diff --git a/.changeset/cli-list-fields.md b/.changeset/cli-list-fields.md
deleted file mode 100644
index 66e1f5ac..00000000
--- a/.changeset/cli-list-fields.md
+++ /dev/null
@@ -1,7 +0,0 @@
----
-'@transloadit/node': patch
-'transloadit': patch
----
-
-Honor selected fields in JSON output from Template and Assembly list commands, and lead CLI
-onboarding with browser login while retaining explicit credentials for automation.
diff --git a/.changeset/public-image-candidates.md b/.changeset/public-image-candidates.md
deleted file mode 100644
index 59163026..00000000
--- a/.changeset/public-image-candidates.md
+++ /dev/null
@@ -1,9 +0,0 @@
----
-"@transloadit/utils": minor
----
-
-Add `getSmartCdnImageCandidates` next to the signed candidate builder on the Node entry point.
-Share candidate validation and URL encoding while omitting signatures and expiry for genuinely
-public delivery. Callers can use receipt-derived version tags for stable, immutable cache keys.
-Include a proportional (rounded-up) fit height, or the backend limit without source metadata,
-so a Template's default height does not silently invalidate the width descriptors.
diff --git a/.changeset/public-preview-limits.md b/.changeset/public-preview-limits.md
deleted file mode 100644
index 89683c62..00000000
--- a/.changeset/public-preview-limits.md
+++ /dev/null
@@ -1,6 +0,0 @@
----
-'@transloadit/utils': patch
----
-
-Keep public-preview candidates within their dimension and quality limits, including width-only
-requests and tall sources. Share the exact Built-in limits with image delivery adapters.
diff --git a/.changeset/storage-image-prefixes.md b/.changeset/storage-image-prefixes.md
deleted file mode 100644
index ea961b80..00000000
--- a/.changeset/storage-image-prefixes.md
+++ /dev/null
@@ -1,9 +0,0 @@
----
-"@transloadit/utils": minor
-"@transloadit/node": patch
-"transloadit": patch
----
-
-Share Storage path and directory-prefix validation between image integrations and CLI scaffolds.
-Keep generated image recipes scoped, preserve relative imports for hidden receipt catalogs, and
-sign Storage listing requests against the endpoint belonging to the selected key credentials.
diff --git a/.changeset/storage-image-receipts.md b/.changeset/storage-image-receipts.md
deleted file mode 100644
index 2e1568f7..00000000
--- a/.changeset/storage-image-receipts.md
+++ /dev/null
@@ -1,95 +0,0 @@
----
-"@transloadit/node": minor
-"transloadit": minor
-"@transloadit/mcp-server": patch
----
-
-Require Node 20.10.0+ for JSON import attributes and composed AbortSignal cancellation. Logout
-only forgets imported and legacy application keys unless revocation is explicitly requested
-with `--revoke`.
-
-Add `getStoredAssemblyResults()` for verified completed batches of any retained media, with
-Assembly/step/result/input provenance. Add native `moveStoredAsset()` / `deleteStoredAsset()`;
-moves return the canonical transaction snapshot and preserve existing references.
-`getStoredAssetUrl()` signs exact original bytes through `builtin/storage-serve@0.0.3`, with an
-optional safe Unicode attachment filename and a bounded, cache-rotated lifetime. Requires a
-backend with that Built-in and canonical native mutation responses.
-
-Add `client.storeImage(filePath, { path })` for one original Storage image without overwriting.
-Stream the input checksum and verify the completed receipt's path, asset ID, stored bytes and
-EXIF-oriented display dimensions. Community-plan transformations may change the stored size/MD5;
-return authoritative result metadata and expose the input comparison through `onReceipt`.
-The CLI warns about changed bytes, saves the receipt and adds bounded debug diagnostics.
-Return typed metadata suitable for saving and rendering without another lookup. Preserve Assembly
-upload progress, cancellation and errors; receipt validation after a write is not a rollback.
-
-Add `transloadit storage store <file> <path>` using the CLI's existing
-Assembly credentials. Atomically append keyed receipts, preserve previous data on failures and
-reject concurrent writers, then print a ready-to-render Image storage snippet.
-Add `storage store --hashed` for content-addressed filenames: eight MD5 hex digits before the
-extension, with catalog keys, generated types and JSX following the stored path. Retain the local
-filename as `source`; reuse matching full-checksum/size receipts without uploading. Never overwrite
-a hash conflict. Document native catalog recovery in the image reference.
-When receipt validation fails after writing, print the destination and Assembly ID for recovery.
-Point to list/sync, not overwrite or another upload. Report pending browser approval every minute.
