@adcp/sdk 15.9.5 → 15.9.7

package/dist/lib/registry/types.generated.d.mts

@@ -283,7 +283,7 @@ export interface paths {
         put?: never;
         /**
          * Save property
-         * @description Save or update a hosted property in the registry. Requires authentication. For existing properties, creates a revision-tracked edit. For new properties, creates the property directly. Cannot edit authoritative properties managed via adagents.json.
+         * @description Save or update a hosted property in the registry. Requires authentication. For bulk identifier contributions use resolveIdentifiers instead (up to 10,000 identifiers per request). This endpoint is limited to 60 requests/hour per user/IP. publisher_domain must be a lowercase hostname without a URL, port, whitespace, wildcard, or trailing dot. Reserved test domains are rejected unless sandbox is true. With sandbox: true the request is validated and a simulated result is returned without reading or writing a hosted property; the ID is ephemeral. For existing properties, creates a revision-tracked edit. For new properties, creates the property directly. Cannot edit authoritative properties managed via adagents.json.
          *
          *     This is an identity-only write surface: the stored document always carries `authorized_agents: []`. Sales authorization lives solely in the publisher's own origin `adagents.json`; the community registry cannot mint or carry it. Any `authorized_agents` sent in the request body is ignored.
          */
@@ -525,6 +525,8 @@ export interface paths {
          * @description Given a percent-encoded `agent_url`, returns the publishers whose adagents.json authorizes that agent, with provenance (`discovery_method`, `manager_domain`), per-publisher property counts (`properties_authorized`, `properties_total`, scoped to this publisher only — never network-wide), signing-key pin status, and lifecycle state (`authorized` / `revoked`).
          *
          *     Spec: [docs/aao/directory-api.mdx](/docs/aao/directory-api) (adcp#4823). This endpoint is the spec-compliant richer-shape replacement for the legacy `/api/registry/lookup/agent/{agentUrl}/domains`, which returns domain strings only.
+         *
+         *     `agent_url` is matched with [AdCP URL canonicalization](/docs/reference/url-canonicalization) and a **non-root trailing slash is significant**: `https://a.example/mcp` and `https://a.example/mcp/` are different agents and can return different publisher sets, the same rule the SDK applies in `verify_agent_authorization`. Ask for the spelling the publisher's adagents.json lists. (Through 2026-10-18 this endpoint folded the two spellings together and answered both with the slashless agent's publishers; that disagreed with the spec and with the validator.) The `agent_url` in the response echoes the canonicalized lookup key, slash included.
          */
         get: operations["getPublishersForAgentLegacyApiPrefix"];
         put?: never;
@@ -547,6 +549,8 @@ export interface paths {
          * @description Given a percent-encoded `agent_url`, returns the publishers whose adagents.json authorizes that agent, with provenance (`discovery_method`, `manager_domain`), per-publisher property counts (`properties_authorized`, `properties_total`, scoped to this publisher only — never network-wide), signing-key pin status, and lifecycle state (`authorized` / `revoked`).
          *
          *     Spec: [docs/aao/directory-api.mdx](/docs/aao/directory-api) (adcp#4823). This endpoint is the spec-compliant richer-shape replacement for the legacy `/api/registry/lookup/agent/{agentUrl}/domains`, which returns domain strings only.
+         *
+         *     `agent_url` is matched with [AdCP URL canonicalization](/docs/reference/url-canonicalization) and a **non-root trailing slash is significant**: `https://a.example/mcp` and `https://a.example/mcp/` are different agents and can return different publisher sets, the same rule the SDK applies in `verify_agent_authorization`. Ask for the spelling the publisher's adagents.json lists. (Through 2026-10-18 this endpoint folded the two spellings together and answered both with the slashless agent's publishers; that disagreed with the spec and with the validator.) The `agent_url` in the response echoes the canonicalized lookup key, slash included.
