@proveanything/smartlinks 2.0.9 → 2.0.11

package/docs/API_SUMMARY.md

@@ -1,6 +1,6 @@
 # Smartlinks API Summary
 
-Version: 2.0.9  |  Generated: 2026-09-21T16:23:55.650Z
+Version: 2.0.11  |  Generated: 2026-09-21T19:28:09.956Z
 
 This is a concise summary of all available API functions and types.
 
@@ -580,6 +580,11 @@ interface ResponsesRequest {
   max_concurrent_subagents?: number
   }
   service_tier?: 'auto' | 'standard' | 'flex' | 'priority'
+  server_tools?: boolean | AiToolName[]
+  allowCapabilities?: AiToolCapability[]
+  only?: AiToolName[]
+  exclude?: AiToolName[]
+  maxSteps?: number
 }
 ```
 
@@ -604,6 +609,7 @@ interface ResponsesResult {
   conversation?: unknown
   provider: 'openai'
   responseTime: number
+  _agent?: ResponsesAgentTrace
 }
 ```
 
@@ -1010,14 +1016,98 @@ interface AISearchPhotosRequest {
 **AISearchPhotosPhoto** (interface)
 ```typescript
 interface AISearchPhotosPhoto {
+  id?: string
   url: string
+  thumb?: string
   alt?: string
+  width?: number
+  height?: number
   photographer?: string
   photographerUrl?: string
   [key: string]: any
 }
 ```
 
+**AISearchPhotosResponse** (interface)
+```typescript
+interface AISearchPhotosResponse {
+  provider: string
+  results: AISearchPhotosPhoto[]
+  total?: number
+  total_pages?: number
+  [key: string]: any
+}
+```
+
+**AIGeneratedImage** (interface)
+```typescript
+interface AIGeneratedImage {
+  url: string | null
+  b64_json: string | null
+  revised_prompt?: string
+  [key: string]: any
+}
+```
+
+**AIGenerateImageResponse** (interface)
+```typescript
+interface AIGenerateImageResponse {
+  provider: string
+  model?: string
+  images: AIGeneratedImage[]
+  [key: string]: any
+}
+```
+
+**AIGenerateContentCandidate** (interface)
+```typescript
+interface AIGenerateContentCandidate {
+  content?: { parts?: Array<{ text?: string; [k: string]: any }>; role?: string; [k: string]: any }
+  finishReason?: string
+  [key: string]: any
+}
+```
+
+**AIGenerateContentResponse** (interface)
+```typescript
+interface AIGenerateContentResponse {
+  provider?: string
+  model?: string
+  candidates?: AIGenerateContentCandidate[]
+  usageMetadata?: {
+  promptTokenCount?: number
+  candidatesTokenCount?: number
+  totalTokenCount?: number
+  [k: string]: any
+  }
+  responseTime?: number
+  [key: string]: any
+}
+```
+
+**AIUploadedFile** (interface)
+```typescript
+interface AIUploadedFile {
+  name?: string
+  uri?: string
+  url?: string
+  mimeType?: string
+  sizeBytes?: number | string
+  state?: string
+  [key: string]: any
+}
+```
+
+**AICacheRef** (interface)
+```typescript
+interface AICacheRef {
+  name?: string
+  model?: string
+  expireTime?: string
+  [key: string]: any
+}
+```
+
 **AgentRunRequest** (interface)
 ```typescript
 interface AgentRunRequest {
@@ -1104,6 +1194,258 @@ interface CatalogResponse {
 }
 ```
 
