@adcp/sdk 14.0.0-beta.14 → 14.0.0-beta.15

package/dist/lib/media-buy/compatibility.mjs

@@ -419,11 +419,14 @@ function requestFingerprint(value) {
   return createHash("sha256").update(canonicalize(value)).digest("base64url");
 }
 function snapshotCompatibilityTaskOptions(options) {
-  if (!options) return void 0;
+  if (!options) return options;
   return {
     ...options,
     ...options.transport !== void 0 && { transport: { ...options.transport } },
-    ...options.metadata !== void 0 && { metadata: structuredClone(options.metadata) }
+    ...options.metadata !== void 0 && { metadata: structuredClone(options.metadata) },
+    ...options.delegatedOperatorAuthorization !== void 0 && {
+      delegatedOperatorAuthorization: { ...options.delegatedOperatorAuthorization }
+    }
   };
 }
 function stripWebhookAuthenticationCredential(value) {
@@ -3756,6 +3759,7 @@ class MediaBuyLifecycleCoordinator {
     return adapt(result);
   }
   async listProducts(params, inputHandler, options) {
+    options = snapshotCompatibilityTaskOptions(options);
     this.assertActive("listProducts");
     const input = record(params);
     const lifecycle = this.selectLifecycle("list_products");
@@ -3828,6 +3832,7 @@ class MediaBuyLifecycleCoordinator {
     );
   }
   async requestProposals(params, inputHandler, options) {
+    options = snapshotCompatibilityTaskOptions(options);
     this.assertActive("requestProposals");
     const input = record(params);
     const lifecycle = this.selectLifecycle("request_proposals");
@@ -6261,6 +6266,7 @@ class MediaBuyLifecycleCoordinator {
     return attachMatch(result);
   }
   async refineProposals(params, inputHandler, options) {
+    options = snapshotCompatibilityTaskOptions(options);
     this.assertActive("refineProposals");
     const lifecycle = this.selectLifecycle("refine_proposals");
     this.assertBeta6ReportingRequest("refineProposals", "refine_proposals", params);
@@ -6556,6 +6562,7 @@ class MediaBuyLifecycleCoordinator {
     }
   }
   async declineProposals(params, inputHandler, options) {
+    options = snapshotCompatibilityTaskOptions(options);
     this.assertActive("declineProposals");
     const input = record(params);
     const lifecycle = this.selectLifecycle("decline_proposals");
@@ -6780,6 +6787,7 @@ class MediaBuyLifecycleCoordinator {
     }
   }
   async buyProducts(params, inputHandler, options) {
+    options = snapshotCompatibilityTaskOptions(options);
     this.assertActive("buyProducts");
     const input = record(params);
     const lifecycle = this.selectLifecycle("buy_products");
@@ -6919,6 +6927,7 @@ class MediaBuyLifecycleCoordinator {
     );
   }
   async acceptProposal(params, inputHandler, options) {
+    options = snapshotCompatibilityTaskOptions(options);
     this.assertActive("acceptProposal");
     const input = record(params);
     const lifecycle = this.selectLifecycle("accept_proposal");
@@ -7397,6 +7406,7 @@ class MediaBuyLifecycleCoordinator {
     return this.attachEstablishedMutationTransitions(adapted, durableMutation);
   }
   async controlMediaBuy(params, inputHandler, options) {
+    options = snapshotCompatibilityTaskOptions(options);
     this.assertActive("controlMediaBuy");
     const input = record(params);
     const lifecycle = this.selectLifecycle("control_media_buy");
@@ -7683,6 +7693,7 @@ class MediaBuyLifecycleCoordinator {
     );
   }
   async getMediaBuys(params, inputHandler, options) {
+    options = snapshotCompatibilityTaskOptions(options);
     this.assertActive("getMediaBuys");
     if (compareRelease(this.negotiated_version, "3.0") < 0) {
       throw this.unsupported(
@@ -7704,6 +7715,7 @@ class MediaBuyLifecycleCoordinator {
     return this.adaptProjectedResult(result, this.makeReport(this.lifecycle, ["get_media_buys"], []), (data) => data);
   }
   async getMediaBuyDelivery(params, inputHandler, options) {
+    options = snapshotCompatibilityTaskOptions(options);
     this.assertActive("getMediaBuyDelivery");
     if (compareRelease(this.negotiated_version, "3.0") < 0) {
       throw this.unsupported(

