthKitTelemetryConfig {
-  enabled?: boolean
-  successSampleRate?: number
-  captureJsErrors?: boolean
-  stallThresholdMs?: number
-  retentionDays?: number
-}
-```
-
 **AuthKitUser** (interface)
 ```typescript
 interface AuthKitUser {
@@ -3578,10 +3521,6 @@ interface AuthKitLockoutPolicy {
 }
 ```
 
-**AuthEventType** = ``
-
-**AuthFlow** = ``
-
 **RefreshErrorCode** = ``
 
 **AuthKitErrorCode** = ``
@@ -3610,20 +3549,25 @@ interface FirebaseTimestamp {
 ```typescript
 interface BatchResponse {
   id: string                      // Batch ID
-  name?: string                   // Batch name
-  expiryDate?: FirebaseTimestamp | string  // Firebase timestamp or ISO 8601 date
-  productId?: string              // Product ID (for collection-level searches)
+  name?: string | null            // Batch name
+  expiryDate?: string | null
+  productId?: string              // Product ID
   collectionId?: string           // Collection ID
-  [key: string]: any              // Additional batch fields
+  createdAt?: string              // ISO 8601
+  updatedAt?: string              // ISO 8601
+  deleted?: boolean
+  deletedAt?: string              // ISO 8601
+  admin?: Record<string, any>
+  [key: string]: any              // Additional (schemaless) batch fields
 }
 ```
 
 **BatchCreateRequest** (interface)
 ```typescript
 interface BatchCreateRequest {
-  id: string                      // Batch ID
-  name?: string                   // Batch name
-  expiryDate?: FirebaseTimestamp | string  // Firebase timestamp or ISO 8601 date
+  id?: string
+  name?: string
+  expiryDate?: FirebaseTimestamp | string | Date
   [key: string]: any              // Additional batch fields
 }
 ```
@@ -3631,8 +3575,8 @@ interface BatchCreateRequest {
 **BatchUpdateRequest** (interface)
 ```typescript
 interface BatchUpdateRequest {
-  name?: string                   // Batch name
-  expiryDate?: FirebaseTimestamp | string  // Firebase timestamp or ISO 8601 date
+  name?: string
+  expiryDate?: FirebaseTimestamp | string | Date
   [key: string]: any              // Additional batch fields
 }
 ```
@@ -7494,6 +7438,9 @@ interface ProductFieldsConfig {
 ```typescript
 interface ProofValues {
   [key: string]: JsonValue | Record<string, JsonValue> | Record<string, Record<string, JsonValue>> | undefined
+  * Owner-scoped: read/write by business + current owner; transfers with ownership.
+  * Read exception: while the proof is `claimable`, this bag is also readable by everyone
+  * (so a prospective claimer sees pre-set owner data); it reverts to owner-only once claimed.
   owner?: Record<string, JsonValue>
   personal?: Record<string, Record<string, JsonValue>>
 }
@@ -7552,6 +7499,15 @@ interface ProofCreateRequest {
 }
 ```
 
+**ProofValuesUpdateRequest** (interface)
+```typescript
+interface ProofValuesUpdateRequest {
+  [key: string]: JsonValue | Record<string, JsonValue> | undefined
+  owner?: Record<string, JsonValue>
+  personal?: Record<string, JsonValue>
+}
+```
+
 **ProofFieldsConfig** (interface)
 ```typescript
 interface ProofFieldsConfig {
@@ -8214,11 +8170,38 @@ interface TranslationUpdateRequest {
 
 ### variant
 
-**VariantResponse** = `any`
+**VariantResponse** (interface)
+```typescript
+interface VariantResponse {
+  id: string
+  name?: string | null
+  productId?: string
+  collectionId?: string
+  createdAt?: string              // ISO 8601
+  updatedAt?: string              // ISO 8601
+  deleted?: boolean
+  deletedAt?: string              // ISO 8601
+  admin?: Record<string, any>
+  [key: string]: any              // Additional (schemaless) variant fields
+}
+```
 
-**VariantCreateRequest** = `any`
+**VariantCreateRequest** (interface)
+```typescript
+interface VariantCreateRequest {
+  id?: string
+  name?: string
+  [key: string]: any
+}
+```
 
-**VariantUpdateRequest** = `any`
+**VariantUpdateRequest** (interface)
+```typescript
+interface VariantUpdateRequest {
+  name?: string
+  [key: string]: any
+}
+```
 
 ### widgets
 
@@ -10370,6 +10353,12 @@ Create a proof for a product (admin only). POST /admin/collection/:collectionId/
     values: ProofUpdateRequest) → `Promise<ProofResponse>`
 Update a proof for a product (admin only). PUT /admin/collection/:collectionId/product/:productId/proof/:proofId Pass the fields to change **at the root**, keyed by zone (see {@link ProofWrite}): ```ts proof.update(collectionId, productId, proofId, { data:   { serialNo: 1002 },   // → proof.data (admin-only writable) values: { colour: 'blue' },   // → proof.values }) ``` Object zones deep-merge, so you can change one field without wiping the rest.
