@proveanything/smartlinks 2.0.18 → 2.0.20

package/dist/openapi.yaml

@@ -72,6 +72,8 @@ tags:
     description: Product facet querying and aggregation.
   - name: form
     description: Form definitions and submissions.
+  - name: functions
+    description: functions API
   - name: integrations
     description: Third-party integration flows and imports.
   - name: interactions
@@ -1081,6 +1083,39 @@ paths:
           application/json:
             schema:
               $ref: "#/components/schemas/AISearchPhotosRequest"
+  /admin/collection/{collectionId}/ai/sessions:
+    post:
+      tags:
+        - sessions
+      summary: Persisted AI assistant sessions (admin scope) — durable conversation history for admin/host assistants.
+      operationId: sessions_create
+      security:
+        - bearerAuth: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AiSession"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/AiSessionCreate"
   /admin/collection/{collectionId}/ai/sessions/stats:
     get:
       tags:
@@ -1108,6 +1143,77 @@ paths:
           description: Unauthorized
         404:
           description: Not found
+  /admin/collection/{collectionId}/ai/sessions/{id}:
+    get:
+      tags:
+        - sessions
+      summary: Get one session, including its full transcript.
+      operationId: sessions_get
+      security:
+        - bearerAuth: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AiSession"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+  /admin/collection/{collectionId}/ai/sessions/{id}/append:
+    post:
+      tags:
+        - sessions
+      summary: Append Responses items (input/output/tool) to a session — the manual-persistence path.
+      operationId: sessions_append
+      security:
+        - bearerAuth: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AiSession"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: true
   /admin/collection/{collectionId}/ai/skills:
     get:
       tags:
@@ -1196,6 +1302,33 @@ paths:
           description: Unauthorized
         404:
           description: Not found
+  /admin/collection/{collectionId}/ai/usage:
+    get:
+      tags:
+        - sessions
+      summary: AI usage / cost report for a collection, grouped by any of model/serviceTier/appId/feature/mode over an optional date window.
+      operationId: sessions_usage
+      security:
+        - bearerAuth: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AiUsageReport"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
   /admin/collection/{collectionId}/ai/v1/chat/completions:
     post:
       tags:
@@ -10294,9 +10427,9 @@ paths:
   /public/collection/{collectionId}/ai/rate-limit/{userId}:
     get:
       tags:
-        - publicClient
+        - sessions
       summary: Check rate limit status
-      operationId: publicClient_getRateLimit
+      operationId: sessions_getRateLimit
       security: []
       parameters:
         - name: collectionId
@@ -10353,12 +10486,113 @@ paths:
           description: Unauthorized
         404:
           description: Not found
+  /public/collection/{collectionId}/ai/sessions:
+    post:
+      tags:
+        - sessions
+      summary: sessions.create
+      operationId: sessions_create
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AiSession"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/AiSessionCreate"
+  /public/collection/{collectionId}/ai/sessions/{id}:
+    get:
+      tags:
+        - sessions
+      summary: sessions.get
+      operationId: sessions_get
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AiSession"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+  /public/collection/{collectionId}/ai/sessions/{id}/append:
+    post:
+      tags:
+        - sessions
+      summary: sessions.append
+      operationId: sessions_append
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AiSession"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              additionalProperties: true
   /public/collection/{collectionId}/ai/token:
     post:
       tags:
-        - publicClient
+        - sessions
       summary: Generate ephemeral token for Gemini Live
-      operationId: publicClient_getToken
+      operationId: sessions_getToken
       security: []
