@adcp/sdk 15.3.0 → 15.4.0

package/dist/lib/reporting/ledger/types.d.mts

@@ -198,6 +198,21 @@ export interface ReportingLedgerAdjustmentV1 {
 }
 export type ReportingLedgerRevisionSnapshotV1 = Omit<ReportingLedgerRevisionV1, 'rows'>;
 export type ReportingLedgerRevisionMetadataV1 = Omit<ReportingLedgerRevisionV1, 'rows'>;
+export type ReportingLedgerAdjustmentMetadataV1 = Omit<ReportingLedgerAdjustmentV1, 'rows'>;
+export interface ReportingRevisionRowsReadV1 {
+    reporting_revision_id: string;
+    account_id: string;
+    /** Zero-based ordinal of the first row to return. */
+    offset: number;
+    /** Maximum rows to return; at least 1. */
+    limit: number;
+    signal?: AbortSignal;
+}
+export interface ReportingRevisionRowsPageV1 {
+    rows: Record<string, unknown>[];
+    /** Total rows in the revision. */
+    total: number;
+}
 export type ReportingLedgerAdjustmentSnapshotV1 = Omit<ReportingLedgerAdjustmentV1, 'rows'>;
 export interface ReportingLedgerConsumerStatusV1 {
     consumerStatusId: string;
@@ -761,12 +776,34 @@ export interface ReportingLedgerStore {
     }>;
     /** Returns an exact row-bearing revision only when it belongs to the resolved account. */
     getRevision(reporting_revision_id: string, account_id: string): Promise<ReportingLedgerRevisionV1 | null>;
+    /**
+     * Optional row-free counterpart of `getRevision`, scoped to the resolved
+     * account. Exact-read handlers prefer it so they never load every row to
+     * serve one page.
+     */
+    getRevisionMetadata?(reporting_revision_id: string, account_id: string): Promise<ReportingLedgerRevisionMetadataV1 | null>;
+    /**
+     * Optional: one page of a revision's rows in ordinal order, only when the
+     * revision belongs to the resolved account. `total` is the revision's row
+     * count. Stores that keep rows outside the revision document verify every
+     * row they return against the committed binding before returning it.
+     */
+    readRevisionRows?(input: ReportingRevisionRowsReadV1): Promise<ReportingRevisionRowsPageV1 | null>;
     listRevisions(reporting_obligation_id: string): Promise<ReportingLedgerRevisionV1[]>;
+    /**
+     * Optional: every retained revision for one obligation without
+     * materializing rows. The producer, lifecycle reconciler and status ingest
+     * prefer it and otherwise fall back to `listRevisions` with rows dropped.
+     * When `account_id` is supplied, only that account's revisions are returned.
+     */
+    listRevisionMetadata?(reporting_obligation_id: string, account_id?: string): Promise<ReportingLedgerRevisionMetadataV1[]>;
     commitAdjustment(adjustment: ReportingLedgerAdjustmentV1, lease: ReportingLedgerLeaseV1): Promise<{
         inserted: boolean;
         value: ReportingLedgerAdjustmentV1;
     }>;
     listAdjustments(reporting_obligation_id: string): Promise<ReportingLedgerAdjustmentV1[]>;
+    /** Optional row-free counterpart of `listAdjustments`, preferred when present. */
+    listAdjustmentMetadata?(reporting_obligation_id: string): Promise<ReportingLedgerAdjustmentMetadataV1[]>;
     putConsumerStatus(status: ReportingLedgerConsumerStatusV1): Promise<{
         inserted: boolean;
         value: ReportingLedgerConsumerStatusV1;

