@adcp/sdk 14.0.0-beta.17 → 14.0.0-beta.18

package/dist/lib/server/decisioning/runtime/to-context.js

@@ -24,32 +24,61 @@ __export(to_context_exports, {
 module.exports = __toCommonJS(to_context_exports);
 var import_task_registry = require('./task-registry.js');
 var import_async_outcome = require('../async-outcome.js');
-function cloneAndFreezeAuthValue(value, seen = /* @__PURE__ */ new WeakMap()) {
+const abortSignalAbortedGetter = typeof AbortSignal === "undefined" ? void 0 : Object.getOwnPropertyDescriptor(AbortSignal.prototype, "aborted")?.get;
+function isNativeAbortSignal(value) {
+  if (abortSignalAbortedGetter === void 0) return false;
+  try {
+    abortSignalAbortedGetter.call(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function nestedAuthValuePosition(position, key) {
+  if (position === "root" && key === "extra") return "extra";
+  if (position === "extra" && key === "signal") return "abort-signal";
+  return "other";
+}
+function authValueCachePosition(object, position, root) {
+  if (position === "root" || object === root) return "root";
+  if (position !== "extra") return "other";
+  const signalDescriptor = Object.getOwnPropertyDescriptor(object, "signal");
+  return signalDescriptor && "value" in signalDescriptor && signalDescriptor.value !== null && (typeof signalDescriptor.value === "object" || typeof signalDescriptor.value === "function") && isNativeAbortSignal(signalDescriptor.value) ? "extra" : "other";
+}
+function rememberAuthValueClone(seen, object, position, clone) {
+  const clonesByPosition = seen.get(object) ?? /* @__PURE__ */ new Map();
+  clonesByPosition.set(position, clone);
+  seen.set(object, clonesByPosition);
+}
+function cloneAndFreezeAuthValue(value, seen = /* @__PURE__ */ new WeakMap(), position = "root", rootObject) {
   if (value === null || typeof value !== "object" && typeof value !== "function") return value;
   const object = value;
-  const prior = seen.get(object);
-  if (prior !== void 0) return prior;
+  const root = rootObject ?? object;
+  if (position === "abort-signal" && object !== root && isNativeAbortSignal(object)) return value;
+  const cachePosition = authValueCachePosition(object, position, root);
+  const clonesByPosition = seen.get(object);
+  if (clonesByPosition?.has(cachePosition)) return clonesByPosition.get(cachePosition);
   if (value instanceof Date) return Object.freeze(new Date(value.getTime()));
   if (value instanceof Map) {
     const clone2 = /* @__PURE__ */ new Map();
-    seen.set(object, clone2);
+    rememberAuthValueClone(seen, object, cachePosition, clone2);
     for (const [key, entry] of value)
-      clone2.set(cloneAndFreezeAuthValue(key, seen), cloneAndFreezeAuthValue(entry, seen));
+      clone2.set(cloneAndFreezeAuthValue(key, seen, "other", root), cloneAndFreezeAuthValue(entry, seen, "other", root));
     return Object.freeze(clone2);
   }
   if (value instanceof Set) {
     const clone2 = /* @__PURE__ */ new Set();
-    seen.set(object, clone2);
-    for (const entry of value) clone2.add(cloneAndFreezeAuthValue(entry, seen));
+    rememberAuthValueClone(seen, object, cachePosition, clone2);
+    for (const entry of value) clone2.add(cloneAndFreezeAuthValue(entry, seen, "other", root));
     return Object.freeze(clone2);
   }
   const clone = Array.isArray(value) ? [] : Object.create(Object.getPrototypeOf(value));
-  seen.set(object, clone);
+  rememberAuthValueClone(seen, object, cachePosition, clone);
   for (const key of Reflect.ownKeys(object)) {
     const descriptor = Object.getOwnPropertyDescriptor(object, key);
     if (!descriptor) continue;
     if ("value" in descriptor) {
-      descriptor.value = cloneAndFreezeAuthValue(descriptor.value, seen);
+      descriptor.value = cloneAndFreezeAuthValue(descriptor.value, seen, nestedAuthValuePosition(position, key), root);
       descriptor.writable = false;
     }
     descriptor.configurable = false;

