@apostra/sdk 0.39.0 → 0.40.0

package/dist/cli-login.d.ts

@@ -52,8 +52,8 @@ export declare function exchangeCliLoginCode(options: Options, discovery: CliLog
 }): Promise<CliLoginTokens>;
 /**
  * Return a usable login for `baseUrl`, refreshing it if the access token is
- * about to expire. After taking the lock the file is read again: if another
- * process refreshed first, its token is used and no request is made.
+ * about to expire. After taking the lock the credential store is read again:
+ * if another process refreshed first, its token is used and no request is made.
  */
 export declare function refreshCliLogin(baseUrl: string, options?: Options): Promise<CliLoginEntry>;
 /**

package/dist/cli-login.js

@@ -25,6 +25,7 @@ function node() {
         fs: get('node:fs'),
         os: get('node:os'),
         path: get('node:path'),
+        module: get('node:module'),
     };
 }
 const isRecord = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
@@ -73,7 +74,7 @@ function parseEntry(value) {
         return undefined;
     return value;
 }
-function readAll() {
+function readFileLogins() {
     const { fs } = node();
     try {
         const file = JSON.parse(fs.readFileSync(credentialsPath(), 'utf8'));
@@ -84,7 +85,7 @@ function readAll() {
     }
 }
 /** Atomic (temp file + rename), directory 0700, file 0600. */
-function writeAll(logins) {
+function writeFileLogins(logins) {
     const { fs, path } = node();
     const file = credentialsPath();
     const dir = path.dirname(file);
@@ -104,8 +105,141 @@ function writeAll(logins) {
     }
     fs.renameSync(temp, file);
 }
+const keyringService = 'Apostra CLI login';
+/**
+ * Resolve the native binding only when this Node-only feature is used. A static
+ * import would make the browser SDK bundle a native module.
+ */
+function keyringEntry(resource) {
+    const { module } = node();
+    const required = module.createRequire(import.meta.url)('@napi-rs/keyring');
+    if (!isRecord(required) || typeof required.Entry !== 'function')
+        throw new Error('Apostra credential-store binding is unavailable');
+    const Entry = required.Entry;
+    // Do not accept keyutils on Linux. It is ephemeral and is not the requested
+    // Secret Service store, so an inaccessible service deliberately uses the
+    // documented 0600-file fallback instead.
+    return new Entry(keyringService, resource, proc().platform === 'linux'
+        ? { linux: { store: 'secret-service' } }
+        : undefined);
+}
+function readSecureLogin(resource) {
+    try {
+        const password = keyringEntry(resource).getPassword();
+        if (!password)
+            return { available: true };
+        return { available: true, entry: parseEntry(JSON.parse(password)) };
+    }
+    catch {
+        return { available: false };
+    }
+}
+function writeSecureLogin(resource, entry) {
+    try {
+        keyringEntry(resource).setPassword(JSON.stringify(entry));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function deleteSecureLogin(resource) {
+    try {
+        return keyringEntry(resource).deletePassword();
+    }
+    catch {
+        return undefined;
+    }
+}
+function warnFileFallback() {
+    const { fs, path } = node();
+    const dir = path.dirname(credentialsPath());
+    const marker = path.join(dir, '.file-store-warning');
+    try {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        fs.chmodSync(dir, 0o700);
+        const fd = fs.openSync(marker, 'wx', 0o600);
+        fs.closeSync(fd);
+    }
+    catch (error) {
+        if (errorCode(error) === 'EEXIST')
+            return;
