@adcp/sdk 14.0.0-beta.23 → 14.0.0-beta.25

package/dist/lib/registry/types.generated.d.mts

@@ -567,7 +567,7 @@ export interface paths {
          * Operator lookup
          * @description Given a domain, returns the agents this entity operates and which publishers trust them.
          *
-         *     **Response shape is auth-aware.** Anonymous callers see only `public` agents. Authenticated callers on an AAO membership tier with API access also see `members_only` agents. Profile owners (callers whose org owns the queried domain) additionally see `private` agents. This is the primary mechanism by which AAO membership unlocks deeper registry visibility.
+         *     **Response shape is auth-aware.** Anonymous callers see only `public` agents. Authenticated callers on an AAO membership tier with API access also see `members_only` agents. Profile owners (callers whose org owns the queried domain) additionally see `private` agents. This is the primary mechanism by which AAO membership unlocks deeper registry visibility. `agent_visibility_summary` always reports public and members-only registration counts, independent of caller authorization and `scope`, so `agents: []` is not ambiguous with no discoverable registrations. Private registrations are excluded so their existence remains visible only to the profile owner.
          *
          *     **`scope` bucket filter.** Callers can opt INTO a single visibility bucket (or the full union) regardless of what their auth would otherwise unlock — useful for picker UIs that want exactly one slice (e.g. anonymous-equivalent, members-only catalog, owner's private drafts). `scope` only narrows; it never escalates (e.g. `scope=member` on an explorer or anonymous caller silently returns public only).
          *
@@ -1750,6 +1750,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/registry/agents/{encodedUrl}/refreshes/{operationId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get agent refresh status
+         * @description Returns the durable lifecycle and, after success, the same snapshot result as the synchronous refresh response. The selected owner organization or a current registry administrator may read the operation. Poll no more frequently than the Retry-After value.
+         */
+        get: operations["getAgentRefreshOperation"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/registry/agents/{encodedUrl}/auth-status": {
         parameters: {
             query?: never;
@@ -2673,6 +2693,12 @@ export interface components {
                 /** @description True when the profile owner carries the Founding Member badge (joined before the founding-cohort cutoff). Surfaced when the profile owner has set their member card to public (`is_public=true`). Absent for private profiles. Founding Member is orthogonal to tier — founding orgs typically display both (e.g. Scope3 shows `Partner` + `Founding Member`). */
                 is_founding_member?: boolean;
             } | null;
+            agent_visibility_summary: {
+                /** @description Number of registered public agents, regardless of the caller's scope filter. */
+                public: number;
+                /** @description Number of registered members-only agents, regardless of caller authorization or scope. Private registrations are excluded so their existence remains visible only to the profile owner. */
+                members_only: number;
+            };
             agents: {
                 url: string;
                 name: string;
@@ -6168,6 +6194,8 @@ export interface operations {
             /** @description Rate limit exceeded */
             429: {
                 headers: {
+                    /** @description Seconds to wait before retrying */
+                    "Retry-After": string;
                     [name: string]: unknown;
                 };
                 content: {
@@ -9647,7 +9675,10 @@ export interface operations {
     refreshAgent: {
         parameters: {
             query?: never;
-            header?: never;
+            header?: {
+                /** @description Return the durable refresh operation immediately instead of waiting up to 90 seconds for a legacy synchronous result. */
+                Prefer?: "respond-async";
+            };
             path: {
                 /** @description URL-encoded agent URL */
                 encodedUrl: string;
@@ -9663,7 +9694,7 @@ export interface operations {
             };
         };
         responses: {
-            /** @description Snapshot refreshed */
+            /** @description Snapshot refreshed inside the bounded 90-second compatibility window */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -9680,6 +9711,16 @@ export interface operations {
                         oauth_required: boolean;
                         checked_at: string;
                         error?: string;
+                        /**
+                         * Format: uuid
+                         * @description Present when this response recovered a recently completed operation.
+                         */
+                        refresh_operation_id?: string;
+                        /** @description Stable test-session identity, present on recovered responses. */
+                        test_session_id?: string;
+                        /** @description Durable operation URL, present on recovered responses. */
+                        status_url?: string;
+                        coalesced?: boolean;
