@proveanything/smartlinks 2.0.67 → 2.0.69

package/dist/api/authKit.d.ts

@@ -1,4 +1,4 @@
-import type { AuthLoginResponse, AppleLoginOptions, RefreshResponse, LogoutResponse, PhoneSendCodeResponse, PhoneVerifyResponse, PasswordResetRequestResponse, VerifyResetTokenResponse, PasswordResetCompleteResponse, EmailVerificationActionResponse, EmailVerifyTokenResponse, AuthKitConfig, AuthKitConfigInput, MagicLinkSendResponse, MagicLinkVerifyResponse, UserProfile, UpdateProfileResponse, ProfileUpdateData, SuccessResponse, SendWhatsAppRequest, SendWhatsAppResponse, ExchangeWhatsAppSessionResponse, VerifyWhatsAppResponse, WhatsAppStatusResponse, SendSmsVerifyRequest, SendSmsVerifyResponse, VerifySmsResponse, UpsertContactRequest, UpsertContactResponse, MfaChallengeSendResponse, MfaFinalizeResponse, MfaEnrollSendResponse, MfaEnrolledResponse, MfaFactorsResponse, TrustedDevice } from "../types/authKit.js";
+import type { AuthLoginResponse, AppleLoginOptions, RefreshResponse, LogoutResponse, PhoneSendCodeResponse, PhoneVerifyResponse, PasswordResetRequestResponse, VerifyResetTokenResponse, PasswordResetCompleteResponse, EmailVerificationActionResponse, EmailVerifyTokenResponse, AuthKitConfig, AuthKitConfigInput, AuthKitSetIdentityResponse, MagicLinkSendResponse, MagicLinkVerifyResponse, UserProfile, UpdateProfileResponse, ProfileUpdateData, SuccessResponse, SendWhatsAppRequest, SendWhatsAppResponse, ExchangeWhatsAppSessionResponse, VerifyWhatsAppResponse, WhatsAppStatusResponse, SendSmsVerifyRequest, SendSmsVerifyResponse, VerifySmsResponse, UpsertContactRequest, UpsertContactResponse, MfaChallengeSendResponse, MfaFinalizeResponse, MfaEnrollSendResponse, MfaEnrolledResponse, MfaFactorsResponse, TrustedDevice } from "../types/authKit.js";
 /**
  * Namespace containing helper functions for the new AuthKit API.
  * Legacy collection-based authKit helpers retained (marked as *Legacy*).
@@ -268,5 +268,18 @@ export declare namespace authKit {
      * back via {@link load}.
      */
     function update(collectionId: string, authKitId: string, data: AuthKitConfigInput): Promise<AuthKitConfig>;
+    /**
+     * Give this AuthKit its **own logins** (admin): its members become accounts of this site only —
+     * the same email can be a separate account, with its own password, on another site — rather than
+     * SmartLinks accounts shared across sites. One way: a site with its own members can't go back to the
+     * shared pool. Members who signed up before keep their SmartLinks account until moved across.
+     *
+     * Errors: `MEMBER_POOL_CONFLICT` (409) when another AuthKit already gives one of its collections its
+     * own logins (one per collection); `PERMISSION_DENIED` (403) unless you administer every collection
+     * it serves.
+     */
+    function setIdentity(collectionId: string, authKitId: string, body: {
+        mode: 'own';
+    }): Promise<AuthKitSetIdentityResponse>;
     function remove(collectionId: string, authKitId: string): Promise<void>;
 }

package/dist/api/authKit.js

@@ -510,6 +510,21 @@ export var authKit;
         return put(path, data);
     }
     authKit.update = update;
+    /**
+     * Give this AuthKit its **own logins** (admin): its members become accounts of this site only —
+     * the same email can be a separate account, with its own password, on another site — rather than
+     * SmartLinks accounts shared across sites. One way: a site with its own members can't go back to the
+     * shared pool. Members who signed up before keep their SmartLinks account until moved across.
+     *
+     * Errors: `MEMBER_POOL_CONFLICT` (409) when another AuthKit already gives one of its collections its
+     * own logins (one per collection); `PERMISSION_DENIED` (403) unless you administer every collection
+     * it serves.
+     */
+    async function setIdentity(collectionId, authKitId, body) {
+        const path = `/admin/collection/${encodeURIComponent(collectionId)}/authKit/${encodeURIComponent(authKitId)}/identity`;
+        return post(path, body);
+    }
+    authKit.setIdentity = setIdentity;
     async function remove(collectionId, authKitId) {
         const path = `/admin/collection/${encodeURIComponent(collectionId)}/authKit/${encodeURIComponent(authKitId)}`;
         return del(path);