+        // If the marker cannot be written, warn for this process rather than
+        // silently accepting plaintext storage.
+    }
+    proc().emitWarning?.(`Apostra could not access your OS credential store. Login tokens are stored in ${credentialsPath()} with 0600 permissions. Use Keychain, Credential Manager, or Secret Service when available.`);
+}
+/**
+ * Move every legacy entry while holding the normal refresh lock. Reads that
+ * arrive first use a short synchronous instance of the same lock; contenders
+ * keep reading the legacy file until the migration finishes.
+ */
+function migrateFileLogins(lockHeld = false) {
+    const { fs, path } = node();
+    const fileLogins = readFileLogins();
+    const entries = Object.entries(fileLogins).flatMap(([resource, value]) => {
+        const entry = parseEntry(value);
+        return entry ? [[resource, entry]] : [];
+    });
+    if (entries.length === 0)
+        return false;
+    const lock = `${credentialsPath()}.lock`;
+    let owner;
+    if (!lockHeld) {
+        fs.mkdirSync(path.dirname(lock), { recursive: true, mode: 0o700 });
+        owner = `migration:${proc().pid}:${globalThis.crypto.randomUUID()}`;
+        try {
+            const fd = fs.openSync(lock, 'wx', 0o600);
+            try {
+                fs.writeSync(fd, owner);
+            }
+            finally {
+                fs.closeSync(fd);
+            }
+        }
+        catch {
+            return false;
+        }
+    }
+    try {
+        for (const [resource, entry] of entries) {
+            // A keyring value is authoritative: preserving it avoids overwriting a
+            // token another process has already refreshed during an interrupted
+            // earlier migration.
+            const stored = readSecureLogin(resource);
+            if (stored.entry)
+                continue;
+            if (!stored.available || !writeSecureLogin(resource, entry))
+                return false;
+        }
+        fs.rmSync(credentialsPath(), { force: true });
+        return true;
+    }
+    finally {
+        if (owner) {
+            try {
+                if (fs.readFileSync(lock, 'utf8') === owner)
+                    fs.rmSync(lock, { force: true });
+            }
+            catch {
+                // The regular lock protocol protects against removing another owner.
+            }
+        }
+    }
+}
 export function readCliLogin(baseUrl) {
-    return parseEntry(readAll()[normalizeBaseUrl(baseUrl)]);
+    const resource = normalizeBaseUrl(baseUrl);
+    const secure = readSecureLogin(resource);
+    if (secure.entry)
+        return secure.entry;
+    const fileLogins = readFileLogins();
+    if (Object.keys(fileLogins).length === 0)
+        return undefined;
+    if (migrateFileLogins())
+        return readSecureLogin(resource).entry;
+    if (!secure.available)
+        warnFileFallback();
+    return parseEntry(fileLogins[resource]);
 }
 /** Like `readCliLogin`, but never throws: for the SDK's default credential chain. */
 export function storedCliLogin(baseUrl) {
@@ -117,6 +251,43 @@ export function storedCliLogin(baseUrl) {
     }
 }
 export const isFresh = (entry) => Date.parse(entry.expiresAt) - FRESH_MARGIN_MS > Date.now();
+/**
+ * Remove a lock whose heartbeat stopped, without ever removing a live one.
+ * Only the holder of the takeover guard checks and removes. Checking again
+ * under the guard means a lock another process took after the first check is
+ * fresh and is left alone. A guard a crashed process left behind goes stale
+ * like a lock does. Returns whether this call held the guard, so the caller