package/dist/lib/server/decisioning/runtime/to-context.mjs

@@ -2,32 +2,61 @@ import { sanitizeTaskProgressForStorage } from "./task-registry.mjs";
 import {
   _createTaskHandoff
 } from "../async-outcome.mjs";
-function cloneAndFreezeAuthValue(value, seen = /* @__PURE__ */ new WeakMap()) {
+const abortSignalAbortedGetter = typeof AbortSignal === "undefined" ? void 0 : Object.getOwnPropertyDescriptor(AbortSignal.prototype, "aborted")?.get;
+function isNativeAbortSignal(value) {
+  if (abortSignalAbortedGetter === void 0) return false;
+  try {
+    abortSignalAbortedGetter.call(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function nestedAuthValuePosition(position, key) {
+  if (position === "root" && key === "extra") return "extra";
+  if (position === "extra" && key === "signal") return "abort-signal";
+  return "other";
+}
+function authValueCachePosition(object, position, root) {
+  if (position === "root" || object === root) return "root";
+  if (position !== "extra") return "other";
+  const signalDescriptor = Object.getOwnPropertyDescriptor(object, "signal");
+  return signalDescriptor && "value" in signalDescriptor && signalDescriptor.value !== null && (typeof signalDescriptor.value === "object" || typeof signalDescriptor.value === "function") && isNativeAbortSignal(signalDescriptor.value) ? "extra" : "other";
+}
+function rememberAuthValueClone(seen, object, position, clone) {
+  const clonesByPosition = seen.get(object) ?? /* @__PURE__ */ new Map();
+  clonesByPosition.set(position, clone);
+  seen.set(object, clonesByPosition);
+}
+function cloneAndFreezeAuthValue(value, seen = /* @__PURE__ */ new WeakMap(), position = "root", rootObject) {
   if (value === null || typeof value !== "object" && typeof value !== "function") return value;
   const object = value;
-  const prior = seen.get(object);
-  if (prior !== void 0) return prior;
+  const root = rootObject ?? object;
+  if (position === "abort-signal" && object !== root && isNativeAbortSignal(object)) return value;
+  const cachePosition = authValueCachePosition(object, position, root);
+  const clonesByPosition = seen.get(object);
+  if (clonesByPosition?.has(cachePosition)) return clonesByPosition.get(cachePosition);
   if (value instanceof Date) return Object.freeze(new Date(value.getTime()));
   if (value instanceof Map) {
     const clone2 = /* @__PURE__ */ new Map();
-    seen.set(object, clone2);
+    rememberAuthValueClone(seen, object, cachePosition, clone2);
     for (const [key, entry] of value)
-      clone2.set(cloneAndFreezeAuthValue(key, seen), cloneAndFreezeAuthValue(entry, seen));
+      clone2.set(cloneAndFreezeAuthValue(key, seen, "other", root), cloneAndFreezeAuthValue(entry, seen, "other", root));
     return Object.freeze(clone2);
   }
   if (value instanceof Set) {
     const clone2 = /* @__PURE__ */ new Set();
-    seen.set(object, clone2);
-    for (const entry of value) clone2.add(cloneAndFreezeAuthValue(entry, seen));
+    rememberAuthValueClone(seen, object, cachePosition, clone2);
+    for (const entry of value) clone2.add(cloneAndFreezeAuthValue(entry, seen, "other", root));
     return Object.freeze(clone2);
   }
   const clone = Array.isArray(value) ? [] : Object.create(Object.getPrototypeOf(value));
-  seen.set(object, clone);
+  rememberAuthValueClone(seen, object, cachePosition, clone);
   for (const key of Reflect.ownKeys(object)) {
     const descriptor = Object.getOwnPropertyDescriptor(object, key);
     if (!descriptor) continue;
     if ("value" in descriptor) {
-      descriptor.value = cloneAndFreezeAuthValue(descriptor.value, seen);
+      descriptor.value = cloneAndFreezeAuthValue(descriptor.value, seen, nestedAuthValuePosition(position, key), root);
       descriptor.writable = false;
     }
     descriptor.configurable = false;

package/dist/lib/testing/storyboard/validations.d.mts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "14.0.0-beta.17";
+export declare const RUNNER_CAPABILITY_VERSION = "14.0.0-beta.18";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/testing/storyboard/validations.d.ts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "14.0.0-beta.17";
+export declare const RUNNER_CAPABILITY_VERSION = "14.0.0-beta.18";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/types/schemas.generated.js