package/dist/api/collection.d.ts

@@ -68,27 +68,37 @@ export declare namespace collection {
      */
     function claimHub(collectionId: string, hubName: string): Promise<CollectionResponse>;
     /**
-     * Register a custom domain for a collection and provision its managed
-     * certificate (admin only).
+     * Connect one of the collection's own domains and start its certificate (admin only).
      *
      * @param collectionId – Identifier of the collection
-     * @param domain – The fully-qualified domain to register (e.g. "hub.acme.com")
-     * @param target – Which load balancer / certificate map to use. Defaults to
-     *   `"smartlinks"` (the id.smartlinks.app load balancer). Pass `"hub"` to
-     *   register a bring-your-own Hub domain.
+     * @param domain – The fully-qualified domain (e.g. "id.acme.com", "hub.acme.com")
+     * @param target – `"links"` (default) for a links domain (GS1 Digital Links, short links, portal),
+     *   or `"site"` for the collection's Hub domain.
      * @returns Promise resolving when registration has been initiated
-     * @throws ErrorResponse if the request fails
+     * @throws ErrorResponse if the request fails (409 DOMAIN_IN_USE when it's already the other kind)
      */
     function registerDomain(collectionId: string, domain: string, target?: DomainTarget): Promise<any>;
     /**
-     * Get the managed-certificate status for a collection's custom domain (admin only).
+     * Get the certificate status of the collection's own domain (admin only).
      * @param collectionId – Identifier of the collection
-     * @param target – Which domain to check: `"smartlinks"` (default, uses `redirectUrl`)
-     *   or `"hub"` (uses `hubCustomDomain`)
-     * @returns Promise resolving to the certificate details
+     * @param target – Which domain to check: `"links"` (default, its `redirectUrl`)
+     *   or `"site"` (its Hub domain, `hubCustomDomain`)
+     * @returns Promise resolving to the certificate / custom hostname details
      * @throws ErrorResponse (404) if the relevant domain is not set
      */
     function getDomainStatus(collectionId: string, target?: DomainTarget): Promise<any>;
+    /**
+     * Remove the collection's links domain (admin only). It stops working straight away: QR codes,
+     * GS1 Digital Links and short links printed with it no longer open. Its certificate goes and
+     * `redirectUrl` is cleared. (Site domains are removed from the site's settings.)
+     * @param collectionId – Identifier of the collection
+     * @param domain – The links domain to remove
+     * @returns Promise resolving to `{ released }`
+     * @throws ErrorResponse (409 SITE_DOMAIN) if the domain is a site's domain
+     */
+    function releaseDomain(collectionId: string, domain: string): Promise<{
+        released: string;
+    }>;
     /**
      * Retrieve a specific settings group for a collection.
      * Public reads return the public view of the settings group. If the stored payload contains