 
+**updateValues**(collectionId: string,
+    productId: string,
+    proofId: string,
+    values: ProofValuesUpdateRequest) → `Promise<ProofResponse>`
+Owner self-service update of a proof's owner-writable data. PUT /public/collection/:collectionId/product/:productId/proof/:proofId/values The public counterpart to admin `update` — the current OWNER (or a collection admin) editing their own proof, no admin credentials required. Only owner-writable zones are honoured (see {@link ProofValuesUpdateRequest}): ```ts proof.updateValues(collectionId, productId, proofId, { colour:   'blue',            // → proof.values.colour   (public) owner:    { warranty: '2y' }, // → proof.values.owner    (owner-scoped) personal: { nickname: 'Bo' }, // → proof.values.personal[callerUid] (private, own slot only) }) ``` `personal` always targets the caller's OWN slot — you cannot write another user's personal data, even as an admin. Object zones deep-merge (owner/personal merge field-by-field), so you can change one field without wiping the rest. Business-only zones (`data`/`admin`/`private`) are not writable here — use the admin `update` for those.
+
 **claim**(collectionId: string,
     productId: string,
     proofId: string,

package/docs/proof-product-data-scoping.md

@@ -37,7 +37,8 @@ proof.admin = { … }        // BUSINESS-ONLY → read: business,       write: b
 proof.values = {           // consumer bag — owner + business-writable
   <anyKey>: …,              // PUBLIC        → read: everyone,
                              //                write: business + current owner
-  owner: { … },              // OWNER-SCOPED  → read: business + current owner,
+  owner: { … },              // OWNER-SCOPED  → read: business + current owner
+                             //                (also everyone while `claimable`, see below),
                              //                write: business + current owner,
                              //                transfers with ownership
   personal: {                // PER-USER      → read/write: only the specific user,
@@ -75,10 +76,12 @@ The field-config editor and SDK write helpers MUST reject attempts to create top
 | `proof.data.*`                    |         ✅          |             ✅             |       ✅       |        ✅       |
 | `proof.admin.*`                   |         ❌          |             ❌             |       ❌       |        ✅       |
 | `proof.values.<publicKey>`        |         ✅          |             ✅             |       ✅       |        ✅       |
-| `proof.values.owner.*`            |         ❌          |             ❌             |       ✅       |        ✅       |
+| `proof.values.owner.*`            |        ❌ †         |            ❌ †            |       ✅       |        ✅       |
 | `proof.values.personal[me].*`     |         ❌          |     ✅ (own slot only)     | ✅ (own slot)  | ❌ (see note)   |
 | `proof.values.personal[other].*`  |         ❌          |             ❌             |       ❌       | ❌ (see note)   |
 
+> **† Claimable exception (`proof.values.owner.*`):** while a proof is **claimable** (`proof.claimable === true` *or* `proof.values.claimable === true`), its `owner` bag is returned to **everyone** — public/anonymous and authenticated non-owners included — so a prospective claimer can see pre-set owner data before claiming. Once the proof is claimed (`claimable` flips off) it reverts to owner-only (unless re-marked claimable). This is **read-only** exposure — write authority is unchanged (still owner + business). Implication: don't put anything in `values.owner` on a claimable proof that shouldn't be visible before it's claimed.
+>
 > **Note on `personal`:** the default rule is that `personal` slots are readable *only* by the user whose `userId` matches the slot key — not even business admins. If the platform ever needs an admin-visible variant, it should be a separate mechanism, not a relaxation of this rule.
