@proveanything/smartlinks 2.0.66 → 2.0.68

package/dist/ai-tools.js

@@ -62,7 +62,7 @@ export const BUILTIN_AI_TOOLS = [
     { name: 'image.transform', group: 'media', capabilities: ['media:image'],
         description: 'Transform an image: resize/crop/rotate/flip/grayscale/tint/format-convert/compress → hosted URL.' },
     { name: 'pdf.create', group: 'media', capabilities: ['media:pdf'],
-        description: 'Render HTML to a PDF and return a hosted URL.' },
+        description: 'Render HTML (or one fragment per page) to a PDF, 1:1: exact page sizes (width/height/unit) for labels, many pages per call, text and SVG kept vector, no scripts. Returns a public URL, an expiring private link, or base64; identical inputs reuse the cached render.' },
     { name: 'pdf.fill', group: 'media', capabilities: ['media:pdf'],
         description: 'Fill an AcroForm PDF\'s fields from a { field: value } map → hosted URL.' },
     { name: 'pdf.merge', group: 'media', capabilities: ['media:pdf'],

package/dist/api/authKit.d.ts

@@ -1,4 +1,4 @@
-import type { AuthLoginResponse, AppleLoginOptions, RefreshResponse, LogoutResponse, PhoneSendCodeResponse, PhoneVerifyResponse, PasswordResetRequestResponse, VerifyResetTokenResponse, PasswordResetCompleteResponse, EmailVerificationActionResponse, EmailVerifyTokenResponse, AuthKitConfig, AuthKitConfigInput, MagicLinkSendResponse, MagicLinkVerifyResponse, UserProfile, UpdateProfileResponse, ProfileUpdateData, SuccessResponse, SendWhatsAppRequest, SendWhatsAppResponse, ExchangeWhatsAppSessionResponse, VerifyWhatsAppResponse, WhatsAppStatusResponse, SendSmsVerifyRequest, SendSmsVerifyResponse, VerifySmsResponse, UpsertContactRequest, UpsertContactResponse, MfaChallengeSendResponse, MfaFinalizeResponse, MfaEnrollSendResponse, MfaEnrolledResponse, MfaFactorsResponse, TrustedDevice } from "../types/authKit.js";
+import type { AuthLoginResponse, AppleLoginOptions, RefreshResponse, LogoutResponse, PhoneSendCodeResponse, PhoneVerifyResponse, PasswordResetRequestResponse, VerifyResetTokenResponse, PasswordResetCompleteResponse, EmailVerificationActionResponse, EmailVerifyTokenResponse, AuthKitConfig, AuthKitConfigInput, AuthKitSetIdentityResponse, MagicLinkSendResponse, MagicLinkVerifyResponse, UserProfile, UpdateProfileResponse, ProfileUpdateData, SuccessResponse, SendWhatsAppRequest, SendWhatsAppResponse, ExchangeWhatsAppSessionResponse, VerifyWhatsAppResponse, WhatsAppStatusResponse, SendSmsVerifyRequest, SendSmsVerifyResponse, VerifySmsResponse, UpsertContactRequest, UpsertContactResponse, MfaChallengeSendResponse, MfaFinalizeResponse, MfaEnrollSendResponse, MfaEnrolledResponse, MfaFactorsResponse, TrustedDevice } from "../types/authKit.js";
 /**
  * Namespace containing helper functions for the new AuthKit API.
  * Legacy collection-based authKit helpers retained (marked as *Legacy*).
@@ -268,5 +268,18 @@ export declare namespace authKit {
      * back via {@link load}.
      */
     function update(collectionId: string, authKitId: string, data: AuthKitConfigInput): Promise<AuthKitConfig>;
+    /**
+     * Give this AuthKit its **own logins** (admin): its members become accounts of this site only —
+     * the same email can be a separate account, with its own password, on another site — rather than
+     * SmartLinks accounts shared across sites. One way: a site with its own members can't go back to the
+     * shared pool. Members who signed up before keep their SmartLinks account until moved across.
+     *
+     * Errors: `MEMBER_POOL_CONFLICT` (409) when another AuthKit already gives one of its collections its
+     * own logins (one per collection); `PERMISSION_DENIED` (403) unless you administer every collection
+     * it serves.
+     */
+    function setIdentity(collectionId: string, authKitId: string, body: {
+        mode: 'own';
+    }): Promise<AuthKitSetIdentityResponse>;
     function remove(collectionId: string, authKitId: string): Promise<void>;
 }