       parameters:
         - name: collectionId
@@ -11918,6 +12152,32 @@ paths:
           description: Unauthorized
         404:
           description: Not found
+  /public/collection/{collectionId}/functions:
+    get:
+      tags:
+        - functions
+      summary: List the public functions available for a collection (discovery).
+      operationId: functions_list
+      security: []
+      parameters:
+        - name: collectionId
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        200:
+          description: Success
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/FunctionListResponse"
+        400:
+          description: Bad request
+        401:
+          description: Unauthorized
+        404:
+          description: Not found
   /public/collection/{collectionId}/interactions:
     get:
       tags:
@@ -15244,6 +15504,10 @@ components:
             - standard
             - flex
             - priority
+        feature:
+          type: string
+        session_id:
+          type: string
         server_tools:
           type: array
           items:
@@ -15799,6 +16063,102 @@ components:
         - activeSessions
         - totalMessages
         - rateLimitedUsers
+    AiSession:
+      type: object
+      properties:
+        id:
+          type: string
+        collectionId:
+          type: string
+        appId:
+          type: string
+        scope:
+          $ref: "#/components/schemas/AiSessionScope"
+        title:
+          type: string
+        status:
+          type: string
+        ownerId:
+          type: string
+        authorId:
+          type: string
+        productId:
+          type: string
+        proofId:
+          type: string
+        feature:
+          type: string
+        items:
+          type: array
+          items:
+            $ref: "#/components/schemas/ResponseInputItem"
+        summary:
+          type: object
+          additionalProperties: true
+        usage:
+          type: object
+          additionalProperties: true
+        itemCount:
+          type: number
+        lastTurnAt:
+          type: string
+        createdAt:
+          type: string
+        updatedAt:
+          type: string
+        expiresAt:
+          type: string
+      required:
+        - id
+        - collectionId
+        - scope
+        - status
+        - items
+        - itemCount
+        - createdAt
+        - updatedAt
+    AiSessionCreate:
+      type: object
+      properties:
+        appId:
+          type: string
+        title:
+          type: string
+        productId:
+          type: string
+        proofId:
+          type: string
+        feature:
+          type: string
+        ttlMs:
+          type: number
+        items:
+          type: array
+          items:
+            $ref: "#/components/schemas/ResponseInputItem"
+    AiUsageReport:
+      type: object
+      properties:
+        groupBy:
+          type: array
+          items:
+            type: string
+        from:
+          type: string
+        to:
+          type: string
+        totals:
+          type: object
+          additionalProperties: true
+        groups:
+          type: array
+          items:
+            type: object
+            additionalProperties: true
+      required:
+        - groupBy
+        - totals
+        - groups
     VoiceSessionRequest:
       type: object
       properties:
@@ -16656,6 +17016,12 @@ components:
           additionalProperties: true
       required:
         - type
+    AiSessionScope:
+      type: string
+      enum:
+        - admin
+        - owner
+        - public
     AiToolCapability:
       type: string
       enum:
@@ -28931,6 +29297,23 @@ components:
           additionalProperties: true
       required:
         - valid
+    FunctionListEntry:
+      type: object
+      properties:
+        name:
+          type: object
+          additionalProperties: true
+      required:
+        - name
+    FunctionListResponse:
+      type: object
+      properties:
+        functions:
+          type: array
+          items:
+            $ref: "#/components/schemas/FunctionListEntry"
+      required:
+        - functions
     AllocateSequenceInput:
       type: object
       properties:

