@adcp/sdk 14.0.0-rc.37 → 14.0.0-rc.39

package/dist/lib/reporting/content-mismatch.d.ts

@@ -0,0 +1,126 @@
+/**
+ * Buyer-side `content_mismatch` detection (AdCP 3.2.0-rc.3).
+ *
+ * `content_mismatch` says: the buyer consumed the exact revision the seller
+ * requires, and its content contradicts a fact the accepted configuration
+ * generation **already fixed**. Every code is decidable from the obligation,
+ * the pinned report definition, and the revision itself — with no reference to
+ * either party's own measurement.
+ *
+ * Two boundaries govern everything below, and both are easy to breach in the
+ * permissive direction:
+ *
+ * 1. **Never a measurement dispute.** A disagreement about *how many
+ *    impressions the seller counted* belongs to `measurement_terms` and
+ *    `makegood_policy`. Nothing here compares a delivered number against a
+ *    buyer-side expectation, and nothing here should be extended to.
+ * 2. **Never fire on evidence you do not have.** A false `content_mismatch` is
+ *    expensive: per `consumer_status_projection` it forces the caller's view to
+ *    `action_required`, and the seller MUST NOT return the period to healthy
+ *    while that statement is the current leaf. So four of the six codes are
+ *    **row-level** predicates that the obligation and revision *metadata*
+ *    cannot decide, and they stay silent unless the caller supplies what it
+ *    actually read. Silence is the safe default; a confident wrong answer is
+ *    not.
+ *
+ * Which codes need row evidence, and why the metadata alone cannot substitute:
+ *
+ * | code | spec predicate | decidable from metadata? |
+ * | --- | --- | --- |
+ * | `scope_media_buy_missing` | a frozen buy is absent from the revision **and not represented by an explicit zero row** | **No.** `reporting-revision.json` defines `media_buy_ids` as the denominator *"inherited from the obligation, including buys with zero rows"*, so comparing the two sets is a tautology against a conformant seller. |
+ * | `coverage_short` | revision covers fewer packages than the obligation's frozen `coverage.covered_package_ids` | **Yes.** |
+ * | `metric_missing` | a metric named in the pinned definition's `metrics[].name` is absent | **No.** `control_totals` are profile-defined aggregates scoped to `coverage.covered_package_ids`, a different and usually smaller set than the definition's metrics. |
+ * | `schema_nonconformant` | rows do not validate against the pinned `schema_uri`/`schema_sha256` | **No.** Requires actually validating rows. |
+ * | `currency_mismatch` | a value's unit disagrees with the unit the pinned definition fixed | **Yes.** |
+ * | `period_mismatch` | a row time dimension carries values outside the half-open period | **No.** The revision envelope is pinned stable by `slice_identity`; the violation lives in row values. |
+ */
+import type { ReportingControlTotal } from '../types';
+/** Closed set of reasons a consumed revision contradicts the accepted generation. */
+export type ReportingMismatchCodeV1 = 'scope_media_buy_missing' | 'coverage_short' | 'metric_missing' | 'schema_nonconformant' | 'currency_mismatch' | 'period_mismatch';
+/** Facts the accepted configuration generation froze, as the buyer recorded them. */
+export interface ReportingContractFactsV1 {
+    /** Frozen media-buy denominator from the obligation. */
+    mediaBuyIds?: readonly string[];
+    /** Frozen `coverage.covered_package_ids` from the obligation. */
+    coveredPackageIds?: readonly string[];
+    /** Half-open expected period. */
+    period?: {
+        start: string;
+        end: string;
+    };
+    /** `metrics[].name` from the pinned report definition. */
+    committedMetrics?: readonly string[];
+    /** Units the pinned report definition fixed, keyed by metric/control-total name. */
+    metricUnits?: Readonly<Record<string, string>>;
+}
+/** The exact revision the buyer read, as the seller published it. */
+export interface ReportingConsumedRevisionV1 {
+    reporting_revision_id?: string;
+    coverage?: {
+        status?: string;
+        covered_package_ids?: readonly string[];
+    };
+    control_totals?: readonly ReportingControlTotal[];
+}
+/**
+ * What the buyer's own reader observed in the revision's rows.
+ *
+ * Supply only what you actually determined. Every field is optional and each
+ * one gates exactly one code: omit it and that code cannot fire, which is the
+ * correct outcome for a buyer that did not look.
+ */
+export interface ReportingRowEvidenceV1 {
+    /**
+     * Media buys represented in the rows, counting a buy carried by an explicit
+     * zero row as represented — that zero row is precisely what lets the revision
+     * distinguish zero delivery from an omitted buy.
+     */
+    representedMediaBuyIds?: readonly string[];
+    /** Metric names actually present in the rows. */
+    observedMetricNames?: readonly string[];
+    /** `false` when the rows failed validation against the pinned profile schema. */
+    rowsConformToPinnedSchema?: boolean;
+    /** Range of the pinned grain's time dimension across the rows. */
+    observedPeriodBounds?: {
+        earliest: string;
+        latest: string;
+    };
+}
+export interface ReportingContentMismatchV1 {
+    mismatchCode: ReportingMismatchCodeV1;
+    /** Non-secret, bounded diagnostic naming the exact contradicted fact. */
+    detail: string;
+}
+/**
+ * First applicable contradiction between a consumed revision and the frozen
+ * contract, or `undefined` when nothing decidable is contradicted.
+ *
+ * **What `reconcileReporting` can reach, and what it cannot.** The reconciler
+ * consumes the revision's rows to recompute its binding digest, so it calls
+ * this with real row evidence — but it can only derive `observedMetricNames`,
+ * and only when the buyer pinned `committedMetrics`. That makes
+ * `coverage_short`, `currency_mismatch` and `metric_missing` reachable through
+ * the reconcile loop. The remaining three are a **documented limitation**:
+ *
+ * - `scope_media_buy_missing` needs to know which media buy a row belongs to.
+ * - `period_mismatch` needs the time dimension the pinned grain declares.
+ * - `schema_nonconformant` needs the rows validated against the pinned schema.
+ *
+ * All three depend on the reporting profile's own row shape, which is
+ * profile-defined and not readable from a generic row object. The SDK does not
+ * guess at them, because the cost of being wrong is asymmetric: a false
+ * `content_mismatch` pins the caller's view at `action_required` and the seller
+ * MUST NOT return the period to healthy while the statement is the current
+ * leaf. An adopter whose own reader *does* understand its profile can call this
+ * function directly with a fuller `ReportingRowEvidenceV1` and act on the
+ * result.
+ *
+ * **Precedence.** The spec pins exactly one ordering rule: a metric that is
+ * simply absent uses `metric_missing` even when the pinned schema declares it
+ * required, so `metric_missing` is evaluated before `schema_nonconformant`.
+ * The remaining order is this SDK's, chosen so the most structural fact wins —
+ * a revision missing a whole media buy reports that, not whichever metric
+ * happened to go missing with it — and is stable so the code does not flap
+ * between reads of the same bytes.
+ */
+export declare function detectReportingContentMismatch(facts: ReportingContractFactsV1, revision: ReportingConsumedRevisionV1, rows?: ReportingRowEvidenceV1): ReportingContentMismatchV1 | undefined;