package/dist/api/authKit.js

@@ -510,6 +510,21 @@ export var authKit;
         return put(path, data);
     }
     authKit.update = update;
+    /**
+     * Give this AuthKit its **own logins** (admin): its members become accounts of this site only —
+     * the same email can be a separate account, with its own password, on another site — rather than
+     * SmartLinks accounts shared across sites. One way: a site with its own members can't go back to the
+     * shared pool. Members who signed up before keep their SmartLinks account until moved across.
+     *
+     * Errors: `MEMBER_POOL_CONFLICT` (409) when another AuthKit already gives one of its collections its
+     * own logins (one per collection); `PERMISSION_DENIED` (403) unless you administer every collection
+     * it serves.
+     */
+    async function setIdentity(collectionId, authKitId, body) {
+        const path = `/admin/collection/${encodeURIComponent(collectionId)}/authKit/${encodeURIComponent(authKitId)}/identity`;
+        return post(path, body);
+    }
+    authKit.setIdentity = setIdentity;
     async function remove(collectionId, authKitId) {
         const path = `/admin/collection/${encodeURIComponent(collectionId)}/authKit/${encodeURIComponent(authKitId)}`;
         return del(path);

package/dist/api/collection.d.ts

@@ -68,27 +68,37 @@ export declare namespace collection {
      */
     function claimHub(collectionId: string, hubName: string): Promise<CollectionResponse>;
     /**
-     * Register a custom domain for a collection and provision its managed
-     * certificate (admin only).
+     * Connect one of the collection's own domains and start its certificate (admin only).
      *
      * @param collectionId – Identifier of the collection
-     * @param domain – The fully-qualified domain to register (e.g. "hub.acme.com")
-     * @param target – Which load balancer / certificate map to use. Defaults to
-     *   `"smartlinks"` (the id.smartlinks.app load balancer). Pass `"hub"` to
-     *   register a bring-your-own Hub domain.
+     * @param domain – The fully-qualified domain (e.g. "id.acme.com", "hub.acme.com")
+     * @param target – `"links"` (default) for a links domain (GS1 Digital Links, short links, portal),
+     *   or `"site"` for the collection's Hub domain.
      * @returns Promise resolving when registration has been initiated
-     * @throws ErrorResponse if the request fails
+     * @throws ErrorResponse if the request fails (409 DOMAIN_IN_USE when it's already the other kind)
      */
     function registerDomain(collectionId: string, domain: string, target?: DomainTarget): Promise<any>;
     /**
-     * Get the managed-certificate status for a collection's custom domain (admin only).
+     * Get the certificate status of the collection's own domain (admin only).
      * @param collectionId – Identifier of the collection
-     * @param target – Which domain to check: `"smartlinks"` (default, uses `redirectUrl`)
-     *   or `"hub"` (uses `hubCustomDomain`)
-     * @returns Promise resolving to the certificate details
+     * @param target – Which domain to check: `"links"` (default, its `redirectUrl`)
+     *   or `"site"` (its Hub domain, `hubCustomDomain`)
+     * @returns Promise resolving to the certificate / custom hostname details
      * @throws ErrorResponse (404) if the relevant domain is not set
      */
     function getDomainStatus(collectionId: string, target?: DomainTarget): Promise<any>;
+    /**
+     * Remove the collection's links domain (admin only). It stops working straight away: QR codes,
+     * GS1 Digital Links and short links printed with it no longer open. Its certificate goes and
+     * `redirectUrl` is cleared. (Site domains are removed from the site's settings.)
+     * @param collectionId – Identifier of the collection
+     * @param domain – The links domain to remove
+     * @returns Promise resolving to `{ released }`
+     * @throws ErrorResponse (409 SITE_DOMAIN) if the domain is a site's domain
+     */
+    function releaseDomain(collectionId: string, domain: string): Promise<{
+        released: string;
+    }>;
     /**
      * Retrieve a specific settings group for a collection.
      * Public reads return the public view of the settings group. If the stored payload contains

