@adcp/sdk 15.9.0 → 16.0.0-beta.1

package/dist/lib/server/decisioning/runtime/from-platform.d.ts

@@ -1,53 +1,3 @@
-/**
- * Build an `AdcpServer` from a `DecisioningPlatform` impl.
- *
- * v6.0 alpha entry point. Translates the per-specialism platform interface
- * into the framework's existing handler-style config and delegates to
- * `createAdcpServer()`. This means every framework primitive — idempotency,
- * RFC 9421 signing, governance, schema validation, state store, MCP/A2A
- * wire mapping, sandbox boundary — applies unchanged. The new code is the
- * adapter shim, not a forked runtime.
- *
- * **Adopter shape (unified hybrid):** each HITL-eligible tool is a single
- * method. The method returns the wire success arm (sync fast path) OR
- * `ctx.handoffToTask(fn)` to promote the call to a background task (HITL
- * slow path). Adopters branch per-call; framework detects the `TaskHandoff`
- * marker and dispatches accordingly:
- *
- *   - Sync path: framework awaits the return value in foreground; projects
- *     it to the wire success arm. `throw new AdcpError(...)` projects to
- *     the wire `adcp_error` envelope.
- *   - HITL path: framework detects the `TaskHandoff` marker, allocates
- *     `taskId`, returns the submitted envelope to the buyer immediately,
- *     then runs the handoff function in background. The function's return
- *     value becomes the task's terminal `result`; `taskCtx.reject(...)`
- *     becomes a business `rejected` result, and thrown `AdcpError` becomes
- *     the terminal `error`.
- *
- * Generic thrown errors (`Error`, `TypeError`) fall through to the
- * framework's `SERVICE_UNAVAILABLE` mapping.
- *
- * **Wired surface (6.0):** `SalesPlatform` (14 tools — 3 required core +
- * 11 optional; unified hybrid on `create_media_buy` / `sync_creatives`),
- * `CreativeBuilderPlatform` (build_creative / sync_creatives unified
- * hybrid, optional preview_creative sync-only, optional refineCreative),
- * `AudiencePlatform.syncAudiences`, `SignalsPlatform` (get_signals /
- * activate_signal), `AccountStore` (reportUsage, getAccountFinancials),
- * `ContentStandardsPlatform`, `CampaignGovernancePlatform`,
- * `TenantRegistry` (multi-tenant health), `createPostgresTaskRegistry`,
- * `tasks/get` wire handler, per-server + module-level `publishStatusChange`.
- *
- * **Still deferred (rc.1+):** MCP Resources subscription projection for
- * `publishStatusChange`. The no-account tool surface (`preview_creative`,
- * `list_creative_formats`, `provide_performance_feedback`) is now typed
- * via `NoAccountCtx<TCtxMeta>` — handlers receive `ctx.account: Account |
- * undefined` and must narrow before reading `ctx_metadata`.
- *
- * Status: Preview / 6.0. Exported from the canonical `@adcp/sdk/server`
- * entry point; the decisioning implementation remains preview until GA.
- *
- * @public
- */
 import type { AdcpServer } from '../../adcp-server';
 import { type AdcpServerConfig, type HandlerContext } from '../../create-adcp-server';
 import type { DecisioningPlatform, RequiredPlatformsFor, RequiredCapabilitiesFor } from '../platform';

package/dist/lib/server/decisioning/runtime/from-platform.js

@@ -26,6 +26,8 @@ __export(from_platform_exports, {
   getHydratedLegacyFormatIds: () => getHydratedLegacyFormatIds
 });
 module.exports = __toCommonJS(from_platform_exports);
+var import_schema_loader = require('../../../validation/schema-loader.js');
+var import_account_sync_contract = require('../../account-sync-contract.js');
 var import_account_provisioning = require('../../account-provisioning.js');
 var import_account_reference_warnings = require('../../account-reference-warnings.js');
 var import_node_crypto = require("node:crypto");
@@ -1351,6 +1353,11 @@ function warnIfTruncatedMultiIdResponse(toolName, idFieldName, requestedIds, res
   );
 }
 function createAdcpServerFromPlatform(platform, opts) {
+  if (Boolean(opts.identity33) !== (0, import_schema_loader.isIdentity33SchemaScope)())
+    return (0, import_schema_loader.withIdentity33SchemaScope)(() => {
+      const instance = createAdcpServerFromPlatform(platform, opts);