package/dist/lib/reporting/content-mismatch.js

@@ -0,0 +1,90 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var content_mismatch_exports = {};
+__export(content_mismatch_exports, {
+  detectReportingContentMismatch: () => detectReportingContentMismatch
+});
+module.exports = __toCommonJS(content_mismatch_exports);
+function detectReportingContentMismatch(facts, revision, rows = {}) {
+  if (rows.representedMediaBuyIds) {
+    const omitted = (facts.mediaBuyIds ?? []).find((id) => !rows.representedMediaBuyIds.includes(id));
+    if (omitted !== void 0) {
+      return {
+        mismatchCode: "scope_media_buy_missing",
+        detail: `media_buy_id ${bounded(omitted)} is in the obligation denominator but has no rows and no explicit zero row`
+      };
+    }
+  }
+  const missingPackage = (facts.coveredPackageIds ?? []).find(
+    (id) => !(revision.coverage?.covered_package_ids ?? []).includes(id)
+  );
+  if (missingPackage !== void 0) {
+    return {
+      mismatchCode: "coverage_short",
+      detail: `package_id ${bounded(missingPackage)} is in the obligation's frozen coverage but absent from the revision`
+    };
+  }
+  if (facts.period && rows.observedPeriodBounds) {
+    const start = Date.parse(facts.period.start);
+    const end = Date.parse(facts.period.end);
+    const earliest = Date.parse(rows.observedPeriodBounds.earliest);
+    const latest = Date.parse(rows.observedPeriodBounds.latest);
+    if ([start, end, earliest, latest].every(Number.isFinite) && (earliest < start || latest >= end)) {
+      return {
+        mismatchCode: "period_mismatch",
+        detail: `rows carry time-dimension values from ${bounded(rows.observedPeriodBounds.earliest)} to ${bounded(rows.observedPeriodBounds.latest)}, outside the obligation's half-open period`
+      };
+    }
+  }
+  if (rows.observedMetricNames) {
+    const missingMetric = (facts.committedMetrics ?? []).find((name) => !rows.observedMetricNames.includes(name));
+    if (missingMetric !== void 0) {
+      return {
+        mismatchCode: "metric_missing",
+        detail: `metric ${bounded(missingMetric)} is promised by the pinned report definition but absent from the revision`
+      };
+    }
+  }
+  const totalsByName = new Map(
+    (revision.control_totals ?? []).map((total) => [total.name, total])
+  );
+  for (const [name, expectedUnit] of Object.entries(facts.metricUnits ?? {})) {
+    const total = totalsByName.get(name);
+    if (total && total.unit !== void 0 && total.unit !== expectedUnit) {
+      return {
+        mismatchCode: "currency_mismatch",
+        detail: `metric ${bounded(name)} reports unit ${bounded(total.unit)} where the pinned definition fixed ${bounded(expectedUnit)}`
+      };
+    }
+  }
+  if (rows.rowsConformToPinnedSchema === false) {
+    return {
+      mismatchCode: "schema_nonconformant",
+      detail: "rows do not validate against the reporting profile schema pinned by the accepted generation"
+    };
+  }
+  return void 0;
+}
+function bounded(value) {
+  return value.replace(/[\r\n\t]+/g, " ").slice(0, 64);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  detectReportingContentMismatch
+});

