@adcp/sdk 14.0.0-rc.38 → 14.0.0-rc.39

package/dist/lib/registry/types.generated.d.ts

@@ -1364,7 +1364,7 @@ export interface paths {
         };
         /**
          * Get agent compliance detail
-         * @description Returns detailed compliance status for a single agent, including track-level results, storyboard counts, and timestamps.
+         * @description Returns detailed compliance status for a single agent, including track-level results, storyboard counts, timestamps, and owner-only grading comparisons. Exact badge-scope rows compare Legacy and Strict Spec grading for one role/version; Sandbox remains preview-only. Reading never contacts the agent.
          *
          *     If the agent has opted out of compliance monitoring, returns a minimal response with `status: opted_out`.
          */
@@ -1377,6 +1377,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/registry/agents/{encodedUrl}/grading-profile": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Select an exact badge grading profile
+         * @description Selects Legacy or Strict Spec grading for one exact agent role and AdCP version. Requires a current immutable assessment, organization owner/admin authorization, revision compare-and-swap, and an idempotency key. Sandbox is preview-only. The selection itself does not contact the agent.
+         */
+        put: operations["selectAgentGradingProfile"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/.well-known/jwks.json": {
         parameters: {
             query?: never;
@@ -1740,7 +1760,7 @@ export interface paths {
          *
          *     **Compliance re-run:** when the caller owns the agent or is an AAO admin and the capability probe succeeds, the full storyboard suite can run for several minutes on capability-rich agents with a fresh test session, and `agent_storyboard_status` is updated. Owner-triggered runs use `triggered_by: 'owner_test'`; admin-triggered support runs use `triggered_by: 'manual'`. Badge fan-out reissues verification badges off the new run. If the compliance call fails (timeout, OAuth wall, internal error), the capability/health portion still returns successfully — `compliance.ran` is `false` with an `error` string.
          *
-         *     **Auth:** owner of the agent, AAO admin, or static `ADMIN_API_KEY`.
+         *     **Auth:** owner of the agent, AAO admin, or static `ADMIN_API_KEY`. Human submissions are temporarily fenced with HTTP 503 until durable authorization provenance is supported; static admin API key submissions remain available.
          *
          *     **Rate limits:** 60 seconds per agent URL, 30 requests per user per hour.
          */
@@ -4131,6 +4151,20 @@ export interface components {
             adcp_version?: string | null;
             /** @enum {string} */
             status: "passing" | "degraded" | "failing" | "unknown" | "opted_out";
+            /** @description Public exact role/version status for every explicit grading selection. This is authoritative for the selected badge identity; the top-level status remains the agent-wide compliance summary. */
+            selected_grading_statuses?: {
+                role: components["schemas"]["BadgeRole"];
+                adcp_version: string;
+                /** @enum {string} */
+                grading_profile: "legacy" | "spec";
+                /** @enum {string|null} */
+                grading_status: "passing" | "partial" | "failing" | null;
+                /** @enum {string} */
+                availability: "current" | "unavailable";
+                /** @enum {string|null} */
+                badge_status: "active" | "degraded" | "revoked" | null;
+                revision: string;
+            }[];
             /** @enum {string} */
             lifecycle_stage: "development" | "testing" | "production" | "deprecated";
             compliance_opt_out?: boolean;
@@ -4210,6 +4244,8 @@ export interface components {
             verdict_source?: "heartbeat" | "owner_test" | "manual" | "webhook" | null;
             verified?: boolean;
             verified_badges?: components["schemas"]["VerificationBadge"][];
+            /** @description Owner/admin-only comparisons from one source run. Exact badge-scope rows allow Legacy or Strict Spec selection; Sandbox remains preview-only. Empty for other viewers. Reading never contacts the agent. */
+            grading_profile_comparisons?: components["schemas"]["GradingProfileComparison"][];
         };
         PublicComplianceNotice: {
             severity: string;
@@ -4229,12 +4265,196 @@ export interface components {
             verified_at: string;
             /** @description Specialisms demonstrably passed (enums/specialism.json). Preview specialisms are excluded from stable badges. */
             verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
-            /** @description Verification axes earned. 'spec' = AdCP storyboards pass for the declared specialisms. 'live' = AAO has observed real production traffic via canonical campaigns. Always non-empty when a badge is present; an absent badge is conveyed by the parent record being omitted, not by an empty array. */
+            /** @description Evidence modes earned. 'spec' = AdCP storyboards were exercised; 'live' = production traffic was observed. Independent of grading_profile and always non-empty when a badge is present. */
             verification_modes: ("spec" | "live")[];
+            /**
+             * @description Grading profile that produced the public badge. 'spec' means Strict Spec grading; this is independent of the 'spec' evidence mode.