+ * retries at once; otherwise it waits like any other contender.
+ */
+function breakStaleLock(fs, lock) {
+    const guard = `${lock}.takeover`;
+    try {
+        fs.closeSync(fs.openSync(guard, 'wx', 0o600));
+    }
+    catch (error) {
+        if (errorCode(error) !== 'EEXIST')
+            throw error;
+        try {
+            if (Date.now() - fs.statSync(guard).mtimeMs > LOCK_STALE_MS)
+                fs.rmSync(guard, { force: true });
+        }
+        catch {
+            // The guard went away between the two calls; the caller retries.
+        }
+        return false;
+    }
+    try {
+        if (Date.now() - fs.statSync(lock).mtimeMs > LOCK_STALE_MS)
+            fs.rmSync(lock, { force: true });
+    }
+    catch {
+        // The lock went away; the caller retries.
+    }
+    finally {
+        fs.rmSync(guard, { force: true });
+    }
+    return true;
+}
 /**
  * Serialise every read-modify-write of the store, across processes. Refresh
  * tokens rotate, so two processes must never present the same one outside the
@@ -154,11 +325,9 @@ export async function withCliLoginLock(fn) {
             if (errorCode(error) !== 'EEXIST')
                 throw error;
             try {
-                const stale = ownerOf();
                 if (Date.now() - fs.statSync(lock).mtimeMs > LOCK_STALE_MS) {
-                    if (ownerOf() === stale)
-                        fs.rmSync(lock, { force: true });
-                    continue;
+                    if (breakStaleLock(fs, lock))
+                        continue;
                 }
             }
             catch {
@@ -190,7 +359,14 @@ export async function withCliLoginLock(fn) {
 }
 /** Save a login. Call inside `withCliLoginLock`. */
 export function writeCliLogin(baseUrl, entry) {
-    writeAll({ ...readAll(), [normalizeBaseUrl(baseUrl)]: entry });
+    const resource = normalizeBaseUrl(baseUrl);
+    // Callers hold the cross-process lock, so the legacy file cannot overwrite
+    // a rotated credential while it is being migrated.
+    migrateFileLogins(true);
+    if (writeSecureLogin(resource, entry))
+        return;
+    warnFileFallback();
+    writeFileLogins({ ...readFileLogins(), [resource]: entry });
 }
 async function send(fetcher, url, init = {}) {
     return fetcher(url, {
@@ -287,8 +463,8 @@ export function exchangeCliLoginCode(options, discovery, resource, grant) {
 }
 /**
  * Return a usable login for `baseUrl`, refreshing it if the access token is
- * about to expire. After taking the lock the file is read again: if another
- * process refreshed first, its token is used and no request is made.
+ * about to expire. After taking the lock the credential store is read again:
+ * if another process refreshed first, its token is used and no request is made.
  */
 export async function refreshCliLogin(baseUrl, options = {}) {
     const key = normalizeBaseUrl(baseUrl);
@@ -350,8 +526,12 @@ export async function logoutCliLogin(baseUrl, { fetch: f = globalThis.fetch } =
         catch {
             revoked = false;
         }
-        const { [key]: _removed, ...rest } = readAll();
-        writeAll(rest);
+        deleteSecureLogin(key);
+        // A prior fallback login can still be present even when the credential
+        // store has no entry (or is available again). Remove it unconditionally:
+        // otherwise its refresh token could be migrated back after logout.
+        const { [key]: _removed, ...rest } = readFileLogins();
+        writeFileLogins(rest);
         return { found: true, revoked };
     });
 }