+      return opts.identity33 ? (0, import_schema_loader.bindIdentity33SchemaScope)(instance) : instance;
+    }, Boolean(opts.identity33));
   const runtimeLegacyOptions = opts;
   const legacyHandlers = {
     mediaBuy: opts.legacyHandlers?.mediaBuy ?? runtimeLegacyOptions.mediaBuy,
@@ -1702,7 +1709,10 @@ function createAdcpServerFromPlatform(platform, opts) {
         const account = assertResolvedAccountMatchesRef(
           platform.accounts.resolution,
           ref,
-          await platform.accounts.resolve(ref, toResolveCtx(ctx, ctx.toolName, ctx.input)),
+          await platform.accounts.resolve(
+            ref,
+            toResolveCtx(ctx, ctx.toolName, ctx.toolName === "sync_accounts" ? structuredClone(ctx.input) : ctx.input)
+          ),
           fwLogger,
           implicitIdentityPolicy
         );
@@ -1753,7 +1763,10 @@ function createAdcpServerFromPlatform(platform, opts) {
       let resolvedAccountId;
       const compactAccountRequired = import_create_adcp_server.COMPACT_MEDIA_BUY_MUTATION_TOOLS.has(ctx.toolName) && authenticatedPrincipalFor(ctx) !== void 0;
       try {
-        const account = await platform.accounts.resolve(void 0, toResolveCtx(ctx, ctx.toolName, ctx.input));
+        const account = await platform.accounts.resolve(
+          void 0,
+          toResolveCtx(ctx, ctx.toolName, ctx.toolName === "sync_accounts" ? structuredClone(ctx.input) : ctx.input)
+        );
         resolved = account != null;
         resolvedAccountId = account?.id;
         if (account == null && compactAccountRequired) {
@@ -3147,6 +3160,7 @@ async function emitTaskWebhook(opts, source) {
   try {
     const result = await opts.emitWebhook({
       url: opts.pushNotificationUrl,
+      ...opts.pushNotificationSigningProfile && { signingProfile: opts.pushNotificationSigningProfile },
       payload: wirePayload,
       delivery_id: resolveWebhookDeliveryId(opts, taskId)
     });
@@ -3465,6 +3479,11 @@ function extractPushConfig(params, _logger, opts = {}) {
     });
   }
   const cfgObj = cfg;
+  if (cfgObj.signing_profile !== void 0 && !["adcp/webhook-signing/v1", "web-bot-auth"].includes(cfgObj.signing_profile))
+    throw new import_async_outcome.AdcpError("INVALID_REQUEST", {
+      message: "Unsupported webhook signing profile",
+      field: "push_notification_config.signing_profile"
+    });
   const rawUrl = cfgObj.url;
   const rawToken = cfgObj.token;
   const rawOperationId = cfgObj.operation_id;
@@ -3517,6 +3536,9 @@ function extractPushConfig(params, _logger, opts = {}) {
     operationId = rawOperationId;
   }
   return {
+    ...cfgObj.signing_profile !== void 0 && {
+      signingProfile: cfgObj.signing_profile
+    },
     ...url !== void 0 && { url },
     ...token !== void 0 && { token },
     ...operationId !== void 0 && { operationId }
@@ -3657,6 +3679,7 @@ function buildProposalNegotiationHandlers(platform, taskRegistry, taskWebhookEmi
               accountId: reqCtx.account.id,
               ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
               pushNotificationUrl: push.url,
+              pushNotificationSigningProfile: push.signingProfile,
               pushNotificationToken: push.token,
               pushNotificationOperationId: push.operationId,
               servedAdcpVersion: ctx.servedAdcpVersion,
@@ -3720,6 +3743,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
             accountId,
             ownerScope: taskOwnerScopeFor(ctx, accountId),
             pushNotificationUrl: push.url,
+            pushNotificationSigningProfile: push.signingProfile,
             pushNotificationToken: push.token,
             pushNotificationOperationId: push.operationId,
             servedAdcpVersion: ctx.servedAdcpVersion,
@@ -3812,6 +3836,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -3914,6 +3939,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId,
                 ownerScope: taskOwnerScopeFor(ctx, accountId),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4018,6 +4044,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4121,6 +4148,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4171,6 +4199,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4478,6 +4507,7 @@ function buildCreativeHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4673,6 +4703,7 @@ function buildSignalsHandlers(platform, taskRegistry, taskWebhookEmit, observabi