+             * @enum {string}
+             */
+            grading_profile: "legacy" | "spec";
+            grading_profile_revision?: number;
+            /**
+             * Format: date-time
+             * @description Start of the current Strict Spec failure episode. Null when no Strict Spec failure clock is active.
+             */
+            first_failing_spec_at?: string | null;
             verified_protocol_version: string | null;
             /** @description Legacy URL — auto-upgrades to the highest active version. For version-pinned embedding, derive `/api/registry/agents/{encoded_url}/badge/{role}/{adcp_version}.svg` where `{encoded_url}` is `encodeURIComponent(agent_url)`. */
             badge_url?: string;
         };
+        GradingProfileComparison: {
+            role?: components["schemas"]["BadgeRole"];
+            adcp_version?: string;
+            /** @enum {string} */
+            availability: "current" | "stale" | "pending" | "temporarily_unavailable";
+            unavailable_reason: string | null;
+            /** @enum {string} */
+            selected_profile: "legacy" | "spec";
+            selection_enabled: boolean;
+            selection_revision?: number;
+            /** Format: date-time */
+            first_failing_spec_at?: string | null;
+            /** Format: date-time */
+            legacy_selection_allowed_until?: string | null;
+            /** Format: uuid */
+            source_run_id?: string;
+            evaluator_policy_version?: string;
+            requested_compliance_target?: string | null;
+            compliance_bundle_version: string | null;
+            /** Format: date-time */
+            assessed_at?: string | null;
+            /** Format: date-time */
+            source_tested_at?: string | null;
+            stale?: boolean;
+            incomplete?: boolean;
+            public_impact?: string;
+            profiles: {
+                legacy: {
+                    available: boolean;
+                    /** @enum {string|null} */
+                    status: "passing" | "partial" | "failing" | null;
+                    /** @enum {string|null} */
+                    observed_status: "passing" | "partial" | "failing" | null;
+                    explanation: string;
+                    /** Format: uuid */
+                    assessment_id?: string;
+                    selectable?: boolean;
+                    /** @enum {string} */
+                    public_effect?: "unchanged" | "issue" | "restore" | "regrade" | "degrade" | "revoke";
+                    /** Format: date-time */
+                    grace_deadline?: string | null;
+                };
+                spec: {
+                    available: boolean;
+                    /** @enum {string|null} */
+                    status: "passing" | "partial" | "failing" | null;
+                    /** @enum {string|null} */
+                    observed_status: "passing" | "partial" | "failing" | null;
+                    explanation: string;
+                    /** Format: uuid */
+                    assessment_id?: string;
+                    selectable?: boolean;
+                    /** @enum {string} */
+                    public_effect?: "unchanged" | "issue" | "restore" | "regrade" | "degrade" | "revoke";
+                    /** Format: date-time */
+                    grace_deadline?: string | null;
+                };
+                sandbox: {
+                    available: boolean;
+                    /** @enum {string|null} */
+                    status: "passing" | "partial" | "failing" | null;
+                    /** @enum {string|null} */
+                    observed_status: "passing" | "partial" | "failing" | null;
+                    explanation: string;
+                    /** Format: uuid */
+                    assessment_id?: string;
+                    selectable?: boolean;
+                    /** @enum {string} */
+                    public_effect?: "unchanged" | "issue" | "restore" | "regrade" | "degrade" | "revoke";
+                    /** Format: date-time */
+                    grace_deadline?: string | null;
+                };
+            } | null;
+            /** @enum {string} */
+            scope: "agent";
+            evidence?: {
+                run_complete: boolean;
+                bundle_evidence_present: boolean;
+                selected_storyboard_count: number;
+                controller_gap_phase_count: number;
+                observed_failure_count: number;
+                flat_failure_count: number;
+                unattributed_failure_count: number;
+                sandbox_unresolved_bundle_count: number;
+            };
+        } | {
+            role: components["schemas"]["BadgeRole"];
+            adcp_version: string;
+            /** @enum {string} */
+            availability: "current" | "stale" | "pending" | "temporarily_unavailable";
+            unavailable_reason: string | null;
+            /** @enum {string} */
+            selected_profile: "legacy" | "spec";
+            selection_enabled: boolean;
+            selection_revision?: number;
+            /** Format: date-time */
+            first_failing_spec_at?: string | null;
+            /** Format: date-time */