                         /** @description Compliance re-run summary. The capability/health portion of the response is independent of this block — a failed compliance run still returns the rest of the snapshot. */
                         compliance: {
                             /** @description True if the full storyboard suite ran and agent_storyboard_status was updated. False when ownership couldn't be resolved, the agent reported auth_required, or the compliance call itself failed. */
@@ -9706,12 +9747,40 @@ export interface operations {
                             observations_count?: number;
                             /** @description Number of run-summary notices emitted by this run. */
                             notices_count?: number;
+                            /** @description True when the verifier resolved saved credentials for the compliance run. */
+                            auth_available: boolean;
                             /** @description Reason compliance didn't run when `ran` is false. */
                             error?: string;
                         };
                     };
                 };
             };
+            /** @description Refresh accepted and observable through the durable status resource */
+            202: {
+                headers: {
+                    /** @description Relative URL of the durable refresh operation */
+                    Location: string;
+                    /** @description Recommended polling interval in seconds */
+                    "Retry-After": string;
+                    /** @description Present as respond-async when requested */
+                    "Preference-Applied"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** Format: uuid */
+                        refresh_operation_id: string;
+                        test_session_id: string;
+                        /** @enum {string} */
+                        status: "queued" | "running";
+                        /** @description True when the same credential context already had an active refresh. */
+                        coalesced: boolean;
+                        status_url: string;
+                        /** Format: date-time */
+                        requested_at: string;
+                    };
+                };
+            };
             /** @description Invalid agent URL */
             400: {
                 headers: {
@@ -9739,7 +9808,7 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Monitoring paused for this agent */
+            /** @description Monitoring paused, or another credential context is already refreshing this agent */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -9761,6 +9830,15 @@ export interface operations {
                     };
                 };
             };
+            /** @description Refresh failed after durable execution */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
             /** @description Probe failed (timeout, DNS, OAuth wall, etc.) */
             502: {
                 headers: {
@@ -9770,6 +9848,115 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
+            /** @description Durable refresh queue unavailable or at capacity */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    getAgentRefreshOperation: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description URL-encoded agent URL */
+                encodedUrl: string;
+                operationId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Durable refresh lifecycle */
+            200: {
+                headers: {
+                    /** @description Present while queued or running */
+                    "Retry-After"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** Format: uuid */
+                        refresh_operation_id: string;
+                        test_session_id: string;
+                        /** Format: uri */
+                        agent_url: string;
+                        /** @enum {string} */
+                        status: "queued" | "running" | "succeeded" | "failed";
+                        attempts: number;
+                        /** Format: date-time */
+                        requested_at: string;
+                        /** Format: date-time */
+                        started_at: string | null;
+                        /** Format: date-time */
+                        completed_at: string | null;
+                        result: {
+                            [key: string]: unknown;
+                        } | null;
+                        error: {
+                            code: string;
+                            message: string;
+                        } | null;
+                    };
+                };
+            };
+            /** @description Invalid agent URL or operation ID */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Authentication required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Operation not found or not authorized */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Refresh status polling rate limit exceeded */
+            429: {
+                headers: {
+                    /** @description Seconds to wait before retrying */
+                    "Retry-After": string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        error: string;
+                        message?: string;
+                        retry_after?: number;
+                        retryAfter?: number;
+                    };
+                };
+            };
+            /** @description Refresh status temporarily unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
         };
     };
     getAgentAuthStatus: {