@@ -11684,54 +11684,6 @@ const ProductFormatDeclarationSchema = import_zod.z.object({}).passthrough().mer
   format_shape: import_zod.z.string().optional(),
   v1_format_ref: import_zod.z.array(FormatReferenceStructuredObjectSchema).optional(),
   format_schema: PlatformExtensionReferenceSchema.optional()
-}).passthrough()).and(import_zod.z.union([ImageFormatDeclarationSchema, HTML5FormatDeclarationSchema, DisplayTagFormatDeclarationSchema, ImageCarouselFormatDeclarationSchema, HostedVideoFormatDeclarationSchema, VASTVideoFormatDeclarationSchema, HostedAudioFormatDeclarationSchema, DAASTAudioFormatDeclarationSchema, SponsoredPlacementFormatDeclarationSchema, NativeInFeedFormatDeclarationSchema, ResponsiveCreativeFormatDeclarationSchema, AgentPlacementFormatDeclarationSchema, SellerRenderedStatefulDisplayFormatDeclarationSchema, CoordinatedPlacementsFormatDeclarationSchema, CustomFormatDeclarationSchema])).and(import_zod.z.object({
-  format_option_id: import_zod.z.string().optional(),
-  publisher_domain: import_zod.z.string().regex(new RegExp("^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$")).optional(),
-  tracker_execution_contract: TrackerExecutionContractSchema.optional(),
-  macro_resolution_capabilities: import_zod.z.array(MacroProcessingCapabilitySchema).optional(),
-  technical_requirements_complete: import_zod.z.boolean().optional(),
-  display_name: import_zod.z.string().optional(),
-  sample_render_url: import_zod.z.string().regex(new RegExp("^https://")).refine(adcpJsonSchemaUri, "Invalid URI").optional(),
-  applies_to_channels: import_zod.z.array(MediaChannelSchema).optional(),
-  seller_preference: import_zod.z.union([import_zod.z.literal("preferred"), import_zod.z.literal("accepted"), import_zod.z.literal("discouraged")]).optional(),
-  locale_policy: CreativeLocalePolicySchema.optional(),
-  canonical_formats_only: import_zod.z.boolean().optional(),
-  experimental: import_zod.z.boolean().optional(),
-  format_shape: import_zod.z.string().optional(),
-  v1_format_ref: import_zod.z.array(FormatReferenceStructuredObjectSchema).optional(),
-  format_schema: PlatformExtensionReferenceSchema.optional()
-}).passthrough()).and(import_zod.z.union([ImageFormatDeclarationSchema, HTML5FormatDeclarationSchema, DisplayTagFormatDeclarationSchema, ImageCarouselFormatDeclarationSchema, HostedVideoFormatDeclarationSchema, VASTVideoFormatDeclarationSchema, HostedAudioFormatDeclarationSchema, DAASTAudioFormatDeclarationSchema, SponsoredPlacementFormatDeclarationSchema, NativeInFeedFormatDeclarationSchema, ResponsiveCreativeFormatDeclarationSchema, AgentPlacementFormatDeclarationSchema, SellerRenderedStatefulDisplayFormatDeclarationSchema, CoordinatedPlacementsFormatDeclarationSchema, CustomFormatDeclarationSchema])).and(import_zod.z.object({
-  format_option_id: import_zod.z.string().optional(),
-  publisher_domain: import_zod.z.string().regex(new RegExp("^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$")).optional(),
-  tracker_execution_contract: TrackerExecutionContractSchema.optional(),
-  macro_resolution_capabilities: import_zod.z.array(MacroProcessingCapabilitySchema).optional(),
-  technical_requirements_complete: import_zod.z.boolean().optional(),
-  display_name: import_zod.z.string().optional(),
-  sample_render_url: import_zod.z.string().regex(new RegExp("^https://")).refine(adcpJsonSchemaUri, "Invalid URI").optional(),
-  applies_to_channels: import_zod.z.array(MediaChannelSchema).optional(),
-  seller_preference: import_zod.z.union([import_zod.z.literal("preferred"), import_zod.z.literal("accepted"), import_zod.z.literal("discouraged")]).optional(),
-  locale_policy: CreativeLocalePolicySchema.optional(),
-  canonical_formats_only: import_zod.z.boolean().optional(),
-  experimental: import_zod.z.boolean().optional(),
-  format_shape: import_zod.z.string().optional(),
-  v1_format_ref: import_zod.z.array(FormatReferenceStructuredObjectSchema).optional(),
-  format_schema: PlatformExtensionReferenceSchema.optional()