+**WebFetchPageArgs** (interface)
+```typescript
+interface WebFetchPageArgs {
+  url: string; type?: string; forceRefresh?: boolean
+}
+```
+
+**WebExtractSchemaArgs** (interface)
+```typescript
+interface WebExtractSchemaArgs {
+  url: string; schemaType?: string; forceRefresh?: boolean
+}
+```
+
+**WebScreenshotArgs** (interface)
+```typescript
+interface WebScreenshotArgs {
+  url: string
+}
+```
+
+**WebSearchArgs** (interface)
+```typescript
+interface WebSearchArgs {
+  query: string; limit?: number; scrapeContent?: boolean
+}
+```
+
+**BrandAssetsArgs** (interface)
+```typescript
+interface BrandAssetsArgs {
+  url: string
+}
+```
+
+**DocumentReadArgs** (interface)
+```typescript
+interface DocumentReadArgs {
+  url: string; forceRefresh?: boolean
+}
+```
+
+**DataExtractArgs** (interface)
+```typescript
+interface DataExtractArgs {
+  url: string; schema?: Record<string, any>; prompt?: string
+}
+```
+
+**ImageDescribeArgs** (interface)
+```typescript
+interface ImageDescribeArgs {
+  imageUrl: string; prompt?: string
+}
+```
+
+**ImageGenerateArgs** (interface)
+```typescript
+interface ImageGenerateArgs {
+  prompt: string; size?: string; provider?: 'openai' | 'gemini'
+}
+```
+
+**ImageFromReferenceArgs** (interface)
+```typescript
+interface ImageFromReferenceArgs {
+  prompt: string; imageUrls: string[]; size?: string; model?: string
+}
+```
+
+**ImageSearchStockArgs** (interface)
+```typescript
+interface ImageSearchStockArgs {
+  query: string; per_page?: number; orientation?: 'landscape' | 'portrait' | 'squarish'
+}
+```
+
+**ImageTransformArgs** (interface)
+```typescript
+interface ImageTransformArgs {
+  imageUrl: string
+  resize?: { width?: number; height?: number; fit?: 'cover' | 'contain' | 'fill' | 'inside' | 'outside'; allowUpscale?: boolean }
+  crop?: { left: number; top: number; width: number; height: number }
+  rotate?: number
+  flip?: boolean
+  flop?: boolean
+  grayscale?: boolean
+  tint?: string
+  modulate?: { brightness?: number; saturation?: number; hue?: number; lightness?: number }
+  format?: 'jpeg' | 'png' | 'webp' | 'avif'
+  quality?: number
+}
+```
+
+**PdfCreateArgs** (interface)
+```typescript
+interface PdfCreateArgs {
+  html: string; format?: string; landscape?: boolean
+}
+```
+
+**PdfFillArgs** (interface)
+```typescript
+interface PdfFillArgs {
+  url: string; fields: Record<string, string | number | boolean>; flatten?: boolean
+}
+```
+
+**PdfMergeArgs** (interface)
+```typescript
+interface PdfMergeArgs {
+  urls: string[]
+}
+```
+
+**HttpRequestArgs** (interface)
+```typescript
+interface HttpRequestArgs {
+  url: string; method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'HEAD'; headers?: Record<string, string>; body?: any
+}
+```
+
+**TranslateArgs** (interface)
+```typescript
+interface TranslateArgs {
+  text: string; targetLanguages: string[]; sourceLanguage?: string
+}
+```
+
+**AiToolArgsMap** (interface)
+```typescript
+interface AiToolArgsMap {
+  'web.fetchPage': WebFetchPageArgs
+  'web.extractSchema': WebExtractSchemaArgs
+  'web.screenshot': WebScreenshotArgs
+  'web.search': WebSearchArgs
+  'brand.assets': BrandAssetsArgs
+  'document.read': DocumentReadArgs
+  'data.extract': DataExtractArgs
+  'image.describe': ImageDescribeArgs
+  'image.generate': ImageGenerateArgs
+  'image.fromReference': ImageFromReferenceArgs
+  'image.searchStock': ImageSearchStockArgs
+  'image.transform': ImageTransformArgs
+  'pdf.create': PdfCreateArgs
+  'pdf.fill': PdfFillArgs
+  'pdf.merge': PdfMergeArgs
+  'http.request': HttpRequestArgs
+  'translate': TranslateArgs
+}
+```
+
+**WebSearchResultItem** (interface)
+```typescript
+interface WebSearchResultItem {
+  url: string | null; title: string | null; description: string | null; markdown?: string
+}
+```
+
+**WebSearchResult** (interface)
+```typescript
+interface WebSearchResult {
+  query: string; results: WebSearchResultItem[]
+}
+```
+
+**DocumentReadResult** (interface)
+```typescript
+interface DocumentReadResult {
+  url: string; text: string | null; metadata?: any; provider?: string; cached?: boolean
+}
+```
+
+**DataExtractResult** (interface)
+```typescript
+interface DataExtractResult {
+  url: string; data: Record<string, any>
+}
+```
+
+**WebFetchPageResult** (interface)
+```typescript
+interface WebFetchPageResult {
+  url: string; markdown?: string | null; html?: string | null; metadata?: any; schemas?: any[]; provider?: string; cached?: boolean; status?: number | null
+}
+```
+
+**ImageDescribeResult** (interface)
+```typescript
+interface ImageDescribeResult {
+  imageUrl: string; text: string | null
+}
+```
+
+**HostedAssetResult** (interface)
+```typescript
+interface HostedAssetResult {
+  hostedUrl: string | null; contentType?: string; info?: { width?: number; height?: number; format?: string; size?: number }
+}
+```
+
+**HttpRequestResult** (interface)
+```typescript
+interface HttpRequestResult {
+  status: number; headers: Record<string, any>; body: any; truncated: boolean; finalUrl: string
+}
+```
+
+**TranslateResult** (interface)
+```typescript
+interface TranslateResult {
+  translations: Record<string, string>; sourceLanguage: string
+}
+```
+
+**ResponsesAgentTrace** (interface)
+```typescript
+interface ResponsesAgentTrace {
+  steps: number
+  maxStepsReached: boolean
+  toolResults: AgentToolResult[]
+  availableTools: string[]
+}
+```
+
+**AgentToolCallEvent** (interface)
+```typescript
+interface AgentToolCallEvent {
+  type: 'agent.tool_call'; name: string; args: Record<string, any>
+}
+```
+
+**AgentToolResultEvent** (interface)
+```typescript
+interface AgentToolResultEvent {
+  type: 'agent.tool_result'; name: string; isError: boolean; result: any
+}
+```
+
+**AgentResponseCompletedEvent** (interface)
+```typescript
+interface AgentResponseCompletedEvent {
+  type: 'response.completed'; response: ResponsesResult; _agent: ResponsesAgentTrace
+}
+```
+
+**AiToolCapability** = ``
+
+**AiToolName** = ``
+
+**AgentStreamEvent** = ``
+
 ### analytics
 