package/dist/lib/reporting/content-mismatch.mjs

@@ -0,0 +1,66 @@
+function detectReportingContentMismatch(facts, revision, rows = {}) {
+  if (rows.representedMediaBuyIds) {
+    const omitted = (facts.mediaBuyIds ?? []).find((id) => !rows.representedMediaBuyIds.includes(id));
+    if (omitted !== void 0) {
+      return {
+        mismatchCode: "scope_media_buy_missing",
+        detail: `media_buy_id ${bounded(omitted)} is in the obligation denominator but has no rows and no explicit zero row`
+      };
+    }
+  }
+  const missingPackage = (facts.coveredPackageIds ?? []).find(
+    (id) => !(revision.coverage?.covered_package_ids ?? []).includes(id)
+  );
+  if (missingPackage !== void 0) {
+    return {
+      mismatchCode: "coverage_short",
+      detail: `package_id ${bounded(missingPackage)} is in the obligation's frozen coverage but absent from the revision`
+    };
+  }
+  if (facts.period && rows.observedPeriodBounds) {
+    const start = Date.parse(facts.period.start);
+    const end = Date.parse(facts.period.end);
+    const earliest = Date.parse(rows.observedPeriodBounds.earliest);
+    const latest = Date.parse(rows.observedPeriodBounds.latest);
+    if ([start, end, earliest, latest].every(Number.isFinite) && (earliest < start || latest >= end)) {
+      return {
+        mismatchCode: "period_mismatch",
+        detail: `rows carry time-dimension values from ${bounded(rows.observedPeriodBounds.earliest)} to ${bounded(rows.observedPeriodBounds.latest)}, outside the obligation's half-open period`
+      };
+    }
+  }
+  if (rows.observedMetricNames) {
+    const missingMetric = (facts.committedMetrics ?? []).find((name) => !rows.observedMetricNames.includes(name));
+    if (missingMetric !== void 0) {
+      return {
+        mismatchCode: "metric_missing",
+        detail: `metric ${bounded(missingMetric)} is promised by the pinned report definition but absent from the revision`
+      };
+    }
+  }
+  const totalsByName = new Map(
+    (revision.control_totals ?? []).map((total) => [total.name, total])
+  );
+  for (const [name, expectedUnit] of Object.entries(facts.metricUnits ?? {})) {
+    const total = totalsByName.get(name);
+    if (total && total.unit !== void 0 && total.unit !== expectedUnit) {
+      return {
+        mismatchCode: "currency_mismatch",
+        detail: `metric ${bounded(name)} reports unit ${bounded(total.unit)} where the pinned definition fixed ${bounded(expectedUnit)}`
+      };
+    }
+  }
+  if (rows.rowsConformToPinnedSchema === false) {
+    return {
+      mismatchCode: "schema_nonconformant",
+      detail: "rows do not validate against the reporting profile schema pinned by the accepted generation"
+    };
+  }
+  return void 0;
+}
+function bounded(value) {
+  return value.replace(/[\r\n\t]+/g, " ").slice(0, 64);
+}
+export {
+  detectReportingContentMismatch
+};

package/dist/lib/reporting/evidence.d.mts

@@ -2,3 +2,4 @@ export declare function isReportingControlTotals(value: unknown): boolean;
 export declare function isReportingCanonicalDigest(value: unknown): boolean;
 export declare function isReportingVerificationEvidence(value: unknown): boolean;
 export declare function isReportingReceiptEvidence(value: unknown): boolean;
+export declare function isReportingAdjustmentReceiptEvidence(value: unknown): boolean;

package/dist/lib/reporting/evidence.d.ts

@@ -2,3 +2,4 @@ export declare function isReportingControlTotals(value: unknown): boolean;
 export declare function isReportingCanonicalDigest(value: unknown): boolean;
 export declare function isReportingVerificationEvidence(value: unknown): boolean;
 export declare function isReportingReceiptEvidence(value: unknown): boolean;
+export declare function isReportingAdjustmentReceiptEvidence(value: unknown): boolean;

