@buildinternet/releases-api-types 0.55.0 → 0.57.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@buildinternet/releases-api-types",
-  "version": "0.55.0",
+  "version": "0.57.0",
   "description": "Wire protocol — request/response types for the Releases registry API. Shared by web, workers, and clients.",
   "type": "module",
   "license": "MIT",
@@ -17,7 +17,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@buildinternet/releases-core": "^0.31.1",
+    "@buildinternet/releases-core": "^0.33.0",
     "zod": "^4.4.3"
   },
   "publishConfig": {

package/src/api-types.ts

@@ -408,6 +408,9 @@ export {
   ClaimCheckOutcomeSchema,
   ClaimVerifyResultSchema,
   ListingClaimsResultSchema,
+  AdminOrgClaimSchema,
+  ListOrgClaimsResponseSchema,
+  RevokeOrgClaimBodySchema,
   ListingPromoteBodySchema,
   ListingPromoteLocatorOutcomeSchema,
   ListingPromoteLocatorSchema,
@@ -427,12 +430,27 @@ export {
   type ClaimCheckOutcome,
   type ClaimVerifyResult,
   type ListingClaimsResult,
+  type AdminOrgClaim,
+  type ListOrgClaimsResponse,
+  type RevokeOrgClaimBody,
   type ListingPromoteBody,
   type ListingPromoteLocatorOutcome,
   type ListingPromoteLocator,
   type ListingPromoteResult,
   type ListingCapabilities,
 } from "./schemas/listing.js";
+export {
+  CreatePublishTokenBodySchema,
+  CreatedPublishTokenSchema,
+  PublishTokenSchema,
+  ListPublishTokensResponseSchema,
+  RevokePublishTokenResponseSchema,
+  type CreatePublishTokenBody,
+  type CreatedPublishToken,
+  type PublishToken,
+  type ListPublishTokensResponse,
+  type RevokePublishTokenResponse,
+} from "./schemas/publish-tokens.js";
 export {
   SourceListItemSchema,
   SourceWithOrgSchema,

package/src/schemas/listing.ts

@@ -90,7 +90,7 @@ export const ListingClaimVerifyBodySchema = z.strictObject({
 });
 export type ListingClaimVerifyBody = z.infer<typeof ListingClaimVerifyBodySchema>;
 
-export const OrgClaimStatusSchema = z.enum(["pending", "verified", "expired"]);
+export const OrgClaimStatusSchema = z.enum(["pending", "verified", "expired", "revoked"]);
 export type OrgClaimStatus = z.infer<typeof OrgClaimStatusSchema>;
 
 export const ClaimMethodSchema = z.enum(["well-known", "dns-txt"]);
@@ -109,6 +109,8 @@ export const OrgClaimSchema = z.strictObject({
   token: z.string().optional(),
   createdAt: z.string(),
   verifiedAt: z.string().optional(),
+  /** Set once the claim was ended by its owner or an admin (#2389). */
+  revokedAt: z.string().optional(),
   expiresAt: z.string(),
   instructions: z
     .strictObject({
@@ -137,6 +139,35 @@ export const ListingClaimsResultSchema = z.strictObject({
 });
 export type ListingClaimsResult = z.infer<typeof ListingClaimsResultSchema>;
 
+/**
+ * Admin view of every claim on an org (`GET /v1/orgs/:slug/claims`, #2389).
+ * Never includes the proof token.
+ */
+export const AdminOrgClaimSchema = z.strictObject({
+  id: z.string(),
+  userId: z.string(),
+  status: OrgClaimStatusSchema,
+  method: ClaimMethodSchema.nullable(),
+  createdAt: z.string(),
+  verifiedAt: z.string().nullable(),
+  expiresAt: z.string(),
+  revokedAt: z.string().nullable(),
+  revokedBy: z.string().nullable(),
+  revokeReason: z.string().nullable(),
+});
+export type AdminOrgClaim = z.infer<typeof AdminOrgClaimSchema>;
+
+export const ListOrgClaimsResponseSchema = z.strictObject({
+  claims: z.array(AdminOrgClaimSchema),
+});
+export type ListOrgClaimsResponse = z.infer<typeof ListOrgClaimsResponseSchema>;
+
+/** `DELETE /v1/orgs/:slug/claims/:id` body — admins must say why. */
+export const RevokeOrgClaimBodySchema = z.strictObject({
+  reason: z.string().trim().min(1).max(500),
+});
+export type RevokeOrgClaimBody = z.infer<typeof RevokeOrgClaimBodySchema>;
+
 /**
  * Self-serve Tier-1 promotion (#1947 epic item 3, PR B): a verified owner
  * promotes their claimed stub to `tracked`. Independent of the internal

package/src/schemas/publish-tokens.ts

@@ -0,0 +1,51 @@
+import { z } from "zod";
+
+/**
+ * Owner-minted publish tokens (#2373): a verified domain owner mints a `relk_`
+ * token bound to ONE source, usable only on that source's
+ * `POST …/releases/batch` route (e.g. from the publish-changelog GitHub Action).
+ * Served by the session-only `/v1/me/publish-tokens` routes.
+ */
+
+/** POST /v1/me/publish-tokens request body. */
+export const CreatePublishTokenBodySchema = z.strictObject({
+  sourceId: z.string().min(1).max(64),
+  name: z.string().trim().min(1).max(200),
+});
+export type CreatePublishTokenBody = z.infer<typeof CreatePublishTokenBodySchema>;
+
+/** POST /v1/me/publish-tokens 201 response. `token` is shown exactly once. */
+export const CreatedPublishTokenSchema = z.strictObject({
+  token: z.string(),
+  id: z.string(),
+  sourceId: z.string(),
+  name: z.string(),
+  createdAt: z.string(),
+});
+export type CreatedPublishToken = z.infer<typeof CreatedPublishTokenSchema>;
+
+/** One publish token as listed back to its owner — never the secret. */
+export const PublishTokenSchema = z.strictObject({
+  id: z.string(),
+  name: z.string(),
+  sourceId: z.string(),
+  sourceSlug: z.string().nullable(),
+  orgSlug: z.string().nullable(),
+  createdAt: z.string(),
+  lastUsedAt: z.string().nullable(),
+  revokedAt: z.string().nullable(),
+});
+export type PublishToken = z.infer<typeof PublishTokenSchema>;
+
+/** GET /v1/me/publish-tokens response. */
+export const ListPublishTokensResponseSchema = z.strictObject({
+  publishTokens: z.array(PublishTokenSchema),
+});
+export type ListPublishTokensResponse = z.infer<typeof ListPublishTokensResponseSchema>;
+
+/** DELETE /v1/me/publish-tokens/:id response. */
+export const RevokePublishTokenResponseSchema = z.strictObject({
+  id: z.string(),
+  revokedAt: z.string(),
+});
+export type RevokePublishTokenResponse = z.infer<typeof RevokePublishTokenResponseSchema>;