package/dist/lib/registry/types.generated.d.ts

@@ -567,7 +567,7 @@ export interface paths {
          * Operator lookup
          * @description Given a domain, returns the agents this entity operates and which publishers trust them.
          *
-         *     **Response shape is auth-aware.** Anonymous callers see only `public` agents. Authenticated callers on an AAO membership tier with API access also see `members_only` agents. Profile owners (callers whose org owns the queried domain) additionally see `private` agents. This is the primary mechanism by which AAO membership unlocks deeper registry visibility.
+         *     **Response shape is auth-aware.** Anonymous callers see only `public` agents. Authenticated callers on an AAO membership tier with API access also see `members_only` agents. Profile owners (callers whose org owns the queried domain) additionally see `private` agents. This is the primary mechanism by which AAO membership unlocks deeper registry visibility. `agent_visibility_summary` always reports public and members-only registration counts, independent of caller authorization and `scope`, so `agents: []` is not ambiguous with no discoverable registrations. Private registrations are excluded so their existence remains visible only to the profile owner.
          *
          *     **`scope` bucket filter.** Callers can opt INTO a single visibility bucket (or the full union) regardless of what their auth would otherwise unlock — useful for picker UIs that want exactly one slice (e.g. anonymous-equivalent, members-only catalog, owner's private drafts). `scope` only narrows; it never escalates (e.g. `scope=member` on an explorer or anonymous caller silently returns public only).
          *
@@ -1750,6 +1750,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/registry/agents/{encodedUrl}/refreshes/{operationId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get agent refresh status
+         * @description Returns the durable lifecycle and, after success, the same snapshot result as the synchronous refresh response. The selected owner organization or a current registry administrator may read the operation. Poll no more frequently than the Retry-After value.
+         */
+        get: operations["getAgentRefreshOperation"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/registry/agents/{encodedUrl}/auth-status": {
         parameters: {
             query?: never;
@@ -2673,6 +2693,12 @@ export interface components {
                 /** @description True when the profile owner carries the Founding Member badge (joined before the founding-cohort cutoff). Surfaced when the profile owner has set their member card to public (`is_public=true`). Absent for private profiles. Founding Member is orthogonal to tier — founding orgs typically display both (e.g. Scope3 shows `Partner` + `Founding Member`). */
                 is_founding_member?: boolean;
             } | null;
+            agent_visibility_summary: {
+                /** @description Number of registered public agents, regardless of the caller's scope filter. */
+                public: number;
+                /** @description Number of registered members-only agents, regardless of caller authorization or scope. Private registrations are excluded so their existence remains visible only to the profile owner. */
+                members_only: number;
+            };
             agents: {
                 url: string;
                 name: string;
@@ -6168,6 +6194,8 @@ export interface operations {
             /** @description Rate limit exceeded */
             429: {
                 headers: {
+                    /** @description Seconds to wait before retrying */
+                    "Retry-After": string;
                     [name: string]: unknown;
                 };
                 content: {
@@ -9647,7 +9675,10 @@ export interface operations {
     refreshAgent: {
         parameters: {
             query?: never;
-            header?: never;
+            header?: {
+                /** @description Return the durable refresh operation immediately instead of waiting up to 90 seconds for a legacy synchronous result. */
+                Prefer?: "respond-async";
+            };
             path: {
                 /** @description URL-encoded agent URL */
                 encodedUrl: string;
@@ -9663,7 +9694,7 @@ export interface operations {
             };
         };
         responses: {
-            /** @description Snapshot refreshed */
+            /** @description Snapshot refreshed inside the bounded 90-second compatibility window */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -9680,6 +9711,16 @@ export interface operations {
                         oauth_required: boolean;
                         checked_at: string;
                         error?: string;
+                        /**
+                         * Format: uuid
+                         * @description Present when this response recovered a recently completed operation.
+                         */
+                        refresh_operation_id?: string;
+                        /** @description Stable test-session identity, present on recovered responses. */
+                        test_session_id?: string;
+                        /** @description Durable operation URL, present on recovered responses. */
+                        status_url?: string;
+                        coalesced?: boolean;
                         /** @description Compliance re-run summary. The capability/health portion of the response is independent of this block — a failed compliance run still returns the rest of the snapshot. */
                         compliance: {
                             /** @description True if the full storyboard suite ran and agent_storyboard_status was updated. False when ownership couldn't be resolved, the agent reported auth_required, or the compliance call itself failed. */
@@ -9706,12 +9747,40 @@ export interface operations {
                             observations_count?: number;
                             /** @description Number of run-summary notices emitted by this run. */
                             notices_count?: number;
+                            /** @description True when the verifier resolved saved credentials for the compliance run. */
+                            auth_available: boolean;
                             /** @description Reason compliance didn't run when `ran` is false. */
                             error?: string;
                         };
                     };
                 };
             };
+            /** @description Refresh accepted and observable through the durable status resource */
+            202: {
+                headers: {
+                    /** @description Relative URL of the durable refresh operation */
+                    Location: string;
+                    /** @description Recommended polling interval in seconds */
+                    "Retry-After": string;
+                    /** @description Present as respond-async when requested */
+                    "Preference-Applied"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** Format: uuid */
+                        refresh_operation_id: string;
+                        test_session_id: string;
+                        /** @enum {string} */
+                        status: "queued" | "running";
+                        /** @description True when the same credential context already had an active refresh. */
+                        coalesced: boolean;
+                        status_url: string;
+                        /** Format: date-time */
+                        requested_at: string;
+                    };
+                };
+            };
             /** @description Invalid agent URL */
             400: {
                 headers: {
@@ -9739,7 +9808,7 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Monitoring paused for this agent */
+            /** @description Monitoring paused, or another credential context is already refreshing this agent */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -9761,6 +9830,15 @@ export interface operations {
                     };
                 };
             };
+            /** @description Refresh failed after durable execution */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
             /** @description Probe failed (timeout, DNS, OAuth wall, etc.) */
             502: {
                 headers: {
@@ -9770,6 +9848,115 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
+            /** @description Durable refresh queue unavailable or at capacity */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
+    getAgentRefreshOperation: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description URL-encoded agent URL */
+                encodedUrl: string;
+                operationId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Durable refresh lifecycle */
+            200: {
+                headers: {
+                    /** @description Present while queued or running */
+                    "Retry-After"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** Format: uuid */
+                        refresh_operation_id: string;
+                        test_session_id: string;
+                        /** Format: uri */
+                        agent_url: string;
+                        /** @enum {string} */
+                        status: "queued" | "running" | "succeeded" | "failed";
+                        attempts: number;
+                        /** Format: date-time */
+                        requested_at: string;
+                        /** Format: date-time */
+                        started_at: string | null;
+                        /** Format: date-time */
+                        completed_at: string | null;
+                        result: {
+                            [key: string]: unknown;
+                        } | null;
+                        error: {
+                            code: string;
+                            message: string;
+                        } | null;
+                    };
+                };
+            };
+            /** @description Invalid agent URL or operation ID */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Authentication required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Operation not found or not authorized */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Refresh status polling rate limit exceeded */
+            429: {
+                headers: {
+                    /** @description Seconds to wait before retrying */
+                    "Retry-After": string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        error: string;
+                        message?: string;
+                        retry_after?: number;
+                        retryAfter?: number;
+                    };
+                };
+            };
+            /** @description Refresh status temporarily unavailable */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
         };
     };
     getAgentAuthStatus: {

