@adcp/sdk 15.6.0 → 15.7.0

package/dist/lib/version.d.mts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "15.6.0";
+export declare const LIBRARY_VERSION = "15.7.0";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "15.6.0";
+    readonly library: "15.7.0";
     readonly adcp: "3.2.3";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.2.1", "3.2", "3.2.2", "3.2.3"];
-    readonly generatedAt: "2026-10-09T11:44:03.363Z";
+    readonly generatedAt: "2026-10-09T19:01:02.354Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "15.6.0";
+export declare const LIBRARY_VERSION = "15.7.0";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "15.6.0";
+    readonly library: "15.7.0";
     readonly adcp: "3.2.3";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.2.1", "3.2", "3.2.2", "3.2.3"];
-    readonly generatedAt: "2026-10-09T11:44:03.363Z";
+    readonly generatedAt: "2026-10-09T19:01:02.354Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js

@@ -31,7 +31,7 @@ __export(version_exports, {
   toReleasePrecisionVersion: () => toReleasePrecisionVersion
 });
 module.exports = __toCommonJS(version_exports);
-const LIBRARY_VERSION = "15.6.0";
+const LIBRARY_VERSION = "15.7.0";
 const ADCP_VERSION = "3.2.3";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -97,10 +97,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.3"
 ];
 const VERSION_INFO = {
-  library: "15.6.0",
+  library: "15.7.0",
   adcp: "3.2.3",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-09T11:44:03.363Z"
+  generatedAt: "2026-10-09T19:01:02.354Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/dist/lib/version.mjs

@@ -1,4 +1,4 @@
-const LIBRARY_VERSION = "15.6.0";
+const LIBRARY_VERSION = "15.7.0";
 const ADCP_VERSION = "3.2.3";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -64,10 +64,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.3"
 ];
 const VERSION_INFO = {
-  library: "15.6.0",
+  library: "15.7.0",
   adcp: "3.2.3",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-09T11:44:03.363Z"
+  generatedAt: "2026-10-09T19:01:02.354Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/docs/TYPE-SUMMARY.md

@@ -1,7 +1,7 @@
 # AdCP Type Summary
 
 > Generated at: 2026-10-09
-> @adcp/sdk v15.6.0
+> @adcp/sdk v15.7.0
 
 Curated reference of the types that matter for using the AdCP client. For full generated types see `src/lib/types/tools.generated.ts` and `src/lib/types/core.generated.ts`.
 

package/docs/guides/REPORTING-LEDGER.md

@@ -307,6 +307,11 @@ await store.readyRowStorage();
 - Missing or corrupt rows inside the retention window make
   `get_media_buy_delivery` fail with `SERVICE_UNAVAILABLE` rather than reporting
   the revision as absent; expired rows read like an unknown revision.
+- An exact `get_media_buy_delivery` read of an unknown, unauthorized, expired or
+  compacted revision, or with a tampered `pagination.cursor`, returns the same
+  nondisclosing `REFERENCE_NOT_FOUND` with `field: "reporting_revision_id"`
+  (not transient, so buyers do not retry), so a response never reveals whether a
+  revision exists for another account.
 - Managed Delivery claims hydrate PostgreSQL-stored rows automatically.
 
 To move existing inline rows into row storage, run the resumable migration in
@@ -541,6 +546,90 @@ because the retired obligations no longer exist.
 always sweeps abandoned row uploads and expired cursor snapshots and
 checkpoints, and retires periods when retention is enabled.
 
+### Core-only setup with row storage, change feed and retention
+
+You do not need the production service (managed delivery, notifications and
+activity) to keep a ledger tidy. Build the store with the options you want and
+give `createReliableReportingService` a `maintenance` option. The production
+service does the same work automatically; the two share one implementation, so
+partial-failure reporting, the `maxFeedHoldDays` that retention honours, per-task
+limits and abort handling are identical.
+
+```ts
+import {
+  PostgresReportingLedgerStore,
+  REPORTING_LEDGER_MIGRATION,
+  REPORTING_ROW_STORAGE_MIGRATION,
+  REPORTING_LEDGER_CHANGES_MIGRATION,
+} from '@adcp/sdk/reporting/ledger';
+import { createReliableReportingService } from '@adcp/sdk/reporting/service';
+
+// Apply the three migrations, then:
+const store = new PostgresReportingLedgerStore(pool, {
+  acknowledgeIsolatedDatabase: true,
+  rowStorage, // verified chunked rows in your object store
+  changeFeed: true, // host reads and consumer cursors
+});
+await store.readyRowStorage();
+
+const reporting = createReliableReportingService({
+  store,
+  statusRetentionDays: 90, // the commitment advertised to buyers; retention uses it
+  // ...adapters, contact, resolveSource, resolveCurrency, resolveCoverage
+  maintenance: {
+    intervalMilliseconds: 300_000, // default: at most one pass per 5 minutes
+    retention: { enabled: true, recordRetentionDays: 120, limit: 100 },
+    changeFeed: { changeRetentionDays: 30, maxFeedHoldDays: 7 },
+  },
+});
+
+reporting.start({ intervalMilliseconds: 60_000, deploymentWide: true, onError });
+```
+
+`reporting.start()` runs maintenance on its first pass and then at most once per
+`maintenance.intervalMilliseconds`, after the tenant cycles, never on every
+cycle. A task that throws, or that resolves with `failed` items, goes to the
+scheduler's `onError` (or `logger.warn`) and never stops the loop; partial
+failures arrive as `ReportingMaintenancePartialFailureError`.
+
+If you run your own scheduler instead, call `reporting.runMaintenance({ signal })`.
+It returns one result per task and reports failures in the result rather than
+throwing:
+
+```ts
+for (const result of await reporting.runMaintenance()) {
+  if (result.status === 'failed') log.error(result.task, result.error);
+  else if (result.partialFailure) log.warn(result.partialFailure.message);
+}
+```
+
+Tasks, in order:
+
+| Task                  | Runs                                              | What it does                                                         |
+| --------------------- | ------------------------------------------------- | -------------------------------------------------------------------- |
+| `snapshot sweep`      | always                                            | Deletes expired cursor snapshots and checkpoints (1,000 per pass).   |
+| `row upload sweep`    | always                                            | Resolves abandoned object uploads (100 per pass); no-op without row storage. |
+| `change-feed pruning` | when `maintenance.changeFeed` is set              | `pruneChanges` with `changeRetentionDays` and `maxFeedHoldDays`.     |
+| `retention`           | when `maintenance.retention.enabled` is `true`    | `retireExpiredPeriods` with the service's `statusRetentionDays` and the feed's `maxFeedHoldDays`. |
+
+Notes:
+
+- `maintenance` requires a `PostgresReportingLedgerStore` (or a store with the
+  same `retireExpiredPeriods`, `pruneChanges` and `sweepRowWriteIntents`
+  methods) and fails at construction otherwise. `maintenance.changeFeed` also
+  requires `changeFeed: true` on the store, since pruning is otherwise a silent
+  no-op.
+- Retention takes `statusRetentionDays` from the service, so it can never retire
+  a period earlier than the retention you advertise. `recordRetentionDays` may
+  only lengthen it.
+- The snapshot sweep uses `store.sweepExpiredState()`. A custom store without
+  that method skips the task rather than failing.
+- Run it on every replica or on one: each task is bounded, resumable and safe
+  to run concurrently.
+- Enable `retention` last (see the adoption checklist in the
+  [operations guide](REPORTING-OPERATIONS.md#adopting-row-storage-retention-and-the-change-feed)).
+  Retirement cannot be undone.
+
 ### Host reads: current revisions and the change feed
 