package/dist/api/collection.js

@@ -101,36 +101,48 @@ export var collection;
     }
     collection.claimHub = claimHub;
     /**
-     * Register a custom domain for a collection and provision its managed
-     * certificate (admin only).
+     * Connect one of the collection's own domains and start its certificate (admin only).
      *
      * @param collectionId – Identifier of the collection
-     * @param domain – The fully-qualified domain to register (e.g. "hub.acme.com")
-     * @param target – Which load balancer / certificate map to use. Defaults to
-     *   `"smartlinks"` (the id.smartlinks.app load balancer). Pass `"hub"` to
-     *   register a bring-your-own Hub domain.
+     * @param domain – The fully-qualified domain (e.g. "id.acme.com", "hub.acme.com")
+     * @param target – `"links"` (default) for a links domain (GS1 Digital Links, short links, portal),
+     *   or `"site"` for the collection's Hub domain.
      * @returns Promise resolving when registration has been initiated
-     * @throws ErrorResponse if the request fails
+     * @throws ErrorResponse if the request fails (409 DOMAIN_IN_USE when it's already the other kind)
      */
-    async function registerDomain(collectionId, domain, target = "smartlinks") {
+    async function registerDomain(collectionId, domain, target = "links") {
         const path = `/admin/collection/${encodeURIComponent(collectionId)}/domain`;
         return post(path, { domain, target });
     }
     collection.registerDomain = registerDomain;
     /**
-     * Get the managed-certificate status for a collection's custom domain (admin only).
+     * Get the certificate status of the collection's own domain (admin only).
      * @param collectionId – Identifier of the collection
-     * @param target – Which domain to check: `"smartlinks"` (default, uses `redirectUrl`)
-     *   or `"hub"` (uses `hubCustomDomain`)
-     * @returns Promise resolving to the certificate details
+     * @param target – Which domain to check: `"links"` (default, its `redirectUrl`)
+     *   or `"site"` (its Hub domain, `hubCustomDomain`)
+     * @returns Promise resolving to the certificate / custom hostname details
      * @throws ErrorResponse (404) if the relevant domain is not set
      */
-    async function getDomainStatus(collectionId, target = "smartlinks") {
+    async function getDomainStatus(collectionId, target = "links") {
         const queryParams = new URLSearchParams({ target });
         const path = `/admin/collection/${encodeURIComponent(collectionId)}/domain?${queryParams}`;
         return request(path);
     }
     collection.getDomainStatus = getDomainStatus;
+    /**
+     * Remove the collection's links domain (admin only). It stops working straight away: QR codes,
+     * GS1 Digital Links and short links printed with it no longer open. Its certificate goes and
+     * `redirectUrl` is cleared. (Site domains are removed from the site's settings.)
+     * @param collectionId – Identifier of the collection
+     * @param domain – The links domain to remove
+     * @returns Promise resolving to `{ released }`
+     * @throws ErrorResponse (409 SITE_DOMAIN) if the domain is a site's domain
+     */
+    async function releaseDomain(collectionId, domain) {
+        const path = `/admin/collection/${encodeURIComponent(collectionId)}/domain/${encodeURIComponent(domain)}`;
+        return del(path);
+    }
+    collection.releaseDomain = releaseDomain;
     /**
      * Retrieve a specific settings group for a collection.
      * Public reads return the public view of the settings group. If the stored payload contains

package/dist/api/tags.d.ts

@@ -6,9 +6,9 @@ import type { TagIndexEntry, CreateTagRequest, CreateTagResponse, BatchCreateTag
  * etc.) and products, proofs, or any polymorphic object in the platform.
  *
  * ### Two-tier architecture
- * - **Per-org shard** (`tags` table) — full tag data; used for all collection-scoped
+ * - **Per-org shard** (`tags` table) — full tag data; used for all collection-scoped
  *   queries.
- * - **Shared shard** (`tag_index` table) — `tagId → collectionId` routing only; used
+ * - **Shared shard** (`tag_index` table) — `tagId → collectionId` routing only; used
  *   when the collection is not yet known.
  *
  * 99% of callers will know the collection and should use collection-scoped endpoints
@@ -49,7 +49,7 @@ export declare namespace tags {
      *
      * Tags with `productId` but no `proofId` automatically get serial numbers.
      * Serial number generation is grouped by `(productId, variantId, batchId)` for
-     * efficiency.  Partial success is possible — check `results` for individual outcomes.
+     * efficiency.  Partial success is possible — check `results` for individual outcomes.
      *
      * @param collectionId - Collection context
      * @param data - Batch payload; `force` applies to all tags in the batch
@@ -78,7 +78,7 @@ export declare namespace tags {
     /**
      * Update a tag (admin).
      *
-     * Partial update — only provided fields are changed.  `metadata` is
+     * Partial update — only provided fields are changed.  `metadata` is
      * deep-merged with the existing value.  Pass `refType: null, refId: null`
      * to clear the polymorphic ref.
      *
@@ -130,7 +130,7 @@ export declare namespace tags {
      */
     function list(collectionId: string, params?: ListTagsRequest): Promise<ListTagsResponse>;
     /**
-     * Reverse lookup — find all tags linked to a given object (admin).
+     * Reverse lookup — find all tags linked to a given object (admin).
      *
      * Uses a compound index on `(orgId, refType, refId)` on the per-org shard.
      * No embed support on the admin side.
@@ -149,7 +149,7 @@ export declare namespace tags {
      */
     function byRef(collectionId: string, params: ReverseTagLookupParams): Promise<ReverseTagLookupResponse>;
     /**
-     * Global tag resolve — returns `{ tagId, collectionId }` only.
+     * Global tag resolve — returns `{ tagId, collectionId }` only.
      *
      * Use this **only** when you have a raw `tagId` and do not yet know which
      * collection it belongs to.  Queries the shared `tag_index` shard.
@@ -159,7 +159,7 @@ export declare namespace tags {
      * > Use the collection-scoped `publicByRef` instead.
      *
      * @param tagId - Physical tag identifier
-     * @returns `{ tagId, collectionId }` — routing info only, no full tag data
+     * @returns `{ tagId, collectionId }` — routing info only, no full tag data
      *
      * @example
      * ```typescript
@@ -179,7 +179,7 @@ export declare namespace tags {
      * `GET /public/collection/:collectionId/tags/:tagId?embed=product,proof,container,ref`
      *
      * Supported `embed` values: `'product'`, `'proof'`, `'container'`, `'ref'`
-     * (`'collection'` is not supported — the collection is already known from the URL).
+     * (`'collection'` is not supported — the collection is already known from the URL).
      *
      * @param collectionId - Collection context
      * @param tagId - Physical tag identifier