-}).passthrough()).and(import_zod.z.union([ImageFormatDeclarationSchema, HTML5FormatDeclarationSchema, DisplayTagFormatDeclarationSchema, ImageCarouselFormatDeclarationSchema, HostedVideoFormatDeclarationSchema, VASTVideoFormatDeclarationSchema, HostedAudioFormatDeclarationSchema, DAASTAudioFormatDeclarationSchema, SponsoredPlacementFormatDeclarationSchema, NativeInFeedFormatDeclarationSchema, ResponsiveCreativeFormatDeclarationSchema, AgentPlacementFormatDeclarationSchema, SellerRenderedStatefulDisplayFormatDeclarationSchema, CoordinatedPlacementsFormatDeclarationSchema, CustomFormatDeclarationSchema])).and(import_zod.z.object({
-  format_option_id: import_zod.z.string().optional(),
-  publisher_domain: import_zod.z.string().regex(new RegExp("^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$")).optional(),
-  tracker_execution_contract: TrackerExecutionContractSchema.optional(),
-  macro_resolution_capabilities: import_zod.z.array(MacroProcessingCapabilitySchema).optional(),
-  technical_requirements_complete: import_zod.z.boolean().optional(),
-  display_name: import_zod.z.string().optional(),
-  sample_render_url: import_zod.z.string().regex(new RegExp("^https://")).refine(adcpJsonSchemaUri, "Invalid URI").optional(),
-  applies_to_channels: import_zod.z.array(MediaChannelSchema).optional(),
-  seller_preference: import_zod.z.union([import_zod.z.literal("preferred"), import_zod.z.literal("accepted"), import_zod.z.literal("discouraged")]).optional(),
-  locale_policy: CreativeLocalePolicySchema.optional(),
-  canonical_formats_only: import_zod.z.boolean().optional(),
-  experimental: import_zod.z.boolean().optional(),
-  format_shape: import_zod.z.string().optional(),
-  v1_format_ref: import_zod.z.array(FormatReferenceStructuredObjectSchema).optional(),
-  format_schema: PlatformExtensionReferenceSchema.optional()
 }).passthrough()).and(import_zod.z.union([ImageFormatDeclarationSchema, HTML5FormatDeclarationSchema, DisplayTagFormatDeclarationSchema, ImageCarouselFormatDeclarationSchema, HostedVideoFormatDeclarationSchema, VASTVideoFormatDeclarationSchema, HostedAudioFormatDeclarationSchema, DAASTAudioFormatDeclarationSchema, SponsoredPlacementFormatDeclarationSchema, NativeInFeedFormatDeclarationSchema, ResponsiveCreativeFormatDeclarationSchema, AgentPlacementFormatDeclarationSchema, SellerRenderedStatefulDisplayFormatDeclarationSchema, CoordinatedPlacementsFormatDeclarationSchema, CustomFormatDeclarationSchema]));
 const AudienceEvidenceSelectionSchema = import_zod.z.object({
   evidence_id: import_zod.z.string().min(1),
@@ -11767,21 +11719,6 @@ const PlacementSchema = import_zod.z.object({}).passthrough().merge(import_zod.z
   audio_distribution_types: import_zod.z.array(AudioDistributionTypeSchema).optional(),
   sponsored_placement_types: import_zod.z.array(SponsoredPlacementTypeSchema).optional(),
   social_placement_surfaces: import_zod.z.array(SocialPlacementSurfaceSchema).optional()
-}).passthrough()).and(import_zod.z.union([import_zod.z.object({}).passthrough(), import_zod.z.object({}).passthrough()])).and(import_zod.z.object({
-  kind: import_zod.z.union([import_zod.z.literal("publisher_ref"), import_zod.z.literal("seller_inline")]),
-  placement_id: import_zod.z.string(),
-  publisher_domain: import_zod.z.string().regex(new RegExp("^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$")).optional(),
-  seller_agent: SellerAgentReferenceSchema.optional(),
-  name: import_zod.z.string().optional(),
-  description: import_zod.z.string().optional(),
-  mode: import_zod.z.union([import_zod.z.literal("targetable"), import_zod.z.literal("included")]),
-  tags: import_zod.z.array(import_zod.z.string()).optional(),
-  format_ids: import_zod.z.array(FormatReferenceStructuredObjectSchema).optional(),
-  format_options: import_zod.z.array(ProductFormatDeclarationSchema).optional(),
-  video_placement_types: import_zod.z.array(VideoPlacementTypeSchema).optional(),
-  audio_distribution_types: import_zod.z.array(AudioDistributionTypeSchema).optional(),
-  sponsored_placement_types: import_zod.z.array(SponsoredPlacementTypeSchema).optional(),
-  social_placement_surfaces: import_zod.z.array(SocialPlacementSurfaceSchema).optional()
 }).passthrough());
 const PricingOptionSchema = import_zod.z.union([CPMPricingOptionSchema, VCPMPricingOptionSchema, CPCPricingOptionSchema, CPCVPricingOptionSchema, CPVPricingOptionSchema, CPPPricingOptionSchema, CPAPricingOptionSchema, RevenueSharePricingOptionSchema, FlatRatePricingOptionSchema, TimeBasedPricingOptionSchema]);
 const InstallmentSchema = import_zod.z.object({