package/dist/lib/schemas-data/v2.5/_provenance.json

@@ -4,5 +4,5 @@
   "source_sha": "4e553ad955f83b49c7d221ab5c3ff78237ad02e3",
   "source_tarball_sha256": "580656d6466ef9f0d1119985e6726c2efea718dc671e2ad30957fcb2fd54af0f",
   "upstream_adcp_version": "2.5.3",
-  "synced_at": "2026-08-30T13:02:45.461Z"
+  "synced_at": "2026-08-31T13:03:46.895Z"
 }

package/dist/lib/server/create-adcp-server.js

@@ -1953,6 +1953,14 @@ function createAdcpServer(config) {
   let warnedAboutOptionalReplayWithoutIdempotency = false;
   const applyResponseEnhancer = (response) => {
     responseEnhancer?.(response);
+    const structuredContent = response.structuredContent;
+    if (structuredContent !== void 0) {
+      const serialized = JSON.stringify(structuredContent);
+      const hasSerializedFallback = response.content.some((block) => block.type === "text" && block.text === serialized);
+      if (!hasSerializedFallback) {
+        response.content.push({ type: "text", text: serialized });
+      }
+    }
     return response;
   };
   const requestServedRelease = (params) => {

package/dist/lib/server/create-adcp-server.mjs

@@ -2023,6 +2023,14 @@ function createAdcpServer(config) {
   let warnedAboutOptionalReplayWithoutIdempotency = false;
   const applyResponseEnhancer = (response) => {
     responseEnhancer?.(response);
+    const structuredContent = response.structuredContent;
+    if (structuredContent !== void 0) {
+      const serialized = JSON.stringify(structuredContent);
+      const hasSerializedFallback = response.content.some((block) => block.type === "text" && block.text === serialized);
+      if (!hasSerializedFallback) {
+        response.content.push({ type: "text", text: serialized });
+      }
+    }
     return response;
   };
   const requestServedRelease = (params) => {

package/dist/lib/testing/storyboard/validations.d.mts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "14.0.0-beta.23";
+export declare const RUNNER_CAPABILITY_VERSION = "14.0.0-beta.25";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/testing/storyboard/validations.d.ts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "14.0.0-beta.23";
+export declare const RUNNER_CAPABILITY_VERSION = "14.0.0-beta.25";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/types/schemas.generated.js