package/dist/lib/reporting/evidence.js

@@ -18,6 +18,7 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var evidence_exports = {};
 __export(evidence_exports, {
+  isReportingAdjustmentReceiptEvidence: () => isReportingAdjustmentReceiptEvidence,
   isReportingCanonicalDigest: () => isReportingCanonicalDigest,
   isReportingControlTotals: () => isReportingControlTotals,
   isReportingReceiptEvidence: () => isReportingReceiptEvidence,
@@ -101,6 +102,7 @@ function isReportingReceiptEvidence(value) {
       "observed_manifest_sha256",
       "observed_native_version_ref",
       "consumer_commit_ref",
+      "supersedes_reporting_receipt_id",
       "rejection_codes",
       "received_at"
     ]
@@ -111,9 +113,10 @@ function isReportingReceiptEvidence(value) {
     value.reporting_receipt_id,
     value.reporting_obligation_id,
     value.reporting_revision_id,
-    value.reporting_materialization_id
-  ];
-  if (!ids.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || typeof value.reporting_receipt_id !== "string" || value.reporting_receipt_id.length < 16 || !["accepted", "rejected"].includes(String(value.status)) || !["native_commit", "manifest_checksums", "canonical_digest"].includes(String(value.verification_profile)) || !Number.isSafeInteger(value.observed_row_count) || Number(value.observed_row_count) < 0 || !isReportingControlTotals(value.observed_control_totals) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at) || value.observed_canonical_content_digest !== void 0 && !isReportingCanonicalDigest(value.observed_canonical_content_digest) || value.observed_manifest_sha256 !== void 0 && (typeof value.observed_manifest_sha256 !== "string" || !SHA256_HEX.test(value.observed_manifest_sha256)) || value.observed_native_version_ref !== void 0 && (typeof value.observed_native_version_ref !== "string" || value.observed_native_version_ref.length < 1 || value.observed_native_version_ref.length > 512) || value.consumer_commit_ref !== void 0 && (typeof value.consumer_commit_ref !== "string" || value.consumer_commit_ref.length < 1 || value.consumer_commit_ref.length > 512)) {
+    value.reporting_materialization_id,
+    value.supersedes_reporting_receipt_id
+  ].filter((id) => id !== void 0);
+  if (!ids.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || typeof value.reporting_receipt_id !== "string" || value.reporting_receipt_id.length < 16 || value.supersedes_reporting_receipt_id !== void 0 && (typeof value.supersedes_reporting_receipt_id !== "string" || value.supersedes_reporting_receipt_id.length < 16) || !["accepted", "rejected"].includes(String(value.status)) || !["native_commit", "manifest_checksums", "canonical_digest"].includes(String(value.verification_profile)) || !Number.isSafeInteger(value.observed_row_count) || Number(value.observed_row_count) < 0 || !isReportingControlTotals(value.observed_control_totals) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at) || value.observed_canonical_content_digest !== void 0 && !isReportingCanonicalDigest(value.observed_canonical_content_digest) || value.observed_manifest_sha256 !== void 0 && (typeof value.observed_manifest_sha256 !== "string" || !SHA256_HEX.test(value.observed_manifest_sha256)) || value.observed_native_version_ref !== void 0 && (typeof value.observed_native_version_ref !== "string" || value.observed_native_version_ref.length < 1 || value.observed_native_version_ref.length > 512) || value.consumer_commit_ref !== void 0 && (typeof value.consumer_commit_ref !== "string" || value.consumer_commit_ref.length < 1 || value.consumer_commit_ref.length > 512)) {
     return false;
   }
   if (value.status === "rejected") {
@@ -127,8 +130,34 @@ function isReportingReceiptEvidence(value) {
   }
   return typeof value.observed_native_version_ref === "string" && value.observed_native_version_ref.length >= 1 && value.observed_native_version_ref.length <= 512;
 }
+function isReportingAdjustmentReceiptEvidence(value) {
+  if (!isRecord(value) || !hasExactKeys(
+    value,
+    [
+      "reporting_receipt_id",
+      "reporting_adjustment_id",
+      "adjusts_reporting_revision_id",
+      "status",
+      "observed_adjustment_sha256",
+      "observed_at"
+    ],
+    ["supersedes_reporting_receipt_id", "rejection_codes", "received_at"]
+  )) {
+    return false;
+  }
+  const receiptIds = [value.reporting_receipt_id, value.supersedes_reporting_receipt_id].filter(
+    (candidate) => candidate !== void 0
+  );
+  const subjectIds = [value.reporting_adjustment_id, value.adjusts_reporting_revision_id];
+  if (!receiptIds.every((id) => typeof id === "string" && id.length >= 16 && id.length <= 255 && REPORTING_ID.test(id)) || !subjectIds.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || !["accepted", "rejected"].includes(String(value.status)) || typeof value.observed_adjustment_sha256 !== "string" || !SHA256_HEX.test(value.observed_adjustment_sha256) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at)) {
+    return false;
+  }
+  if (value.status === "accepted") return value.rejection_codes === void 0;
+  return Array.isArray(value.rejection_codes) && value.rejection_codes.length > 0 && new Set(value.rejection_codes).size === value.rejection_codes.length && value.rejection_codes.every((code) => typeof code === "string" && /^[A-Z][A-Z0-9_]{0,127}$/.test(code));
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  isReportingAdjustmentReceiptEvidence,
   isReportingCanonicalDigest,
   isReportingControlTotals,
   isReportingReceiptEvidence,