package/dist/lib/protocols/index.js

@@ -62,6 +62,7 @@ var import_mcp3 = require('./mcp.js');
 var import_a2a3 = require('./a2a.js');
 var import_auth = require('../auth/index.js');
 var import_oauth = require('../auth/oauth/index.js');
+var import_authorization_required = require('../auth/oauth/authorization-required.js');
 var import_provider_cache = require('../auth/oauth/provider-cache.js');
 var import_errors = require('../errors/index.js');
 var import_net = require('../net/index.js');
@@ -90,6 +91,13 @@ async function closeScopedConnections(protocol = "mcp") {
     (0, import_a2a.closeA2AConnections)();
   }
 }
+function hasStaticAgentCredentials(agent, authToken) {
+  if (authToken) return true;
+  return Object.keys(agent.headers ?? {}).some((key) => {
+    const normalized = key.toLowerCase();
+    return normalized === "authorization" || normalized === "x-adcp-auth";
+  });
+}
 function resolveWireMajor(adcpVersion) {
   if (adcpVersion === void 0) return import_version.ADCP_MAJOR_VERSION;
   const parsed = (0, import_version.parseAdcpMajorVersion)(adcpVersion);
@@ -333,7 +341,8 @@ class ProtocolClient {
                     agent.agent_uri,
                     transport?.trustedFetchFn,
                     signal,
-                    transport?.allowPrivateIp
+                    transport?.allowPrivateIp,
+                    "oauth"
                   );
                   throw err;
                 }
@@ -394,7 +403,8 @@ class ProtocolClient {
                       agent.agent_uri,
                       transport?.trustedFetchFn,
                       signal,
-                      transport?.allowPrivateIp
+                      transport?.allowPrivateIp,
+                      "static"
                     );
                     throw retryErr;
                   }
@@ -404,7 +414,8 @@ class ProtocolClient {
                   agent.agent_uri,
                   transport?.trustedFetchFn,
                   signal,
-                  transport?.allowPrivateIp
+                  transport?.allowPrivateIp,
+                  hasStaticAgentCredentials(agent, authToken) ? "static" : "discover"
                 );
                 throw err;
               }
@@ -459,7 +470,8 @@ class ProtocolClient {
                       agent.agent_uri,
                       transport?.trustedFetchFn,
                       signal,
-                      transport?.allowPrivateIp
+                      transport?.allowPrivateIp,
+                      "legacy-a2a"
                     );
                     throw retryErr;
                   }
@@ -469,7 +481,8 @@ class ProtocolClient {
                   agent.agent_uri,
                   transport?.trustedFetchFn,
                   signal,
-                  transport?.allowPrivateIp
+                  transport?.allowPrivateIp,
+                  "legacy-a2a"
                 );
                 throw err;
               }
@@ -482,12 +495,15 @@ class ProtocolClient {
     );
   }
 }
-async function rethrowAsNeedsAuthorization(err, agentUrl, fetchFn, signal, configuredAllowPrivateIp) {
+async function rethrowAsNeedsAuthorization(err, agentUrl, fetchFn, signal, configuredAllowPrivateIp, recoveryMode = "discover") {
   if (err instanceof import_oauth.NeedsAuthorizationError) throw err;
   if (!(0, import_errors.is401Error)(err)) return;
+  if (recoveryMode === "static") {
+    throw new import_errors.AuthenticationCredentialsRejectedError(agentUrl, err);
+  }
   const allowPrivateIp = configuredAllowPrivateIp ?? (0, import_net.isLikelyPrivateUrl)(agentUrl);
   const requirements = await (0, import_oauth.discoverAuthorizationRequirements)(agentUrl, { allowPrivateIp, fetchFn, signal });
-  if (requirements) {
+  if (requirements && (recoveryMode === "legacy-a2a" || (0, import_authorization_required.hasValidatedMcpAuthorizationRequirements)(requirements, agentUrl))) {
     throw new import_oauth.NeedsAuthorizationError(requirements);
   }
 }