@@ -4043,12 +4043,12 @@ const PriceGuidanceSchema = import_zod.z.object({
 const VCPMPricingOptionSchema = import_zod.z.object({
   pricing_option_id: import_zod.z.string(),
   pricing_model: import_zod.z.literal("vcpm"),
-  currency: import_zod.z.string(),
-  fixed_price: import_zod.z.number().optional(),
-  floor_price: import_zod.z.number().optional(),
+  currency: import_zod.z.string().regex(new RegExp("^[A-Z]{3}$")),
+  fixed_price: import_zod.z.number().gte(0).optional(),
+  floor_price: import_zod.z.number().gte(0).optional(),
   max_bid: import_zod.z.boolean().optional(),
   price_guidance: PriceGuidanceSchema.optional(),
-  min_spend_per_package: import_zod.z.number().optional(),
+  min_spend_per_package: import_zod.z.number().gte(0).optional(),
   price_breakdown: PriceBreakdownSchema.optional(),
   eligible_adjustments: import_zod.z.array(PriceAdjustmentKindSchema).optional()
 }).passthrough();
@@ -4085,8 +4085,8 @@ const CPVPricingOptionSchema = import_zod.z.object({
   max_bid: import_zod.z.boolean().optional(),
   price_guidance: PriceGuidanceSchema.optional(),
   parameters: import_zod.z.object({
-    view_threshold: import_zod.z.union([import_zod.z.number(), import_zod.z.object({
-      duration_seconds: import_zod.z.number()
+    view_threshold: import_zod.z.union([import_zod.z.number().gte(0).lte(1), import_zod.z.object({
+      duration_seconds: import_zod.z.number().int().gte(1)
     }).passthrough()])
   }).passthrough(),
   min_spend_per_package: import_zod.z.number().gte(0).optional(),
@@ -4111,13 +4111,13 @@ const CPPPricingOptionSchema = import_zod.z.object({
 }).passthrough();
 const DoohParametersSchema = import_zod.z.object({
   type: import_zod.z.literal("dooh"),
-  sov_percentage: import_zod.z.number().optional(),
-  loop_duration_seconds: import_zod.z.number().optional(),
-  min_plays_per_hour: import_zod.z.number().optional(),
+  sov_percentage: import_zod.z.number().gte(0).lte(100).optional(),
+  loop_duration_seconds: import_zod.z.number().int().gte(1).optional(),
+  min_plays_per_hour: import_zod.z.number().int().gte(1).optional(),
   venue_package: import_zod.z.string().optional(),
-  duration_hours: import_zod.z.number().optional(),
+  duration_hours: import_zod.z.number().gte(0).optional(),
   daypart: import_zod.z.string().optional(),
-  estimated_impressions: import_zod.z.number().optional()
+  estimated_impressions: import_zod.z.number().int().gte(0).optional()
 }).passthrough();
 const TimeBasedPricingOptionSchema = import_zod.z.object({
   pricing_option_id: import_zod.z.string(),

package/dist/lib/types/schemas.generated.mjs

@@ -2761,12 +2761,12 @@ const PriceGuidanceSchema = z.object({
 const VCPMPricingOptionSchema = z.object({
   pricing_option_id: z.string(),
   pricing_model: z.literal("vcpm"),
-  currency: z.string(),
-  fixed_price: z.number().optional(),
-  floor_price: z.number().optional(),
+  currency: z.string().regex(new RegExp("^[A-Z]{3}$")),
+  fixed_price: z.number().gte(0).optional(),
+  floor_price: z.number().gte(0).optional(),
   max_bid: z.boolean().optional(),
   price_guidance: PriceGuidanceSchema.optional(),
-  min_spend_per_package: z.number().optional(),
+  min_spend_per_package: z.number().gte(0).optional(),
   price_breakdown: PriceBreakdownSchema.optional(),
   eligible_adjustments: z.array(PriceAdjustmentKindSchema).optional()
 }).passthrough();
@@ -2803,8 +2803,8 @@ const CPVPricingOptionSchema = z.object({
   max_bid: z.boolean().optional(),
   price_guidance: PriceGuidanceSchema.optional(),
   parameters: z.object({
-    view_threshold: z.union([z.number(), z.object({
-      duration_seconds: z.number()
+    view_threshold: z.union([z.number().gte(0).lte(1), z.object({
+      duration_seconds: z.number().int().gte(1)
     }).passthrough()])
   }).passthrough(),
   min_spend_per_package: z.number().gte(0).optional(),
@@ -2829,13 +2829,13 @@ const CPPPricingOptionSchema = z.object({
 }).passthrough();
 const DoohParametersSchema = z.object({
   type: z.literal("dooh"),
-  sov_percentage: z.number().optional(),
-  loop_duration_seconds: z.number().optional(),
-  min_plays_per_hour: z.number().optional(),
+  sov_percentage: z.number().gte(0).lte(100).optional(),
+  loop_duration_seconds: z.number().int().gte(1).optional(),
+  min_plays_per_hour: z.number().int().gte(1).optional(),
   venue_package: z.string().optional(),
-  duration_hours: z.number().optional(),
+  duration_hours: z.number().gte(0).optional(),
   daypart: z.string().optional(),
-  estimated_impressions: z.number().optional()
+  estimated_impressions: z.number().int().gte(0).optional()
 }).passthrough();
 const TimeBasedPricingOptionSchema = z.object({
   pricing_option_id: z.string(),