package/dist/lib/reporting/evidence.mjs

@@ -75,6 +75,7 @@ function isReportingReceiptEvidence(value) {
       "observed_manifest_sha256",
       "observed_native_version_ref",
       "consumer_commit_ref",
+      "supersedes_reporting_receipt_id",
       "rejection_codes",
       "received_at"
     ]
@@ -85,9 +86,10 @@ function isReportingReceiptEvidence(value) {
     value.reporting_receipt_id,
     value.reporting_obligation_id,
     value.reporting_revision_id,
-    value.reporting_materialization_id
-  ];
-  if (!ids.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || typeof value.reporting_receipt_id !== "string" || value.reporting_receipt_id.length < 16 || !["accepted", "rejected"].includes(String(value.status)) || !["native_commit", "manifest_checksums", "canonical_digest"].includes(String(value.verification_profile)) || !Number.isSafeInteger(value.observed_row_count) || Number(value.observed_row_count) < 0 || !isReportingControlTotals(value.observed_control_totals) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at) || value.observed_canonical_content_digest !== void 0 && !isReportingCanonicalDigest(value.observed_canonical_content_digest) || value.observed_manifest_sha256 !== void 0 && (typeof value.observed_manifest_sha256 !== "string" || !SHA256_HEX.test(value.observed_manifest_sha256)) || value.observed_native_version_ref !== void 0 && (typeof value.observed_native_version_ref !== "string" || value.observed_native_version_ref.length < 1 || value.observed_native_version_ref.length > 512) || value.consumer_commit_ref !== void 0 && (typeof value.consumer_commit_ref !== "string" || value.consumer_commit_ref.length < 1 || value.consumer_commit_ref.length > 512)) {
+    value.reporting_materialization_id,
+    value.supersedes_reporting_receipt_id
+  ].filter((id) => id !== void 0);
+  if (!ids.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || typeof value.reporting_receipt_id !== "string" || value.reporting_receipt_id.length < 16 || value.supersedes_reporting_receipt_id !== void 0 && (typeof value.supersedes_reporting_receipt_id !== "string" || value.supersedes_reporting_receipt_id.length < 16) || !["accepted", "rejected"].includes(String(value.status)) || !["native_commit", "manifest_checksums", "canonical_digest"].includes(String(value.verification_profile)) || !Number.isSafeInteger(value.observed_row_count) || Number(value.observed_row_count) < 0 || !isReportingControlTotals(value.observed_control_totals) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at) || value.observed_canonical_content_digest !== void 0 && !isReportingCanonicalDigest(value.observed_canonical_content_digest) || value.observed_manifest_sha256 !== void 0 && (typeof value.observed_manifest_sha256 !== "string" || !SHA256_HEX.test(value.observed_manifest_sha256)) || value.observed_native_version_ref !== void 0 && (typeof value.observed_native_version_ref !== "string" || value.observed_native_version_ref.length < 1 || value.observed_native_version_ref.length > 512) || value.consumer_commit_ref !== void 0 && (typeof value.consumer_commit_ref !== "string" || value.consumer_commit_ref.length < 1 || value.consumer_commit_ref.length > 512)) {
     return false;
   }
   if (value.status === "rejected") {
@@ -101,7 +103,33 @@ function isReportingReceiptEvidence(value) {
   }
   return typeof value.observed_native_version_ref === "string" && value.observed_native_version_ref.length >= 1 && value.observed_native_version_ref.length <= 512;
 }
+function isReportingAdjustmentReceiptEvidence(value) {
+  if (!isRecord(value) || !hasExactKeys(
+    value,
+    [
+      "reporting_receipt_id",
+      "reporting_adjustment_id",
+      "adjusts_reporting_revision_id",
+      "status",
+      "observed_adjustment_sha256",
+      "observed_at"
+    ],
+    ["supersedes_reporting_receipt_id", "rejection_codes", "received_at"]
+  )) {
+    return false;
+  }
+  const receiptIds = [value.reporting_receipt_id, value.supersedes_reporting_receipt_id].filter(
+    (candidate) => candidate !== void 0
+  );
+  const subjectIds = [value.reporting_adjustment_id, value.adjusts_reporting_revision_id];
+  if (!receiptIds.every((id) => typeof id === "string" && id.length >= 16 && id.length <= 255 && REPORTING_ID.test(id)) || !subjectIds.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || !["accepted", "rejected"].includes(String(value.status)) || typeof value.observed_adjustment_sha256 !== "string" || !SHA256_HEX.test(value.observed_adjustment_sha256) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at)) {
+    return false;
+  }
+  if (value.status === "accepted") return value.rejection_codes === void 0;
+  return Array.isArray(value.rejection_codes) && value.rejection_codes.length > 0 && new Set(value.rejection_codes).size === value.rejection_codes.length && value.rejection_codes.every((code) => typeof code === "string" && /^[A-Z][A-Z0-9_]{0,127}$/.test(code));
+}
 export {
+  isReportingAdjustmentReceiptEvidence,
   isReportingCanonicalDigest,
   isReportingControlTotals,
   isReportingReceiptEvidence,