package/dist/lib/types/schemas.generated.mjs

@@ -10402,54 +10402,6 @@ const ProductFormatDeclarationSchema = z.object({}).passthrough().merge(z.object
   format_shape: z.string().optional(),
   v1_format_ref: z.array(FormatReferenceStructuredObjectSchema).optional(),
   format_schema: PlatformExtensionReferenceSchema.optional()
-}).passthrough()).and(z.union([ImageFormatDeclarationSchema, HTML5FormatDeclarationSchema, DisplayTagFormatDeclarationSchema, ImageCarouselFormatDeclarationSchema, HostedVideoFormatDeclarationSchema, VASTVideoFormatDeclarationSchema, HostedAudioFormatDeclarationSchema, DAASTAudioFormatDeclarationSchema, SponsoredPlacementFormatDeclarationSchema, NativeInFeedFormatDeclarationSchema, ResponsiveCreativeFormatDeclarationSchema, AgentPlacementFormatDeclarationSchema, SellerRenderedStatefulDisplayFormatDeclarationSchema, CoordinatedPlacementsFormatDeclarationSchema, CustomFormatDeclarationSchema])).and(z.object({
-  format_option_id: z.string().optional(),
-  publisher_domain: z.string().regex(new RegExp("^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$")).optional(),
-  tracker_execution_contract: TrackerExecutionContractSchema.optional(),
-  macro_resolution_capabilities: z.array(MacroProcessingCapabilitySchema).optional(),
-  technical_requirements_complete: z.boolean().optional(),
-  display_name: z.string().optional(),
-  sample_render_url: z.string().regex(new RegExp("^https://")).refine(adcpJsonSchemaUri, "Invalid URI").optional(),
-  applies_to_channels: z.array(MediaChannelSchema).optional(),
-  seller_preference: z.union([z.literal("preferred"), z.literal("accepted"), z.literal("discouraged")]).optional(),
-  locale_policy: CreativeLocalePolicySchema.optional(),
-  canonical_formats_only: z.boolean().optional(),
-  experimental: z.boolean().optional(),
-  format_shape: z.string().optional(),
-  v1_format_ref: z.array(FormatReferenceStructuredObjectSchema).optional(),
-  format_schema: PlatformExtensionReferenceSchema.optional()
-}).passthrough()).and(z.union([ImageFormatDeclarationSchema, HTML5FormatDeclarationSchema, DisplayTagFormatDeclarationSchema, ImageCarouselFormatDeclarationSchema, HostedVideoFormatDeclarationSchema, VASTVideoFormatDeclarationSchema, HostedAudioFormatDeclarationSchema, DAASTAudioFormatDeclarationSchema, SponsoredPlacementFormatDeclarationSchema, NativeInFeedFormatDeclarationSchema, ResponsiveCreativeFormatDeclarationSchema, AgentPlacementFormatDeclarationSchema, SellerRenderedStatefulDisplayFormatDeclarationSchema, CoordinatedPlacementsFormatDeclarationSchema, CustomFormatDeclarationSchema])).and(z.object({
-  format_option_id: z.string().optional(),
-  publisher_domain: z.string().regex(new RegExp("^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$")).optional(),
-  tracker_execution_contract: TrackerExecutionContractSchema.optional(),
-  macro_resolution_capabilities: z.array(MacroProcessingCapabilitySchema).optional(),
-  technical_requirements_complete: z.boolean().optional(),
-  display_name: z.string().optional(),
-  sample_render_url: z.string().regex(new RegExp("^https://")).refine(adcpJsonSchemaUri, "Invalid URI").optional(),
-  applies_to_channels: z.array(MediaChannelSchema).optional(),
-  seller_preference: z.union([z.literal("preferred"), z.literal("accepted"), z.literal("discouraged")]).optional(),
-  locale_policy: CreativeLocalePolicySchema.optional(),
-  canonical_formats_only: z.boolean().optional(),
-  experimental: z.boolean().optional(),
-  format_shape: z.string().optional(),
-  v1_format_ref: z.array(FormatReferenceStructuredObjectSchema).optional(),
-  format_schema: PlatformExtensionReferenceSchema.optional()