package/dist/lib/reporting/ledger/types.d.ts

@@ -198,6 +198,21 @@ export interface ReportingLedgerAdjustmentV1 {
 }
 export type ReportingLedgerRevisionSnapshotV1 = Omit<ReportingLedgerRevisionV1, 'rows'>;
 export type ReportingLedgerRevisionMetadataV1 = Omit<ReportingLedgerRevisionV1, 'rows'>;
+export type ReportingLedgerAdjustmentMetadataV1 = Omit<ReportingLedgerAdjustmentV1, 'rows'>;
+export interface ReportingRevisionRowsReadV1 {
+    reporting_revision_id: string;
+    account_id: string;
+    /** Zero-based ordinal of the first row to return. */
+    offset: number;
+    /** Maximum rows to return; at least 1. */
+    limit: number;
+    signal?: AbortSignal;
+}
+export interface ReportingRevisionRowsPageV1 {
+    rows: Record<string, unknown>[];
+    /** Total rows in the revision. */
+    total: number;
+}
 export type ReportingLedgerAdjustmentSnapshotV1 = Omit<ReportingLedgerAdjustmentV1, 'rows'>;
 export interface ReportingLedgerConsumerStatusV1 {
     consumerStatusId: string;
@@ -761,12 +776,34 @@ export interface ReportingLedgerStore {
     }>;
     /** Returns an exact row-bearing revision only when it belongs to the resolved account. */
     getRevision(reporting_revision_id: string, account_id: string): Promise<ReportingLedgerRevisionV1 | null>;
+    /**
+     * Optional row-free counterpart of `getRevision`, scoped to the resolved
+     * account. Exact-read handlers prefer it so they never load every row to
+     * serve one page.
+     */
+    getRevisionMetadata?(reporting_revision_id: string, account_id: string): Promise<ReportingLedgerRevisionMetadataV1 | null>;
+    /**
+     * Optional: one page of a revision's rows in ordinal order, only when the
+     * revision belongs to the resolved account. `total` is the revision's row
+     * count. Stores that keep rows outside the revision document verify every
+     * row they return against the committed binding before returning it.
+     */
+    readRevisionRows?(input: ReportingRevisionRowsReadV1): Promise<ReportingRevisionRowsPageV1 | null>;
     listRevisions(reporting_obligation_id: string): Promise<ReportingLedgerRevisionV1[]>;
+    /**
+     * Optional: every retained revision for one obligation without
+     * materializing rows. The producer, lifecycle reconciler and status ingest
+     * prefer it and otherwise fall back to `listRevisions` with rows dropped.
+     * When `account_id` is supplied, only that account's revisions are returned.
+     */
+    listRevisionMetadata?(reporting_obligation_id: string, account_id?: string): Promise<ReportingLedgerRevisionMetadataV1[]>;
     commitAdjustment(adjustment: ReportingLedgerAdjustmentV1, lease: ReportingLedgerLeaseV1): Promise<{
         inserted: boolean;
         value: ReportingLedgerAdjustmentV1;
     }>;
     listAdjustments(reporting_obligation_id: string): Promise<ReportingLedgerAdjustmentV1[]>;
+    /** Optional row-free counterpart of `listAdjustments`, preferred when present. */
+    listAdjustmentMetadata?(reporting_obligation_id: string): Promise<ReportingLedgerAdjustmentMetadataV1[]>;
     putConsumerStatus(status: ReportingLedgerConsumerStatusV1): Promise<{
         inserted: boolean;
         value: ReportingLedgerConsumerStatusV1;

package/dist/lib/schemas-data/v2.5/_provenance.json

@@ -4,5 +4,5 @@
   "source_sha": "4e553ad955f83b49c7d221ab5c3ff78237ad02e3",
   "source_tarball_sha256": "580656d6466ef9f0d1119985e6726c2efea718dc671e2ad30957fcb2fd54af0f",
   "upstream_adcp_version": "2.5.3",
-  "synced_at": "2026-10-08T14:21:02.333Z"
+  "synced_at": "2026-10-08T19:53:54.089Z"
 }

package/dist/lib/signing/agent-resolver/fetch-helpers.js

@@ -118,7 +118,7 @@ function classifyDiscoveryFailure(error) {
   return { dns_error: "fetch_failed" };
 }
 function isPermanentDiscoveryFailure(detail) {
-  return detail.dns_error === "ssrf_refused" || detail.http_status !== void 0 && detail.http_status >= 400 && detail.http_status < 500;
+  return detail.dns_error === "ssrf_refused" || detail.http_status !== void 0 && detail.http_status >= 400 && detail.http_status < 500 && detail.http_status !== 408 && detail.http_status !== 429;
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/lib/signing/agent-resolver/fetch-helpers.mjs

@@ -91,7 +91,7 @@ function classifyDiscoveryFailure(error) {
   return { dns_error: "fetch_failed" };
 }
 function isPermanentDiscoveryFailure(detail) {
-  return detail.dns_error === "ssrf_refused" || detail.http_status !== void 0 && detail.http_status >= 400 && detail.http_status < 500;
+  return detail.dns_error === "ssrf_refused" || detail.http_status !== void 0 && detail.http_status >= 400 && detail.http_status < 500 && detail.http_status !== 408 && detail.http_status !== 429;
 }
 export {
   DEFAULT_CONNECT_TIMEOUT_MS,

package/dist/lib/testing/storyboard/validations.d.mts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "15.3.0";
+export declare const RUNNER_CAPABILITY_VERSION = "15.4.0";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/testing/storyboard/validations.d.ts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "15.3.0";
+export declare const RUNNER_CAPABILITY_VERSION = "15.4.0";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/version.d.mts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "15.3.0";
+export declare const LIBRARY_VERSION = "15.4.0";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "15.3.0";
+    readonly library: "15.4.0";
     readonly adcp: "3.2.3";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.2.1", "3.2", "3.2.2", "3.2.3"];
-    readonly generatedAt: "2026-10-08T13:30:50.878Z";
+    readonly generatedAt: "2026-10-08T17:53:59.048Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "15.3.0";
+export declare const LIBRARY_VERSION = "15.4.0";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "15.3.0";
+    readonly library: "15.4.0";
     readonly adcp: "3.2.3";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.2.1", "3.2", "3.2.2", "3.2.3"];
-    readonly generatedAt: "2026-10-08T13:30:50.878Z";
+    readonly generatedAt: "2026-10-08T17:53:59.048Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js