package/dist/api/tags.js

@@ -7,9 +7,9 @@ import { request, post, put, del } from "../http.js";
  * etc.) and products, proofs, or any polymorphic object in the platform.
  *
  * ### Two-tier architecture
- * - **Per-org shard** (`tags` table) — full tag data; used for all collection-scoped
+ * - **Per-org shard** (`tags` table) — full tag data; used for all collection-scoped
  *   queries.
- * - **Shared shard** (`tag_index` table) — `tagId → collectionId` routing only; used
+ * - **Shared shard** (`tag_index` table) — `tagId → collectionId` routing only; used
  *   when the collection is not yet known.
  *
  * 99% of callers will know the collection and should use collection-scoped endpoints
@@ -58,7 +58,7 @@ export var tags;
      *
      * Tags with `productId` but no `proofId` automatically get serial numbers.
      * Serial number generation is grouped by `(productId, variantId, batchId)` for
-     * efficiency.  Partial success is possible — check `results` for individual outcomes.
+     * efficiency.  Partial success is possible — check `results` for individual outcomes.
      *
      * @param collectionId - Collection context
      * @param data - Batch payload; `force` applies to all tags in the batch
@@ -95,7 +95,7 @@ export var tags;
     /**
      * Update a tag (admin).
      *
-     * Partial update — only provided fields are changed.  `metadata` is
+     * Partial update — only provided fields are changed.  `metadata` is
      * deep-merged with the existing value.  Pass `refType: null, refId: null`
      * to clear the polymorphic ref.
      *
@@ -175,7 +175,7 @@ export var tags;
     }
     tags.list = list;
     /**
-     * Reverse lookup — find all tags linked to a given object (admin).
+     * Reverse lookup — find all tags linked to a given object (admin).
      *
      * Uses a compound index on `(orgId, refType, refId)` on the per-org shard.
      * No embed support on the admin side.
@@ -201,10 +201,10 @@ export var tags;
     }
     tags.byRef = byRef;
     // ============================================================================
-    // Public Endpoints — global resolve (collection unknown)
+    // Public Endpoints — global resolve (collection unknown)
     // ============================================================================
     /**
-     * Global tag resolve — returns `{ tagId, collectionId }` only.
+     * Global tag resolve — returns `{ tagId, collectionId }` only.
      *
      * Use this **only** when you have a raw `tagId` and do not yet know which
      * collection it belongs to.  Queries the shared `tag_index` shard.
@@ -214,7 +214,7 @@ export var tags;
      * > Use the collection-scoped `publicByRef` instead.
      *
      * @param tagId - Physical tag identifier
-     * @returns `{ tagId, collectionId }` — routing info only, no full tag data
+     * @returns `{ tagId, collectionId }` — routing info only, no full tag data
      *
      * @example
      * ```typescript
@@ -233,7 +233,7 @@ export var tags;
     }
     tags.resolveTag = resolveTag;
     // ============================================================================
-    // Public Endpoints — collection-scoped
+    // Public Endpoints — collection-scoped
     // ============================================================================
     /**
      * Single tag lookup with optional embedded data (public).
@@ -241,7 +241,7 @@ export var tags;
      * `GET /public/collection/:collectionId/tags/:tagId?embed=product,proof,container,ref`
      *
      * Supported `embed` values: `'product'`, `'proof'`, `'container'`, `'ref'`
-     * (`'collection'` is not supported — the collection is already known from the URL).
+     * (`'collection'` is not supported — the collection is already known from the URL).
      *
      * @param collectionId - Collection context
      * @param tagId - Physical tag identifier

package/dist/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 2.0.66  |  Generated: 2026-10-14T17:03:31.949Z
+Version: 2.0.68  |  Generated: 2026-10-17T10:04:22.637Z
 
 This is a concise summary of all available API functions and types.
 