package/dist/lib/protocols/index.mjs

@@ -50,8 +50,9 @@ import {
   getAgentStorage,
   ensureClientCredentialsTokens
 } from "../auth/oauth/index.mjs";
+import { hasValidatedMcpAuthorizationRequirements } from "../auth/oauth/authorization-required.mjs";
 import { getNonInteractiveOAuthProvider } from "../auth/oauth/provider-cache.mjs";
-import { is401Error } from "../errors/index.mjs";
+import { AuthenticationCredentialsRejectedError, is401Error } from "../errors/index.mjs";
 import { isLikelyPrivateUrl } from "../net/index.mjs";
 import { validateAgentUrl } from "../validation/index.mjs";
 import { withSpan } from "../observability/tracing.mjs";
@@ -71,6 +72,13 @@ import {
   withTransportDiagnostics as withTransportDiagnostics2,
   wrapFetchWithTransportDiagnostics
 } from "./transportDiagnostics.mjs";
+function hasStaticAgentCredentials(agent, authToken) {
+  if (authToken) return true;
+  return Object.keys(agent.headers ?? {}).some((key) => {
+    const normalized = key.toLowerCase();
+    return normalized === "authorization" || normalized === "x-adcp-auth";
+  });
+}
 function resolveWireMajor(adcpVersion) {
   if (adcpVersion === void 0) return ADCP_MAJOR_VERSION;
   const parsed = parseAdcpMajorVersion(adcpVersion);
@@ -314,7 +322,8 @@ class ProtocolClient {
                     agent.agent_uri,
                     transport?.trustedFetchFn,
                     signal,
-                    transport?.allowPrivateIp
+                    transport?.allowPrivateIp,
+                    "oauth"
                   );
                   throw err;
                 }
@@ -375,7 +384,8 @@ class ProtocolClient {
                       agent.agent_uri,
                       transport?.trustedFetchFn,
                       signal,
-                      transport?.allowPrivateIp
+                      transport?.allowPrivateIp,
+                      "static"
                     );
                     throw retryErr;
                   }
@@ -385,7 +395,8 @@ class ProtocolClient {
                   agent.agent_uri,
                   transport?.trustedFetchFn,
                   signal,
-                  transport?.allowPrivateIp
+                  transport?.allowPrivateIp,
+                  hasStaticAgentCredentials(agent, authToken) ? "static" : "discover"
                 );
                 throw err;
               }
@@ -440,7 +451,8 @@ class ProtocolClient {
                       agent.agent_uri,
                       transport?.trustedFetchFn,
                       signal,
-                      transport?.allowPrivateIp
+                      transport?.allowPrivateIp,
+                      "legacy-a2a"
                     );
                     throw retryErr;
                   }
@@ -450,7 +462,8 @@ class ProtocolClient {
                   agent.agent_uri,
                   transport?.trustedFetchFn,
                   signal,
-                  transport?.allowPrivateIp
+                  transport?.allowPrivateIp,
+                  "legacy-a2a"
                 );
                 throw err;
               }
@@ -463,12 +476,15 @@ class ProtocolClient {
     );
   }
 }
-async function rethrowAsNeedsAuthorization(err, agentUrl, fetchFn, signal, configuredAllowPrivateIp) {
+async function rethrowAsNeedsAuthorization(err, agentUrl, fetchFn, signal, configuredAllowPrivateIp, recoveryMode = "discover") {
   if (err instanceof NeedsAuthorizationError) throw err;
   if (!is401Error(err)) return;
+  if (recoveryMode === "static") {
+    throw new AuthenticationCredentialsRejectedError(agentUrl, err);
+  }
   const allowPrivateIp = configuredAllowPrivateIp ?? isLikelyPrivateUrl(agentUrl);
   const requirements = await discoverAuthorizationRequirements(agentUrl, { allowPrivateIp, fetchFn, signal });
-  if (requirements) {
+  if (requirements && (recoveryMode === "legacy-a2a" || hasValidatedMcpAuthorizationRequirements(requirements, agentUrl))) {
     throw new NeedsAuthorizationError(requirements);
   }
 }

package/dist/lib/protocols/mcp.js

@@ -787,7 +787,7 @@ async function connectMCP(options) {
     });
     return { client: mcpClient, transport };
   } catch (error) {
-    if (error instanceof import_auth.UnauthorizedError) {
+    if (authProvider && error instanceof import_auth.UnauthorizedError) {
       debugLogs.push({
         type: "info",
         message: "MCP: OAuth authorization required, flow initiated",
@@ -798,13 +798,15 @@ async function connectMCP(options) {
     if ((0, import_errors.is401Error)(error)) {
       const scheme = authProvider ? "oauth" : authToken ? "bearer" : hasNonAcceptCustomHeaders ? "header" : "none";
       const hint = scheme === "none" ? "No credentials were sent. Configure auth_token, headers, or oauth_tokens on the agent config (or pass --auth on the CLI)." : scheme === "header" ? "Verify the Authorization header value matches the gateway (basic-auth: 'Basic ' + base64(user:pass); pair with --auth-scheme basic on the CLI)." : scheme === "bearer" ? "Verify the bearer token matches the agent's expected credential." : "OAuth provider returned tokens that the agent rejected \u2014 check the provider configuration and token scopes.";
-      const detail = `MCP connect rejected with HTTP 401 from ${agentUrl}. SDK sent auth scheme: ${scheme}. ${hint}`;
+      const safeAgentUrl = (0, import_transportDiagnostics.sanitizeTransportUrl)(agentUrl);
+      const detail = `MCP connect rejected with HTTP 401 from ${safeAgentUrl}. SDK sent auth scheme: ${scheme}. ${hint}`;
       const wrapped = Object.assign(new Error(detail), {
-        cause: error,
         code: "MCP_AUTH_REJECTED",
-        scheme,
-        agentUrl,
-        originalError: error
+        scheme
+      });
+      Object.defineProperties(wrapped, {
+        agentUrl: { value: safeAgentUrl, enumerable: false, configurable: true },
+        cause: { value: error, enumerable: false, configurable: true }
       });
       throw wrapped;
     }