 **AnalyticsLocation** (interface)

package/docs/agent-tools.md

@@ -81,12 +81,21 @@ Identical to server functions — nothing new to reason about:
 Untrusted third-party tools run in the platform's isolated runner — the same boundary as untrusted
 server functions.
 
-## Replacing `app.admin.json` AI setup
+## Working with `app.admin.json` (complement, not replacement)
 
-This supersedes the `app.admin.json` "AI setup" schema-extraction model (the outer agent reading a
-schema and handing back JSON blobs). Instead the app owns its domain logic and exposes **real,
-capability-scoped actions** the agent invokes — with multi-turn and streaming. The AI-schema path is
-**deprecated as of V2** (still works through the V2 line; removed later).
+`app.admin.json` stays the **canonical declarative config contract** — setup questions, config schema,
+import fields, tunable settings, content hints. It's inspectable, validatable, deterministic, and
+reused by many consumers at once (the admin form renderer, AI setup, a signup journey asking the same
+questions, bulk import). Agent tools **do not replace it — they serve and adapt it**:
+
+- Keep the declarative schema as the default and source of truth.
+- When you want *dynamic, contextual* behaviour — "which questions for **this** collection?", "the
+  config schema as it stands right now", "apply these answers" — expose a small function/tool that
+  reads the declaration and returns a tailored result. **Static-first; dynamic only where it earns its
+  keep.**
+
+There's no rip-and-replace and nothing to migrate off: an app happy with its `app.admin.json` keeps
+it untouched.
 
 ## What ships now vs staged
 
@@ -96,16 +105,19 @@ capability-scoped actions** the agent invokes — with multi-turn and streaming.
 | SDK types for it; tool descriptors surfaced for discovery | `tools/call` streaming, cancellation, cross-app toolbelt arbitration |
 | Your handlers run today via http/event | Human-approval UX for `approval: "require"` |
 
-## Adopting this in an existing app
+## Adopting this — opt-in, per app, no fleet migration
+
+Agent tools are **purely additive**. There is **no migration pass**, and nothing breaks if you never
+adopt them — an existing app on the V2 SDK simply *gains the ability* to add them whenever you want.
+You do **not** touch every app; you turn it on for one app at a time.
 
-Do it in order — each step is a drop-in migration prompt (see the migration steps that ship with the
-SDK). Roughly:
+To turn them on for a single app (say, an FAQ app), once it's on the V2 SDK:
 
-1. **Server functions** — add the `functions` block + build target + test harness (if the app
-   doesn't have them). See [server-functions.md](server-functions.md).
+1. **Server functions** — add the `functions` block + build target + test harness if the app doesn't
+   already have them. See [server-functions.md](server-functions.md).
 2. **Expose tools** — add the `agent` block to the functions you want the agent to call; give each a
-   title/description/input schema and an approval mode.
-3. **Retire `app.admin.json` AI setup** — move any AI-authoring behaviour to tools; drop the
-   AI-schema block.
+   title / description / input schema and an approval mode.
 