@@ -1600,10 +1600,35 @@ interface PdfClip {
 **PdfCreateArgs** (interface)
 ```typescript
 interface PdfCreateArgs {
-  html: string
+  html?: string
+  pages?: string[]
+  head?: string
+  width?: number
+  height?: number
+  unit?: 'mm' | 'cm' | 'in' | 'pt' | 'px'
   format?: string
   landscape?: boolean
   margin?: string
+  return?: 'url' | 'signedUrl' | 'base64'
+  expiresIn?: number
+  filename?: string
+  cache?: boolean
+}
+```
+
+**PdfCreateResult** (interface)
+```typescript
+interface PdfCreateResult {
+  url?: string
+  hostedUrl?: string
+  base64?: string
+  expiresAt?: string
+  contentType: 'application/pdf'
+  size: number
+  pageCount: number
+  cached: boolean
+  renderer?: string
+  warnings?: string[]
 }
 ```
 
@@ -2786,6 +2811,7 @@ interface ServerFunctionSl {
   forCaller(): Promise<{ contactId: string } | null>;
   };
   interactions: { record(event: ServerFunctionInteractionEvent): Promise<{ eventId: string }> };
+  tools: { run<T = any>(name: string, args?: Record<string, any>): Promise<T> };
   products: any;
   attestations: any;
   appData: AppDataHandle & { global: AppDataHandle; collection: AppDataHandle };
@@ -4838,6 +4864,25 @@ interface AuthKitConfig {
   redirectUrl?: string
   updatedAt?: string
   security?: AuthKitSecurityConfig
+  collectionIds?: string[]
+  identity?: AuthKitIdentity
+}
+```
+
+**AuthKitIdentity** (interface)
+```typescript
+interface AuthKitIdentity {
+  mode: 'shared' | 'own'
+  tenantId?: string
+  createdAt?: string
+}
+```
+
+**AuthKitSetIdentityResponse** (interface)
+```typescript
+interface AuthKitSetIdentityResponse {
+  identity: AuthKitIdentity
+  message: string
 }
 ```
 
@@ -5336,7 +5381,7 @@ interface InviteUserInput {
 
 **CollectionUpdateRequest** = `Partial<Omit<Collection, 'id' | 'shortId'>>`
 
-**DomainTarget** = `"smartlinks" | "hub"`
+**DomainTarget** = `"links" | "site"`
 
 **CollectionAccessLevel** = `'Owner' | 'Admin' | 'Assigner' | 'Reporter' | 'User' | 'None'`
 
@@ -11297,8 +11342,11 @@ Create an AuthKit client config (admin). Accepts the account `security` policy
 **update**(collectionId: string, authKitId: string, data: AuthKitConfigInput) → `Promise<AuthKitConfig>`
 Update an AuthKit client config (admin). This is how the account **security policy** is written — pass a `security` block ({@link AuthKitSecurityConfig}). The server validates it and enforces it; the login UI reads the public subset back via {@link load}.
 
+**setIdentity**(collectionId: string, authKitId: string, body: { mode: 'own' }) → `Promise<AuthKitSetIdentityResponse>`
+Give this AuthKit its **own logins** (admin): its members become accounts of this site only — the same email can be a separate account, with its own password, on another site — rather than SmartLinks accounts shared across sites. One way: a site with its own members can't go back to the shared pool. Members who signed up before keep their SmartLinks account until moved across. Errors: `MEMBER_POOL_CONFLICT` (409) when another AuthKit already gives one of its collections its own logins (one per collection); `PERMISSION_DENIED` (403) unless you administer every collection it serves.
+
 **remove**(collectionId: string, authKitId: string) → `Promise<void>`
-Update an AuthKit client config (admin). This is how the account **security policy** is written — pass a `security` block ({@link AuthKitSecurityConfig}). The server validates it and enforces it; the login UI reads the public subset back via {@link load}.
+Give this AuthKit its **own logins** (admin): its members become accounts of this site only — the same email can be a separate account, with its own password, on another site — rather than SmartLinks accounts shared across sites. One way: a site with its own members can't go back to the shared pool. Members who signed up before keep their SmartLinks account until moved across. Errors: `MEMBER_POOL_CONFLICT` (409) when another AuthKit already gives one of its collections its own logins (one per collection); `PERMISSION_DENIED` (403) unless you administer every collection it serves.
 
 ### batch
 
@@ -11488,11 +11536,14 @@ Check whether a Hub subdomain name is available to claim (admin only).
 **claimHub**(collectionId: string, hubName: string) → `Promise<CollectionResponse>`
 Claim or rename the Hub subdomain for a collection (admin only). Maps `{hubName}.smartlinks.host` to the collection. If the collection already had a different hub name, the previous subdomain is released automatically.
 
-**registerDomain**(collectionId: string, domain: string, target: DomainTarget = "smartlinks") → `Promise<any>`
-Register a custom domain for a collection and provision its managed certificate (admin only). `"smartlinks"` (the id.smartlinks.app load balancer). Pass `"hub"` to register a bring-your-own Hub domain.
+**registerDomain**(collectionId: string, domain: string, target: DomainTarget = "links") → `Promise<any>`