-Document npm-first onboarding, browser signup and free-plan watermark behavior.
-Keep receipts-file filesystem errors distinct from JSON validation failures, with the file path.
-Retain a completed temporary catalog on local replacement failures, print the verified receipt,
-and preserve an existing catalog's permissions.
-
-Add `getStoredImageReceipt({ assemblyId, expected })` to recover the same verified metadata after
-a trusted upload notification or a local file error. Add explicit `store --overwrite` and
-read-scoped `storage ls <prefix>`; overwriting is never implicit.
-
-Add `storage receipts sync <prefix> --receipts images.json` to recover rendering metadata from
-signed, bounded native catalog pages without per-file HEAD requests, an Assembly or an original
-download. Recover canonical Workspace, asset ID, retained version ID, current path, dimensions,
-MIME and available checksums. Share
-atomic receipt-file writes and credential-bound endpoint resolution with the existing commands;
-preserve unmatched records and the entire previous file on metadata, listing or write failures.
-Record API provenance for every upload, not only hashed uploads, and on the catalog even when
-publication happens before the first upload. Reject API-environment mismatches
-even when Workspace slugs are identical; a custom delivery host is not an API identity. Recover
-unbound legacy receipts into a separate catalog before reviewing and replacing the old file.
-Recovery records the verified API origin so hashed uploads can be reused without uploading.
-Existing rendering catalogs require this recovery before adopting the version-addressed Viewer.
-Redeploy the application to regenerate private capability-v2 URLs; old capability URLs are not
-accepted by the new handler. New Built-ins select actual retained versions, not arbitrary cache tags.
-
-Add browser device authorization for `auth login`, with bounded polling, cancellation and
-owner-only credential persistence. Keep `--stdin` for an existing Auth Key, verified by a signed read.
-Keep newly entered credentials independent from project dotenv endpoint settings; save an explicit
-trusted endpoint with the key. Add `image init [--public | --private]`, with
-opt-in private `.env.local` scaffolding via `--write-env`. Never overwrite existing application files.
-Default store/sync catalogs to `transloadit.images.json`. Init writes an empty catalog and a runnable example
-for `app` or `src/app`, preserving existing files. Store prints only the saved path and component
-usage; its snippet-only public/private flags and init's dead next flag are removed. Keep upload
-local placeholders on sync only when the canonical asset ID and version ID still match.
-
-Rename the unpublished image package to `@transloadit/viewer` and expose `Image` with mutually
-exclusive `storage` and `template` selectors and a separate `workspace` prop. Custom HTTP/S3
-Templates do not require a Storage catalog or inherit its publication policy. Keep credentials
-server-only and authorize the full workspace, Template and path identity for private redirects.
-
-Consolidate the unpublished Next factories into `createImages`; select `public`, `authorize`,
-or `delivery: 'direct'` explicitly. The authorize overload retains its typed redirect handler.
-Require Next 16.3.3 or newer in the peer range.
-
-Reuse the login workspace and combined Auth Key for optional env scaffolding without extra prompts.
-Add signed public-prefix declaration, revocation and listing methods with `storage publish`,
-`storage unpublish` and `storage publications`. Public image init declares server policy before writing
-files and explains that already cached public bytes cannot be recalled.
-
-Preserve the device key's signing algorithm in CLI credentials and subsequent API requests.
-Add `signatureAlgorithm` to SDK client options while retaining the legacy SHA-384 default and
-explicit per-call overrides. Init's env setup uses the saved key/workspace/endpoint together,
-independently of stale project or shell credentials. Public/private Template overrides are separate.
-
-Public init stores workspace and published prefixes in the committed catalog, with no app env file.
-Require public/private intent and bind Storage operations to the selected key's verified workspace.
-Support multi-file store, auth status and server-side auth logout before removing credentials.
-Infer allowed directories from
-public policy even with an empty catalog, and accepts a missing trailing slash. Storage commands
-report the winning credential source without showing credentials; store prints constrained JSX
-bounded to the receipt width. Login makes a bounded read-only Storage policy preflight and gives
-Console advice when unavailable. Keep the image quickstart concise and ship its detailed reference.
diff --git a/.changeset/storage-image-seed.md b/.changeset/storage-image-seed.md
deleted file mode 100644
index 3eee0a2c..00000000
--- a/.changeset/storage-image-seed.md
+++ /dev/null
@@ -1,13 +0,0 @@
----
-'@transloadit/node': patch
-'@transloadit/types': patch
-'@transloadit/zod': patch
-'transloadit': patch
-'@transloadit/mcp-server': patch
----
-
-Include the Transloadit Storage import and store Robots in the offline catalog and generated
-instructions, and type the optional `asset_id` in Assembly results. Recognize Storage import/store
-error codes in response validation and terminal-status helpers, preserving API errors while polling.