-}).passthrough()).and(z.union([ImageFormatDeclarationSchema, HTML5FormatDeclarationSchema, DisplayTagFormatDeclarationSchema, ImageCarouselFormatDeclarationSchema, HostedVideoFormatDeclarationSchema, VASTVideoFormatDeclarationSchema, HostedAudioFormatDeclarationSchema, DAASTAudioFormatDeclarationSchema, SponsoredPlacementFormatDeclarationSchema, NativeInFeedFormatDeclarationSchema, ResponsiveCreativeFormatDeclarationSchema, AgentPlacementFormatDeclarationSchema, SellerRenderedStatefulDisplayFormatDeclarationSchema, CoordinatedPlacementsFormatDeclarationSchema, CustomFormatDeclarationSchema])).and(z.object({
-  format_option_id: z.string().optional(),
-  publisher_domain: z.string().regex(new RegExp("^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$")).optional(),
-  tracker_execution_contract: TrackerExecutionContractSchema.optional(),
-  macro_resolution_capabilities: z.array(MacroProcessingCapabilitySchema).optional(),
-  technical_requirements_complete: z.boolean().optional(),
-  display_name: z.string().optional(),
-  sample_render_url: z.string().regex(new RegExp("^https://")).refine(adcpJsonSchemaUri, "Invalid URI").optional(),
-  applies_to_channels: z.array(MediaChannelSchema).optional(),
-  seller_preference: z.union([z.literal("preferred"), z.literal("accepted"), z.literal("discouraged")]).optional(),
-  locale_policy: CreativeLocalePolicySchema.optional(),
-  canonical_formats_only: z.boolean().optional(),
-  experimental: z.boolean().optional(),
-  format_shape: z.string().optional(),
-  v1_format_ref: z.array(FormatReferenceStructuredObjectSchema).optional(),
-  format_schema: PlatformExtensionReferenceSchema.optional()
 }).passthrough()).and(z.union([ImageFormatDeclarationSchema, HTML5FormatDeclarationSchema, DisplayTagFormatDeclarationSchema, ImageCarouselFormatDeclarationSchema, HostedVideoFormatDeclarationSchema, VASTVideoFormatDeclarationSchema, HostedAudioFormatDeclarationSchema, DAASTAudioFormatDeclarationSchema, SponsoredPlacementFormatDeclarationSchema, NativeInFeedFormatDeclarationSchema, ResponsiveCreativeFormatDeclarationSchema, AgentPlacementFormatDeclarationSchema, SellerRenderedStatefulDisplayFormatDeclarationSchema, CoordinatedPlacementsFormatDeclarationSchema, CustomFormatDeclarationSchema]));
 const AudienceEvidenceSelectionSchema = z.object({
   evidence_id: z.string().min(1),
@@ -10485,21 +10437,6 @@ const PlacementSchema = z.object({}).passthrough().merge(z.object({}).passthroug
   audio_distribution_types: z.array(AudioDistributionTypeSchema).optional(),
   sponsored_placement_types: z.array(SponsoredPlacementTypeSchema).optional(),
   social_placement_surfaces: z.array(SocialPlacementSurfaceSchema).optional()
-}).passthrough()).and(z.union([z.object({}).passthrough(), z.object({}).passthrough()])).and(z.object({
-  kind: z.union([z.literal("publisher_ref"), z.literal("seller_inline")]),
-  placement_id: z.string(),
-  publisher_domain: z.string().regex(new RegExp("^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$")).optional(),
-  seller_agent: SellerAgentReferenceSchema.optional(),
-  name: z.string().optional(),
-  description: z.string().optional(),
-  mode: z.union([z.literal("targetable"), z.literal("included")]),
-  tags: z.array(z.string()).optional(),
-  format_ids: z.array(FormatReferenceStructuredObjectSchema).optional(),
-  format_options: z.array(ProductFormatDeclarationSchema).optional(),
-  video_placement_types: z.array(VideoPlacementTypeSchema).optional(),
-  audio_distribution_types: z.array(AudioDistributionTypeSchema).optional(),
-  sponsored_placement_types: z.array(SponsoredPlacementTypeSchema).optional(),
-  social_placement_surfaces: z.array(SocialPlacementSurfaceSchema).optional()
 }).passthrough());
 const PricingOptionSchema = z.union([CPMPricingOptionSchema, VCPMPricingOptionSchema, CPCPricingOptionSchema, CPCVPricingOptionSchema, CPVPricingOptionSchema, CPPPricingOptionSchema, CPAPricingOptionSchema, RevenueSharePricingOptionSchema, FlatRatePricingOptionSchema, TimeBasedPricingOptionSchema]);
 const InstallmentSchema = z.object({