+Connect one of the collection's own domains and start its certificate (admin only). or `"site"` for the collection's Hub domain.
 
-**getDomainStatus**(collectionId: string, target: DomainTarget = "smartlinks") → `Promise<any>`
-Get the managed-certificate status for a collection's custom domain (admin only). or `"hub"` (uses `hubCustomDomain`)
+**getDomainStatus**(collectionId: string, target: DomainTarget = "links") → `Promise<any>`
+Get the certificate status of the collection's own domain (admin only). or `"site"` (its Hub domain, `hubCustomDomain`)
+
+**releaseDomain**(collectionId: string, domain: string) → `Promise<`
+Remove the collection's links domain (admin only). It stops working straight away: QR codes, GS1 Digital Links and short links printed with it no longer open. Its certificate goes and `redirectUrl` is cleared. (Site domains are removed from the site's settings.)
 
 **getSettings**(collectionId: string, settingGroup: string, admin?: boolean) → `Promise<any>`
 Retrieve a specific settings group for a collection. Public reads return the public view of the settings group. If the stored payload contains a top-level `admin` object, that block is omitted from public responses and included when `admin === true`.
@@ -11512,29 +11563,29 @@ Update a collection (admin only).
 **remove**(collectionId: string) → `Promise<void>`
 Delete a collection (admin only).
 
-**getSN**(collectionId: string,
-    startIndex: number = 0,
+**getSN**(collectionId: string,
+    startIndex: number = 0,
     count: number = 10) → `Promise<any>`
 Get serial numbers for a collection (admin only).
 
-**lookupSN**(collectionId: string,
+**lookupSN**(collectionId: string,
     codeId: string) → `Promise<any>`
 Look up a serial number by code for a collection (admin only).
 
-**assignSN**(collectionId: string,
-    codeId: string,
+**assignSN**(collectionId: string,
+    codeId: string,
     value: any) → `Promise<any>`
 Assign a value to a serial number for a collection (admin only).
 
 **getUsers**(collectionId: string) → `Promise<CollectionUser[]>`
 List the users with access to a collection, each with their access level (admin only). Access is stored in the collection's `roles` map (userId → level); this resolves each to name/email. GET /admin/collection/:collectionId/getUsers
 
-**setUserAccess**(collectionId: string,
-    userId: string,
+**setUserAccess**(collectionId: string,
+    userId: string,
     access: CollectionAccessLevel | null) → `Promise<void>`
 Grant, change, or remove a user's access level on a collection (admin only). Pass `null` or `'None'` to remove access. The server enforces privilege-escalation rules — you cannot grant an access level above your own, nor change a user whose level is above yours. POST /admin/collection/:collectionId/updateUserAccess
 
-**inviteUser**(collectionId: string,
+**inviteUser**(collectionId: string,
     input: InviteUserInput) → `Promise<`
 Invite a user to a collection by email (admin only). Creates or links their account in the login / auth-kit collection (`loginCollectionId`, default `'global'`) and emails them an invite (new account) or an added-to-collection notice (existing account); returns their `uid`. This does NOT grant access on its own — follow with {@link setUserAccess} to set their level (this mirrors the console flow). POST /user/inviteUser
 
@@ -12815,7 +12866,7 @@ Create a single tag mapping (admin). If `productId` is set without `proofId`, a
 
 **createBatch**(collectionId: string,
     data: BatchCreateTagRequest) → `Promise<BatchCreateResult>`
-Batch-create tags (admin). Tags with `productId` but no `proofId` automatically get serial numbers. Serial number generation is grouped by `(productId, variantId, batchId)` for efficiency.  Partial success is possible — check `results` for individual outcomes. ```typescript const result = await tags.createBatch('coll_123', { tags: [ { tagId: 'NFC-001', productId: 'prod_456', batchId: 'batch_2026_01' }, { tagId: 'NFC-002', productId: 'prod_456', batchId: 'batch_2026_01' }, ], }) console.log(`Created: ${result.summary.created}, Conflicts: ${result.summary.conflicts}`) ```
+Batch-create tags (admin). Tags with `productId` but no `proofId` automatically get serial numbers. Serial number generation is grouped by `(productId, variantId, batchId)` for efficiency.  Partial success is possible — check `results` for individual outcomes. ```typescript const result = await tags.createBatch('coll_123', { tags: [ { tagId: 'NFC-001', productId: 'prod_456', batchId: 'batch_2026_01' }, { tagId: 'NFC-002', productId: 'prod_456', batchId: 'batch_2026_01' }, ], }) console.log(`Created: ${result.summary.created}, Conflicts: ${result.summary.conflicts}`) ```
 
 **get**(collectionId: string,
     tagId: string) → `Promise<GetTagResponse>`