-Sync the canonical `recursive` option for Storage folder imports into the offline linter and
-generated instructions without adding SDK-only schema fields.
diff --git a/.changeset/viewer-alpha.md b/.changeset/viewer-alpha.md
deleted file mode 100644
index 06d83b7f..00000000
--- a/.changeset/viewer-alpha.md
+++ /dev/null
@@ -1,11 +0,0 @@
----
-"@transloadit/viewer": patch
----
-
-Publish the first alpha of `@transloadit/viewer`: native responsive images from Transloadit Storage
-or an origin-pinned HTTP/S3 Smart CDN Template, with a Next.js Server Component and a resolved-model
-renderer. Image bytes go directly from Smart CDN to the browser.
-
-This is an early, images-only API that may change between releases. Install the `alpha` tag and pin
-the exact version. Storage and browser CLI login require the matching backend and Console rollout;
-an existing compatible HTTP/S3 Template does not require a Storage migration.
diff --git a/packages/img/CHANGELOG.md b/packages/img/CHANGELOG.md
new file mode 100644
index 00000000..ff86a43b
--- /dev/null
+++ b/packages/img/CHANGELOG.md
@@ -0,0 +1,18 @@
+# @transloadit/viewer
+
+## 0.0.1
+
+### Patch Changes
+
+- 78de89e: Publish the first alpha of `@transloadit/viewer`: native responsive images from Transloadit Storage
+  or an origin-pinned HTTP/S3 Smart CDN Template, with a Next.js Server Component and a resolved-model
+  renderer. Image bytes go directly from Smart CDN to the browser.
+
+  This is an early, images-only API that may change between releases. Install the `alpha` tag and pin
+  the exact version. Storage and browser CLI login require the matching backend and Console rollout;
+  an existing compatible HTTP/S3 Template does not require a Storage migration.
+
+- Updated dependencies [a2c5dd7]
+- Updated dependencies [a2c5dd7]
+- Updated dependencies [a2c5dd7]
+  - @transloadit/utils@4.9.0
diff --git a/packages/img/package.json b/packages/img/package.json
index 6cc50351..49aa2133 100644
--- a/packages/img/package.json
+++ b/packages/img/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@transloadit/viewer",
-  "version": "0.0.0",
+  "version": "0.0.1",
   "description": "Alpha: native responsive images from Transloadit Storage and Smart CDN Templates",
   "type": "module",
   "license": "MIT",
@@ -65,7 +65,7 @@
   },
   "dependencies": {
     "@noble/ciphers": "^1.3.0",
-    "@transloadit/utils": "^4.8.1",
+    "@transloadit/utils": "^4.9.0",
     "server-only": "^0.0.1",
     "thumbhash": "0.1.1"
   },
diff --git a/packages/mcp-server/CHANGELOG.md b/packages/mcp-server/CHANGELOG.md
index 5ae0901c..a6c9a0c1 100644
--- a/packages/mcp-server/CHANGELOG.md
+++ b/packages/mcp-server/CHANGELOG.md
@@ -1,5 +1,110 @@
 # @transloadit/mcp-server
 
+## 0.3.32
+
+### Patch Changes
+
+- a2c5dd7: Require Node 20.10.0+ for JSON import attributes and composed AbortSignal cancellation. Logout
+  only forgets imported and legacy application keys unless revocation is explicitly requested
+  with `--revoke`.
+
+  Add `getStoredAssemblyResults()` for verified completed batches of any retained media, with
+  Assembly/step/result/input provenance. Add native `moveStoredAsset()` / `deleteStoredAsset()`;
+  moves return the canonical transaction snapshot and preserve existing references.
+  `getStoredAssetUrl()` signs exact original bytes through `builtin/storage-serve@0.0.3`, with an
+  optional safe Unicode attachment filename and a bounded, cache-rotated lifetime. Requires a
+  backend with that Built-in and canonical native mutation responses.
+
+  Add `client.storeImage(filePath, { path })` for one original Storage image without overwriting.
+  Stream the input checksum and verify the completed receipt's path, asset ID, stored bytes and
+  EXIF-oriented display dimensions. Community-plan transformations may change the stored size/MD5;
+  return authoritative result metadata and expose the input comparison through `onReceipt`.
+  The CLI warns about changed bytes, saves the receipt and adds bounded debug diagnostics.
+  Return typed metadata suitable for saving and rendering without another lookup. Preserve Assembly
+  upload progress, cancellation and errors; receipt validation after a write is not a rollback.