               accountId,
               ownerScope: taskOwnerScopeFor(ctx, accountId),
               pushNotificationUrl: push.url,
+              pushNotificationSigningProfile: push.signingProfile,
               pushNotificationToken: push.token,
               pushNotificationOperationId: push.operationId,
               servedAdcpVersion: ctx.servedAdcpVersion,
@@ -5417,29 +5448,48 @@ function buildAccountHandlers(platform, ctxFor, logger = DEFAULT_FRAMEWORK_LOGGE
   const handlers = {};
   if (accounts.upsert) {
     handlers.syncAccounts = async (params, ctx) => {
+      const dryRun = params.dry_run === true;
+      const originalCount = (params.accounts ?? []).length;
       const resolveCtx = toResolveCtx(ctx, "sync_accounts", params);
       const policy = enforceSyncAccountsCommercialPolicy(platform, params, resolveCtx);
+      const requested = structuredClone(policy.acceptedEntries);
+      const indices = (params.accounts ?? []).map((_, index) => index).filter((index) => !policy.failedRows.has(index));
       if ((0, import_account.normalizeAccountResolution)(accounts.resolution) === "derived") {
-        await assertDerivedSyncAccountEntriesReachable(accounts, policy.acceptedEntries, resolveCtx, logger);
+        await assertDerivedSyncAccountEntriesReachable(
+          accounts,
+          requested,
+          toResolveCtx(ctx, "sync_accounts", structuredClone(policy.acceptedParams)),
+          logger
+        );
       }
       const dispatchCtx = policy.failedRows.size === 0 ? resolveCtx : toResolveCtx(ctx, "sync_accounts", policy.acceptedParams);
       return projectSync(
-        () => policy.acceptedEntries.length > 0 ? accounts.upsert(policy.acceptedEntries, dispatchCtx) : Promise.resolve([]),
-        (rows) => {
-          if (rows.length !== policy.acceptedEntries.length) {
+        async () => {
+          const existing = await (0, import_account_sync_contract.existingSyncAccounts)(accounts, requested, dispatchCtx, logger);
+          const writeParams = structuredClone(policy.acceptedParams);
+          const entries = writeParams.accounts;
+          const rows = entries.length > 0 ? await accounts.upsert(entries, {
+            ...toResolveCtx(ctx, "sync_accounts", writeParams),
+            existing: existing.map(
+              (account) => account ? { ...account, billing: account.billing && { ...account.billing } } : null
+            )
+          }) : [];
+          if (rows.length !== requested.length) {
             throw new Error(
-              `sync_accounts accounts.upsert returned ${rows.length} ${rows.length === 1 ? "row" : "rows"} for ${policy.acceptedEntries.length} accepted account ${policy.acceptedEntries.length === 1 ? "entry" : "entries"}`
+              `sync_accounts accounts.upsert returned ${rows.length} ${rows.length === 1 ? "row" : "rows"} for ${requested.length} accepted account ${requested.length === 1 ? "entry" : "entries"}`
             );
           }
+          return (0, import_account_sync_contract.checkSyncAccountRows)(accounts, requested, existing, rows, indices, dispatchCtx, logger);
+        },
+        (rows) => {
           if (policy.failedRows.size === 0) {
             return {
-              ...params.dry_run === true && { dry_run: true },
+              ...dryRun && { dry_run: true },
               accounts: rows.map(import_account.toWireSyncAccountRow)
             };
           }
           const combined = [];
           let acceptedIndex = 0;
-          const originalCount = (params.accounts ?? []).length;
           for (let index = 0; index < originalCount; index += 1) {
             const failed = policy.failedRows.get(index);
             if (failed !== void 0) {
@@ -5450,7 +5500,7 @@ function buildAccountHandlers(platform, ctxFor, logger = DEFAULT_FRAMEWORK_LOGGE
             }
           }
           return {
-            ...params.dry_run === true && { dry_run: true },