+            legacy_selection_allowed_until?: string | null;
+            /** Format: uuid */
+            source_run_id: string;
+            evaluator_policy_version: string;
+            requested_compliance_target?: string | null;
+            compliance_bundle_version: string;
+            /** Format: date-time */
+            assessed_at?: string | null;
+            /** Format: date-time */
+            source_tested_at?: string | null;
+            stale?: boolean;
+            incomplete?: boolean;
+            public_impact?: string;
+            profiles: {
+                legacy: {
+                    available: boolean;
+                    /** @enum {string|null} */
+                    status: "passing" | "partial" | "failing" | null;
+                    /** @enum {string|null} */
+                    observed_status: "passing" | "partial" | "failing" | null;
+                    explanation: string;
+                    /** Format: uuid */
+                    assessment_id?: string;
+                    selectable?: boolean;
+                    /** @enum {string} */
+                    public_effect?: "unchanged" | "issue" | "restore" | "regrade" | "degrade" | "revoke";
+                    /** Format: date-time */
+                    grace_deadline?: string | null;
+                };
+                spec: {
+                    available: boolean;
+                    /** @enum {string|null} */
+                    status: "passing" | "partial" | "failing" | null;
+                    /** @enum {string|null} */
+                    observed_status: "passing" | "partial" | "failing" | null;
+                    explanation: string;
+                    /** Format: uuid */
+                    assessment_id?: string;
+                    selectable?: boolean;
+                    /** @enum {string} */
+                    public_effect?: "unchanged" | "issue" | "restore" | "regrade" | "degrade" | "revoke";
+                    /** Format: date-time */
+                    grace_deadline?: string | null;
+                };
+                sandbox: {
+                    available: boolean;
+                    /** @enum {string|null} */
+                    status: "passing" | "partial" | "failing" | null;
+                    /** @enum {string|null} */
+                    observed_status: "passing" | "partial" | "failing" | null;
+                    explanation: string;
+                    /** Format: uuid */
+                    assessment_id?: string;
+                    selectable?: boolean;
+                    /** @enum {string} */
+                    public_effect?: "unchanged" | "issue" | "restore" | "regrade" | "degrade" | "revoke";
+                    /** Format: date-time */
+                    grace_deadline?: string | null;
+                };
+            } | null;
+            /** @enum {string} */
+            scope: "badge";
+            evidence: {
+                specialisms: string[];
+                relevant_bundle_count: number;
+                relevant_bundle_ids: string[];
+                failing_bundle_count: number;
+                incomplete_bundle_count: number;
+                relevant_failure_count: number;
+                missing_universal_bundle: boolean;
+                missing_protocol_bundle: boolean;
+                missing_specialism_bundles: string[];
+                evaluator: string;
+            };
+        };
         AgentVerification: {
             agent_url: string;
             verified: boolean;
@@ -6233,7 +6453,7 @@ export interface operations {
                     };
                 };
             };
-            /** @description Publisher crawl is temporarily busy */
+            /** @description Publisher crawl is temporarily busy, or administrator authorization could not be checked */
             503: {
                 headers: {
                     /** @description Seconds to wait before retrying */
@@ -6242,6 +6462,10 @@ export interface operations {
                 };
                 content: {
                     "application/json": {
+                        /** @enum {string} */
+                        error: "admin_authorization_unavailable";
+                        message: string;
+                    } | {
                         error: string;
                         /** @enum {string} */
                         code: "publisher_crawl_busy";
@@ -6338,6 +6562,20 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
+            /** @description Administrator authorization could not be checked */
+            503: {
+                headers: {
+                    "Retry-After": string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @enum {string} */
+                        error: "admin_authorization_unavailable";
+                        message: string;
+                    };
+                };
+            };
         };
     };
     lookupPublisherAgentAuthorization: {
@@ -6477,6 +6715,13 @@ export interface operations {
                 };
                 content: {
                     "application/json": {
+                        /**
+                         * @description Canonical supply-path evaluator semantics; pinned by the shared supply-path golden vectors.