          */
         get: operations["getPublishersForAgent"];
         put?: never;
@@ -2526,6 +2530,8 @@ export interface components {
             stats?: components["schemas"]["AgentStats"];
             capabilities?: components["schemas"]["AgentCapabilities"];
             compliance?: components["schemas"]["AgentCompliance"];
+            /** @description Every raw agent_url spelling the directory has indexed under this agent's identity, with the listed (canonical) url first. The registry keys an agent by identity, folding a non-root trailing slash, but GET /v1/agents/{agent_url}/publishers matches spec-exactly with the slash significant — so a client answering "which publishers authorize this agent" must query once per spelling here and merge the results. */
+            declared_urls?: string[];
             publisher_domains?: string[];
             property_summary?: components["schemas"]["PropertySummary"];
         };
@@ -2590,6 +2596,8 @@ export interface components {
             measurement_capabilities?: {
                 metrics: {
                     metric_id: string;
+                    /** @description Vendor-authored display name of the metric. Show it in place of `metric_id` when present; never join, key, or deduplicate on it — `metric_id` is the identifier. */
+                    name?: string;
                     standard_reference?: string;
                     accreditations?: {
                         accrediting_body: string;
@@ -2661,6 +2669,8 @@ export interface components {
             timeout_ms: number | null;
             storyboard_start_offset: number | null;
             auth_type: string | null;
+            /** @description Declared specialisms the graded compliance release does not define. Capability resolution skipped them instead of voiding the run; they were not graded. Absent on ordinary runs. */
+            tolerated_undefined_specialisms?: string[];
         } | null;
         /** @enum {string} */
         BadgeRole: "media-buy" | "creative" | "signals" | "governance" | "brand" | "sponsored-intelligence";
@@ -3604,7 +3614,7 @@ export interface components {
                     } | {
                         /** @enum {string} */
                         kind: "targeting_restriction";
-                        restricted_attributes?: ("racial_ethnic_origin" | "political_opinions" | "religious_beliefs" | "trade_union_membership" | "health_data" | "sex_life_sexual_orientation" | "genetic_data" | "biometric_data" | "age" | "familial_status")[];
+                        restricted_attributes?: ("racial_ethnic_origin" | "political_opinions" | "religious_beliefs" | "trade_union_membership" | "health_data" | "sex_life_sexual_orientation" | "genetic_data" | "biometric_data" | "age" | "familial_status" | "sex_gender")[];
                         description?: string;
                     } | {
                         /** @enum {string} */
@@ -4246,13 +4256,31 @@ export interface components {
                 storyboards_total: number | null;
                 first_blocker: string | null;
             } | null;
+            /** @description Owner/operator-only. Present while the newest scheduled heartbeat ran out of time, so the owner can see that the published result is not being refreshed. Null for other viewers and once a later heartbeat completes. This does not change the public verdict. */
+            heartbeat_timeout?: {
+                /** Format: uuid */
+                run_id: string;
+                /** Format: date-time */
+                timed_out_at: string;
+                duration_ms: number | null;
+                timeout_ms: number | null;
+                storyboards_completed: number | null;
+                storyboards_total: number | null;
+                consecutive: number;
+                /** @description True when the streak filled the lookback window, so the real run of timeouts may be longer than `consecutive`. */
+                consecutive_capped: boolean;
+                /** Format: date-time */
+                published_at: string | null;
+                /** @description Ready-to-render owner-facing sentence. Built only from platform- and runner-generated values; no agent response text. */
+                summary: string;
+            } | null;
             /** @description How often the heartbeat re-tests this agent, in hours */
             check_interval_hours?: number;
             /** @description Specialisms the agent declared in get_adcp_capabilities, from the latest run */
             declared_specialisms?: string[];
-            /** @description Per-specialism pass/fail/untested status — keyed on declared specialism, derived from the matching storyboard's status */
+            /** @description Per-specialism pass/fail/untested status — keyed on declared specialism, derived from the matching storyboard's status. `not_applicable` means AdCP introduced the specialism after the compliance release this run graded, so it could not be tested. */
             specialism_status?: {