package/dist/testing/index.js

@@ -116,6 +116,12 @@ export function createFunctionTestContext(opts) {
                     throw new CapabilityError(`secrets:${ref}`);
                 return Object.prototype.hasOwnProperty.call(secretsMap, ref) ? secretsMap[ref] : null;
             },
+            // App-scoped read — in tests it resolves from the same provided secrets map.
+            async app(ref) {
+                if (!parsed.secrets.has(ref))
+                    throw new CapabilityError(`secrets:${ref}`);
+                return Object.prototype.hasOwnProperty.call(secretsMap, ref) ? secretsMap[ref] : null;
+            },
         },
         caller: {
             userId: (_a = caller.userId) !== null && _a !== void 0 ? _a : null,

package/dist/types/ai.d.ts

@@ -109,6 +109,18 @@ export interface ResponsesRequest {
     };
     /** `'flex'` is ~50% cheaper at Batch-API rates but slower; reserve for non-interactive/background work. */
     service_tier?: 'auto' | 'standard' | 'flex' | 'priority';
+    /**
+     * Attribution tag for AI usage/cost reporting (see `ai.usage`). Not sent to the model —
+     * the server strips it. e.g. `'readiness-check'`, `'design-critique'`.
+     */
+    feature?: string;
+    /**
+     * Persist this turn to a server-managed session (create one with `ai.sessions.create`). The
+     * server threads the session's prior transcript into the input and appends the new turn — so
+     * you get conversation memory without managing history yourself, and it works even with
+     * `server_tools` (unlike `previous_response_id`).
+     */
+    session_id?: string;
     /**
      * Run through the server-side agent loop: the platform executes built-in tools
      * (see BUILTIN_AI_TOOLS / AiToolName) and feeds results back automatically, so the
@@ -350,6 +362,65 @@ export interface SessionStatistics {
     totalMessages: number;
     rateLimitedUsers: number;
 }
+/** Who may read/append a persisted AI session. */
+export type AiSessionScope = 'admin' | 'owner' | 'public';
+/** A persisted AI assistant conversation (durable, scoped). */
+export interface AiSession {
+    id: string;
+    collectionId: string;
+    appId?: string | null;
+    scope: AiSessionScope;
+    title?: string | null;
+    status: string;
+    ownerId?: string | null;
+    authorId?: string | null;
+    productId?: string | null;
+    proofId?: string | null;
+    feature?: string | null;
+    /** Append-only Responses items (input/output + tool calls/results). */
+    items: ResponseInputItem[];
+    /** Compacted digest of older turns (server-managed). */
+    summary?: Record<string, any>;
+    /** Running token/turn accounting for this session. */
+    usage?: Record<string, any>;
+    itemCount: number;
+    lastTurnAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    expiresAt?: string | null;
+}
+/** Fields for creating a session (all optional). */
+export interface AiSessionCreate {
+    appId?: string;
+    title?: string;
+    productId?: string;
+    proofId?: string;
+    feature?: string;
+    /** Time-to-live in ms; omit to keep until explicitly cleared. */
+    ttlMs?: number;
+    /** Seed items (e.g. a system/instruction turn). */
+    items?: ResponseInputItem[];
+}
+/** Per-collection AI usage/cost report. `costUnits` are OPAQUE internal units, never provider currency. */
+export interface AiUsageReport {
+    groupBy: string[];
+    from?: string | null;
+    to?: string | null;
+    totals: {
+        promptTokens: number;
+        outputTokens: number;
+        totalTokens: number;
+        requests: number;
+        costUnits: number;
+    };
+    groups: Array<Record<string, any> & {
+        promptTokens: number;
+        outputTokens: number;
+        totalTokens: number;
+        requests: number;
+        costUnits: number;
+    }>;
+}
 /** Voice session request */
 export interface VoiceSessionRequest {
     productId: string;

package/dist/types/appManifest.d.ts

@@ -298,9 +298,15 @@ export interface ServerFunctionContext {
      * Declared `capabilities` cap what these calls may do.
      */
     sl: any;
-    /** Capability-gated secret access. `get(ref)` resolves only refs granted via `secrets:<ref>`. */
+    /**
+     * Capability-gated secret access (both require the `secrets:<ref>` capability).
+     * `get(ref)` resolves the collection's OWN secret first (a client's credential), then falls back
+     * to the app-level secret (the developer's shared singleton, installed once per instance).
+     * `app(ref)` reads the app-level secret only, skipping the collection store.
+     */
     secrets: {
         get(ref: string): Promise<string | null>;
+        app(ref: string): Promise<string | null>;
     };
     /** Who invoked this function. */
     caller: ServerFunctionCaller;