+                         * @enum {string}
+                         */
+                        semantics_version: "1";
+                        /** @description Concrete collection chosen for the complete path, including domain-level inquiries. */
+                        resolved_collection_id?: string;
                         /** @enum {string} */
                         state: "verified_owner_sold" | "host_delegated" | "owner_attested" | "unverified";
                         legs: {
@@ -6531,6 +6776,12 @@ export interface operations {
                         agent_url: string;
                         collection_id?: string;
                         sources: {
+                            /** Format: date-time */
+                            owner_fetched_at: string | null;
+                            /** Format: date-time */
+                            host_fetched_at: string | null;
+                            owner_resolved_url: string | null;
+                            host_resolved_url: string | null;
                             owner_adagents_url: string;
                             host_adagents_url: string;
                             /** @description true: manifests came from the registry's crawl cache. Re-derive from the URLs above for enforcement. */
@@ -8466,7 +8717,7 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Crawl status is temporarily unavailable */
+            /** @description Crawl status or administrator authorization is temporarily unavailable */
             503: {
                 headers: {
                     /** @description Seconds to wait before retrying */
@@ -8475,6 +8726,10 @@ export interface operations {
                 };
                 content: {
                     "application/json": {
+                        /** @enum {string} */
+                        error: "admin_authorization_unavailable";
+                        message: string;
+                    } | {
                         error: string;
                         /** @enum {string} */
                         code: "crawl_status_unavailable";
@@ -8657,6 +8912,102 @@ export interface operations {
             };
         };
     };
+    selectAgentGradingProfile: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description URL-encoded agent URL */
+                encodedUrl: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    organization_id: string;
+                    role: components["schemas"]["BadgeRole"];
+                    adcp_version: string;
+                    /** @enum {string} */
+                    selected_profile: "legacy" | "spec";
+                    /** Format: uuid */
+                    assessment_id: string;
+                    expected_revision: number;
+                    acknowledge_public_impact?: boolean;
+                    /** Format: uuid */
+                    idempotency_key: string;
+                    admin_override_reason?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Selection committed and audited */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @enum {string} */
+                        selected_profile: "legacy" | "spec";
+                        revision: string;
+                        /** @enum {string} */
+                        public_effect: "unchanged" | "issue" | "restore" | "regrade" | "degrade" | "revoke";
+                        replayed: boolean;
+                        /** Format: uuid */
+                        source_run_id: string;
+                        /** @enum {string} */
+                        token_refresh: "completed" | "scheduled";
+                    };
+                };
+            };
+            /** @description Invalid request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Authentication required */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Organization owner/admin required */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Stale assessment/revision, disabled selection, or impact confirmation required */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+            /** @description Server error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Error"];
+                };
+            };
+        };
+    };
     getJwks: {
         parameters: {
             query?: never;
@@ -8811,6 +9162,8 @@ export interface operations {
                         agent_url: string;
                         role: components["schemas"]["BadgeRole"];
                         verified: boolean;
+                        /** @enum {string} */
+                        grading_profile: "legacy" | "spec";