 In-process consumers such as pacing, alerts and warehouse loaders read from the

package/docs/guides/REPORTING-OPERATIONS.md

@@ -78,6 +78,12 @@ Each of these features is opt-in and additive. Enable them one at a time on a
 running deployment. See the [ledger guide](REPORTING-LEDGER.md#row-storage)
 for configuration details.
 
+Running Core only, without the production service? Pass `maintenance` to
+`createReliableReportingService` so its scheduler (or `runMaintenance()`) does
+the retention, change-feed pruning and abandoned-upload sweeps the production
+service runs for you. See
+[Core-only setup](REPORTING-LEDGER.md#core-only-setup-with-row-storage-change-feed-and-retention).
+
 1. **Row storage.** Apply `REPORTING_ROW_STORAGE_MIGRATION` (PostgreSQL 13+),
    or pass `rowStorage` to the production service, which adds it to
    `setup.migrations`. Roll out with `rowStorage` set. New revisions store

package/docs/llms.txt

@@ -1,7 +1,7 @@
 # Ad Context Protocol (AdCP)
 
 > Generated at: 2026-10-09
-> Library: @adcp/sdk v15.6.0
+> Library: @adcp/sdk v15.7.0
 > AdCP major version: 3
 > Canonical URL: https://adcontextprotocol.github.io/adcp-client/llms.txt
 > Note: the `Library` stamp reflects the package.json version at doc-generation time. The narrative below describes the surface that lands on the next-published minor — including any 6.7 helpers documented here ahead of the release tag.

package/docs/migration-14.x-rc-worksheet.md

@@ -11,8 +11,8 @@ below as the publication/deployment gate.
 
 | Fact | Value |
 | --- | --- |
-| Exact npm package | `@adcp/sdk@15.6.0` |
-| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@15.6.0 dist.integrity` |
+| Exact npm package | `@adcp/sdk@15.7.0` |
+| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@15.7.0 dist.integrity` |
 | Node.js runtime | `^20.19.0 || >=22.12.0` |
 | Default AdCP wire release | `3.2.3` |
 | Maintained wire releases | `v2.5`, `v2.6`, `v3`, `3.0.0`, `3.0`, `3.0.1`, `3.0.2`, `3.0.3`, `3.0.4`, `3.0.5`, `3.0.6`, `3.0.7`, `3.0.8`, `3.0.9`, `3.0.10`, `3.0.11`, `3.0.12`, `3.0.13`, `3.0.14`, `3.0.15`, `3.0.16`, `3.0.17`, `3.0.18`, `3.0.19`, `3.0.20`, `3.0.21`, `3.0.22`, `3.0.23`, `3.0.24`, `3.0.25`, `3.1.0`, `3.1`, `3.1.1`, `3.1.2`, `3.1.3`, `3.1.4`, `3.1.5`, `3.1.6`, `3.1.7`, `3.1.8`, `3.1.9`, `3.1.10`, `3.1.11`, `3.1.12`, `3.1.13`, `3.1.14`, `3.1.15`, `3.1.16`, `3.1.17`, `3.1.18`, `3.1.19`, `3.1.20`, `3.1.21`, `3.1.22`, `3.1.23`, `3.1.24`, `3.2.1`, `3.2`, `3.2.2`, `3.2.3` |
@@ -21,8 +21,8 @@ below as the publication/deployment gate.
 Install exact production inputs rather than a moving range or dist-tag:
 
 ```bash
-npm install --save-exact '@adcp/sdk@15.6.0'
-npm view '@adcp/sdk@15.6.0' dist.integrity
+npm install --save-exact '@adcp/sdk@15.7.0'
+npm view '@adcp/sdk@15.7.0' dist.integrity
 ```
 
 ### Required and optional peers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adcp/sdk",
-  "version": "15.6.0",
+  "version": "15.7.0",
   "description": "AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)",
   "workspaces": [
     ".",