+            ...dryRun && { dry_run: true },
             accounts: combined.map(import_account.toWireSyncAccountRow)
           };
         }
@@ -5476,7 +5526,7 @@ function buildAccountHandlers(platform, ctxFor, logger = DEFAULT_FRAMEWORK_LOGGE
           const page = await accounts.list(filter, resolveCtx);
           const response = {
             status: "completed",
-            accounts: page.items.map(import_account.toWireAccount),
+            accounts: await (0, import_account_sync_contract.projectAccountList)(accounts, page.items, resolveCtx, logger),
             pagination: {
               has_more: page.nextCursor != null,
               ...page.nextCursor != null && { cursor: page.nextCursor },

package/dist/lib/server/decisioning/runtime/from-platform.mjs

@@ -1,3 +1,9 @@
+import {
+  isIdentity33SchemaScope,
+  withIdentity33SchemaScope,
+  bindIdentity33SchemaScope
+} from "../../../validation/schema-loader.mjs";
+import { existingSyncAccounts, checkSyncAccountRows, projectAccountList } from "../../account-sync-contract.mjs";
 import { isAccountProvisioningTask } from "../../account-provisioning.mjs";
 import { warnAccountReferenceDeprecation } from "../../account-reference-warnings.mjs";
 import { randomUUID } from "node:crypto";
@@ -13,7 +19,6 @@ import {
   normalizeAccountResolution,
   refAccountId,
   refHasNaturalKey,
-  toWireAccount,
   toWireSyncAccountRow,
   toWireSyncGovernanceRow
 } from "../account.mjs";
@@ -1380,6 +1385,11 @@ function warnIfTruncatedMultiIdResponse(toolName, idFieldName, requestedIds, res
   );
 }
 function createAdcpServerFromPlatform(platform, opts) {
+  if (Boolean(opts.identity33) !== isIdentity33SchemaScope())
+    return withIdentity33SchemaScope(() => {
+      const instance = createAdcpServerFromPlatform(platform, opts);
+      return opts.identity33 ? bindIdentity33SchemaScope(instance) : instance;
+    }, Boolean(opts.identity33));
   const runtimeLegacyOptions = opts;
   const legacyHandlers = {
     mediaBuy: opts.legacyHandlers?.mediaBuy ?? runtimeLegacyOptions.mediaBuy,
@@ -1731,7 +1741,10 @@ function createAdcpServerFromPlatform(platform, opts) {
         const account = assertResolvedAccountMatchesRef(
           platform.accounts.resolution,
           ref,
-          await platform.accounts.resolve(ref, toResolveCtx(ctx, ctx.toolName, ctx.input)),
+          await platform.accounts.resolve(
+            ref,
+            toResolveCtx(ctx, ctx.toolName, ctx.toolName === "sync_accounts" ? structuredClone(ctx.input) : ctx.input)
+          ),
           fwLogger,
           implicitIdentityPolicy
         );
@@ -1782,7 +1795,10 @@ function createAdcpServerFromPlatform(platform, opts) {
       let resolvedAccountId;
       const compactAccountRequired = COMPACT_MEDIA_BUY_MUTATION_TOOLS.has(ctx.toolName) && authenticatedPrincipalFor(ctx) !== void 0;
       try {
-        const account = await platform.accounts.resolve(void 0, toResolveCtx(ctx, ctx.toolName, ctx.input));
+        const account = await platform.accounts.resolve(
+          void 0,
+          toResolveCtx(ctx, ctx.toolName, ctx.toolName === "sync_accounts" ? structuredClone(ctx.input) : ctx.input)
+        );
         resolved = account != null;
         resolvedAccountId = account?.id;
         if (account == null && compactAccountRequired) {
@@ -3176,6 +3192,7 @@ async function emitTaskWebhook(opts, source) {
   try {
     const result = await opts.emitWebhook({
       url: opts.pushNotificationUrl,
+      ...opts.pushNotificationSigningProfile && { signingProfile: opts.pushNotificationSigningProfile },
       payload: wirePayload,
       delivery_id: resolveWebhookDeliveryId(opts, taskId)
     });
@@ -3494,6 +3511,11 @@ function extractPushConfig(params, _logger, opts = {}) {
     });
   }
   const cfgObj = cfg;
+  if (cfgObj.signing_profile !== void 0 && !["adcp/webhook-signing/v1", "web-bot-auth"].includes(cfgObj.signing_profile))
+    throw new AdcpError("INVALID_REQUEST", {
+      message: "Unsupported webhook signing profile",
+      field: "push_notification_config.signing_profile"
+    });
   const rawUrl = cfgObj.url;
   const rawToken = cfgObj.token;