package/dist/lib/utils/well-formed-unicode.d.mts

@@ -0,0 +1,2 @@
+/** Reject unpaired UTF-16 surrogates before values cross UTF-8 or hash boundaries. */
+export declare function assertWellFormedUnicode(value: unknown, label: string): void;

package/dist/lib/utils/well-formed-unicode.d.ts

@@ -0,0 +1,2 @@
+/** Reject unpaired UTF-16 surrogates before values cross UTF-8 or hash boundaries. */
+export declare function assertWellFormedUnicode(value: unknown, label: string): void;

package/dist/lib/utils/well-formed-unicode.js

@@ -0,0 +1,51 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var well_formed_unicode_exports = {};
+__export(well_formed_unicode_exports, {
+  assertWellFormedUnicode: () => assertWellFormedUnicode
+});
+module.exports = __toCommonJS(well_formed_unicode_exports);
+function assertWellFormedUnicode(value, label) {
+  const active = /* @__PURE__ */ new WeakSet();
+  const visit = (current) => {
+    if (typeof current === "string") {
+      if (Buffer.from(current, "utf8").toString("utf8") !== current) {
+        throw new TypeError(`${label} must contain well-formed Unicode`);
+      }
+      return;
+    }
+    if (current === null || typeof current !== "object") return;
+    if (active.has(current)) throw new TypeError(`${label} must be acyclic JSON`);
+    active.add(current);
+    if (Array.isArray(current)) {
+      for (const item of current) visit(item);
+    } else {
+      for (const key of Object.keys(current)) {
+        visit(key);
+        visit(current[key]);
+      }
+    }
+    active.delete(current);
+  };
+  visit(value);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  assertWellFormedUnicode
+});