 
 ## Who writes what (authority matrix)

package/openapi.yaml

@@ -12643,6 +12643,48 @@ paths:
           description: Unauthorized
         404:
           description: Not found
+  /public/collection/{collectionId}/product/{productId}/proof/{proofId}/values:
+    put:
+      tags:
+        - proof
+      summary: proof.updateValues
+      operationId: proof_updateValues
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: productId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: proofId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ProofResponse"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/ProofValuesUpdateRequest"
   /public/collection/{collectionId}/products/{productId}/createClaim:
     post:
       tags:
@@ -19137,122 +19179,6 @@ components:
         - auth_time
         - iat
         - features
-    AuthTelemetryEvent:
-      type: object
-      properties:
-        eventId:
-          type: string
-        correlationId:
-          type: string
-        clientId:
-          type: string
-        collectionId:
-          type: string
-        type:
-          $ref: "#/components/schemas/AuthEventType"
-        flow:
-          $ref: "#/components/schemas/AuthFlow"
-        ts:
-          type: string
-        durationMs:
-          type: number
-        outcome:
-          type: string
-          enum:
-            - success
-            - error
-            - stalled
-            - abandoned
-        error:
-          type: object
-          additionalProperties: true
-        code:
-          type: string
-        statusCode:
-          type: number
-        message:
-          type: string
-        name:
-          type: string
-        stack:
-          type: string
-        endpoint:
-          type: string
-        context:
-          type: object
-          additionalProperties: true
-        sdkVersion:
-          type: string
-        authKitVersion:
-          type: string
-        mode:
-          type: string
-          enum:
-            - standalone
-            - embedded
-            - proxy
-            - native
-        route:
-          type: string
-        deepLinkMode:
-          type: string
-        userAgent:
-          type: string
-        platform:
-          type: string
-        language:
-          type: string
-        online:
-          type: boolean
-        viewport:
-          type: object
-          additionalProperties: true
-        darkMode:
-          type: boolean
-        subject:
-          type: object
-          additionalProperties: true
-      required:
-        - eventId
-        - correlationId
-        - clientId
-        - type
-        - flow
-        - ts
-        - context
-        - sdkVersion
-        - authKitVersion
-        - mode
-        - userAgent
-        - online
-    TelemetryIngestResponse:
-      type: object
-      properties:
-        accepted:
-          type: number
-        rejected:
-          type: number
-        rejectedIds:
-          type: array
-          items:
-            type: string
-      required:
-        - accepted
-        - rejected
-        - rejectedIds
-    AuthKitTelemetryConfig:
-      type: object
-      properties:
-        enabled:
-          type: boolean
-        successSampleRate:
-          type: number
-        captureJsErrors:
-          type: boolean
-        stallThresholdMs:
-          type: number
-        retentionDays:
-          type: number
     AuthKitUser:
       type: object
       properties:
@@ -19958,12 +19884,22 @@ components:
         name:
           type: string
         expiryDate:
-          type: object
-          additionalProperties: true
+          type: string
         productId:
           type: string
         collectionId:
           type: string
+        createdAt:
+          type: string
+        updatedAt:
+          type: string
+        deleted:
+          type: boolean
+        deletedAt:
+          type: string
+        admin:
+          type: object
+          additionalProperties: true
       required:
         - id
     BatchCreateRequest:
@@ -19976,8 +19912,6 @@ components:
         expiryDate:
           type: object
           additionalProperties: true
-      required:
-        - id
     BatchUpdateRequest:
       type: object
       properties:
@@ -25772,6 +25706,17 @@ components:
           type: object
           additionalProperties:
             $ref: "#/components/schemas/JsonValue"
+    ProofValuesUpdateRequest:
+      type: object
+      properties:
+        owner:
+          type: object
+          additionalProperties:
+            $ref: "#/components/schemas/JsonValue"
+        personal:
+          type: object
+          additionalProperties:
+            $ref: "#/components/schemas/JsonValue"
     ProofFieldsConfig:
       type: object
       properties:
@@ -26806,6 +26751,42 @@ components:
         metadata:
           type: object
           additionalProperties: true
+    VariantResponse:
+      type: object
+      properties:
+        id:
+          type: string
+        name:
+          type: string
+        productId:
+          type: string
+        collectionId:
+          type: string
+        createdAt:
+          type: string
+        updatedAt:
+          type: string
+        deleted:
+          type: boolean
+        deletedAt:
+          type: string
+        admin:
+          type: object
+          additionalProperties: true
+      required:
+        - id
+    VariantCreateRequest:
+      type: object
+      properties:
+        id:
+          type: string
+        name:
+          type: string
+    VariantUpdateRequest:
+      type: object
+      properties:
+        name:
+          type: string
     NavigationRequest:
       type: object
       properties:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proveanything/smartlinks",
-  "version": "1.16.1",
+  "version": "1.16.3",
   "description": "Official JavaScript/TypeScript SDK for the Smartlinks API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",