package/dist/lib/protocols/mcp.mjs

@@ -18,7 +18,7 @@ import { buildAgentSigningFetch, signingContextStorage } from "../signing/client
 import { redactArgsForLog } from "../utils/redact-args.mjs";
 import { wrapFetchWithCapture } from "./rawResponseCapture.mjs";
 import { wrapFetchWithSizeLimit } from "./responseSizeLimit.mjs";
-import { wrapFetchWithTransportDiagnostics } from "./transportDiagnostics.mjs";
+import { sanitizeTransportUrl, wrapFetchWithTransportDiagnostics } from "./transportDiagnostics.mjs";
 import {
   isAbortOrTimeoutError,
   resolveClientRequestTimeoutMs,
@@ -774,7 +774,7 @@ async function connectMCP(options) {
     });
     return { client: mcpClient, transport };
   } catch (error) {
-    if (error instanceof UnauthorizedError) {
+    if (authProvider && error instanceof UnauthorizedError) {
       debugLogs.push({
         type: "info",
         message: "MCP: OAuth authorization required, flow initiated",
@@ -785,13 +785,15 @@ async function connectMCP(options) {
     if (is401Error(error)) {
       const scheme = authProvider ? "oauth" : authToken ? "bearer" : hasNonAcceptCustomHeaders ? "header" : "none";
       const hint = scheme === "none" ? "No credentials were sent. Configure auth_token, headers, or oauth_tokens on the agent config (or pass --auth on the CLI)." : scheme === "header" ? "Verify the Authorization header value matches the gateway (basic-auth: 'Basic ' + base64(user:pass); pair with --auth-scheme basic on the CLI)." : scheme === "bearer" ? "Verify the bearer token matches the agent's expected credential." : "OAuth provider returned tokens that the agent rejected \u2014 check the provider configuration and token scopes.";
-      const detail = `MCP connect rejected with HTTP 401 from ${agentUrl}. SDK sent auth scheme: ${scheme}. ${hint}`;
+      const safeAgentUrl = sanitizeTransportUrl(agentUrl);
+      const detail = `MCP connect rejected with HTTP 401 from ${safeAgentUrl}. SDK sent auth scheme: ${scheme}. ${hint}`;
       const wrapped = Object.assign(new Error(detail), {
-        cause: error,
         code: "MCP_AUTH_REJECTED",
-        scheme,
-        agentUrl,
-        originalError: error
+        scheme
+      });
+      Object.defineProperties(wrapped, {
+        agentUrl: { value: safeAgentUrl, enumerable: false, configurable: true },
+        cause: { value: error, enumerable: false, configurable: true }
       });
       throw wrapped;
     }

package/dist/lib/schemas-data/v2.5/_provenance.json

@@ -4,5 +4,5 @@
   "source_sha": "4e553ad955f83b49c7d221ab5c3ff78237ad02e3",
   "source_tarball_sha256": "580656d6466ef9f0d1119985e6726c2efea718dc671e2ad30957fcb2fd54af0f",
   "upstream_adcp_version": "2.5.3",
-  "synced_at": "2026-08-28T11:30:58.855Z"
+  "synced_at": "2026-08-28T20:44:49.802Z"
 }

package/dist/lib/server/decisioning/async-outcome.d.mts

@@ -128,6 +128,17 @@ export interface TaskHandoffOptions {
      */
     task_id?: string;
 }
+/**
+ * Options for a handoff whose terminal result is owned by a durable worker.
+ * The callback must only persist the complete task handle and work item; the
+ * framework waits for that commit before acknowledging submitted, then leaves
+ * the task submitted for the worker to settle.
+ *
+ * @public
+ */
+export interface ExternalTaskHandoffOptions extends TaskHandoffOptions {
+    readonly settlement: 'external';
+}
 /**
  * Marker the framework recognizes as "promote this call to a task."
  * Returned from `ctx.handoffToTask(fn)`. Type parameter `TResult` is the

package/dist/lib/server/decisioning/async-outcome.d.ts

@@ -128,6 +128,17 @@ export interface TaskHandoffOptions {
      */
     task_id?: string;
 }
+/**
+ * Options for a handoff whose terminal result is owned by a durable worker.
+ * The callback must only persist the complete task handle and work item; the
+ * framework waits for that commit before acknowledging submitted, then leaves
+ * the task submitted for the worker to settle.
+ *
+ * @public
+ */
+export interface ExternalTaskHandoffOptions extends TaskHandoffOptions {
+    readonly settlement: 'external';
+}
 /**
  * Marker the framework recognizes as "promote this call to a task."
  * Returned from `ctx.handoffToTask(fn)`. Type parameter `TResult` is the