-Steps 1–2 are safe to ship now; step 3 as you migrate each app off the old AI path.
+That's it — declare and build. The live agent loop is staged (see the table above); until it ships,
+your handlers still run via http/event, so declaring tools now is **forward-compatible, not
+speculative breakage**. `app.admin.json` stays as-is throughout — nothing to retire.

package/docs/ai.md

@@ -257,6 +257,85 @@ const response = await ai.chat.responses.create('my-collection', {
 console.log(response.output);
 ```
 
+### Server-side tools (built-in agent loop)
+
+The example above is **client-relayed** tool calling: you define the tools, the model returns
+`tool_call` requests, and *your app* executes them and sends results back. For the common tools —
+reading and searching the web, vision, reading documents, generating images — the platform ships a
+curated, tested **built-in toolset it runs itself**. Opt in with `server_tools` and the server
+executes each tool and feeds the result back automatically, looping until the model has its answer.
+You get one final response; no relay code.
+
+```typescript
+// Enable the whole built-in toolset:
+const res = await ai.chat.responses.create('my-collection', {
+  model: 'balanced',
+  input: 'Research acme.com and summarise what they sell, with their brand colours.',
+  server_tools: true
+});
+console.log(res.output_text);
+console.log(res._agent.toolResults); // trace: which tools ran, with what result
+```
+
+Scope it to specific tools (recommended — smaller blast radius, faster), by name or capability:
+
+```typescript
+import { AI_TOOL_NAMES } from '@proveanything/smartlinks';
+
+const res = await ai.chat.responses.create('my-collection', {
+  input: 'Find the current price of this product and return it as JSON.',
+  server_tools: [AI_TOOL_NAMES.WEB_SEARCH, AI_TOOL_NAMES.DATA_EXTRACT],
+  // or: allowCapabilities: ['web:read'],   exclude: ['image.generate'],
+  maxSteps: 6 // cap model round-trips (1–12, default 8)
+});
+```
+
+**Streaming** surfaces tool progress as it happens — ideal for a "thinking…" UI. You get
+`agent.tool_call` / `agent.tool_result` events, then a final `response.completed`:
+
+```typescript
+const stream = await ai.chat.responses.create('my-collection', {
+  input: 'Research acme.com', server_tools: true, stream: true
+});
+for await (const ev of stream) {
+  if (ev.type === 'agent.tool_call')   showStep(`Running ${ev.name}…`);
+  if (ev.type === 'agent.tool_result') showStep(`${ev.name} done`);
+  if (ev.type === 'response.completed') render(ev.response.output_text);
+}
+```
+
+`server_tools` can't be combined with `previous_response_id`/`conversation` yet — pass prior turns
+in `input`.
+
+#### Built-in tools
+
+| Tool | Does |
+|------|------|
+| `web.search` | Live web search → candidate results (url/title/description). |
+| `web.fetchPage` | Fetch a page → clean markdown + metadata + schema.org JSON-LD. |
+| `web.extractSchema` | Return only a page's schema.org data of a given `@type` (deterministic). |
+| `document.read` | Read a document at a URL — **PDF, deck, doc**, or article — into markdown. |
+| `data.extract` | Page + JSON-schema/prompt → **typed JSON** (turn a page into UI data). |
+| `brand.assets` | Extract a site's logo, colours, and design. |
+| `web.screenshot` | Screenshot a page → hosted image URL (feed to `image.describe`). |
+| `image.describe` | Vision: describe an image / read its text. |
+| `image.generate` | Generate an image from a prompt → hosted URL. |
+| `image.fromReference` | Image-to-image: generate guided by reference image(s). |
+| `image.searchStock` | Search real stock photos (Unsplash). |
+| `image.transform` | Resize / crop / rotate / grayscale / format-convert / compress → hosted URL. |
+| `pdf.create` | Render HTML → PDF → hosted URL. |
+| `pdf.fill` | Fill an AcroForm PDF's fields → hosted URL. |
+| `pdf.merge` | Merge several PDFs into one → hosted URL. |
+| `http.request` | SSRF-guarded outbound HTTP(S) to a public URL (call a REST API). |
+| `translate` | Translate text into one or more languages (generic, model-based). |
+
+Discover tools two ways:
+- **Design time (typed):** import `BUILTIN_AI_TOOLS`, `AI_TOOL_NAMES`, and the per-tool arg types
+  (`WebSearchArgs`, `DataExtractArgs`, …) from the SDK. This is the core set — stable, versioned,
+  documented here.
+- **Runtime (live):** `await ai.catalog(collectionId)` returns the registry as the server sees it,
+  including any future app-contributed tools. The built-in set above is always present.
+
 ### Recommended Models
 
 For agentic workflows on `v1/responses`, GPT-5.6 ships in three tiers. Pass either the full model

package/docs/app-manifest.md

@@ -42,7 +42,7 @@ The manifest is loaded automatically by the platform for every collection page.
     "version": "1.2.0",
     "platformRevision": "R5",
     "moduleFormat": "dual",
-    "sharedDependencies": "v5"
+    "sharedDependencies": "v6"
   },
 