   const rawOperationId = cfgObj.operation_id;
@@ -3546,6 +3568,9 @@ function extractPushConfig(params, _logger, opts = {}) {
     operationId = rawOperationId;
   }
   return {
+    ...cfgObj.signing_profile !== void 0 && {
+      signingProfile: cfgObj.signing_profile
+    },
     ...url !== void 0 && { url },
     ...token !== void 0 && { token },
     ...operationId !== void 0 && { operationId }
@@ -3686,6 +3711,7 @@ function buildProposalNegotiationHandlers(platform, taskRegistry, taskWebhookEmi
               accountId: reqCtx.account.id,
               ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
               pushNotificationUrl: push.url,
+              pushNotificationSigningProfile: push.signingProfile,
               pushNotificationToken: push.token,
               pushNotificationOperationId: push.operationId,
               servedAdcpVersion: ctx.servedAdcpVersion,
@@ -3749,6 +3775,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
             accountId,
             ownerScope: taskOwnerScopeFor(ctx, accountId),
             pushNotificationUrl: push.url,
+            pushNotificationSigningProfile: push.signingProfile,
             pushNotificationToken: push.token,
             pushNotificationOperationId: push.operationId,
             servedAdcpVersion: ctx.servedAdcpVersion,
@@ -3841,6 +3868,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -3943,6 +3971,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId,
                 ownerScope: taskOwnerScopeFor(ctx, accountId),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4047,6 +4076,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4150,6 +4180,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4200,6 +4231,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4507,6 +4539,7 @@ function buildCreativeHandlers(platform, taskRegistry, taskWebhookEmit, observab
                 accountId: reqCtx.account.id,
                 ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
                 pushNotificationUrl: push.url,
+                pushNotificationSigningProfile: push.signingProfile,
                 pushNotificationToken: push.token,
                 pushNotificationOperationId: push.operationId,
                 servedAdcpVersion: ctx.servedAdcpVersion,
@@ -4702,6 +4735,7 @@ function buildSignalsHandlers(platform, taskRegistry, taskWebhookEmit, observabi
               accountId,
               ownerScope: taskOwnerScopeFor(ctx, accountId),
               pushNotificationUrl: push.url,
+              pushNotificationSigningProfile: push.signingProfile,
               pushNotificationToken: push.token,
               pushNotificationOperationId: push.operationId,
               servedAdcpVersion: ctx.servedAdcpVersion,
@@ -5446,29 +5480,48 @@ function buildAccountHandlers(platform, ctxFor, logger = DEFAULT_FRAMEWORK_LOGGE
   const handlers = {};
   if (accounts.upsert) {
     handlers.syncAccounts = async (params, ctx) => {
+      const dryRun = params.dry_run === true;
+      const originalCount = (params.accounts ?? []).length;
       const resolveCtx = toResolveCtx(ctx, "sync_accounts", params);
       const policy = enforceSyncAccountsCommercialPolicy(platform, params, resolveCtx);
+      const requested = structuredClone(policy.acceptedEntries);
+      const indices = (params.accounts ?? []).map((_, index) => index).filter((index) => !policy.failedRows.has(index));
       if (normalizeAccountResolution(accounts.resolution) === "derived") {
-        await assertDerivedSyncAccountEntriesReachable(accounts, policy.acceptedEntries, resolveCtx, logger);
+        await assertDerivedSyncAccountEntriesReachable(
+          accounts,
+          requested,
+          toResolveCtx(ctx, "sync_accounts", structuredClone(policy.acceptedParams)),
+          logger
+        );
       }
       const dispatchCtx = policy.failedRows.size === 0 ? resolveCtx : toResolveCtx(ctx, "sync_accounts", policy.acceptedParams);
       return projectSync(
-        () => policy.acceptedEntries.length > 0 ? accounts.upsert(policy.acceptedEntries, dispatchCtx) : Promise.resolve([]),
-        (rows) => {