@@ -12824,7 +12875,7 @@ Get a single tag by `tagId` (admin).
 **update**(collectionId: string,
     tagId: string,
     data: UpdateTagRequest) → `Promise<UpdateTagResponse>`
-Update a tag (admin). Partial update — only provided fields are changed.  `metadata` is deep-merged with the existing value.  Pass `refType: null, refId: null` to clear the polymorphic ref. ```typescript const updated = await tags.update('coll_123', 'NFC-001', { variantId: 'var_premium', metadata:  { notes: 'Updated to premium variant' }, }) // Clear polymorphic ref await tags.update('coll_123', 'NFC-001', { refType: null, refId: null }) ```
+Update a tag (admin). Partial update — only provided fields are changed.  `metadata` is deep-merged with the existing value.  Pass `refType: null, refId: null` to clear the polymorphic ref. ```typescript const updated = await tags.update('coll_123', 'NFC-001', { variantId: 'var_premium', metadata:  { notes: 'Updated to premium variant' }, }) // Clear polymorphic ref await tags.update('coll_123', 'NFC-001', { refType: null, refId: null }) ```
 
 **remove**(collectionId: string,
     tagId: string) → `Promise<DeleteTagResponse>`
@@ -12836,15 +12887,15 @@ List tags with optional filters and pagination (admin). ```typescript // All tag
 
 **byRef**(collectionId: string,
     params: ReverseTagLookupParams) → `Promise<ReverseTagLookupResponse>`
-Reverse lookup — find all tags linked to a given object (admin). Uses a compound index on `(orgId, refType, refId)` on the per-org shard. No embed support on the admin side. ```typescript const { tags: linked } = await tags.byRef('coll_123', { refType: 'container', refId:   'container-uuid', }) ```
+Reverse lookup — find all tags linked to a given object (admin). Uses a compound index on `(orgId, refType, refId)` on the per-org shard. No embed support on the admin side. ```typescript const { tags: linked } = await tags.byRef('coll_123', { refType: 'container', refId:   'container-uuid', }) ```
 
 **resolveTag**(tagId: string) → `Promise<TagIndexEntry>`
-Global tag resolve — returns `{ tagId, collectionId }` only. Use this **only** when you have a raw `tagId` and do not yet know which collection it belongs to.  Queries the shared `tag_index` shard. Once `collectionId` is resolved, call `publicGetByCollection` for full data. > The global `/public/tags/by-ref` endpoint has been removed. > Use the collection-scoped `publicByRef` instead. ```typescript // Step 1: resolve collection const { collectionId } = await tags.resolveTag('NFC-001') // Step 2: full lookup with embedded data const { tag, embedded } = await tags.publicGetByCollection( collectionId, 'NFC-001', 'product,proof' ) ```
+Global tag resolve — returns `{ tagId, collectionId }` only. Use this **only** when you have a raw `tagId` and do not yet know which collection it belongs to.  Queries the shared `tag_index` shard. Once `collectionId` is resolved, call `publicGetByCollection` for full data. > The global `/public/tags/by-ref` endpoint has been removed. > Use the collection-scoped `publicByRef` instead. ```typescript // Step 1: resolve collection const { collectionId } = await tags.resolveTag('NFC-001') // Step 2: full lookup with embedded data const { tag, embedded } = await tags.publicGetByCollection( collectionId, 'NFC-001', 'product,proof' ) ```
 
 **publicGetByCollection**(collectionId: string,
     tagId: string,
     embed?: string) → `Promise<PublicGetTagResponse>`
-Single tag lookup with optional embedded data (public). `GET /public/collection/:collectionId/tags/:tagId?embed=product,proof,container,ref` Supported `embed` values: `'product'`, `'proof'`, `'container'`, `'ref'` (`'collection'` is not supported — the collection is already known from the URL). ```typescript const { tag, embedded } = await tags.publicGetByCollection( 'coll_123', 'NFC-001', 'product,proof' ) const product = embedded.products?.[tag.productId!] const proof   = embedded.proofs?.[tag.proofId!] ```
+Single tag lookup with optional embedded data (public). `GET /public/collection/:collectionId/tags/:tagId?embed=product,proof,container,ref` Supported `embed` values: `'product'`, `'proof'`, `'container'`, `'ref'` (`'collection'` is not supported — the collection is already known from the URL). ```typescript const { tag, embedded } = await tags.publicGetByCollection( 'coll_123', 'NFC-001', 'product,proof' ) const product = embedded.products?.[tag.productId!] const proof   = embedded.proofs?.[tag.proofId!] ```
 
 **lookupTags**(collectionId: string,
     data: LookupTagsRequest) → `Promise<TagLookupResponse>`

package/dist/docs/agent-tools.md

@@ -29,7 +29,7 @@ needs to call it — a description and an input schema:
 ```jsonc
 {
   "functions": {
-    "files": { "js": { "umd": "dist/functions.umd.js" } },
+    "files": { "js": { "umd": "functions.umd.js" } },
     "definitions": [
       {
         "name": "createFaq",

