@adcp/sdk 9.6.0 → 9.6.2

package/dist/lib/registry/types.generated.d.ts

@@ -61,46 +61,6 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/brands/hierarchy": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * Resolve brand hierarchy
-         * @description Resolve a domain to its ordered corporate brand hierarchy, from self through parents to house.
-         */
-        get: operations["resolveBrandHierarchy"];
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/brands/hierarchy/bulk": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Bulk resolve brand hierarchies
-         * @description Resolve up to 100 domains to ordered corporate brand hierarchies in a single request.
-         */
-        post: operations["resolveBrandHierarchies"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/api/brands/brand-json": {
         parameters: {
             query?: never;
@@ -315,6 +275,8 @@ export interface paths {
         /**
          * Save property
          * @description Save or update a hosted property in the registry. Requires authentication. For existing properties, creates a revision-tracked edit. For new properties, creates the property directly. Cannot edit authoritative properties managed via adagents.json.
+         *
+         *     This is an identity-only write surface: the stored document always carries `authorized_agents: []`. Sales authorization lives solely in the publisher's own origin `adagents.json`; the community registry cannot mint or carry it. Any `authorized_agents` sent in the request body is ignored.
          */
         post: operations["saveProperty"];
         delete?: never;
@@ -323,6 +285,28 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/properties/hosted/{domain}/claim": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Claim a domain for bind-on-verify
+         * @description Issue a pending domain claim for the caller's organization and return a claim-specific `authoritative_location` URL (`…/adagents.json?adcp_claim=<token>`). The caller places that single pointer at their own origin `/.well-known/adagents.json`; a subsequent verify-origin reads the token and binds the domain to the caller's org. The token is the per-account artifact that proves WHICH account owns the domain — a plain domain-keyed pointer proves only that the origin endorses AAO hosting, not who the owner is.
+         *
+         *     The community write surface stays open; this does not gate writes — it establishes ownership on successful verification. Refused with 409 only when the domain is already verified and locked to a different owner.
+         */
+        post: operations["claimHostedPropertyDomain"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/properties/hosted/{domain}/verify-origin": {
         parameters: {
             query?: never;
@@ -336,7 +320,7 @@ export interface paths {
          * Verify AAO-hosted publisher origin
          * @description Trigger origin verification for an AAO-hosted publisher: fetches the publisher's own `/.well-known/adagents.json` and checks for an `authoritative_location` field pointing at the AAO-hosted URL. On success, promotes `agent_publisher_authorizations` rows from `source='aao_hosted'` to `source='adagents_json'` for the manifest's authorized agents — buyers reading the registry then see them as origin-attested.
          *
-         *     Requires authentication and either AAO admin OR org-membership matching the hosted property's owner. Fail-closed on NULL ownership.
+         *     Bind-on-verify: when the pointer carries an `adcp_claim` token (see the claim endpoint), a successful verification binds the domain to that claim's organization and returns `bound_org_id`. Binding is driven by which token the origin pointer carries, never by who triggers verification, so any authenticated caller may trigger it and a squatter cannot bind a domain they don't control. An existing verified owner is never overwritten.
          *
          *     Failure classification:
          *     - `not_found`: publisher origin returned 404 (permanent — demotes if previously verified).
@@ -2018,10 +2002,6 @@ export interface components {
             /** @enum {string} */
             source: "brand_json" | "community" | "enriched";
         };
-        BrandHierarchyResolution: {
-            /** @description Ordered corporate brand chain from the resolved brand itself through each parent to the house brand. */
-            chain: components["schemas"]["ResolvedBrand"][];
-        };
         LocalizedName: {
             [key: string]: string;
         };
@@ -3547,78 +3527,6 @@ export interface operations {
             };
         };
     };
-    resolveBrandHierarchy: {
-        parameters: {
-            query: {
-                domain: string;
-                fresh?: "true" | "false";
-            };
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Brand hierarchy resolved successfully */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["BrandHierarchyResolution"];
-                };
-            };
-            /** @description Brand not found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Error"];
-                };
-            };
-        };
-    };
-    resolveBrandHierarchies: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: {
-            content: {
-                "application/json": {
-                    domains: string[];
-                    fresh?: boolean;
-                };
-            };
-        };
-        responses: {
-            /** @description Bulk hierarchy resolution results */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": {
-                        results: {
-                            [key: string]: components["schemas"]["BrandHierarchyResolution"] | null;
-                        };
-                    };
-                };
-            };
-            /** @description Rate limit exceeded */
-            429: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Error"];
-                };
-            };
-        };
-    };
     getBrandJson: {
         parameters: {
             query: {
@@ -4098,13 +4006,10 @@ export interface operations {
                     /** @example examplepub.com */
                     publisher_domain: string;
                     /**
-                     * @example [
-                     *       {
-                     *         "url": "https://agent.example.com"
-                     *       }
-                     *     ]
+                     * @description Ignored. Community-registry rows never assert sales authorization — the owner's origin adagents.json is the sole authorization source — so any value here is dropped and the stored document carries authorized_agents:[].
+                     * @example []
                      */
-                    authorized_agents: {
+                    authorized_agents?: {
                         url: string;
                         authorized_for?: string;
                     }[];
@@ -4181,7 +4086,7 @@ export interface operations {
             };
         };
     };
-    verifyHostedPropertyOrigin: {
+    claimHostedPropertyDomain: {
         parameters: {
             query?: never;
             header?: never;
@@ -4192,18 +4097,18 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Verification outcome */
+            /** @description Claim issued */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        verified: boolean;
-                        /** @enum {string} */
-                        reason: "authoritative_location_pointer" | "not_found" | "invalid_json" | "no_authoritative_location" | "authoritative_location_mismatch" | "unresolvable" | "transient";
-                        checked_at: string;
-                        detail?: string;
+                        /** @enum {boolean} */
+                        success: true;
+                        domain: string;
+                        authoritative_location: string;
+                        instructions: string;
                     };
                 };
             };
@@ -4225,7 +4130,7 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Caller does not own this hosted property (and is not an AAO admin) */
+            /** @description Caller is not a member of any organization */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -4234,6 +4139,62 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
+            /** @description Domain already verified and locked to another owner */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    verifyHostedPropertyOrigin: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                domain: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Verification outcome */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        verified: boolean;
+                        /** @enum {string} */
+                        reason: "authoritative_location_pointer" | "not_found" | "invalid_json" | "no_authoritative_location" | "authoritative_location_mismatch" | "unresolvable" | "transient";
+                        checked_at: string;
+                        detail?: string;
+                        bound_org_id?: string;
+                    };
+                };
+            };
+            /** @description Invalid domain */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Authentication required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
             /** @description No hosted property for this domain */
             404: {
                 headers: {
@@ -8499,6 +8460,7 @@ export interface operations {
                             first_failed_step_title: string | null;
                             first_failed_step_task: string | null;
                             first_failure_message: string | null;
+                            first_failure_validations: unknown[];
                         };
                         phases?: unknown;
                         summary?: unknown;