package/dist/lib/server/decisioning/context.d.mts

@@ -23,7 +23,7 @@
  */
 import type { Account } from './account.mjs';
 import type { Format, FormatReferenceStructuredObject, PropertyList, CollectionList } from '../../types/tools.generated.mjs';
-import type { TaskHandoff, TaskHandoffContext, TaskHandoffOptions } from './async-outcome.mjs';
+import type { ExternalTaskHandoffOptions, TaskHandoff, TaskHandoffContext, TaskHandoffOptions } from './async-outcome.mjs';
 import type { CtxMetadataRef, ResourceKind } from '../ctx-metadata/index.mjs';
 import type { BuyerAgent } from './buyer-agent.mjs';
 import type { Recipe } from './proposal/index.mjs';
@@ -207,7 +207,17 @@ export interface RequestContext<TAccount = Account> {
      * to echo it verbatim (e.g. `force_create_media_buy_arm`). The framework uses
      * the supplied id instead of minting a fresh one; `taskCtx.id` reflects it.
      * Constraints: non-empty, ≤ 128 characters. Throws if violated.
+     *
+     * For crash-safe queue workers, pass `{ settlement: 'external' }`. The
+     * callback must durably enqueue `taskCtx.taskRef` and return only after that
+     * write commits; the submitted response waits for it. Returning does not
+     * complete the task; a trusted worker must
+     * settle it through a scoped settlement helper. If the producer callback
+     * throws, the initial invocation fails and the task remains internally
+     * submitted, so the framework cannot acknowledge unrecoverable work or
+     * create a terminal task without its required durable delivery record.
      */
+    handoffToTask(fn: (taskCtx: TaskHandoffContext) => Promise<void>, options: ExternalTaskHandoffOptions): TaskHandoff<never>;
     handoffToTask<TResult>(fn: (taskCtx: TaskHandoffContext) => Promise<TResult>, options?: TaskHandoffOptions): TaskHandoff<TResult>;
 }
 export interface WorkflowStateReader {

package/dist/lib/server/decisioning/context.d.ts

@@ -23,7 +23,7 @@
  */
 import type { Account } from './account';
 import type { Format, FormatReferenceStructuredObject, PropertyList, CollectionList } from '../../types/tools.generated';
-import type { TaskHandoff, TaskHandoffContext, TaskHandoffOptions } from './async-outcome';
+import type { ExternalTaskHandoffOptions, TaskHandoff, TaskHandoffContext, TaskHandoffOptions } from './async-outcome';
 import type { CtxMetadataRef, ResourceKind } from '../ctx-metadata';
 import type { BuyerAgent } from './buyer-agent';
 import type { Recipe } from './proposal';
@@ -207,7 +207,17 @@ export interface RequestContext<TAccount = Account> {
      * to echo it verbatim (e.g. `force_create_media_buy_arm`). The framework uses
      * the supplied id instead of minting a fresh one; `taskCtx.id` reflects it.
      * Constraints: non-empty, ≤ 128 characters. Throws if violated.
+     *
+     * For crash-safe queue workers, pass `{ settlement: 'external' }`. The
+     * callback must durably enqueue `taskCtx.taskRef` and return only after that
+     * write commits; the submitted response waits for it. Returning does not
+     * complete the task; a trusted worker must
+     * settle it through a scoped settlement helper. If the producer callback
+     * throws, the initial invocation fails and the task remains internally
+     * submitted, so the framework cannot acknowledge unrecoverable work or
+     * create a terminal task without its required durable delivery record.
      */
+    handoffToTask(fn: (taskCtx: TaskHandoffContext) => Promise<void>, options: ExternalTaskHandoffOptions): TaskHandoff<never>;
     handoffToTask<TResult>(fn: (taskCtx: TaskHandoffContext) => Promise<TResult>, options?: TaskHandoffOptions): TaskHandoff<TResult>;
 }
 export interface WorkflowStateReader {