package/dist/generated/client.d.ts

@@ -43,6 +43,9 @@ export type GetSellerReportingReceiptsError = Wire.GetSellerReportingReceiptsErr
 export type GetStatusInput = Wire.GetStatusData['body'];
 export type GetStatusResult = Wire.GetStatusResponses[200]['data'];
 export type GetStatusError = Wire.GetStatusErrors[keyof Wire.GetStatusErrors];
+export type LogEventInput = OptionalWireField<Wire.LogEventData['body'], "idempotencyKey">;
+export type LogEventResult = Wire.LogEventResponses[200]['data'];
+export type LogEventError = Wire.LogEventErrors[keyof Wire.LogEventErrors];
 export type OpenAdvertisersPageInput = Wire.OpenAdvertisersPageData['body'];
 export type OpenAdvertisersPageResult = Wire.OpenAdvertisersPageResponses[200]['data'];
 export type OpenAdvertisersPageError = Wire.OpenAdvertisersPageErrors[keyof Wire.OpenAdvertisersPageErrors];
@@ -276,6 +279,10 @@ export interface OperationTypes {
         input: GetStatusInput;
         result: GetStatusResult;
     };
+    "log_event": {
+        input: LogEventInput;
+        result: LogEventResult;
+    };
     "open_advertisers_page": {
         input: OpenAdvertisersPageInput;
         result: OpenAdvertisersPageResult;
@@ -624,6 +631,15 @@ export declare class Apostra extends Transport {
     getStatus(input?: GetStatusInput, options?: RequestOptions): Promise<GetStatusResult>;
     /** Current account, state, blockers, exact fixes, and reachable accounts. For seller demand, use it to tell whether readiness stops requests before source calls; read before diagnosing source health, empty responses, or demand. A Developer account adds each agent's stage, blocker, and next call. Returns the data together with response headers and request ID. */
     getStatusWithResponse(input?: GetStatusInput, options?: RequestOptions): Promise<ResponseDetails<GetStatusResult>>;
+    /**
+     * Send up to 10,000 AdCP conversion events (log_event) to an event source the advertiser registered with save_event_source. Events must also pass the v2 rules: no raw email or phone in user_match, each event_type + event_id once per call. One invalid event refuses the whole call.
+     *
+     * @example
+     * await client.logEvent(input, { idempotencyKey: 'stable-key' })
+     */
+    logEvent(input: LogEventInput, options: WriteRequestOptions): Promise<LogEventResult>;
+    /** Send up to 10,000 AdCP conversion events (log_event) to an event source the advertiser registered with save_event_source. Events must also pass the v2 rules: no raw email or phone in user_match, each event_type + event_id once per call. One invalid event refuses the whole call. Returns the data together with response headers and request ID. */
+    logEventWithResponse(input: LogEventInput, options: WriteRequestOptions): Promise<ResponseDetails<LogEventResult>>;
     /**
      * Open the Advertisers Page: every advertiser with its campaign and draft counts and one next action each. Use it for "show my advertisers" or "where do I start"; the Page self-fetches. To add or set up an advertiser, pass intent: "add". For a text answer use search(kind: "advertiser").
      *
@@ -913,13 +929,13 @@ export declare class Apostra extends Transport {
     /** Sync first-party CRM audiences for a buyer advertiser. Each audiences[] item may add, remove, or delete members. Returns an operationId; use get(kind: audience, advertiserId: "...") to read match status after it settles. Returns the data together with response headers and request ID. */
     saveAudienceWithResponse(input: SaveAudienceInput, options: WriteRequestOptions): Promise<ResponseDetails<SaveAudienceResult>>;
     /**
-     * Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Cards stay off MCP.
+     * Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Accepting a plan needs an administrator to approve it on our site. Cards stay off MCP.
      *
      * @example
      * await client.saveBilling(input, { idempotencyKey: 'stable-key' })
      */
     saveBilling(input: SaveBillingInput, options: WriteRequestOptions): Promise<SaveBillingResult>;
-    /** Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Cards stay off MCP. Returns the data together with response headers and request ID. */
+    /** Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Accepting a plan needs an administrator to approve it on our site. Cards stay off MCP. Returns the data together with response headers and request ID. */
     saveBillingWithResponse(input: SaveBillingInput, options: WriteRequestOptions): Promise<ResponseDetails<SaveBillingResult>>;
     /**
      * Write seller AI Business Rules. Policy content needs an account admin and both policy fields. Approval auto needs acknowledgeNoHumanReview.
@@ -1048,13 +1064,13 @@ export declare class Apostra extends Transport {
     /** Create or update where a seller's inventory comes from. Pass `id` to change a source or omit it to add one. Pass only `agentId` or `adServer` to open the form that connects an agent or an ad server. Credentials are never passed here; a source that needs one returns the page that collects it. Returns the data together with response headers and request ID. */
     saveInventorySourceWithResponse(input: SaveInventorySourceInput, options: WriteRequestOptions): Promise<ResponseDetails<SaveInventorySourceResult>>;
     /**
-     * Manage seller lessons in a seller account context; use switch_account first. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear.
+     * Manage seller lessons in a seller account; send the accountId of that account. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear.
      *
      * @example
      * await client.saveLesson(input, { idempotencyKey: 'stable-key' })
      */
     saveLesson(input: SaveLessonInput, options: WriteRequestOptions): Promise<SaveLessonResult>;
-    /** Manage seller lessons in a seller account context; use switch_account first. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear. Returns the data together with response headers and request ID. */
+    /** Manage seller lessons in a seller account; send the accountId of that account. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear. Returns the data together with response headers and request ID. */
     saveLessonWithResponse(input: SaveLessonInput, options: WriteRequestOptions): Promise<ResponseDetails<SaveLessonResult>>;
     /**
      * Open a seller library request or close it with seller Material.