package/dist/lib/reporting/index.d.mts

@@ -1,5 +1,7 @@
+export { detectReportingContentMismatch } from './content-mismatch.mjs';
+export type { ReportingConsumedRevisionV1, ReportingContentMismatchV1, ReportingContractFactsV1, ReportingMismatchCodeV1, ReportingRowEvidenceV1, } from './content-mismatch.mjs';
 export { ReportingReconciliationError, buildReportingReceipt, evaluateReportingLedger, isReportingCoverageEvidence, loadReportingLedger, reconcileReporting, } from './reconciliation.mjs';
 export { ReportingInspectionError, createHttpsReportingResourceReader, createReportingManifestInspector, } from './inspection.mjs';
-export type { ExpectedReportingPeriod, ExpectedReportingCoverage, ObligationReconciliation, ReconcileReportingOptions, ReportingCheckpoint, ReportingCheckpointKey, ReportingCheckpointStore, ReportingCanonicalDigestEvidence, ReportingCoverageEvidence, ReportingCoverageLimitation, ReportingInspectionContext, ReportingLedger, ReportingLedgerLimits, ReportingObservation, ReportingReconciliationClient, ReportingReconciliationResult, } from './reconciliation.mjs';
+export type { ExpectedReportingPeriod, ExpectedReportingCoverage, ObligationReconciliation, ReconcileReportingOptions, ReportingCheckpoint, ReportingCheckpointKey, ReportingCheckpointStore, ReportingPendingConsumerStatus, ReportingPendingConsumerStatusKey, ReportingPendingConsumerStatusStore, ReportingCanonicalDigestEvidence, ReportingCoverageEvidence, ReportingCoverageLimitation, ReportingInspectionContext, ReportingLedger, ReportingLedgerLimits, ReportingObservation, ReportingConsumerStatusPlanV1, ReportingEscalationV1, ReportingReconciliationClient, ReportingReconciliationResult, } from './reconciliation.mjs';
 export type { HttpsReportingResourceReaderOptions, ReportingCompressionDecoder, ReportingControlTotalCalculator, ReportingCredentialProvider, ReportingDecodedFileContext, ReportingFormatDecoder, ReportingHttpCredentials, ReportingInspectionErrorCode, ReportingManifestInspectorOptions, ReportingResourceReadRequest, ReportingResourceReadResult, ReportingResourceReadRole, ReportingResourceReader, } from './inspection.mjs';
 export { assertSupportedReportingAuthoritativeParty, UnsupportedReportingFeatureError } from './ledger/producer.mjs';

package/dist/lib/reporting/index.d.ts

@@ -1,5 +1,7 @@
+export { detectReportingContentMismatch } from './content-mismatch';
+export type { ReportingConsumedRevisionV1, ReportingContentMismatchV1, ReportingContractFactsV1, ReportingMismatchCodeV1, ReportingRowEvidenceV1, } from './content-mismatch';
 export { ReportingReconciliationError, buildReportingReceipt, evaluateReportingLedger, isReportingCoverageEvidence, loadReportingLedger, reconcileReporting, } from './reconciliation';
 export { ReportingInspectionError, createHttpsReportingResourceReader, createReportingManifestInspector, } from './inspection';
-export type { ExpectedReportingPeriod, ExpectedReportingCoverage, ObligationReconciliation, ReconcileReportingOptions, ReportingCheckpoint, ReportingCheckpointKey, ReportingCheckpointStore, ReportingCanonicalDigestEvidence, ReportingCoverageEvidence, ReportingCoverageLimitation, ReportingInspectionContext, ReportingLedger, ReportingLedgerLimits, ReportingObservation, ReportingReconciliationClient, ReportingReconciliationResult, } from './reconciliation';
+export type { ExpectedReportingPeriod, ExpectedReportingCoverage, ObligationReconciliation, ReconcileReportingOptions, ReportingCheckpoint, ReportingCheckpointKey, ReportingCheckpointStore, ReportingPendingConsumerStatus, ReportingPendingConsumerStatusKey, ReportingPendingConsumerStatusStore, ReportingCanonicalDigestEvidence, ReportingCoverageEvidence, ReportingCoverageLimitation, ReportingInspectionContext, ReportingLedger, ReportingLedgerLimits, ReportingObservation, ReportingConsumerStatusPlanV1, ReportingEscalationV1, ReportingReconciliationClient, ReportingReconciliationResult, } from './reconciliation';
 export type { HttpsReportingResourceReaderOptions, ReportingCompressionDecoder, ReportingControlTotalCalculator, ReportingCredentialProvider, ReportingDecodedFileContext, ReportingFormatDecoder, ReportingHttpCredentials, ReportingInspectionErrorCode, ReportingManifestInspectorOptions, ReportingResourceReadRequest, ReportingResourceReadResult, ReportingResourceReadRole, ReportingResourceReader, } from './inspection';
 export { assertSupportedReportingAuthoritativeParty, UnsupportedReportingFeatureError } from './ledger/producer';