   "admin": "app.admin.json",
@@ -148,7 +148,7 @@ The manifest is loaded automatically by the platform for every collection page.
 | `version` | string | ✅ | SemVer string, e.g. `"1.2.0"` |
 | `platformRevision` | string | ❌ | Platform revision tag this build targets, e.g. `"R5"` (see [host-dependency-contract.md](host-dependency-contract.md)) |
 | `moduleFormat` | `"umd"` \| `"esm"` \| `"dual"` | ❌ | How the host loads this app's bundles. Absent = `"umd"`. See [Module format](#module-format-umd-vs-esm) below. |
-| `sharedDependencies` | string | ❌ | Shared-dependency contract version the bundle was built against, e.g. `"v5"`. Used by the host to pick a compatible ESM import map. |
+| `sharedDependencies` | string | ❌ | Shared-dependency contract version the bundle was built against, e.g. `"v6"`. Used by the host to pick a compatible ESM import map. |
 | `globals` | object | ❌ | Per-app namespaced UMD globals (R4.7+), e.g. `{ "widgets": "MyAppWidgets" }`. UMD-only; ESM bundles don't need it. |
 | `seo.priority` | number | ❌ | Controls which app's `title`/`description`/`ogImage` wins when multiple apps are on the same page. Default `0`; higher wins. See the [Executor guide](executor.md). |
 
@@ -646,6 +646,8 @@ SmartLinks manifests are **AI-discoverable, -configurable, and -importable**: th
 
 When you change your config shape, keep all three in sync: `app.manifest.json` (widget `settings`, containers, executor, linkable), `app.admin.json` (setup / import / tunable), and `ai-guide.md` (prose guidance).
 
+This declarative model is canonical and works today. An app may **optionally** layer agent tools on top — a function that reads the declaration and returns a *context-adapted* result (e.g. "which setup questions for this collection?") — without changing the schema. That's additive and opt-in; see [agent-tools.md](agent-tools.md).
+
 ## Reading the Files at Runtime
 
 ### Manifest — available from the widgets endpoint

package/docs/host-dependency-contract.md

@@ -32,7 +32,7 @@ export default defineConfig({
         'react', 'react-dom', 'react/jsx-runtime',
         '@proveanything/smartlinks',
         'react-router-dom', '@tanstack/react-query',
-        'lucide-react', 'date-fns', 'liquidjs', 'class-variance-authority',
+        'lucide-react', 'date-fns', 'liquidjs', 'marked', 'class-variance-authority',
         '@radix-ui/react-slot', '@radix-ui/react-dialog', '@radix-ui/react-popover',
         '@radix-ui/react-tooltip', '@radix-ui/react-tabs', '@radix-ui/react-accordion',
         '@radix-ui/react-select', '@radix-ui/react-scroll-area', '@radix-ui/react-label',
@@ -44,7 +44,7 @@ export default defineConfig({
           '@proveanything/smartlinks': 'SL',
           'react-router-dom': 'ReactRouterDOM', '@tanstack/react-query': 'ReactQuery',
           'lucide-react': 'LucideReact', 'date-fns': 'dateFns', 'liquidjs': 'LiquidJS',
-          'class-variance-authority': 'CVA',
+          'marked': 'marked', 'class-variance-authority': 'CVA',
           '@radix-ui/react-slot': 'RadixSlot', '@radix-ui/react-dialog': 'RadixDialog',
           '@radix-ui/react-popover': 'RadixPopover', '@radix-ui/react-tooltip': 'RadixTooltip',
           '@radix-ui/react-tabs': 'RadixTabs', '@radix-ui/react-accordion': 'RadixAccordion',
@@ -71,6 +71,7 @@ export default defineConfig({
 | `lucide-react` | `LucideReact` | 1.47 |
 | `date-fns` | `dateFns` | 4.4 |
 | `liquidjs` | `LiquidJS` | 10.27+ |
+| `marked` | `marked` | 12+ |
 | `class-variance-authority` | `CVA` | 0.7 |
 | `@radix-ui/react-slot` | `RadixSlot` | 1.2.4 |
 | `@radix-ui/react-dialog` | `RadixDialog` | 1.1.23 |
@@ -85,7 +86,10 @@ export default defineConfig({
 | `@radix-ui/react-progress` | `RadixProgress` | 1.1.8 |
 | `@radix-ui/react-avatar` | `RadixAvatar` | 1.1.11 |
 
-`liquidjs` is **host-provided** — externalise it, don't ship a second copy (frequently missed).
+`liquidjs` and `marked` are **host-provided** — externalise them, don't ship a second copy
+(frequently missed). `marked` is new in **contract v6**: the portal and hub render markdown in the
+container, so an app should use the host's renderer rather than bundling its own. `marked` does not
+sanitise HTML — if you render untrusted markdown, sanitise the output (e.g. DOMPurify) yourself.
 
 ## Backwards compatibility
 
@@ -111,7 +115,7 @@ app ships the Tailwind 4 CSS-first layout as the default; see its README.)
 
 React **19.3** · Vite **8.3** · react-router-dom **7.18** · Tailwind **4.3** (CSS-first) ·
 TypeScript **6.0** · ESLint **10.11** · `@proveanything/smartlinks` **2.0.5** ·
-`@proveanything/smartlinks-utils-ui` **1.16.4** · liquidjs **10.29**.
+`@proveanything/smartlinks-utils-ui` **1.16.4** · liquidjs **10.29** · marked **12+**.
 
 > **TypeScript 7** (the native/Go compiler) is **deliberately deferred** — tooling hasn't settled.
 > Target **TS 6** for R5; it compiles existing code with no source changes.
@@ -138,8 +142,8 @@ never drift:
 