@@ -31,7 +31,7 @@ __export(version_exports, {
   toReleasePrecisionVersion: () => toReleasePrecisionVersion
 });
 module.exports = __toCommonJS(version_exports);
-const LIBRARY_VERSION = "15.3.0";
+const LIBRARY_VERSION = "15.4.0";
 const ADCP_VERSION = "3.2.3";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -97,10 +97,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.3"
 ];
 const VERSION_INFO = {
-  library: "15.3.0",
+  library: "15.4.0",
   adcp: "3.2.3",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-08T13:30:50.878Z"
+  generatedAt: "2026-10-08T17:53:59.048Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/dist/lib/version.mjs

@@ -1,4 +1,4 @@
-const LIBRARY_VERSION = "15.3.0";
+const LIBRARY_VERSION = "15.4.0";
 const ADCP_VERSION = "3.2.3";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -64,10 +64,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.3"
 ];
 const VERSION_INFO = {
-  library: "15.3.0",
+  library: "15.4.0",
   adcp: "3.2.3",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-08T13:30:50.878Z"
+  generatedAt: "2026-10-08T17:53:59.048Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/docs/TYPE-SUMMARY.md

@@ -1,7 +1,7 @@
 # AdCP Type Summary
 
 > Generated at: 2026-10-08
-> @adcp/sdk v15.3.0
+> @adcp/sdk v15.4.0
 
 Curated reference of the types that matter for using the AdCP client. For full generated types see `src/lib/types/tools.generated.ts` and `src/lib/types/core.generated.ts`.
 

package/docs/llms.txt

@@ -1,7 +1,7 @@
 # Ad Context Protocol (AdCP)
 
 > Generated at: 2026-10-08
-> Library: @adcp/sdk v15.3.0
+> Library: @adcp/sdk v15.4.0
 > AdCP major version: 3
 > Canonical URL: https://adcontextprotocol.github.io/adcp-client/llms.txt
 > Note: the `Library` stamp reflects the package.json version at doc-generation time. The narrative below describes the surface that lands on the next-published minor — including any 6.7 helpers documented here ahead of the release tag.

package/docs/migration-14.x-rc-worksheet.md

@@ -11,8 +11,8 @@ below as the publication/deployment gate.
 
 | Fact | Value |
 | --- | --- |
-| Exact npm package | `@adcp/sdk@15.3.0` |
-| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@15.3.0 dist.integrity` |
+| Exact npm package | `@adcp/sdk@15.4.0` |
+| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@15.4.0 dist.integrity` |
 | Node.js runtime | `^20.19.0 || >=22.12.0` |
 | Default AdCP wire release | `3.2.3` |
 | Maintained wire releases | `v2.5`, `v2.6`, `v3`, `3.0.0`, `3.0`, `3.0.1`, `3.0.2`, `3.0.3`, `3.0.4`, `3.0.5`, `3.0.6`, `3.0.7`, `3.0.8`, `3.0.9`, `3.0.10`, `3.0.11`, `3.0.12`, `3.0.13`, `3.0.14`, `3.0.15`, `3.0.16`, `3.0.17`, `3.0.18`, `3.0.19`, `3.0.20`, `3.0.21`, `3.0.22`, `3.0.23`, `3.0.24`, `3.0.25`, `3.1.0`, `3.1`, `3.1.1`, `3.1.2`, `3.1.3`, `3.1.4`, `3.1.5`, `3.1.6`, `3.1.7`, `3.1.8`, `3.1.9`, `3.1.10`, `3.1.11`, `3.1.12`, `3.1.13`, `3.1.14`, `3.1.15`, `3.1.16`, `3.1.17`, `3.1.18`, `3.1.19`, `3.1.20`, `3.1.21`, `3.1.22`, `3.1.23`, `3.1.24`, `3.2.1`, `3.2`, `3.2.2`, `3.2.3` |
@@ -21,8 +21,8 @@ below as the publication/deployment gate.
 Install exact production inputs rather than a moving range or dist-tag:
 
 ```bash
-npm install --save-exact '@adcp/sdk@15.3.0'
-npm view '@adcp/sdk@15.3.0' dist.integrity
+npm install --save-exact '@adcp/sdk@15.4.0'
+npm view '@adcp/sdk@15.4.0' dist.integrity
 ```
 
 ### Required and optional peers

package/docs/recipes/verifying-inbound-webhooks.md

@@ -372,6 +372,14 @@ await processWebhook(sender, payload);
 
 ## Failure Responses
 
+Use `WebhookSignatureError.retryable` when deciding whether a failed RFC 9421
+verification can be retried. Capabilities or brand.json discovery failures with
+HTTP 408, 429, or 5xx are retryable, as are DNS failures, timeouts, and connection
+resets. Other HTTP 4xx and SSRF policy refusals remain terminal; a temporary
+discovery failure still requires successful signature verification before
+processing the webhook.
+Retry transient failures with backoff.
+
 Use `401` for signature failures. Do not include resolved private IPs, raw
 signature bases, JWKS bodies, secrets, or raw payload bytes in the response.
 Log correlation IDs and typed error codes; keep detailed material in a secure

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adcp/sdk",
-  "version": "15.3.0",
+  "version": "15.4.0",
   "description": "AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)",
   "workspaces": [
     ".",