package/dist/api/collection.js

@@ -101,36 +101,48 @@ export var collection;
     }
     collection.claimHub = claimHub;
     /**
-     * Register a custom domain for a collection and provision its managed
-     * certificate (admin only).
+     * Connect one of the collection's own domains and start its certificate (admin only).
      *
      * @param collectionId – Identifier of the collection
-     * @param domain – The fully-qualified domain to register (e.g. "hub.acme.com")
-     * @param target – Which load balancer / certificate map to use. Defaults to
-     *   `"smartlinks"` (the id.smartlinks.app load balancer). Pass `"hub"` to
-     *   register a bring-your-own Hub domain.
+     * @param domain – The fully-qualified domain (e.g. "id.acme.com", "hub.acme.com")
+     * @param target – `"links"` (default) for a links domain (GS1 Digital Links, short links, portal),
+     *   or `"site"` for the collection's Hub domain.
      * @returns Promise resolving when registration has been initiated
-     * @throws ErrorResponse if the request fails
+     * @throws ErrorResponse if the request fails (409 DOMAIN_IN_USE when it's already the other kind)
      */
-    async function registerDomain(collectionId, domain, target = "smartlinks") {
+    async function registerDomain(collectionId, domain, target = "links") {
         const path = `/admin/collection/${encodeURIComponent(collectionId)}/domain`;
         return post(path, { domain, target });
     }
     collection.registerDomain = registerDomain;
     /**
-     * Get the managed-certificate status for a collection's custom domain (admin only).
+     * Get the certificate status of the collection's own domain (admin only).
      * @param collectionId – Identifier of the collection
-     * @param target – Which domain to check: `"smartlinks"` (default, uses `redirectUrl`)
-     *   or `"hub"` (uses `hubCustomDomain`)
-     * @returns Promise resolving to the certificate details
+     * @param target – Which domain to check: `"links"` (default, its `redirectUrl`)
+     *   or `"site"` (its Hub domain, `hubCustomDomain`)
+     * @returns Promise resolving to the certificate / custom hostname details
      * @throws ErrorResponse (404) if the relevant domain is not set
      */
-    async function getDomainStatus(collectionId, target = "smartlinks") {
+    async function getDomainStatus(collectionId, target = "links") {
         const queryParams = new URLSearchParams({ target });
         const path = `/admin/collection/${encodeURIComponent(collectionId)}/domain?${queryParams}`;
         return request(path);
     }
     collection.getDomainStatus = getDomainStatus;
+    /**
+     * Remove the collection's links domain (admin only). It stops working straight away: QR codes,
+     * GS1 Digital Links and short links printed with it no longer open. Its certificate goes and
+     * `redirectUrl` is cleared. (Site domains are removed from the site's settings.)
+     * @param collectionId – Identifier of the collection
+     * @param domain – The links domain to remove
+     * @returns Promise resolving to `{ released }`
+     * @throws ErrorResponse (409 SITE_DOMAIN) if the domain is a site's domain
+     */
+    async function releaseDomain(collectionId, domain) {
+        const path = `/admin/collection/${encodeURIComponent(collectionId)}/domain/${encodeURIComponent(domain)}`;
+        return del(path);
+    }
+    collection.releaseDomain = releaseDomain;
     /**
      * Retrieve a specific settings group for a collection.
      * Public reads return the public view of the settings group. If the stored payload contains

package/dist/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 2.0.67  |  Generated: 2026-10-15T17:52:10.614Z
+Version: 2.0.69  |  Generated: 2026-10-20T19:38:11.744Z
 
 This is a concise summary of all available API functions and types.
 