-                [key: string]: "passing" | "failing" | "untested" | "unknown";
+                [key: string]: "passing" | "failing" | "untested" | "unknown" | "not_applicable";
             };
             eligibility?: components["schemas"]["ComplianceEligibility"];
             /** @description Public per-storyboard verdicts and aggregate step counts. First-failure diagnostic fields are populated only for owners; scalar diagnostics are null and validation evidence is empty for other callers. */
@@ -4288,6 +4316,12 @@ export interface components {
                 severity: string;
                 message: string;
             }[];
+            /** @description Advisory AdCP 4.0 readiness from the latest non-dry-run compliance run, graded against universal/v4-compatibility.yaml. Does not affect 3.x verification or conformance. Null when the latest run predates the report. */
+            v4_readiness?: {
+                registry_version: string;
+                target_version: string;
+                checks: components["schemas"]["V4ReadinessCheck"][];
+            } | null;
             /** @description Owner-scoped: the agent owner's membership tier. Populated only when the authenticated viewer owns the agent; null otherwise. Field is always present so response shape doesn't reveal ownership. */
             membership_tier?: string | null;
             /** @description Owner-scoped: human-readable label for membership_tier (e.g. 'Builder'). Null for non-owners. */
@@ -4362,6 +4396,23 @@ export interface components {
             /** Format: uri */
             reference_url?: string;
         };
+        V4ReadinessCheck: {
+            /** @description Stable check id from universal/v4-compatibility.yaml. */
+            id: string;
+            /** @enum {string} */
+            status: "passed" | "failing" | "not_observable";
+            /**
+             * @description Why a not_observable check could not be graded. Null for passed and failing.
+             * @enum {string|null}
+             */
+            reason: "storyboard_not_run" | "step_not_run" | "step_skipped" | "not_graded" | "notice_absent" | "not_observed_by_suite" | null;
+            issue: number | null;
+            change: string | null;
+            detection: string;
+            fix: string;
+            /** @description Migration guide anchor for the check. */
+            guide_url: string | null;
+        };
         /** @description Owner-scoped membership leg of badge eligibility. Non-owners receive eligible: null and an empty blocker list. */
         OwnerComplianceEligibility: {
             criteria_version: string;
@@ -4379,7 +4430,7 @@ export interface components {
             adcp_version: string;
             verified_at: string;
             /** @description Specialisms demonstrably passed (enums/specialism.json). Preview specialisms are excluded from stable badges. */
-            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
+            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-fixed-rate" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
             /** @description Evidence modes earned. 'spec' = AdCP storyboards were exercised; 'live' = production traffic was observed. Independent of grading_profile and always non-empty when a badge is present. */
             verification_modes: ("spec" | "live")[];
             /**
@@ -4892,6 +4943,11 @@ export interface components {
          */
         OrganizationRevenueTier: "under_1m" | "1m_5m" | "5m_50m" | "50m_250m" | "250m_1b" | "1b_plus";
         ResolveResponse: {
+            /**
+             * @description Present for a non-persistent sandbox simulation. New property handles are ephemeral.
+             * @enum {boolean}
+             */
+            sandbox?: true;
             resolved: components["schemas"]["ResolvedEntry"][];
             summary: {
                 total: number;
@@ -4915,30 +4971,30 @@ export interface components {
         CatalogIdentifier: {
             /** @example domain */
             type: string;
-            /** @example nytimes.com */
+            /** @example streamhaus.com */
             value: string;
         };
+        /** @description Up to 10,000 identifiers plus provenance. resolve requires authentication and contributes unknown identifiers; lookup is read-only. Domain/subdomain values must follow core/identifier.json; production rejects reserved test domains. sandbox: true simulates contributions without writes. */
         ResolveRequest: {
             /** @description Identifiers to resolve (and, in resolve mode, contribute). Max 10,000 per call for all callers. */
             identifiers: components["schemas"]["CatalogIdentifier"][];
             provenance: components["schemas"]["FactProvenance"];
             /**
-             * @description `resolve` (default) contributes the identifiers, auto-creates missing catalog entries, logs demand activity, and returns rids — requires authentication. `lookup` is a pure read: no write, no activity log, no auth.