package/dist/lib/reporting/index.js

@@ -25,12 +25,14 @@ __export(reporting_exports, {
   buildReportingReceipt: () => import_reconciliation.buildReportingReceipt,
   createHttpsReportingResourceReader: () => import_inspection.createHttpsReportingResourceReader,
   createReportingManifestInspector: () => import_inspection.createReportingManifestInspector,
+  detectReportingContentMismatch: () => import_content_mismatch.detectReportingContentMismatch,
   evaluateReportingLedger: () => import_reconciliation.evaluateReportingLedger,
   isReportingCoverageEvidence: () => import_reconciliation.isReportingCoverageEvidence,
   loadReportingLedger: () => import_reconciliation.loadReportingLedger,
   reconcileReporting: () => import_reconciliation.reconcileReporting
 });
 module.exports = __toCommonJS(reporting_exports);
+var import_content_mismatch = require('./content-mismatch.js');
 var import_reconciliation = require('./reconciliation.js');
 var import_inspection = require('./inspection.js');
 var import_producer = require('./ledger/producer.js');
@@ -43,6 +45,7 @@ var import_producer = require('./ledger/producer.js');
   buildReportingReceipt,
   createHttpsReportingResourceReader,
   createReportingManifestInspector,
+  detectReportingContentMismatch,
   evaluateReportingLedger,
   isReportingCoverageEvidence,
   loadReportingLedger,

package/dist/lib/reporting/index.mjs

@@ -1,3 +1,4 @@
+import { detectReportingContentMismatch } from "./content-mismatch.mjs";
 import {
   ReportingReconciliationError,
   buildReportingReceipt,
@@ -20,6 +21,7 @@ export {
   buildReportingReceipt,
   createHttpsReportingResourceReader,
   createReportingManifestInspector,
+  detectReportingContentMismatch,
   evaluateReportingLedger,
   isReportingCoverageEvidence,
   loadReportingLedger,

package/dist/lib/reporting/ledger/handler.d.mts

@@ -1,4 +1,6 @@
-import type { ReportingConsumerMismatchEscalationV1, ReportingLedgerCoverageV1, ReportingLedgerStore, ReportingDeliveryHandlerV1, ReportingStatusHandlerV1 } from './types.mjs';
+import type { ReportingAdjustmentReceipt, ReportingMaterialization, ReportingReceipt } from '../../types/index.mjs';
+import { projectReportingObligationHealthV1 } from './health.mjs';
+import type { ReportingConsumerMismatchEscalationV1, ReportingHealthV1, ReportingLedgerAdjustmentSnapshotV1, ReportingLedgerCoverageV1, ReportingLedgerObligationV1, ReportingLedgerRevisionSnapshotV1, ReportingLedgerStore, ReportingManagedDeliveryBindingV1, ReportingDeliveryHandlerV1, ReportingStatusHandlerV1 } from './types.mjs';
 export interface ReportingStatusConsumerScopeOptionsV1<TContext = unknown> {
     resolveConsumerId(context: TContext): string | Promise<string>;
     /**
@@ -14,6 +16,54 @@ export interface ReportingStatusConsumerScopeOptionsV1<TContext = unknown> {
 export declare function createReportingStatusHandler<TContext = unknown>(store: ReportingLedgerStore, options?: ReportingStatusConsumerScopeOptionsV1<TContext>): ReportingStatusHandlerV1;
 /** Exact revision reader for createAdcpServer's getMediaBuyDelivery slot. */
 export declare function createReportingDeliveryHandler(store: ReportingLedgerStore): ReportingDeliveryHandlerV1;
+export interface ProjectManagedDeliveryInputV1 {
+    obligation: ReportingLedgerObligationV1;
+    binding?: ReportingManagedDeliveryBindingV1;
+    revisions: ReportingLedgerRevisionSnapshotV1[];
+    adjustments: ReportingLedgerAdjustmentSnapshotV1[];
+    materializations: ReportingMaterialization[];
+    materializationHistory: ReportingMaterialization[];
+    receipts: ReportingReceipt[];
+    adjustmentReceipts: ReportingAdjustmentReceipt[];
+    base: ReturnType<typeof projectReportingObligationHealthV1>;
+    ledgerAsOf: string;
+    /**
+     * Subjects whose accepted receipt body has aged out of retention.
+     *
+     * An accepted leaf is terminal, so the acceptance keeps counting after the
+     * body is gone — otherwise letting evidence expire silently reopens a
+     * settled subject and the obligation degrades on its own.
+     */
+    tombstonedAcceptedSubjects?: ReadonlyArray<{
+        kind: 'revision' | 'adjustment';
+        subjectId: string;
+        consumerId?: string;
+    }>;
+    /**
+     * Revisions whose successful materialization row has been pruned.
+     *
+     * `deliveredEver` is read from history, and pruning removes that history,
+     * so without this a delivered revision reads as never delivered and an
+     * accepted subject is dragged back to `pending`.
+     */
+    tombstonedDeliveredRevisionIds?: readonly string[];
+}
+/** Project Managed Delivery state without positional array arguments that can be accidentally transposed. */
+export declare function projectManagedDelivery(input: ProjectManagedDeliveryInputV1): {
+    binding: ReportingManagedDeliveryBindingV1;
+    projection: import("./health.mjs").ReportingObligationHealthProjectionV1;
+    reconciliationStatus: "rejected" | "pending" | "accepted" | "not_required";
+    materializationCount: number;
+    successfulMaterializationCount: number;
+    resourceRetainedUntil: string | undefined;
+    receiptCount: number;
+    acceptedReceiptCount: number;
+    adjustmentReceiptCount: number;
+    acceptedAdjustmentReceiptCount: number;
+    pendingAdjustmentReceiptCount: number;
+} | undefined;
+/** Combines independent seller/consumer degradation without allowing one to hide the other. */
+export declare function moreSevereReportingHealthV1(left: ReportingHealthV1, right: ReportingHealthV1): ReportingHealthV1;
 export declare class ReportingReadCapacityError extends Error {
 }
 export declare function acquireAccountReadSlot(active: Map<string, number>, accountId: string, perAccountLimit?: number, globalLimit?: number): () => void;