 ```ts
 import {
-  SHARED_DEPENDENCY_CONTRACT_VERSION, // 'v5'
-  SHARED_DEPENDENCIES,                // [{ specifier, globalName, minVersion, importMapPath }, …] (25)
+  SHARED_DEPENDENCY_CONTRACT_VERSION, // 'v6'
+  SHARED_DEPENDENCIES,                // [{ specifier, globalName, minVersion, importMapPath }, …] (26)
   SHARED_DEPENDENCY_SPECIFIERS,       // bare specifiers — drop straight into a bundler `external` list
   getHostSharedDependencies,          // what the live host advertises at runtime, or null
 } from '@proveanything/smartlinks'

package/docs/overview.md

@@ -60,7 +60,7 @@ The SmartLinks SDK (`@proveanything/smartlinks`) includes comprehensive document
 | **Mobile Admin Container** | `docs/mobile-admin-container.md` | Building a separate Capacitor-aware mobile admin bundle for field operators |
 | **Executors** | `docs/executor.md` | Building executor bundles for SEO, LLM content, programmatic config |
 | **Server Functions** | `docs/server-functions.md` | App-authored server-side functions `(ctx, event) ⇒ result`: security model, runtime surface, invoking |
-| **Agent Tools** | `docs/agent-tools.md` | Exposing your app's actions to the SmartLinks agent — an MCP facade over server functions; declare now, live loop staged; replaces `app.admin.json` AI setup |
+| **Agent Tools** | `docs/agent-tools.md` | Exposing your app's actions to the SmartLinks agent — an MCP facade over server functions; **opt-in per app, additive, no migration**; complements `app.admin.json` (functions serve/adapt it, don't replace it); live loop staged |
 | **Deploying & Registering** | `docs/deploying-apps.md` | Getting your app into the platform: fast dev publish, channels, deploy keys, registering releases |
 | **Host Dependency Contract (R5)** | `docs/host-dependency-contract.md` | The libraries the host provides (React 19, Router 7, Radix, liquidjs, …), the externalise-don't-bundle rule + Vite config, and React-18 backwards-compat |
 | **Deep Linking** | `docs/deep-link-discovery.md` | URL state management, navigable states, portal menus, AI nav |