-          if (rows.length !== policy.acceptedEntries.length) {
+        async () => {
+          const existing = await existingSyncAccounts(accounts, requested, dispatchCtx, logger);
+          const writeParams = structuredClone(policy.acceptedParams);
+          const entries = writeParams.accounts;
+          const rows = entries.length > 0 ? await accounts.upsert(entries, {
+            ...toResolveCtx(ctx, "sync_accounts", writeParams),
+            existing: existing.map(
+              (account) => account ? { ...account, billing: account.billing && { ...account.billing } } : null
+            )
+          }) : [];
+          if (rows.length !== requested.length) {
             throw new Error(
-              `sync_accounts accounts.upsert returned ${rows.length} ${rows.length === 1 ? "row" : "rows"} for ${policy.acceptedEntries.length} accepted account ${policy.acceptedEntries.length === 1 ? "entry" : "entries"}`
+              `sync_accounts accounts.upsert returned ${rows.length} ${rows.length === 1 ? "row" : "rows"} for ${requested.length} accepted account ${requested.length === 1 ? "entry" : "entries"}`
             );
           }
+          return checkSyncAccountRows(accounts, requested, existing, rows, indices, dispatchCtx, logger);
+        },
+        (rows) => {
           if (policy.failedRows.size === 0) {
             return {
-              ...params.dry_run === true && { dry_run: true },
+              ...dryRun && { dry_run: true },
               accounts: rows.map(toWireSyncAccountRow)
             };
           }
           const combined = [];
           let acceptedIndex = 0;
-          const originalCount = (params.accounts ?? []).length;
           for (let index = 0; index < originalCount; index += 1) {
             const failed = policy.failedRows.get(index);
             if (failed !== void 0) {
@@ -5479,7 +5532,7 @@ function buildAccountHandlers(platform, ctxFor, logger = DEFAULT_FRAMEWORK_LOGGE
             }
           }
           return {
-            ...params.dry_run === true && { dry_run: true },
+            ...dryRun && { dry_run: true },
             accounts: combined.map(toWireSyncAccountRow)
           };
         }
@@ -5505,7 +5558,7 @@ function buildAccountHandlers(platform, ctxFor, logger = DEFAULT_FRAMEWORK_LOGGE
           const page = await accounts.list(filter, resolveCtx);
           const response = {
             status: "completed",
-            accounts: page.items.map(toWireAccount),
+            accounts: await projectAccountList(accounts, page.items, resolveCtx, logger),
             pagination: {
               has_more: page.nextCursor != null,
               ...page.nextCursor != null && { cursor: page.nextCursor },

package/dist/lib/server/index.d.mts

@@ -99,6 +99,8 @@ export type { TranslationMap, UpstreamAuth, AuthContext, UpstreamCallOptions, Up
 export { InMemoryImplicitAccountStore, defaultImplicitKeyFn, type ImplicitAccountStoreOptions, } from '../adapters/implicit-account-store.mjs';
 export { createOAuthPassthroughResolver, type OAuthPassthroughResolverOptions, } from '../adapters/oauth-passthrough-resolver.mjs';
 export { createRosterAccountStore, type RosterAccountStoreOptions } from '../adapters/roster-account-store.mjs';
+export { createKeyedAccountStore, type KeyedAccountStoreOptions } from '../adapters/keyed-account-store.mjs';
+export { memoryKeyedAccountBackend, pgKeyedAccountBackend, redisKeyedAccountBackend, getKeyedAccountMigration, type KeyedAccountBackend, type KeyedAccountRecord, type KeyedAccountSnapshot, type PgKeyedAccountBackendOptions, type KeyedAccountRedisClient, } from '../adapters/keyed-account-backend.mjs';
 export { createDerivedAccountStore, type DerivedAccountStoreOptions, type DerivedAccountStoreBaseOptions, type DerivedSingletonAccountStoreOptions, type DerivedRosterAccountStoreOptions, } from '../adapters/derived-account-store.mjs';
 export { ConformanceClient, WebSocketTransport, type ConformanceClientOptions, type ConformanceStatus, } from './socket-mode/index.mjs';
 export { mediaBuyActionResolver } from './media-buy-action-resolver.mjs';

package/dist/lib/server/index.d.ts