+             * @description resolve (default) contributes identifiers, creates missing catalog entries, and logs activity; authentication is required. lookup is a public read with no writes or activity logging.
              * @default resolve
              * @enum {string}
              */
             mode: "resolve" | "lookup";
+            /** @description Simulate contributions without storing properties, identifiers, facts, or activity. Reads existing catalog data; new handles are ephemeral. Reserved test domains are allowed only in sandbox mode. Defaults to false when omitted. */
+            sandbox?: boolean;
         };
         FactProvenance: {
             /**
-             * @description How the caller knows these identifiers — the trust/audit envelope on the fact. Determines the confidence the catalog assigns. `crawl` is reserved for server-side pipelines; callers use the others.
+             * @description How the caller knows these identifiers — the trust/audit envelope on the fact. Determines the confidence the catalog assigns. crawl is reserved for server-side pipelines; callers use the others.
              * @enum {string}
              */
             type: "agency_allowlist" | "publisher_declaration" | "impression_log" | "ssp_inventory" | "deal_history" | "crawl" | "data_partner" | "member_assertion";
-            /**
-             * @description Optional free-text annotation (campaign, dataset).
-             * @example unilever_q3
-             */
+            /** @description Optional free-text annotation (campaign, dataset). */
             context?: string;
         };
         CatalogDisputeTriageResult: {
@@ -5731,6 +5787,11 @@ export interface operations {
                 "application/json": {
                     /** @example examplepub.com */
                     publisher_domain: string;
+                    /**
+                     * @description Validate and simulate a save without persisting it. Allows reserved test hostnames.
+                     * @default false
+                     */
+                    sandbox?: boolean;
                     /**
                      * @description Ignored. Community-registry rows never assert sales authorization — the owner's origin adagents.json is the sole authorization source — so any value here is dropped and the stored document carries authorized_agents:[].
                      * @example []
@@ -5770,6 +5831,8 @@ export interface operations {
                         success: true;
                         message: string;
                         id: string;
+                        /** @enum {boolean} */
+                        sandbox?: true;
                         revision_number?: number;
                     };
                 };
@@ -8475,7 +8538,7 @@ export interface operations {
     getAgentAuthorizations: {
         parameters: {
             query: {
-                /** @description Agent URL to look up. Canonicalized server-side (lowercased, trailing slashes trimmed). */
+                /** @description Agent URL to look up. Canonicalized server-side per AdCP URL canonicalization: the scheme and host fold, the path does not. */
                 agent_url: string;
                 /** @description `effective` (default) applies override layer; `raw` reads base table. */
                 include?: "raw" | "effective";
@@ -10954,6 +11017,8 @@ export interface operations {
                             }[];
                         }[];
                         total_storyboards: number;
+                        /** @description Declared specialisms AdCP introduced after this compliance release. They have no bundle to run here, so they are listed separately instead of failing resolution. */
+                        specialisms_not_applicable?: string[];
                     };
                 };
             };
@@ -11439,13 +11504,17 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Not authorized */
+            /** @description Not authorized. Prepared fixture denials disclose only machine codes. */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Error"];
+                    "application/json": components["schemas"]["Error"] | {
+                        /** @enum {string} */
+                        code: "PREPARED_FIXTURES_DENIED";
+                        refusal_code: string;
+                    };
                 };
             };
             /** @description Storyboard not found */

package/dist/lib/registry/types.generated.d.ts

@@ -283,7 +283,7 @@ export interface paths {
         put?: never;
         /**
          * Save property
-         * @description Save or update a hosted property in the registry. Requires authentication. For existing properties, creates a revision-tracked edit. For new properties, creates the property directly. Cannot edit authoritative properties managed via adagents.json.