+
+  Add `transloadit storage store <file> <path>` using the CLI's existing
+  Assembly credentials. Atomically append keyed receipts, preserve previous data on failures and
+  reject concurrent writers, then print a ready-to-render Image storage snippet.
+  Add `storage store --hashed` for content-addressed filenames: eight MD5 hex digits before the
+  extension, with catalog keys, generated types and JSX following the stored path. Retain the local
+  filename as `source`; reuse matching full-checksum/size receipts without uploading. Never overwrite
+  a hash conflict. Document native catalog recovery in the image reference.
+  When receipt validation fails after writing, print the destination and Assembly ID for recovery.
+  Point to list/sync, not overwrite or another upload. Report pending browser approval every minute.
+  Document npm-first onboarding, browser signup and free-plan watermark behavior.
+  Keep receipts-file filesystem errors distinct from JSON validation failures, with the file path.
+  Retain a completed temporary catalog on local replacement failures, print the verified receipt,
+  and preserve an existing catalog's permissions.
+
+  Add `getStoredImageReceipt({ assemblyId, expected })` to recover the same verified metadata after
+  a trusted upload notification or a local file error. Add explicit `store --overwrite` and
+  read-scoped `storage ls <prefix>`; overwriting is never implicit.
+
+  Add `storage receipts sync <prefix> --receipts images.json` to recover rendering metadata from
+  signed, bounded native catalog pages without per-file HEAD requests, an Assembly or an original
+  download. Recover canonical Workspace, asset ID, retained version ID, current path, dimensions,
+  MIME and available checksums. Share
+  atomic receipt-file writes and credential-bound endpoint resolution with the existing commands;
+  preserve unmatched records and the entire previous file on metadata, listing or write failures.
+  Record API provenance for every upload, not only hashed uploads, and on the catalog even when
+  publication happens before the first upload. Reject API-environment mismatches
+  even when Workspace slugs are identical; a custom delivery host is not an API identity. Recover
+  unbound legacy receipts into a separate catalog before reviewing and replacing the old file.
+  Recovery records the verified API origin so hashed uploads can be reused without uploading.
+  Existing rendering catalogs require this recovery before adopting the version-addressed Viewer.
+  Redeploy the application to regenerate private capability-v2 URLs; old capability URLs are not
+  accepted by the new handler. New Built-ins select actual retained versions, not arbitrary cache tags.
+
+  Add browser device authorization for `auth login`, with bounded polling, cancellation and
+  owner-only credential persistence. Keep `--stdin` for an existing Auth Key, verified by a signed read.
+  Keep newly entered credentials independent from project dotenv endpoint settings; save an explicit
+  trusted endpoint with the key. Add `image init [--public | --private]`, with
+  opt-in private `.env.local` scaffolding via `--write-env`. Never overwrite existing application files.
+  Default store/sync catalogs to `transloadit.images.json`. Init writes an empty catalog and a runnable example
+  for `app` or `src/app`, preserving existing files. Store prints only the saved path and component
+  usage; its snippet-only public/private flags and init's dead next flag are removed. Keep upload
+  local placeholders on sync only when the canonical asset ID and version ID still match.
+
+  Rename the unpublished image package to `@transloadit/viewer` and expose `Image` with mutually
+  exclusive `storage` and `template` selectors and a separate `workspace` prop. Custom HTTP/S3
+  Templates do not require a Storage catalog or inherit its publication policy. Keep credentials
+  server-only and authorize the full workspace, Template and path identity for private redirects.
+
+  Consolidate the unpublished Next factories into `createImages`; select `public`, `authorize`,
+  or `delivery: 'direct'` explicitly. The authorize overload retains its typed redirect handler.
+  Require Next 16.3.3 or newer in the peer range.
+
+  Reuse the login workspace and combined Auth Key for optional env scaffolding without extra prompts.
+  Add signed public-prefix declaration, revocation and listing methods with `storage publish`,
+  `storage unpublish` and `storage publications`. Public image init declares server policy before writing
+  files and explains that already cached public bytes cannot be recalled.
+
+  Preserve the device key's signing algorithm in CLI credentials and subsequent API requests.
+  Add `signatureAlgorithm` to SDK client options while retaining the legacy SHA-384 default and
+  explicit per-call overrides. Init's env setup uses the saved key/workspace/endpoint together,
+  independently of stale project or shell credentials. Public/private Template overrides are separate.
+
+  Public init stores workspace and published prefixes in the committed catalog, with no app env file.
+  Require public/private intent and bind Storage operations to the selected key's verified workspace.
+  Support multi-file store, auth status and server-side auth logout before removing credentials.