package/dist/lib/utils/well-formed-unicode.mjs

@@ -0,0 +1,27 @@
+function assertWellFormedUnicode(value, label) {
+  const active = /* @__PURE__ */ new WeakSet();
+  const visit = (current) => {
+    if (typeof current === "string") {
+      if (Buffer.from(current, "utf8").toString("utf8") !== current) {
+        throw new TypeError(`${label} must contain well-formed Unicode`);
+      }
+      return;
+    }
+    if (current === null || typeof current !== "object") return;
+    if (active.has(current)) throw new TypeError(`${label} must be acyclic JSON`);
+    active.add(current);
+    if (Array.isArray(current)) {
+      for (const item of current) visit(item);
+    } else {
+      for (const key of Object.keys(current)) {
+        visit(key);
+        visit(current[key]);
+      }
+    }
+    active.delete(current);
+  };
+  visit(value);
+}
+export {
+  assertWellFormedUnicode
+};

package/dist/lib/version.d.mts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "14.0.0-beta.17";
+export declare const LIBRARY_VERSION = "14.0.0-beta.18";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "14.0.0-beta.17";
+    readonly library: "14.0.0-beta.18";
     readonly adcp: "3.2.0-beta.9";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0-beta.1", "3.0-beta", "3.0.0-beta.3", "3.0-beta.3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.2.0-beta.9", "3.2-beta.9"];
-    readonly generatedAt: "2026-08-29T18:03:01.220Z";
+    readonly generatedAt: "2026-08-29T22:10:59.071Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "14.0.0-beta.17";
+export declare const LIBRARY_VERSION = "14.0.0-beta.18";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "14.0.0-beta.17";
+    readonly library: "14.0.0-beta.18";
     readonly adcp: "3.2.0-beta.9";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0-beta.1", "3.0-beta", "3.0.0-beta.3", "3.0-beta.3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.2.0-beta.9", "3.2-beta.9"];
-    readonly generatedAt: "2026-08-29T18:03:01.220Z";
+    readonly generatedAt: "2026-08-29T22:10:59.071Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js

@@ -31,7 +31,7 @@ __export(version_exports, {
   toReleasePrecisionVersion: () => toReleasePrecisionVersion
 });
 module.exports = __toCommonJS(version_exports);
-const LIBRARY_VERSION = "14.0.0-beta.17";
+const LIBRARY_VERSION = "14.0.0-beta.18";
 const ADCP_VERSION = "3.2.0-beta.9";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -94,10 +94,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2-beta.9"
 ];
 const VERSION_INFO = {
-  library: "14.0.0-beta.17",
+  library: "14.0.0-beta.18",
   adcp: "3.2.0-beta.9",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-08-29T18:03:01.220Z"
+  generatedAt: "2026-08-29T22:10:59.071Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/dist/lib/version.mjs

@@ -1,4 +1,4 @@
-const LIBRARY_VERSION = "14.0.0-beta.17";
+const LIBRARY_VERSION = "14.0.0-beta.18";
 const ADCP_VERSION = "3.2.0-beta.9";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -61,10 +61,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2-beta.9"
 ];
 const VERSION_INFO = {
-  library: "14.0.0-beta.17",
+  library: "14.0.0-beta.18",
   adcp: "3.2.0-beta.9",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-08-29T18:03:01.220Z"
+  generatedAt: "2026-08-29T22:10:59.071Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/docs/guides/BUILD-AN-AGENT.md

@@ -702,6 +702,13 @@ createAdcpServerFromPlatform(platform, {
 
 See [SIGNING-GUIDE.md](./SIGNING-GUIDE.md) for the full walkthrough: key generation, JWKS publication, brand.json, conformance testing, and KMS-backed production deployment.
 
+When a human approval or provider callback commits before the application can
+settle its SDK task, use the PostgreSQL settlement-intent queue to close that
+earlier crash window. See [Durable task settlement](./DURABLE-TASK-SETTLEMENT.md)
+for the domain transaction → task/webhook transaction → webhook recovery
+sequence, copyable polling and push settlement handlers, and scoped dead-letter
+operations.
+
 ### Portable MCP Apps for custom tools
 
 Use `resources` with custom-tool `_meta.ui` to attach one host-neutral MCP