+         * @description Save or update a hosted property in the registry. Requires authentication. For bulk identifier contributions use resolveIdentifiers instead (up to 10,000 identifiers per request). This endpoint is limited to 60 requests/hour per user/IP. publisher_domain must be a lowercase hostname without a URL, port, whitespace, wildcard, or trailing dot. Reserved test domains are rejected unless sandbox is true. With sandbox: true the request is validated and a simulated result is returned without reading or writing a hosted property; the ID is ephemeral. For existing properties, creates a revision-tracked edit. For new properties, creates the property directly. Cannot edit authoritative properties managed via adagents.json.
          *
          *     This is an identity-only write surface: the stored document always carries `authorized_agents: []`. Sales authorization lives solely in the publisher's own origin `adagents.json`; the community registry cannot mint or carry it. Any `authorized_agents` sent in the request body is ignored.
          */
@@ -525,6 +525,8 @@ export interface paths {
          * @description Given a percent-encoded `agent_url`, returns the publishers whose adagents.json authorizes that agent, with provenance (`discovery_method`, `manager_domain`), per-publisher property counts (`properties_authorized`, `properties_total`, scoped to this publisher only — never network-wide), signing-key pin status, and lifecycle state (`authorized` / `revoked`).
          *
          *     Spec: [docs/aao/directory-api.mdx](/docs/aao/directory-api) (adcp#4823). This endpoint is the spec-compliant richer-shape replacement for the legacy `/api/registry/lookup/agent/{agentUrl}/domains`, which returns domain strings only.
+         *
+         *     `agent_url` is matched with [AdCP URL canonicalization](/docs/reference/url-canonicalization) and a **non-root trailing slash is significant**: `https://a.example/mcp` and `https://a.example/mcp/` are different agents and can return different publisher sets, the same rule the SDK applies in `verify_agent_authorization`. Ask for the spelling the publisher's adagents.json lists. (Through 2026-10-18 this endpoint folded the two spellings together and answered both with the slashless agent's publishers; that disagreed with the spec and with the validator.) The `agent_url` in the response echoes the canonicalized lookup key, slash included.
          */
         get: operations["getPublishersForAgentLegacyApiPrefix"];
         put?: never;
@@ -547,6 +549,8 @@ export interface paths {
          * @description Given a percent-encoded `agent_url`, returns the publishers whose adagents.json authorizes that agent, with provenance (`discovery_method`, `manager_domain`), per-publisher property counts (`properties_authorized`, `properties_total`, scoped to this publisher only — never network-wide), signing-key pin status, and lifecycle state (`authorized` / `revoked`).
          *
          *     Spec: [docs/aao/directory-api.mdx](/docs/aao/directory-api) (adcp#4823). This endpoint is the spec-compliant richer-shape replacement for the legacy `/api/registry/lookup/agent/{agentUrl}/domains`, which returns domain strings only.
+         *
+         *     `agent_url` is matched with [AdCP URL canonicalization](/docs/reference/url-canonicalization) and a **non-root trailing slash is significant**: `https://a.example/mcp` and `https://a.example/mcp/` are different agents and can return different publisher sets, the same rule the SDK applies in `verify_agent_authorization`. Ask for the spelling the publisher's adagents.json lists. (Through 2026-10-18 this endpoint folded the two spellings together and answered both with the slashless agent's publishers; that disagreed with the spec and with the validator.) The `agent_url` in the response echoes the canonicalized lookup key, slash included.