+  Infer allowed directories from
+  public policy even with an empty catalog, and accepts a missing trailing slash. Storage commands
+  report the winning credential source without showing credentials; store prints constrained JSX
+  bounded to the receipt width. Login makes a bounded read-only Storage policy preflight and gives
+  Console advice when unavailable. Keep the image quickstart concise and ship its detailed reference.
+
+- a2c5dd7: Include the Transloadit Storage import and store Robots in the offline catalog and generated
+  instructions, and type the optional `asset_id` in Assembly results. Recognize Storage import/store
+  error codes in response validation and terminal-status helpers, preserving API errors while polling.
+  Sync the canonical `recursive` option for Storage folder imports into the offline linter and
+  generated instructions without adding SDK-only schema fields.
+- Updated dependencies [a2c5dd7]
+- Updated dependencies [a2c5dd7]
+- Updated dependencies [a2c5dd7]
+- Updated dependencies [a2c5dd7]
+  - @transloadit/node@4.13.0
+
 ## 0.3.31
 
 ### Patch Changes
diff --git a/packages/mcp-server/package.json b/packages/mcp-server/package.json
index 04874cdf..769a9573 100644
--- a/packages/mcp-server/package.json
+++ b/packages/mcp-server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@transloadit/mcp-server",
-  "version": "0.3.31",
+  "version": "0.3.32",
   "description": "Transloadit MCP server",
   "keywords": [
     "mcp",
@@ -62,7 +62,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@transloadit/node": "^4.12.0",
+    "@transloadit/node": "^4.13.0",
     "@transloadit/sev-logger": "^0.1.9",
     "express": "^5.2.1",
     "prom-client": "^15.1.3",
diff --git a/packages/node/CHANGELOG.md b/packages/node/CHANGELOG.md
index e2a54fc9..53f75bbe 100644
--- a/packages/node/CHANGELOG.md
+++ b/packages/node/CHANGELOG.md
@@ -1,5 +1,116 @@
 # @transloadit/node
 
+## 4.13.0
+
+### Minor Changes
+
+- a2c5dd7: Require Node 20.10.0+ for JSON import attributes and composed AbortSignal cancellation. Logout
+  only forgets imported and legacy application keys unless revocation is explicitly requested
+  with `--revoke`.
+
+  Add `getStoredAssemblyResults()` for verified completed batches of any retained media, with
+  Assembly/step/result/input provenance. Add native `moveStoredAsset()` / `deleteStoredAsset()`;
+  moves return the canonical transaction snapshot and preserve existing references.
+  `getStoredAssetUrl()` signs exact original bytes through `builtin/storage-serve@0.0.3`, with an
+  optional safe Unicode attachment filename and a bounded, cache-rotated lifetime. Requires a
+  backend with that Built-in and canonical native mutation responses.
+
+  Add `client.storeImage(filePath, { path })` for one original Storage image without overwriting.
+  Stream the input checksum and verify the completed receipt's path, asset ID, stored bytes and
+  EXIF-oriented display dimensions. Community-plan transformations may change the stored size/MD5;
+  return authoritative result metadata and expose the input comparison through `onReceipt`.
+  The CLI warns about changed bytes, saves the receipt and adds bounded debug diagnostics.
+  Return typed metadata suitable for saving and rendering without another lookup. Preserve Assembly
+  upload progress, cancellation and errors; receipt validation after a write is not a rollback.
+
+  Add `transloadit storage store <file> <path>` using the CLI's existing
+  Assembly credentials. Atomically append keyed receipts, preserve previous data on failures and
+  reject concurrent writers, then print a ready-to-render Image storage snippet.
+  Add `storage store --hashed` for content-addressed filenames: eight MD5 hex digits before the
+  extension, with catalog keys, generated types and JSX following the stored path. Retain the local
+  filename as `source`; reuse matching full-checksum/size receipts without uploading. Never overwrite
+  a hash conflict. Document native catalog recovery in the image reference.
+  When receipt validation fails after writing, print the destination and Assembly ID for recovery.
+  Point to list/sync, not overwrite or another upload. Report pending browser approval every minute.
+  Document npm-first onboarding, browser signup and free-plan watermark behavior.
+  Keep receipts-file filesystem errors distinct from JSON validation failures, with the file path.
+  Retain a completed temporary catalog on local replacement failures, print the verified receipt,
+  and preserve an existing catalog's permissions.
+
+  Add `getStoredImageReceipt({ assemblyId, expected })` to recover the same verified metadata after
+  a trusted upload notification or a local file error. Add explicit `store --overwrite` and
+  read-scoped `storage ls <prefix>`; overwriting is never implicit.