package/dist/generated/client.js

@@ -90,6 +90,15 @@ export class Apostra extends Transport {
     getStatus(input = {}, options) { return this.request("get_status", input, options); }
     /** Current account, state, blockers, exact fixes, and reachable accounts. For seller demand, use it to tell whether readiness stops requests before source calls; read before diagnosing source health, empty responses, or demand. A Developer account adds each agent's stage, blocker, and next call. Returns the data together with response headers and request ID. */
     getStatusWithResponse(input = {}, options) { return this.requestDetailed("get_status", input, options); }
+    /**
+     * Send up to 10,000 AdCP conversion events (log_event) to an event source the advertiser registered with save_event_source. Events must also pass the v2 rules: no raw email or phone in user_match, each event_type + event_id once per call. One invalid event refuses the whole call.
+     *
+     * @example
+     * await client.logEvent(input, { idempotencyKey: 'stable-key' })
+     */
+    logEvent(input, options) { return this.request("log_event", input, options); }
+    /** Send up to 10,000 AdCP conversion events (log_event) to an event source the advertiser registered with save_event_source. Events must also pass the v2 rules: no raw email or phone in user_match, each event_type + event_id once per call. One invalid event refuses the whole call. Returns the data together with response headers and request ID. */
+    logEventWithResponse(input, options) { return this.requestDetailed("log_event", input, options); }
     /**
      * Open the Advertisers Page: every advertiser with its campaign and draft counts and one next action each. Use it for "show my advertisers" or "where do I start"; the Page self-fetches. To add or set up an advertiser, pass intent: "add". For a text answer use search(kind: "advertiser").
      *
@@ -379,13 +388,13 @@ export class Apostra extends Transport {
     /** Sync first-party CRM audiences for a buyer advertiser. Each audiences[] item may add, remove, or delete members. Returns an operationId; use get(kind: audience, advertiserId: "...") to read match status after it settles. Returns the data together with response headers and request ID. */
     saveAudienceWithResponse(input, options) { return this.requestDetailed("save_audience", input, options); }
     /**
-     * Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Cards stay off MCP.
+     * Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Accepting a plan needs an administrator to approve it on our site. Cards stay off MCP.
      *
      * @example
      * await client.saveBilling(input, { idempotencyKey: 'stable-key' })
      */
     saveBilling(input, options) { return this.request("save_billing", input, options); }
-    /** Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Cards stay off MCP. Returns the data together with response headers and request ID. */
+    /** Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Accepting a plan needs an administrator to approve it on our site. Cards stay off MCP. Returns the data together with response headers and request ID. */
     saveBillingWithResponse(input, options) { return this.requestDetailed("save_billing", input, options); }
     /**
      * Write seller AI Business Rules. Policy content needs an account admin and both policy fields. Approval auto needs acknowledgeNoHumanReview.
@@ -514,13 +523,13 @@ export class Apostra extends Transport {
     /** Create or update where a seller's inventory comes from. Pass `id` to change a source or omit it to add one. Pass only `agentId` or `adServer` to open the form that connects an agent or an ad server. Credentials are never passed here; a source that needs one returns the page that collects it. Returns the data together with response headers and request ID. */
     saveInventorySourceWithResponse(input, options) { return this.requestDetailed("save_inventory_source", input, options); }
     /**
-     * Manage seller lessons in a seller account context; use switch_account first. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear.
+     * Manage seller lessons in a seller account; send the accountId of that account. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear.
      *
      * @example
      * await client.saveLesson(input, { idempotencyKey: 'stable-key' })
      */
     saveLesson(input, options) { return this.request("save_lesson", input, options); }
-    /** Manage seller lessons in a seller account context; use switch_account first. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear. Returns the data together with response headers and request ID. */
+    /** Manage seller lessons in a seller account; send the accountId of that account. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear. Returns the data together with response headers and request ID. */
     saveLessonWithResponse(input, options) { return this.requestDetailed("save_lesson", input, options); }
     /**
      * Open a seller library request or close it with seller Material.