package/dist/lib/version.d.mts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "14.0.0-beta.23";
+export declare const LIBRARY_VERSION = "14.0.0-beta.25";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "14.0.0-beta.23";
+    readonly library: "14.0.0-beta.25";
     readonly adcp: "3.2.0-beta.9";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0-beta.1", "3.0-beta", "3.0.0-beta.3", "3.0-beta.3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.2.0-beta.9", "3.2-beta.9"];
-    readonly generatedAt: "2026-08-30T12:48:08.618Z";
+    readonly generatedAt: "2026-08-31T12:49:37.711Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "14.0.0-beta.23";
+export declare const LIBRARY_VERSION = "14.0.0-beta.25";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "14.0.0-beta.23";
+    readonly library: "14.0.0-beta.25";
     readonly adcp: "3.2.0-beta.9";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0-beta.1", "3.0-beta", "3.0.0-beta.3", "3.0-beta.3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.2.0-beta.9", "3.2-beta.9"];
-    readonly generatedAt: "2026-08-30T12:48:08.618Z";
+    readonly generatedAt: "2026-08-31T12:49:37.711Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js

@@ -31,7 +31,7 @@ __export(version_exports, {
   toReleasePrecisionVersion: () => toReleasePrecisionVersion
 });
 module.exports = __toCommonJS(version_exports);
-const LIBRARY_VERSION = "14.0.0-beta.23";
+const LIBRARY_VERSION = "14.0.0-beta.25";
 const ADCP_VERSION = "3.2.0-beta.9";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -94,10 +94,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2-beta.9"
 ];
 const VERSION_INFO = {
-  library: "14.0.0-beta.23",
+  library: "14.0.0-beta.25",
   adcp: "3.2.0-beta.9",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-08-30T12:48:08.618Z"
+  generatedAt: "2026-08-31T12:49:37.711Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/dist/lib/version.mjs

@@ -1,4 +1,4 @@
-const LIBRARY_VERSION = "14.0.0-beta.23";
+const LIBRARY_VERSION = "14.0.0-beta.25";
 const ADCP_VERSION = "3.2.0-beta.9";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -61,10 +61,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2-beta.9"
 ];
 const VERSION_INFO = {
-  library: "14.0.0-beta.23",
+  library: "14.0.0-beta.25",
   adcp: "3.2.0-beta.9",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-08-30T12:48:08.618Z"
+  generatedAt: "2026-08-31T12:49:37.711Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/docs/llms.txt

@@ -1,7 +1,7 @@
 # Ad Context Protocol (AdCP)
 
-> Generated at: 2026-08-30
-> Library: @adcp/sdk v14.0.0-beta.23
+> Generated at: 2026-08-31
+> Library: @adcp/sdk v14.0.0-beta.25
 > AdCP major version: 3
 > Canonical URL: https://adcontextprotocol.github.io/adcp-client/llms.txt
 > Note: the `Library` stamp reflects the package.json version at doc-generation time. The narrative below describes the surface that lands on the next-published minor — including any 6.7 helpers documented here ahead of the release tag.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adcp/sdk",
-  "version": "14.0.0-beta.23",
+  "version": "14.0.0-beta.25",
   "description": "AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)",
   "workspaces": [
     ".",