                         adcp_version?: string;
                         badge_svg_url: string;
                         registry_url: string;
@@ -8938,6 +9291,8 @@ export interface operations {
                         agent_url: string;
                         role: components["schemas"]["BadgeRole"];
                         verified: boolean;
+                        /** @enum {string} */
+                        grading_profile: "legacy" | "spec";
                         adcp_version: string;
                         badge_svg_url: string;
                         registry_url: string;
@@ -9889,13 +10244,22 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Durable refresh queue unavailable or at capacity */
+            /** @description Refresh queue or authorization unavailable. All human submissions are temporarily fenced with refresh_authorization_provenance_required; only static admin API key submissions are supported. */
             503: {
                 headers: {
+                    "Retry-After": string;
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Error"];
+                    "application/json": {
+                        /** @enum {string} */
+                        error: "admin_authorization_unavailable";
+                        message: string;
+                    } | {
+                        error: string;
+                        code: string;
+                        retry_after: number;
+                    };
                 };
             };
         };
@@ -9989,13 +10353,17 @@ export interface operations {
                     };
                 };
             };
-            /** @description Refresh status temporarily unavailable */
+            /** @description Refresh status or administrator authorization temporarily unavailable */
             503: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Error"];
+                    "application/json": {
+                        /** @enum {string} */
+                        error: "admin_authorization_unavailable";
+                        message: string;
+                    } | components["schemas"]["Error"];
                 };
             };
         };

package/dist/lib/reporting/evidence.d.mts

@@ -2,3 +2,4 @@ export declare function isReportingControlTotals(value: unknown): boolean;
 export declare function isReportingCanonicalDigest(value: unknown): boolean;
 export declare function isReportingVerificationEvidence(value: unknown): boolean;
 export declare function isReportingReceiptEvidence(value: unknown): boolean;
+export declare function isReportingAdjustmentReceiptEvidence(value: unknown): boolean;

package/dist/lib/reporting/evidence.d.ts

@@ -2,3 +2,4 @@ export declare function isReportingControlTotals(value: unknown): boolean;
 export declare function isReportingCanonicalDigest(value: unknown): boolean;
 export declare function isReportingVerificationEvidence(value: unknown): boolean;
 export declare function isReportingReceiptEvidence(value: unknown): boolean;
+export declare function isReportingAdjustmentReceiptEvidence(value: unknown): boolean;

package/dist/lib/reporting/evidence.js

@@ -18,6 +18,7 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var evidence_exports = {};
 __export(evidence_exports, {
+  isReportingAdjustmentReceiptEvidence: () => isReportingAdjustmentReceiptEvidence,
   isReportingCanonicalDigest: () => isReportingCanonicalDigest,
   isReportingControlTotals: () => isReportingControlTotals,
   isReportingReceiptEvidence: () => isReportingReceiptEvidence,
@@ -101,6 +102,7 @@ function isReportingReceiptEvidence(value) {
       "observed_manifest_sha256",
       "observed_native_version_ref",
       "consumer_commit_ref",
+      "supersedes_reporting_receipt_id",
       "rejection_codes",
       "received_at"
     ]
@@ -111,9 +113,10 @@ function isReportingReceiptEvidence(value) {
     value.reporting_receipt_id,
     value.reporting_obligation_id,
     value.reporting_revision_id,
-    value.reporting_materialization_id
-  ];
