feat: npm trust command

api/base.yaml

@@ -74,17 +74,23 @@ tags:
     description: |
       OpenID Connect (OIDC) token exchange endpoints for CI/CD integrations.
 
+  - name: Trust
+    x-displayName: Trust
+    description: |
+      Trust-related endpoints for managing package trust and security settings.
+
 x-tagGroups:
   - name: Introduction
     tags:
       - Introduction
   - name: Authentication & Authorization
     tags:
       - Authentication
-  - name: registry.npmjs.org API Endpoints
+  - name: Sections
     tags:
       - Tokens
       - OIDC
+      - Trust
 
 components:
   securitySchemes:
@@ -117,6 +123,15 @@ components:
         Granular Access Token (GAT) with fine-grained permissions.
         These tokens can be scoped to specific packages and operations.
 
+    # Alias for npmAccessToken - for backward compatibility
+    granularAccessToken:
+      type: http
+      scheme: bearer
+      description: |
+        Granular Access Token (GAT) with fine-grained permissions.
+        These tokens can be scoped to specific packages and operations.
+        (Alias for npmAccessToken)
+
     # Short-lived tokens obtained from OIDC token exchange
     oidcExchangeToken:
       type: http

api/merge-config.yaml

@@ -2,5 +2,6 @@ inputs:
   - inputFile: base.yaml
   - inputFile: registry.npmjs.com/oidc.yaml
   - inputFile: registry.npmjs.com/token.yaml
+  - inputFile: registry.npmjs.com/trust.yaml
 
 output: ../openapi.yaml

api/registry.npmjs.com/token.yaml

@@ -578,7 +578,7 @@ paths:
                 invalidOtp:
                   summary: "Invalid OTP provided"
                   value:
-                    message: "invalid OTP"
+                    error: "invalid OTP"
                 webAuthFlow:
                   summary: "Web authentication flow (2FA required)"
                   description: |