package/dist/lib/server/decisioning/index.d.mts

@@ -10,7 +10,7 @@
  * @packageDocumentation
  */
 export { type AdcpStructuredError, type ErrorCode, AdcpError } from './async-outcome.mjs';
-export type { TaskHandoffOptions, TaskHandoffProgress } from './async-outcome.mjs';
+export type { ExternalTaskHandoffOptions, TaskHandoffOptions, TaskHandoffProgress } from './async-outcome.mjs';
 export { withResponseSummary } from './response-summary.mjs';
 export type { ResponseWithSummary } from './response-summary.mjs';
 export type { ServerPayload } from '../../types/server-payload.mjs';
@@ -47,7 +47,8 @@ export type { GetBrandIdentityRequest, GetBrandIdentitySuccess, GetRightsRequest
 export { createAdcpServerFromPlatform, getHydratedLegacyFormatIds, getAllAdcpMigrations, type CreateAdcpServerFromPlatformOptions, type LegacyDecisioningHandlerGroups, type RequiredOptsFor, type DecisioningAdcpServer, type DecisioningObservabilityHooks, } from './runtime/from-platform.mjs';
 export { PlatformConfigError, validatePlatform } from './runtime/validate-platform.mjs';
 export { completeScopedTask, createInMemoryTaskRegistry, failScopedTask, updateScopedTaskProgress, type ScopedTaskRef, type TaskMutationOutcome, type TaskRegistry, type TaskRegistryMutationResult, type TaskRegistryScope, type TaskRecord, type TaskStatus, } from './runtime/task-registry.mjs';
-export { createPostgresTaskRegistry, getDecisioningTaskRegistryBootstrap, getDecisioningTaskRegistryMigration, getDecisioningTaskRegistryScopeV1Upgrade, type CreatePostgresTaskRegistryOptions, type DecisioningTaskRegistryScopeV1Upgrade, type DecisioningTaskRegistryScopeV1UpgradeOptions, type PgQueryable, } from './runtime/postgres-task-registry.mjs';
+export { createPostgresTaskRegistry, getDecisioningTaskRegistryBootstrap, getDecisioningTaskRegistryMigration, getDecisioningTaskRegistryScopeV1Upgrade, type CreatePostgresTaskRegistryOptions, type DecisioningTaskRegistryScopeV1Upgrade, type DecisioningTaskRegistryScopeV1UpgradeOptions, type PgQueryable, type PgTransactionClient, type PgTransactionalPool, } from './runtime/postgres-task-registry.mjs';
+export { completeScopedPushTask, createPostgresTaskSettlementCoordinator, failScopedPushTask, TaskPushSettlementConfigurationError, type PostgresTaskSettlementCoordinator, type PostgresTaskSettlementCoordinatorOptions, type TaskPushDeliveryState, type TaskPushSettlementConfig, type TaskPushSettlementOutcome, } from './runtime/postgres-task-settlement.mjs';
 export { createTenantRegistry, createDefaultJwksValidator, createSelfSignedTenantKey, createNoopJwksValidator, type TenantRegistry, type TenantConfig, type TenantSigningKey, type TenantStatus, type TenantHealth, type TenantRegistryOptions, type JwksValidator, type JwksValidationResult, } from './tenant-registry.mjs';
 export { getAsset, getAssetSlot, requireAsset } from './manifest-helpers.mjs';
 export type { CreativeAssetsContainer } from './manifest-helpers.mjs';

package/dist/lib/server/decisioning/index.d.ts

@@ -10,7 +10,7 @@
  * @packageDocumentation
  */
 export { type AdcpStructuredError, type ErrorCode, AdcpError } from './async-outcome';
-export type { TaskHandoffOptions, TaskHandoffProgress } from './async-outcome';
+export type { ExternalTaskHandoffOptions, TaskHandoffOptions, TaskHandoffProgress } from './async-outcome';
 export { withResponseSummary } from './response-summary';
 export type { ResponseWithSummary } from './response-summary';
 export type { ServerPayload } from '../../types/server-payload';
@@ -47,7 +47,8 @@ export type { GetBrandIdentityRequest, GetBrandIdentitySuccess, GetRightsRequest
 export { createAdcpServerFromPlatform, getHydratedLegacyFormatIds, getAllAdcpMigrations, type CreateAdcpServerFromPlatformOptions, type LegacyDecisioningHandlerGroups, type RequiredOptsFor, type DecisioningAdcpServer, type DecisioningObservabilityHooks, } from './runtime/from-platform';
 export { PlatformConfigError, validatePlatform } from './runtime/validate-platform';
 export { completeScopedTask, createInMemoryTaskRegistry, failScopedTask, updateScopedTaskProgress, type ScopedTaskRef, type TaskMutationOutcome, type TaskRegistry, type TaskRegistryMutationResult, type TaskRegistryScope, type TaskRecord, type TaskStatus, } from './runtime/task-registry';
-export { createPostgresTaskRegistry, getDecisioningTaskRegistryBootstrap, getDecisioningTaskRegistryMigration, getDecisioningTaskRegistryScopeV1Upgrade, type CreatePostgresTaskRegistryOptions, type DecisioningTaskRegistryScopeV1Upgrade, type DecisioningTaskRegistryScopeV1UpgradeOptions, type PgQueryable, } from './runtime/postgres-task-registry';
+export { createPostgresTaskRegistry, getDecisioningTaskRegistryBootstrap, getDecisioningTaskRegistryMigration, getDecisioningTaskRegistryScopeV1Upgrade, type CreatePostgresTaskRegistryOptions, type DecisioningTaskRegistryScopeV1Upgrade, type DecisioningTaskRegistryScopeV1UpgradeOptions, type PgQueryable, type PgTransactionClient, type PgTransactionalPool, } from './runtime/postgres-task-registry';
+export { completeScopedPushTask, createPostgresTaskSettlementCoordinator, failScopedPushTask, TaskPushSettlementConfigurationError, type PostgresTaskSettlementCoordinator, type PostgresTaskSettlementCoordinatorOptions, type TaskPushDeliveryState, type TaskPushSettlementConfig, type TaskPushSettlementOutcome, } from './runtime/postgres-task-settlement';
 export { createTenantRegistry, createDefaultJwksValidator, createSelfSignedTenantKey, createNoopJwksValidator, type TenantRegistry, type TenantConfig, type TenantSigningKey, type TenantStatus, type TenantHealth, type TenantRegistryOptions, type JwksValidator, type JwksValidationResult, } from './tenant-registry';
 export { getAsset, getAssetSlot, requireAsset } from './manifest-helpers';
 export type { CreativeAssetsContainer } from './manifest-helpers';