-  if (!ids.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || typeof value.reporting_receipt_id !== "string" || value.reporting_receipt_id.length < 16 || !["accepted", "rejected"].includes(String(value.status)) || !["native_commit", "manifest_checksums", "canonical_digest"].includes(String(value.verification_profile)) || !Number.isSafeInteger(value.observed_row_count) || Number(value.observed_row_count) < 0 || !isReportingControlTotals(value.observed_control_totals) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at) || value.observed_canonical_content_digest !== void 0 && !isReportingCanonicalDigest(value.observed_canonical_content_digest) || value.observed_manifest_sha256 !== void 0 && (typeof value.observed_manifest_sha256 !== "string" || !SHA256_HEX.test(value.observed_manifest_sha256)) || value.observed_native_version_ref !== void 0 && (typeof value.observed_native_version_ref !== "string" || value.observed_native_version_ref.length < 1 || value.observed_native_version_ref.length > 512) || value.consumer_commit_ref !== void 0 && (typeof value.consumer_commit_ref !== "string" || value.consumer_commit_ref.length < 1 || value.consumer_commit_ref.length > 512)) {
+    value.reporting_materialization_id,
+    value.supersedes_reporting_receipt_id
+  ].filter((id) => id !== void 0);
+  if (!ids.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || typeof value.reporting_receipt_id !== "string" || value.reporting_receipt_id.length < 16 || value.supersedes_reporting_receipt_id !== void 0 && (typeof value.supersedes_reporting_receipt_id !== "string" || value.supersedes_reporting_receipt_id.length < 16) || !["accepted", "rejected"].includes(String(value.status)) || !["native_commit", "manifest_checksums", "canonical_digest"].includes(String(value.verification_profile)) || !Number.isSafeInteger(value.observed_row_count) || Number(value.observed_row_count) < 0 || !isReportingControlTotals(value.observed_control_totals) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at) || value.observed_canonical_content_digest !== void 0 && !isReportingCanonicalDigest(value.observed_canonical_content_digest) || value.observed_manifest_sha256 !== void 0 && (typeof value.observed_manifest_sha256 !== "string" || !SHA256_HEX.test(value.observed_manifest_sha256)) || value.observed_native_version_ref !== void 0 && (typeof value.observed_native_version_ref !== "string" || value.observed_native_version_ref.length < 1 || value.observed_native_version_ref.length > 512) || value.consumer_commit_ref !== void 0 && (typeof value.consumer_commit_ref !== "string" || value.consumer_commit_ref.length < 1 || value.consumer_commit_ref.length > 512)) {
     return false;
   }
   if (value.status === "rejected") {
@@ -127,8 +130,34 @@ function isReportingReceiptEvidence(value) {
   }
   return typeof value.observed_native_version_ref === "string" && value.observed_native_version_ref.length >= 1 && value.observed_native_version_ref.length <= 512;
 }
+function isReportingAdjustmentReceiptEvidence(value) {
+  if (!isRecord(value) || !hasExactKeys(
+    value,
+    [
+      "reporting_receipt_id",
+      "reporting_adjustment_id",
+      "adjusts_reporting_revision_id",
+      "status",
+      "observed_adjustment_sha256",
+      "observed_at"
+    ],
+    ["supersedes_reporting_receipt_id", "rejection_codes", "received_at"]
+  )) {
+    return false;
+  }
+  const receiptIds = [value.reporting_receipt_id, value.supersedes_reporting_receipt_id].filter(
+    (candidate) => candidate !== void 0
+  );
+  const subjectIds = [value.reporting_adjustment_id, value.adjusts_reporting_revision_id];
+  if (!receiptIds.every((id) => typeof id === "string" && id.length >= 16 && id.length <= 255 && REPORTING_ID.test(id)) || !subjectIds.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || !["accepted", "rejected"].includes(String(value.status)) || typeof value.observed_adjustment_sha256 !== "string" || !SHA256_HEX.test(value.observed_adjustment_sha256) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at)) {
+    return false;
+  }
+  if (value.status === "accepted") return value.rejection_codes === void 0;
+  return Array.isArray(value.rejection_codes) && value.rejection_codes.length > 0 && new Set(value.rejection_codes).size === value.rejection_codes.length && value.rejection_codes.every((code) => typeof code === "string" && /^[A-Z][A-Z0-9_]{0,127}$/.test(code));
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  isReportingAdjustmentReceiptEvidence,
   isReportingCanonicalDigest,
   isReportingControlTotals,
   isReportingReceiptEvidence,

package/dist/lib/reporting/evidence.mjs

@@ -75,6 +75,7 @@ function isReportingReceiptEvidence(value) {
       "observed_manifest_sha256",
       "observed_native_version_ref",
       "consumer_commit_ref",
+      "supersedes_reporting_receipt_id",
       "rejection_codes",
       "received_at"
     ]
@@ -85,9 +86,10 @@ function isReportingReceiptEvidence(value) {
     value.reporting_receipt_id,
     value.reporting_obligation_id,
     value.reporting_revision_id,
-    value.reporting_materialization_id
-  ];