package/dist/docs/ai.md

@@ -323,7 +323,7 @@ in `input`.
 | `image.fromReference` | Image-to-image: generate guided by reference image(s). |
 | `image.searchStock` | Search real stock photos (Unsplash). |
 | `image.transform` | Resize / crop / rotate / grayscale / format-convert / compress → hosted URL. |
-| `pdf.create` | Render HTML → PDF → hosted URL. |
+| `pdf.create` | Render HTML (or one fragment per page) → PDF, 1:1: exact `width`/`height`/`unit` for labels, `pages[]` for many pages in one render, no scripts, only SmartLinks/Google Fonts/data: resources. `return`: `url` (public), `signedUrl` (expiring), `base64`. Cached by input. |
 | `pdf.fill` | Fill an AcroForm PDF's fields (`{ field: value }`) → hosted URL. |
 | `pdf.merge` | Merge several PDFs into one, in order → hosted URL. |
 | `pdf.inspect` | Cheap, no-AI introspection: page count/sizes, which pages have a real text layer, raster present, and a routing hint (`text` vs `vision`). |
@@ -402,9 +402,11 @@ if (!ready.result.report.compliant) showFindings(ready.result.report.findings)
 - **A review UI that flags guessed fields** → `pdf.extract` with `includeConfidence` (per-field
   confidence + source) and `includeBoxes` (per-field bbox on text-native pages) in `fieldsMeta`.
 - **Produce a PDF** → `pdf.create` (HTML → PDF), `pdf.fill` (populate an AcroForm's fields),
-  `pdf.merge` (combine several). These return a hosted `hostedUrl` (`pdf.create` also returns it as
-  `url`). `pdf.create` loads remote `<img>` URLs before rendering and honours `page-break-inside`; pass
-  `margin: "0"` when your HTML sets its own body margin (default page margin is 18mm/14mm).
+  `pdf.merge` (combine several). `pdf.create` takes an exact page size (`width`, `height`, `unit`) or a
+  `format`, `html` or `pages: [html, …]` (one per page, sharing `head`), and returns `url` (public),
+  a `signedUrl` that expires, or `base64` (`return`). JavaScript doesn't run, and images, fonts and
+  stylesheets load only from SmartLinks hosts, Google Fonts or `data:` URIs. From a server function:
+  `ctx.sl.tools.run('pdf.create', …)` with the `tools:pdf.create` capability (server-functions.md).
 
 Every tool is also directly callable without the model loop via `ai.tools.run(collectionId, name,
 args)` — e.g. render a page or extract fields straight from a UI, no agent round-trip:

package/dist/docs/app-manifest.md

@@ -428,7 +428,7 @@ this is just the manifest shape.
 
 | Field | Type | Description |
 |-------|------|-------------|
-| `files.js.umd` | string | UMD bundle path (e.g. `dist/functions.umd.js`) — a self-contained bundle exporting each handler by name |
+| `files.js.umd` | string | UMD bundle path, relative to the published build like the other bundles (e.g. `functions.umd.js`, built to `dist/functions.umd.js`) — a self-contained bundle exporting each handler by name |
 | `definitions[]` | object[] | One entry per function |
 | `definitions[].name` | string | Function name; also the handler export name (override with `handler`) |
 | `definitions[].trigger` | object | `{ type: "http"|"event"|"cron", … }` |