@@ -99,6 +99,8 @@ export type { TranslationMap, UpstreamAuth, AuthContext, UpstreamCallOptions, Up
 export { InMemoryImplicitAccountStore, defaultImplicitKeyFn, type ImplicitAccountStoreOptions, } from '../adapters/implicit-account-store';
 export { createOAuthPassthroughResolver, type OAuthPassthroughResolverOptions, } from '../adapters/oauth-passthrough-resolver';
 export { createRosterAccountStore, type RosterAccountStoreOptions } from '../adapters/roster-account-store';
+export { createKeyedAccountStore, type KeyedAccountStoreOptions } from '../adapters/keyed-account-store';
+export { memoryKeyedAccountBackend, pgKeyedAccountBackend, redisKeyedAccountBackend, getKeyedAccountMigration, type KeyedAccountBackend, type KeyedAccountRecord, type KeyedAccountSnapshot, type PgKeyedAccountBackendOptions, type KeyedAccountRedisClient, } from '../adapters/keyed-account-backend';
 export { createDerivedAccountStore, type DerivedAccountStoreOptions, type DerivedAccountStoreBaseOptions, type DerivedSingletonAccountStoreOptions, type DerivedRosterAccountStoreOptions, } from '../adapters/derived-account-store';
 export { ConformanceClient, WebSocketTransport, type ConformanceClientOptions, type ConformanceStatus, } from './socket-mode';
 export { mediaBuyActionResolver } from './media-buy-action-resolver';

package/dist/lib/server/index.js

@@ -116,6 +116,7 @@ __export(server_exports, {
   createGovernanceAgentJwksResolver: () => import_governance2.createGovernanceAgentJwksResolver,
   createGovernanceEnforcementMiddleware: () => import_governance2.createGovernanceEnforcementMiddleware,
   createIdempotencyStore: () => import_idempotency.createIdempotencyStore,
+  createKeyedAccountStore: () => import_keyed_account_store.createKeyedAccountStore,
   createLazyBackend: () => import_idempotency.createLazyBackend,
   createMediaBuyStore: () => import_media_buy_store.createMediaBuyStore,
   createOAuthPassthroughResolver: () => import_oauth_passthrough_resolver.createOAuthPassthroughResolver,
@@ -154,6 +155,7 @@ __export(server_exports, {
   getAdcpStateMigration: () => import_postgres_state_store.getAdcpStateMigration,
   getCtxMetadataMigration: () => import_ctx_metadata.getCtxMetadataMigration,
   getIdempotencyMigration: () => import_idempotency.getIdempotencyMigration,
+  getKeyedAccountMigration: () => import_keyed_account_backend.getKeyedAccountMigration,
   getMcpTasksMigration: () => import_postgres_task_store.getMcpTasksMigration,
   getNotificationSubscriptionMigration: () => import_notification_subscriptions.getNotificationSubscriptionMigration,
   getServeRequestContext: () => import_auth.getServeRequestContext,
@@ -217,6 +219,7 @@ __export(server_exports, {
   mediaBuyActionResolver: () => import_media_buy_action_resolver.mediaBuyActionResolver,
   memoryBackend: () => import_idempotency.memoryBackend,
   memoryCtxMetadataStore: () => import_ctx_metadata.memoryCtxMetadataStore,
+  memoryKeyedAccountBackend: () => import_keyed_account_backend.memoryKeyedAccountBackend,
   memoryNotificationSubscriptionStore: () => import_notification_subscriptions.memoryNotificationSubscriptionStore,
   memoryWebhookDeliveryRecoveryBackend: () => import_webhook_delivery.memoryWebhookDeliveryRecoveryBackend,
   memoryWebhookDeliveryStore: () => import_webhook_emitter.memoryWebhookDeliveryStore,
@@ -232,6 +235,7 @@ __export(server_exports, {
   patchWithRetry: () => import_state_store.patchWithRetry,
   pgBackend: () => import_idempotency.pgBackend,
   pgCtxMetadataStore: () => import_ctx_metadata.pgCtxMetadataStore,
+  pgKeyedAccountBackend: () => import_keyed_account_backend.pgKeyedAccountBackend,
   pgNotificationSubscriptionStore: () => import_notification_subscriptions.pgNotificationSubscriptionStore,
   pgWebhookDeliveryRecoveryBackend: () => import_webhook_delivery.pgWebhookDeliveryRecoveryBackend,
   pgWebhookDeliveryStore: () => import_webhook_delivery.pgWebhookDeliveryStore,
@@ -246,6 +250,7 @@ __export(server_exports, {
   proposalTermsDigest: () => import_verification.proposalTermsDigest,
   redisBackend: () => import_idempotency.redisBackend,
   redisCtxMetadataStore: () => import_ctx_metadata.redisCtxMetadataStore,