-  if (!ids.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || typeof value.reporting_receipt_id !== "string" || value.reporting_receipt_id.length < 16 || !["accepted", "rejected"].includes(String(value.status)) || !["native_commit", "manifest_checksums", "canonical_digest"].includes(String(value.verification_profile)) || !Number.isSafeInteger(value.observed_row_count) || Number(value.observed_row_count) < 0 || !isReportingControlTotals(value.observed_control_totals) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at) || value.observed_canonical_content_digest !== void 0 && !isReportingCanonicalDigest(value.observed_canonical_content_digest) || value.observed_manifest_sha256 !== void 0 && (typeof value.observed_manifest_sha256 !== "string" || !SHA256_HEX.test(value.observed_manifest_sha256)) || value.observed_native_version_ref !== void 0 && (typeof value.observed_native_version_ref !== "string" || value.observed_native_version_ref.length < 1 || value.observed_native_version_ref.length > 512) || value.consumer_commit_ref !== void 0 && (typeof value.consumer_commit_ref !== "string" || value.consumer_commit_ref.length < 1 || value.consumer_commit_ref.length > 512)) {
+    value.reporting_materialization_id,
+    value.supersedes_reporting_receipt_id
+  ].filter((id) => id !== void 0);
+  if (!ids.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || typeof value.reporting_receipt_id !== "string" || value.reporting_receipt_id.length < 16 || value.supersedes_reporting_receipt_id !== void 0 && (typeof value.supersedes_reporting_receipt_id !== "string" || value.supersedes_reporting_receipt_id.length < 16) || !["accepted", "rejected"].includes(String(value.status)) || !["native_commit", "manifest_checksums", "canonical_digest"].includes(String(value.verification_profile)) || !Number.isSafeInteger(value.observed_row_count) || Number(value.observed_row_count) < 0 || !isReportingControlTotals(value.observed_control_totals) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at) || value.observed_canonical_content_digest !== void 0 && !isReportingCanonicalDigest(value.observed_canonical_content_digest) || value.observed_manifest_sha256 !== void 0 && (typeof value.observed_manifest_sha256 !== "string" || !SHA256_HEX.test(value.observed_manifest_sha256)) || value.observed_native_version_ref !== void 0 && (typeof value.observed_native_version_ref !== "string" || value.observed_native_version_ref.length < 1 || value.observed_native_version_ref.length > 512) || value.consumer_commit_ref !== void 0 && (typeof value.consumer_commit_ref !== "string" || value.consumer_commit_ref.length < 1 || value.consumer_commit_ref.length > 512)) {
     return false;
   }
   if (value.status === "rejected") {
@@ -101,7 +103,33 @@ function isReportingReceiptEvidence(value) {
   }
   return typeof value.observed_native_version_ref === "string" && value.observed_native_version_ref.length >= 1 && value.observed_native_version_ref.length <= 512;
 }
+function isReportingAdjustmentReceiptEvidence(value) {
+  if (!isRecord(value) || !hasExactKeys(
+    value,
+    [
+      "reporting_receipt_id",
+      "reporting_adjustment_id",
+      "adjusts_reporting_revision_id",
+      "status",
+      "observed_adjustment_sha256",
+      "observed_at"
+    ],
+    ["supersedes_reporting_receipt_id", "rejection_codes", "received_at"]
+  )) {
+    return false;
+  }
+  const receiptIds = [value.reporting_receipt_id, value.supersedes_reporting_receipt_id].filter(
+    (candidate) => candidate !== void 0
+  );
+  const subjectIds = [value.reporting_adjustment_id, value.adjusts_reporting_revision_id];
+  if (!receiptIds.every((id) => typeof id === "string" && id.length >= 16 && id.length <= 255 && REPORTING_ID.test(id)) || !subjectIds.every((id) => typeof id === "string" && id.length >= 1 && id.length <= 255 && REPORTING_ID.test(id)) || !["accepted", "rejected"].includes(String(value.status)) || typeof value.observed_adjustment_sha256 !== "string" || !SHA256_HEX.test(value.observed_adjustment_sha256) || !isOffsetDateTime(value.observed_at) || value.received_at !== void 0 && !isOffsetDateTime(value.received_at)) {
+    return false;
+  }
+  if (value.status === "accepted") return value.rejection_codes === void 0;
+  return Array.isArray(value.rejection_codes) && value.rejection_codes.length > 0 && new Set(value.rejection_codes).size === value.rejection_codes.length && value.rejection_codes.every((code) => typeof code === "string" && /^[A-Z][A-Z0-9_]{0,127}$/.test(code));
+}
 export {
+  isReportingAdjustmentReceiptEvidence,
   isReportingCanonicalDigest,
   isReportingControlTotals,
   isReportingReceiptEvidence,