+
+  Add `storage receipts sync <prefix> --receipts images.json` to recover rendering metadata from
+  signed, bounded native catalog pages without per-file HEAD requests, an Assembly or an original
+  download. Recover canonical Workspace, asset ID, retained version ID, current path, dimensions,
+  MIME and available checksums. Share
+  atomic receipt-file writes and credential-bound endpoint resolution with the existing commands;
+  preserve unmatched records and the entire previous file on metadata, listing or write failures.
+  Record API provenance for every upload, not only hashed uploads, and on the catalog even when
+  publication happens before the first upload. Reject API-environment mismatches
+  even when Workspace slugs are identical; a custom delivery host is not an API identity. Recover
+  unbound legacy receipts into a separate catalog before reviewing and replacing the old file.
+  Recovery records the verified API origin so hashed uploads can be reused without uploading.
+  Existing rendering catalogs require this recovery before adopting the version-addressed Viewer.
+  Redeploy the application to regenerate private capability-v2 URLs; old capability URLs are not
+  accepted by the new handler. New Built-ins select actual retained versions, not arbitrary cache tags.
+
+  Add browser device authorization for `auth login`, with bounded polling, cancellation and
+  owner-only credential persistence. Keep `--stdin` for an existing Auth Key, verified by a signed read.
+  Keep newly entered credentials independent from project dotenv endpoint settings; save an explicit
+  trusted endpoint with the key. Add `image init [--public | --private]`, with
+  opt-in private `.env.local` scaffolding via `--write-env`. Never overwrite existing application files.
+  Default store/sync catalogs to `transloadit.images.json`. Init writes an empty catalog and a runnable example
+  for `app` or `src/app`, preserving existing files. Store prints only the saved path and component
+  usage; its snippet-only public/private flags and init's dead next flag are removed. Keep upload
+  local placeholders on sync only when the canonical asset ID and version ID still match.
+
+  Rename the unpublished image package to `@transloadit/viewer` and expose `Image` with mutually
+  exclusive `storage` and `template` selectors and a separate `workspace` prop. Custom HTTP/S3
+  Templates do not require a Storage catalog or inherit its publication policy. Keep credentials
+  server-only and authorize the full workspace, Template and path identity for private redirects.
+
+  Consolidate the unpublished Next factories into `createImages`; select `public`, `authorize`,
+  or `delivery: 'direct'` explicitly. The authorize overload retains its typed redirect handler.
+  Require Next 16.3.3 or newer in the peer range.
+
+  Reuse the login workspace and combined Auth Key for optional env scaffolding without extra prompts.
+  Add signed public-prefix declaration, revocation and listing methods with `storage publish`,
+  `storage unpublish` and `storage publications`. Public image init declares server policy before writing
+  files and explains that already cached public bytes cannot be recalled.
+
+  Preserve the device key's signing algorithm in CLI credentials and subsequent API requests.
+  Add `signatureAlgorithm` to SDK client options while retaining the legacy SHA-384 default and
+  explicit per-call overrides. Init's env setup uses the saved key/workspace/endpoint together,
+  independently of stale project or shell credentials. Public/private Template overrides are separate.
+
+  Public init stores workspace and published prefixes in the committed catalog, with no app env file.
+  Require public/private intent and bind Storage operations to the selected key's verified workspace.
+  Support multi-file store, auth status and server-side auth logout before removing credentials.
+  Infer allowed directories from
+  public policy even with an empty catalog, and accepts a missing trailing slash. Storage commands
+  report the winning credential source without showing credentials; store prints constrained JSX
+  bounded to the receipt width. Login makes a bounded read-only Storage policy preflight and gives
+  Console advice when unavailable. Keep the image quickstart concise and ship its detailed reference.
+
+### Patch Changes
+
+- a2c5dd7: Honor selected fields in JSON output from Template and Assembly list commands, and lead CLI
+  onboarding with browser login while retaining explicit credentials for automation.
+- a2c5dd7: Share Storage path and directory-prefix validation between image integrations and CLI scaffolds.
+  Keep generated image recipes scoped, preserve relative imports for hidden receipt catalogs, and
+  sign Storage listing requests against the endpoint belonging to the selected key credentials.
+- a2c5dd7: Include the Transloadit Storage import and store Robots in the offline catalog and generated
+  instructions, and type the optional `asset_id` in Assembly results. Recognize Storage import/store
+  error codes in response validation and terminal-status helpers, preserving API errors while polling.
+  Sync the canonical `recursive` option for Storage folder imports into the offline linter and
+  generated instructions without adding SDK-only schema fields.