+  redisKeyedAccountBackend: () => import_keyed_account_backend.redisKeyedAccountBackend,
   redisWebhookDeliveryRecoveryBackend: () => import_webhook_delivery.redisWebhookDeliveryRecoveryBackend,
   redisWebhookDeliveryStore: () => import_webhook_delivery.redisWebhookDeliveryStore,
   registerAdcpTaskTool: () => import_tasks.registerAdcpTaskTool,
@@ -343,6 +348,8 @@ var import_upstream_helpers = require('./upstream-helpers.js');
 var import_implicit_account_store = require('../adapters/implicit-account-store.js');
 var import_oauth_passthrough_resolver = require('../adapters/oauth-passthrough-resolver.js');
 var import_roster_account_store = require('../adapters/roster-account-store.js');
+var import_keyed_account_store = require('../adapters/keyed-account-store.js');
+var import_keyed_account_backend = require('../adapters/keyed-account-backend.js');
 var import_derived_account_store = require('../adapters/derived-account-store.js');
 var import_socket_mode = require('./socket-mode/index.js');
 var import_media_buy_action_resolver = require('./media-buy-action-resolver.js');
@@ -445,6 +452,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   createGovernanceAgentJwksResolver,
   createGovernanceEnforcementMiddleware,
   createIdempotencyStore,
+  createKeyedAccountStore,
   createLazyBackend,
   createMediaBuyStore,
   createOAuthPassthroughResolver,
@@ -483,6 +491,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   getAdcpStateMigration,
   getCtxMetadataMigration,
   getIdempotencyMigration,
+  getKeyedAccountMigration,
   getMcpTasksMigration,
   getNotificationSubscriptionMigration,
   getServeRequestContext,
@@ -546,6 +555,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   mediaBuyActionResolver,
   memoryBackend,
   memoryCtxMetadataStore,
+  memoryKeyedAccountBackend,
   memoryNotificationSubscriptionStore,
   memoryWebhookDeliveryRecoveryBackend,
   memoryWebhookDeliveryStore,
@@ -561,6 +571,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   patchWithRetry,
   pgBackend,
   pgCtxMetadataStore,
+  pgKeyedAccountBackend,
   pgNotificationSubscriptionStore,
   pgWebhookDeliveryRecoveryBackend,
   pgWebhookDeliveryStore,
@@ -575,6 +586,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   proposalTermsDigest,
   redisBackend,
   redisCtxMetadataStore,
+  redisKeyedAccountBackend,
   redisWebhookDeliveryRecoveryBackend,
   redisWebhookDeliveryStore,
   registerAdcpTaskTool,

package/dist/lib/server/index.mjs

@@ -287,6 +287,13 @@ import {
   createOAuthPassthroughResolver
 } from "../adapters/oauth-passthrough-resolver.mjs";
 import { createRosterAccountStore } from "../adapters/roster-account-store.mjs";
+import { createKeyedAccountStore } from "../adapters/keyed-account-store.mjs";
+import {
+  memoryKeyedAccountBackend,
+  pgKeyedAccountBackend,
+  redisKeyedAccountBackend,
+  getKeyedAccountMigration
+} from "../adapters/keyed-account-backend.mjs";
 import {
   createDerivedAccountStore
 } from "../adapters/derived-account-store.mjs";
@@ -393,6 +400,7 @@ export {
   createGovernanceAgentJwksResolver,
   createGovernanceEnforcementMiddleware,
   createIdempotencyStore,
+  createKeyedAccountStore,
   createLazyBackend,
   createMediaBuyStore,
   createOAuthPassthroughResolver,
@@ -431,6 +439,7 @@ export {
   getAdcpStateMigration,
   getCtxMetadataMigration,
   getIdempotencyMigration,
+  getKeyedAccountMigration,
   getMcpTasksMigration,
   getNotificationSubscriptionMigration,
   getServeRequestContext,
@@ -494,6 +503,7 @@ export {
   mediaBuyActionResolver,
   memoryBackend,
   memoryCtxMetadataStore,
+  memoryKeyedAccountBackend,
   memoryNotificationSubscriptionStore,
   memoryWebhookDeliveryRecoveryBackend,
   memoryWebhookDeliveryStore,
@@ -509,6 +519,7 @@ export {
   patchWithRetry,
   pgBackend,
   pgCtxMetadataStore,
+  pgKeyedAccountBackend,
   pgNotificationSubscriptionStore,
   pgWebhookDeliveryRecoveryBackend,
   pgWebhookDeliveryStore,
@@ -523,6 +534,7 @@ export {
   proposalTermsDigest,
   redisBackend,
   redisCtxMetadataStore,
+  redisKeyedAccountBackend,
   redisWebhookDeliveryRecoveryBackend,
   redisWebhookDeliveryStore,
   registerAdcpTaskTool,