package/dist/generated/metadata.d.ts

@@ -1,4 +1,4 @@
-export declare const version = "0.39.0";
+export declare const version = "0.40.0";
 export declare const baseUrl = "https://api.apostra.com/api/v3";
 export declare const m2mTokenUrl = "https://identity.scope3.com/oauth2/token";
 export declare const operations: {
@@ -180,6 +180,21 @@ export declare const operations: {
         }];
         readonly summary: "Current account, state, blockers, exact fixes, and reachable accounts. For seller demand, use it to tell whether readiness stops requests before source calls; read before diagnosing source health, empty responses, or demand. A Developer account adds each agent's stage, blocker, and next call.";
     };
+    readonly log_event: {
+        readonly path: "/tools/log_event";
+        readonly method: "POST";
+        readonly body: true;
+        readonly binary: false;
+        readonly idempotencyKey: true;
+        readonly bodyKeyField: "idempotencyKey";
+        readonly parameters: readonly [];
+        readonly security: readonly [{
+            readonly apiKeyAuth: readonly [];
+        }, {
+            readonly m2mOAuth: readonly ["interchange:write"];
+        }];
+        readonly summary: "Send up to 10,000 AdCP conversion events (log_event) to an event source the advertiser registered with save_event_source. Events must also pass the v2 rules: no raw email or phone in user_match, each event_type + event_id once per call. One invalid event refuses the whole call.";
+    };
     readonly open_advertisers_page: {
         readonly path: "/tools/open_advertisers_page";
         readonly method: "POST";
@@ -642,7 +657,7 @@ export declare const operations: {
         }, {
             readonly m2mOAuth: readonly ["interchange:read"];
         }];
-        readonly summary: "Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Cards stay off MCP.";
+        readonly summary: "Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Accepting a plan needs an administrator to approve it on our site. Cards stay off MCP.";
     };
     readonly save_business_rules: {
         readonly path: "/tools/save_business_rules";
@@ -856,7 +871,7 @@ export declare const operations: {
         }, {
             readonly m2mOAuth: readonly ["interchange:write"];
         }];
-        readonly summary: "Manage seller lessons in a seller account context; use switch_account first. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear.";
+        readonly summary: "Manage seller lessons in a seller account; send the accountId of that account. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear.";
     };
     readonly save_library_request: {
         readonly path: "/tools/save_library_request";

package/dist/generated/metadata.js

@@ -1,5 +1,5 @@
 // Generated. Do not edit.
-export const version = '0.39.0';
+export const version = '0.40.0';
 export const baseUrl = "https://api.apostra.com/api/v3";
 export const m2mTokenUrl = "https://identity.scope3.com/oauth2/token";
 export const operations = {
@@ -246,6 +246,26 @@ export const operations = {
         ],
         "summary": "Current account, state, blockers, exact fixes, and reachable accounts. For seller demand, use it to tell whether readiness stops requests before source calls; read before diagnosing source health, empty responses, or demand. A Developer account adds each agent's stage, blocker, and next call."
     },
+    "log_event": {
+        "path": "/tools/log_event",
+        "method": "POST",
+        "body": true,
+        "binary": false,
+        "idempotencyKey": true,
+        "bodyKeyField": "idempotencyKey",
+        "parameters": [],
+        "security": [
+            {
+                "apiKeyAuth": []
+            },
+            {
+                "m2mOAuth": [
+                    "interchange:write"
+                ]
+            }
+        ],
+        "summary": "Send up to 10,000 AdCP conversion events (log_event) to an event source the advertiser registered with save_event_source. Events must also pass the v2 rules: no raw email or phone in user_match, each event_type + event_id once per call. One invalid event refuses the whole call."
+    },
     "open_advertisers_page": {
         "path": "/tools/open_advertisers_page",
         "method": "POST",
@@ -873,7 +893,7 @@ export const operations = {
                 ]
             }
         ],
-        "summary": "Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Cards stay off MCP."
+        "summary": "Accept Terms, set the payment terms sellers are asked for, or accept a plan, answer its offer and change its renewal. Accepting a plan needs an administrator to approve it on our site. Cards stay off MCP."
     },
     "save_business_rules": {
         "path": "/tools/save_business_rules",
@@ -1162,7 +1182,7 @@ export const operations = {
                 ]
             }
         ],
-        "summary": "Manage seller lessons in a seller account context; use switch_account first. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear."
+        "summary": "Manage seller lessons in a seller account; send the accountId of that account. propose requires lesson; approve and retire require lessonId; preview requires lessonId and brief. Preserve seller words from a private Session note and ask if kind or scope is unclear."
     },
     "save_library_request": {
         "path": "/tools/save_library_request",