package/dist/lib/reporting/ledger/handler.d.ts

@@ -1,4 +1,6 @@
-import type { ReportingConsumerMismatchEscalationV1, ReportingLedgerCoverageV1, ReportingLedgerStore, ReportingDeliveryHandlerV1, ReportingStatusHandlerV1 } from './types';
+import type { ReportingAdjustmentReceipt, ReportingMaterialization, ReportingReceipt } from '../../types';
+import { projectReportingObligationHealthV1 } from './health';
+import type { ReportingConsumerMismatchEscalationV1, ReportingHealthV1, ReportingLedgerAdjustmentSnapshotV1, ReportingLedgerCoverageV1, ReportingLedgerObligationV1, ReportingLedgerRevisionSnapshotV1, ReportingLedgerStore, ReportingManagedDeliveryBindingV1, ReportingDeliveryHandlerV1, ReportingStatusHandlerV1 } from './types';
 export interface ReportingStatusConsumerScopeOptionsV1<TContext = unknown> {
     resolveConsumerId(context: TContext): string | Promise<string>;
     /**
@@ -14,6 +16,54 @@ export interface ReportingStatusConsumerScopeOptionsV1<TContext = unknown> {
 export declare function createReportingStatusHandler<TContext = unknown>(store: ReportingLedgerStore, options?: ReportingStatusConsumerScopeOptionsV1<TContext>): ReportingStatusHandlerV1;
 /** Exact revision reader for createAdcpServer's getMediaBuyDelivery slot. */
 export declare function createReportingDeliveryHandler(store: ReportingLedgerStore): ReportingDeliveryHandlerV1;
+export interface ProjectManagedDeliveryInputV1 {
+    obligation: ReportingLedgerObligationV1;
+    binding?: ReportingManagedDeliveryBindingV1;
+    revisions: ReportingLedgerRevisionSnapshotV1[];
+    adjustments: ReportingLedgerAdjustmentSnapshotV1[];
+    materializations: ReportingMaterialization[];
+    materializationHistory: ReportingMaterialization[];
+    receipts: ReportingReceipt[];
+    adjustmentReceipts: ReportingAdjustmentReceipt[];
+    base: ReturnType<typeof projectReportingObligationHealthV1>;
+    ledgerAsOf: string;
+    /**
+     * Subjects whose accepted receipt body has aged out of retention.
+     *
+     * An accepted leaf is terminal, so the acceptance keeps counting after the
+     * body is gone — otherwise letting evidence expire silently reopens a
+     * settled subject and the obligation degrades on its own.
+     */
+    tombstonedAcceptedSubjects?: ReadonlyArray<{
+        kind: 'revision' | 'adjustment';
+        subjectId: string;
+        consumerId?: string;
+    }>;
+    /**
+     * Revisions whose successful materialization row has been pruned.
+     *
+     * `deliveredEver` is read from history, and pruning removes that history,
+     * so without this a delivered revision reads as never delivered and an
+     * accepted subject is dragged back to `pending`.
+     */
+    tombstonedDeliveredRevisionIds?: readonly string[];
+}
+/** Project Managed Delivery state without positional array arguments that can be accidentally transposed. */
+export declare function projectManagedDelivery(input: ProjectManagedDeliveryInputV1): {
+    binding: ReportingManagedDeliveryBindingV1;
+    projection: import("./health").ReportingObligationHealthProjectionV1;
+    reconciliationStatus: "rejected" | "pending" | "accepted" | "not_required";
+    materializationCount: number;
+    successfulMaterializationCount: number;
+    resourceRetainedUntil: string | undefined;
+    receiptCount: number;
+    acceptedReceiptCount: number;
+    adjustmentReceiptCount: number;
+    acceptedAdjustmentReceiptCount: number;
+    pendingAdjustmentReceiptCount: number;
+} | undefined;
+/** Combines independent seller/consumer degradation without allowing one to hide the other. */
+export declare function moreSevereReportingHealthV1(left: ReportingHealthV1, right: ReportingHealthV1): ReportingHealthV1;
 export declare class ReportingReadCapacityError extends Error {
 }
 export declare function acquireAccountReadSlot(active: Map<string, number>, accountId: string, perAccountLimit?: number, globalLimit?: number): () => void;