package/dist/lib/server/decisioning/index.js

@@ -45,6 +45,7 @@ __export(decisioning_exports, {
   ProductUnavailableError: () => import_errors_typed.ProductUnavailableError,
   RateLimitedError: () => import_errors_typed.RateLimitedError,
   ServiceUnavailableError: () => import_errors_typed.ServiceUnavailableError,
+  TaskPushSettlementConfigurationError: () => import_postgres_task_settlement.TaskPushSettlementConfigurationError,
   UnsupportedFeatureError: () => import_errors_typed.UnsupportedFeatureError,
   batchPoll: () => import_helpers.batchPoll,
   buildListCreativesResponse: () => import_list_helpers.buildListCreativesResponse,
@@ -53,6 +54,7 @@ __export(decisioning_exports, {
   buildPricingOption: () => import_assembly_helpers.buildPricingOption,
   buildProduct: () => import_assembly_helpers.buildProduct,
   buildProductLegacy: () => import_assembly_helpers.buildProductLegacy,
+  completeScopedPushTask: () => import_postgres_task_settlement.completeScopedPushTask,
   completeScopedTask: () => import_task_registry.completeScopedTask,
   composeMethod: () => import_compose.composeMethod,
   createAdcpServerFromPlatform: () => import_from_platform.createAdcpServerFromPlatform,
@@ -61,6 +63,7 @@ __export(decisioning_exports, {
   createInMemoryTaskRegistry: () => import_task_registry.createInMemoryTaskRegistry,
   createNoopJwksValidator: () => import_tenant_registry.createNoopJwksValidator,
   createPostgresTaskRegistry: () => import_postgres_task_registry.createPostgresTaskRegistry,
+  createPostgresTaskSettlementCoordinator: () => import_postgres_task_settlement.createPostgresTaskSettlementCoordinator,
   createSelfSignedTenantKey: () => import_tenant_registry.createSelfSignedTenantKey,
   createTenantAdminHandlers: () => import_admin_router.createTenantAdminHandlers,
   createTenantAdminRouter: () => import_admin_router.createTenantAdminRouter,
@@ -83,6 +86,7 @@ __export(decisioning_exports, {
   defineSponsoredIntelligencePlatform: () => import_platform_helpers.defineSponsoredIntelligencePlatform,
   detectFinalizeAction: () => import_proposal.detectFinalizeAction,
   enforceProposalExpiry: () => import_proposal.enforceProposalExpiry,
+  failScopedPushTask: () => import_postgres_task_settlement.failScopedPushTask,
   failScopedTask: () => import_task_registry.failScopedTask,
   finalizeProposalConsumption: () => import_proposal.finalizeProposalConsumption,
   getAllAdcpMigrations: () => import_from_platform.getAllAdcpMigrations,
@@ -137,6 +141,7 @@ var import_from_platform = require('./runtime/from-platform.js');
 var import_validate_platform = require('./runtime/validate-platform.js');
 var import_task_registry = require('./runtime/task-registry.js');
 var import_postgres_task_registry = require('./runtime/postgres-task-registry.js');
+var import_postgres_task_settlement = require('./runtime/postgres-task-settlement.js');
 var import_tenant_registry = require('./tenant-registry.js');
 var import_manifest_helpers = require('./manifest-helpers.js');
 var import_list_helpers = require('./list-helpers.js');
@@ -175,6 +180,7 @@ var import_assembly_helpers = require('./assembly-helpers.js');
   ProductUnavailableError,
   RateLimitedError,
   ServiceUnavailableError,
+  TaskPushSettlementConfigurationError,
   UnsupportedFeatureError,
   batchPoll,
   buildListCreativesResponse,
@@ -183,6 +189,7 @@ var import_assembly_helpers = require('./assembly-helpers.js');
   buildPricingOption,
   buildProduct,
   buildProductLegacy,
+  completeScopedPushTask,
   completeScopedTask,
   composeMethod,
   createAdcpServerFromPlatform,
@@ -191,6 +198,7 @@ var import_assembly_helpers = require('./assembly-helpers.js');
   createInMemoryTaskRegistry,
   createNoopJwksValidator,
   createPostgresTaskRegistry,
+  createPostgresTaskSettlementCoordinator,
   createSelfSignedTenantKey,
   createTenantAdminHandlers,
   createTenantAdminRouter,
@@ -213,6 +221,7 @@ var import_assembly_helpers = require('./assembly-helpers.js');
   defineSponsoredIntelligencePlatform,
   detectFinalizeAction,
   enforceProposalExpiry,
+  failScopedPushTask,
   failScopedTask,
   finalizeProposalConsumption,
   getAllAdcpMigrations,