+- Updated dependencies [a2c5dd7]
+- Updated dependencies [a2c5dd7]
+- Updated dependencies [a2c5dd7]
+  - @transloadit/utils@4.9.0
+
 ## 4.12.0
 
 ### Minor Changes
diff --git a/packages/node/package.json b/packages/node/package.json
index 430926e8..388e6b6c 100644
--- a/packages/node/package.json
+++ b/packages/node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@transloadit/node",
-  "version": "4.12.0",
+  "version": "4.13.0",
   "description": "Node.js SDK for Transloadit",
   "homepage": "https://github.com/transloadit/node-sdk/tree/main/packages/node",
   "bugs": {
@@ -33,7 +33,7 @@
   },
   "dependencies": {
     "@transloadit/sev-logger": "^0.1.9",
-    "@transloadit/utils": "^4.8.1",
+    "@transloadit/utils": "^4.9.0",
     "cacheable-lookup": "^7.0.0",
     "clipanion": "^4.0.0-rc.4",
     "debug": "^4.4.3",
diff --git a/packages/transloadit/package.json b/packages/transloadit/package.json
index 88a283ff..1af6efcd 100644
--- a/packages/transloadit/package.json
+++ b/packages/transloadit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "transloadit",
-  "version": "4.12.0",
+  "version": "4.13.0",
   "description": "Node.js SDK for Transloadit",
   "homepage": "https://github.com/transloadit/node-sdk/tree/main/packages/node",
   "bugs": {
@@ -33,7 +33,7 @@
   },
   "dependencies": {
     "@transloadit/sev-logger": "^0.1.9",
-    "@transloadit/utils": "^4.8.1",
+    "@transloadit/utils": "^4.9.0",
     "cacheable-lookup": "^7.0.0",
     "clipanion": "^4.0.0-rc.4",
     "debug": "^4.4.3",
diff --git a/packages/types/CHANGELOG.md b/packages/types/CHANGELOG.md
index 38189e07..a555c579 100644
--- a/packages/types/CHANGELOG.md
+++ b/packages/types/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @transloadit/types
 
+## 4.4.1
+
+### Patch Changes
+
+- a2c5dd7: Include the Transloadit Storage import and store Robots in the offline catalog and generated
+  instructions, and type the optional `asset_id` in Assembly results. Recognize Storage import/store
+  error codes in response validation and terminal-status helpers, preserving API errors while polling.
+  Sync the canonical `recursive` option for Storage folder imports into the offline linter and
+  generated instructions without adding SDK-only schema fields.
+
 ## 4.4.0
 
 ### Minor Changes
diff --git a/packages/types/package.json b/packages/types/package.json
index d6bea3b9..f17b8ef2 100644
--- a/packages/types/package.json
+++ b/packages/types/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@transloadit/types",
-  "version": "4.4.0",
+  "version": "4.4.1",
   "description": "Transloadit type definitions",
   "type": "module",
   "license": "MIT",
diff --git a/packages/utils/CHANGELOG.md b/packages/utils/CHANGELOG.md
index 05b91d15..e019d098 100644
--- a/packages/utils/CHANGELOG.md
+++ b/packages/utils/CHANGELOG.md
@@ -1,5 +1,23 @@
 # @transloadit/utils
 
+## 4.9.0
+
+### Minor Changes
+
+- a2c5dd7: Add `getSmartCdnImageCandidates` next to the signed candidate builder on the Node entry point.
+  Share candidate validation and URL encoding while omitting signatures and expiry for genuinely
+  public delivery. Callers can use receipt-derived version tags for stable, immutable cache keys.
+  Include a proportional (rounded-up) fit height, or the backend limit without source metadata,
+  so a Template's default height does not silently invalidate the width descriptors.
+- a2c5dd7: Share Storage path and directory-prefix validation between image integrations and CLI scaffolds.
+  Keep generated image recipes scoped, preserve relative imports for hidden receipt catalogs, and
+  sign Storage listing requests against the endpoint belonging to the selected key credentials.
+
+### Patch Changes
+
+- a2c5dd7: Keep public-preview candidates within their dimension and quality limits, including width-only
+  requests and tall sources. Share the exact Built-in limits with image delivery adapters.