@@ -4864,6 +4864,25 @@ interface AuthKitConfig {
   redirectUrl?: string
   updatedAt?: string
   security?: AuthKitSecurityConfig
+  collectionIds?: string[]
+  identity?: AuthKitIdentity
+}
+```
+
+**AuthKitIdentity** (interface)
+```typescript
+interface AuthKitIdentity {
+  mode: 'shared' | 'own'
+  tenantId?: string
+  createdAt?: string
+}
+```
+
+**AuthKitSetIdentityResponse** (interface)
+```typescript
+interface AuthKitSetIdentityResponse {
+  identity: AuthKitIdentity
+  message: string
 }
 ```
 
@@ -5362,7 +5381,7 @@ interface InviteUserInput {
 
 **CollectionUpdateRequest** = `Partial<Omit<Collection, 'id' | 'shortId'>>`
 
-**DomainTarget** = `"smartlinks" | "hub"`
+**DomainTarget** = `"links" | "site"`
 
 **CollectionAccessLevel** = `'Owner' | 'Admin' | 'Assigner' | 'Reporter' | 'User' | 'None'`
 
@@ -11323,8 +11342,11 @@ Create an AuthKit client config (admin). Accepts the account `security` policy
 **update**(collectionId: string, authKitId: string, data: AuthKitConfigInput) → `Promise<AuthKitConfig>`
 Update an AuthKit client config (admin). This is how the account **security policy** is written — pass a `security` block ({@link AuthKitSecurityConfig}). The server validates it and enforces it; the login UI reads the public subset back via {@link load}.
 
+**setIdentity**(collectionId: string, authKitId: string, body: { mode: 'own' }) → `Promise<AuthKitSetIdentityResponse>`
+Give this AuthKit its **own logins** (admin): its members become accounts of this site only — the same email can be a separate account, with its own password, on another site — rather than SmartLinks accounts shared across sites. One way: a site with its own members can't go back to the shared pool. Members who signed up before keep their SmartLinks account until moved across. Errors: `MEMBER_POOL_CONFLICT` (409) when another AuthKit already gives one of its collections its own logins (one per collection); `PERMISSION_DENIED` (403) unless you administer every collection it serves.
+
 **remove**(collectionId: string, authKitId: string) → `Promise<void>`
-Update an AuthKit client config (admin). This is how the account **security policy** is written — pass a `security` block ({@link AuthKitSecurityConfig}). The server validates it and enforces it; the login UI reads the public subset back via {@link load}.
+Give this AuthKit its **own logins** (admin): its members become accounts of this site only — the same email can be a separate account, with its own password, on another site — rather than SmartLinks accounts shared across sites. One way: a site with its own members can't go back to the shared pool. Members who signed up before keep their SmartLinks account until moved across. Errors: `MEMBER_POOL_CONFLICT` (409) when another AuthKit already gives one of its collections its own logins (one per collection); `PERMISSION_DENIED` (403) unless you administer every collection it serves.
 
 ### batch
 
@@ -11514,11 +11536,14 @@ Check whether a Hub subdomain name is available to claim (admin only).
 **claimHub**(collectionId: string, hubName: string) → `Promise<CollectionResponse>`
 Claim or rename the Hub subdomain for a collection (admin only). Maps `{hubName}.smartlinks.host` to the collection. If the collection already had a different hub name, the previous subdomain is released automatically.
 
-**registerDomain**(collectionId: string, domain: string, target: DomainTarget = "smartlinks") → `Promise<any>`
-Register a custom domain for a collection and provision its managed certificate (admin only). `"smartlinks"` (the id.smartlinks.app load balancer). Pass `"hub"` to register a bring-your-own Hub domain.
+**registerDomain**(collectionId: string, domain: string, target: DomainTarget = "links") → `Promise<any>`
+Connect one of the collection's own domains and start its certificate (admin only). or `"site"` for the collection's Hub domain.
+
+**getDomainStatus**(collectionId: string, target: DomainTarget = "links") → `Promise<any>`
+Get the certificate status of the collection's own domain (admin only). or `"site"` (its Hub domain, `hubCustomDomain`)
 
-**getDomainStatus**(collectionId: string, target: DomainTarget = "smartlinks") → `Promise<any>`
-Get the managed-certificate status for a collection's custom domain (admin only). or `"hub"` (uses `hubCustomDomain`)
+**releaseDomain**(collectionId: string, domain: string) → `Promise<`
+Remove the collection's links domain (admin only). It stops working straight away: QR codes, GS1 Digital Links and short links printed with it no longer open. Its certificate goes and `redirectUrl` is cleared. (Site domains are removed from the site's settings.)
 
 **getSettings**(collectionId: string, settingGroup: string, admin?: boolean) → `Promise<any>`
 Retrieve a specific settings group for a collection. Public reads return the public view of the settings group. If the stored payload contains a top-level `admin` object, that block is omitted from public responses and included when `admin === true`.
@@ -11538,29 +11563,29 @@ Update a collection (admin only).
 **remove**(collectionId: string) → `Promise<void>`
 Delete a collection (admin only).
 
-**getSN**(collectionId: string,
-    startIndex: number = 0,
+**getSN**(collectionId: string,
+    startIndex: number = 0,
     count: number = 10) → `Promise<any>`
 Get serial numbers for a collection (admin only).
 
-**lookupSN**(collectionId: string,
+**lookupSN**(collectionId: string,
     codeId: string) → `Promise<any>`
 Look up a serial number by code for a collection (admin only).
 
-**assignSN**(collectionId: string,
-    codeId: string,
+**assignSN**(collectionId: string,
+    codeId: string,
     value: any) → `Promise<any>`
 Assign a value to a serial number for a collection (admin only).
 
 **getUsers**(collectionId: string) → `Promise<CollectionUser[]>`
 List the users with access to a collection, each with their access level (admin only). Access is stored in the collection's `roles` map (userId → level); this resolves each to name/email. GET /admin/collection/:collectionId/getUsers
 
-**setUserAccess**(collectionId: string,
-    userId: string,
+**setUserAccess**(collectionId: string,
+    userId: string,
     access: CollectionAccessLevel | null) → `Promise<void>`
 Grant, change, or remove a user's access level on a collection (admin only). Pass `null` or `'None'` to remove access. The server enforces privilege-escalation rules — you cannot grant an access level above your own, nor change a user whose level is above yours. POST /admin/collection/:collectionId/updateUserAccess
 
-**inviteUser**(collectionId: string,
+**inviteUser**(collectionId: string,
     input: InviteUserInput) → `Promise<`
 Invite a user to a collection by email (admin only). Creates or links their account in the login / auth-kit collection (`loginCollectionId`, default `'global'`) and emails them an invite (new account) or an added-to-collection notice (existing account); returns their `uid`. This does NOT grant access on its own — follow with {@link setUserAccess} to set their level (this mirrors the console flow). POST /user/inviteUser