package/dist/lib/server/decisioning/index.mjs

@@ -55,6 +55,12 @@ import {
   getDecisioningTaskRegistryMigration,
   getDecisioningTaskRegistryScopeV1Upgrade
 } from "./runtime/postgres-task-registry.mjs";
+import {
+  completeScopedPushTask,
+  createPostgresTaskSettlementCoordinator,
+  failScopedPushTask,
+  TaskPushSettlementConfigurationError
+} from "./runtime/postgres-task-settlement.mjs";
 import {
   createTenantRegistry,
   createDefaultJwksValidator,
@@ -135,6 +141,7 @@ export {
   ProductUnavailableError,
   RateLimitedError,
   ServiceUnavailableError,
+  TaskPushSettlementConfigurationError,
   UnsupportedFeatureError,
   batchPoll,
   buildListCreativesResponse,
@@ -143,6 +150,7 @@ export {
   buildPricingOption,
   buildProduct,
   buildProductLegacy,
+  completeScopedPushTask,
   completeScopedTask,
   composeMethod,
   createAdcpServerFromPlatform,
@@ -151,6 +159,7 @@ export {
   createInMemoryTaskRegistry,
   createNoopJwksValidator,
   createPostgresTaskRegistry,
+  createPostgresTaskSettlementCoordinator,
   createSelfSignedTenantKey,
   createTenantAdminHandlers,
   createTenantAdminRouter,
@@ -173,6 +182,7 @@ export {
   defineSponsoredIntelligencePlatform,
   detectFinalizeAction,
   enforceProposalExpiry,
+  failScopedPushTask,
   failScopedTask,
   finalizeProposalConsumption,
   getAllAdcpMigrations,

package/dist/lib/server/decisioning/runtime/from-platform.d.mts

@@ -167,14 +167,17 @@ export interface DecisioningObservabilityHooks {
         resourceId: string;
     }): void;
 }
-export type LegacyDecisioningHandlerGroups = Pick<AdcpServerConfig, 'mediaBuy' | 'creative' | 'governance' | 'brandRights'>;
+export type LegacyDecisioningHandlerGroups = Pick<AdcpServerConfig, 'mediaBuy' | 'creative' | 'governance' | 'brandRights' | 'signals'>;
 export interface CreateAdcpServerFromPlatformOptions extends Omit<AdcpServerConfig, 'resolveAccount' | 'capabilities' | 'name' | 'version' | 'mediaBuy' | 'creative' | 'governance' | 'brandRights'> {
     name: string;
     version: string;
     /**
      * Explicit compatibility seam for raw protocol handlers that have not yet
      * migrated to canonical DecisioningPlatform methods. Wire support remains
-     * available through AdCP 3.x, but raw creative identity must never look like
+     * available through AdCP 3.x. A legacy `signals.getSignals` handler supplied
+     * here (or through the inherited `opts.signals` compatibility field) satisfies
+     * signal-specialism platform validation without requiring an invented
+     * `activateSignal` implementation. Raw creative identity must never look like
      * a primary platform hook.
      */
     legacyHandlers?: LegacyDecisioningHandlerGroups;

package/dist/lib/server/decisioning/runtime/from-platform.d.ts

@@ -167,14 +167,17 @@ export interface DecisioningObservabilityHooks {
         resourceId: string;
     }): void;
 }
-export type LegacyDecisioningHandlerGroups = Pick<AdcpServerConfig, 'mediaBuy' | 'creative' | 'governance' | 'brandRights'>;
+export type LegacyDecisioningHandlerGroups = Pick<AdcpServerConfig, 'mediaBuy' | 'creative' | 'governance' | 'brandRights' | 'signals'>;
 export interface CreateAdcpServerFromPlatformOptions extends Omit<AdcpServerConfig, 'resolveAccount' | 'capabilities' | 'name' | 'version' | 'mediaBuy' | 'creative' | 'governance' | 'brandRights'> {
     name: string;
     version: string;
     /**
      * Explicit compatibility seam for raw protocol handlers that have not yet
      * migrated to canonical DecisioningPlatform methods. Wire support remains
-     * available through AdCP 3.x, but raw creative identity must never look like
+     * available through AdCP 3.x. A legacy `signals.getSignals` handler supplied
+     * here (or through the inherited `opts.signals` compatibility field) satisfies
+     * signal-specialism platform validation without requiring an invented
+     * `activateSignal` implementation. Raw creative identity must never look like
      * a primary platform hook.
      */
     legacyHandlers?: LegacyDecisioningHandlerGroups;