+
 ## 4.8.1
 
 ### Patch Changes
diff --git a/packages/utils/package.json b/packages/utils/package.json
index 7cdb1081..f7194f2f 100644
--- a/packages/utils/package.json
+++ b/packages/utils/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@transloadit/utils",
-  "version": "4.8.1",
+  "version": "4.9.0",
   "description": "Transloadit shared utilities",
   "type": "module",
   "license": "MIT",
diff --git a/packages/zod/CHANGELOG.md b/packages/zod/CHANGELOG.md
index 966bb53e..3b12a77c 100644
--- a/packages/zod/CHANGELOG.md
+++ b/packages/zod/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @transloadit/zod
 
+## 4.4.1
+
+### Patch Changes
+
+- a2c5dd7: Include the Transloadit Storage import and store Robots in the offline catalog and generated
+  instructions, and type the optional `asset_id` in Assembly results. Recognize Storage import/store
+  error codes in response validation and terminal-status helpers, preserving API errors while polling.
+  Sync the canonical `recursive` option for Storage folder imports into the offline linter and
+  generated instructions without adding SDK-only schema fields.
+
 ## 4.4.0
 
 ### Minor Changes
diff --git a/packages/zod/package.json b/packages/zod/package.json
index ced721c2..f45a1a30 100644
--- a/packages/zod/package.json
+++ b/packages/zod/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@transloadit/zod",
-  "version": "4.4.0",
+  "version": "4.4.1",
   "description": "Transloadit Zod schemas",
   "type": "module",
   "license": "MIT",
@@ -51,7 +51,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@transloadit/types": "^4.4.0",
+    "@transloadit/types": "^4.4.1",
     "@types/node": "^25.8.0"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 4d409ad5..e8a97714 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1425,7 +1425,7 @@ __metadata:
   resolution: "@transloadit/mcp-server@workspace:packages/mcp-server"
   dependencies:
     "@modelcontextprotocol/sdk": "npm:^1.29.0"
-    "@transloadit/node": "npm:^4.12.0"
+    "@transloadit/node": "npm:^4.13.0"
     "@transloadit/sev-logger": "npm:^0.1.9"
     "@types/express": "npm:^5.0.6"
     "@types/node": "npm:^25.8.0"
@@ -1437,12 +1437,12 @@ __metadata:
   languageName: unknown
   linkType: soft
 
-"@transloadit/node@npm:^4.12.0, @transloadit/node@workspace:packages/node":
+"@transloadit/node@npm:^4.13.0, @transloadit/node@workspace:packages/node":
   version: 0.0.0-use.local
   resolution: "@transloadit/node@workspace:packages/node"
   dependencies:
     "@transloadit/sev-logger": "npm:^0.1.9"
-    "@transloadit/utils": "npm:^4.8.1"
+    "@transloadit/utils": "npm:^4.9.0"
     "@types/debug": "npm:^4.1.13"
     "@types/lodash-es": "npm:^4.17.12"
     "@types/node": "npm:^25.8.0"
@@ -1506,13 +1506,13 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@transloadit/types@npm:^4.4.0, @transloadit/types@workspace:packages/types":
+"@transloadit/types@npm:^4.4.1, @transloadit/types@workspace:packages/types":
   version: 0.0.0-use.local
   resolution: "@transloadit/types@workspace:packages/types"
   languageName: unknown
   linkType: soft
 
-"@transloadit/utils@npm:^4.3.0, @transloadit/utils@npm:^4.8.1, @transloadit/utils@workspace:packages/utils":
+"@transloadit/utils@npm:^4.3.0, @transloadit/utils@npm:^4.9.0, @transloadit/utils@workspace:packages/utils":
   version: 0.0.0-use.local
   resolution: "@transloadit/utils@workspace:packages/utils"
   dependencies:
@@ -1525,7 +1525,7 @@ __metadata:
   resolution: "@transloadit/viewer@workspace:packages/img"
   dependencies:
     "@noble/ciphers": "npm:^1.3.0"
-    "@transloadit/utils": "npm:^4.8.1"
+    "@transloadit/utils": "npm:^4.9.0"
     "@types/react": "npm:^19.2.14"
     "@types/react-dom": "npm:^19.2.3"
     happy-dom: "npm:^20.9.0"
@@ -1552,7 +1552,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@transloadit/zod@workspace:packages/zod"
   dependencies:
-    "@transloadit/types": "npm:^4.4.0"
+    "@transloadit/types": "npm:^4.4.1"
     "@types/node": "npm:^25.8.0"
     type-fest: "npm:^5.6.0"
     zod: "npm:^4.4.3"
@@ -6235,7 +6235,7 @@ __metadata:
   resolution: "transloadit@workspace:packages/transloadit"
   dependencies:
     "@transloadit/sev-logger": "npm:^0.1.9"
-    "@transloadit/utils": "npm:^4.8.1"
+    "@transloadit/utils": "npm:^4.9.0"
     "@types/debug": "npm:^4.1.13"
     "@types/node": "npm:^25.8.0"
     "@types/recursive-readdir": "npm:^2.2.4"