          */
         get: operations["getPublishersForAgent"];
         put?: never;
@@ -2526,6 +2530,8 @@ export interface components {
             stats?: components["schemas"]["AgentStats"];
             capabilities?: components["schemas"]["AgentCapabilities"];
             compliance?: components["schemas"]["AgentCompliance"];
+            /** @description Every raw agent_url spelling the directory has indexed under this agent's identity, with the listed (canonical) url first. The registry keys an agent by identity, folding a non-root trailing slash, but GET /v1/agents/{agent_url}/publishers matches spec-exactly with the slash significant — so a client answering "which publishers authorize this agent" must query once per spelling here and merge the results. */
+            declared_urls?: string[];
             publisher_domains?: string[];
             property_summary?: components["schemas"]["PropertySummary"];
         };
@@ -2590,6 +2596,8 @@ export interface components {
             measurement_capabilities?: {
                 metrics: {
                     metric_id: string;
+                    /** @description Vendor-authored display name of the metric. Show it in place of `metric_id` when present; never join, key, or deduplicate on it — `metric_id` is the identifier. */
+                    name?: string;
                     standard_reference?: string;
                     accreditations?: {
                         accrediting_body: string;
@@ -2661,6 +2669,8 @@ export interface components {
             timeout_ms: number | null;
             storyboard_start_offset: number | null;
             auth_type: string | null;
+            /** @description Declared specialisms the graded compliance release does not define. Capability resolution skipped them instead of voiding the run; they were not graded. Absent on ordinary runs. */
+            tolerated_undefined_specialisms?: string[];
         } | null;
         /** @enum {string} */
         BadgeRole: "media-buy" | "creative" | "signals" | "governance" | "brand" | "sponsored-intelligence";
@@ -3604,7 +3614,7 @@ export interface components {
                     } | {
                         /** @enum {string} */
                         kind: "targeting_restriction";
-                        restricted_attributes?: ("racial_ethnic_origin" | "political_opinions" | "religious_beliefs" | "trade_union_membership" | "health_data" | "sex_life_sexual_orientation" | "genetic_data" | "biometric_data" | "age" | "familial_status")[];
+                        restricted_attributes?: ("racial_ethnic_origin" | "political_opinions" | "religious_beliefs" | "trade_union_membership" | "health_data" | "sex_life_sexual_orientation" | "genetic_data" | "biometric_data" | "age" | "familial_status" | "sex_gender")[];
                         description?: string;
                     } | {
                         /** @enum {string} */
@@ -4246,13 +4256,31 @@ export interface components {
                 storyboards_total: number | null;
                 first_blocker: string | null;
             } | null;
+            /** @description Owner/operator-only. Present while the newest scheduled heartbeat ran out of time, so the owner can see that the published result is not being refreshed. Null for other viewers and once a later heartbeat completes. This does not change the public verdict. */
+            heartbeat_timeout?: {
+                /** Format: uuid */
+                run_id: string;
+                /** Format: date-time */
+                timed_out_at: string;
+                duration_ms: number | null;
+                timeout_ms: number | null;
+                storyboards_completed: number | null;
+                storyboards_total: number | null;
+                consecutive: number;
+                /** @description True when the streak filled the lookback window, so the real run of timeouts may be longer than `consecutive`. */
+                consecutive_capped: boolean;
+                /** Format: date-time */
+                published_at: string | null;
+                /** @description Ready-to-render owner-facing sentence. Built only from platform- and runner-generated values; no agent response text. */
+                summary: string;
+            } | null;
             /** @description How often the heartbeat re-tests this agent, in hours */
             check_interval_hours?: number;
             /** @description Specialisms the agent declared in get_adcp_capabilities, from the latest run */
             declared_specialisms?: string[];
-            /** @description Per-specialism pass/fail/untested status — keyed on declared specialism, derived from the matching storyboard's status */
+            /** @description Per-specialism pass/fail/untested status — keyed on declared specialism, derived from the matching storyboard's status. `not_applicable` means AdCP introduced the specialism after the compliance release this run graded, so it could not be tested. */
             specialism_status?: {
-                [key: string]: "passing" | "failing" | "untested" | "unknown";
+                [key: string]: "passing" | "failing" | "untested" | "unknown" | "not_applicable";
             };
             eligibility?: components["schemas"]["ComplianceEligibility"];
             /** @description Public per-storyboard verdicts and aggregate step counts. First-failure diagnostic fields are populated only for owners; scalar diagnostics are null and validation evidence is empty for other callers. */
@@ -4288,6 +4316,12 @@ export interface components {
                 severity: string;
                 message: string;
             }[];
+            /** @description Advisory AdCP 4.0 readiness from the latest non-dry-run compliance run, graded against universal/v4-compatibility.yaml. Does not affect 3.x verification or conformance. Null when the latest run predates the report. */
+            v4_readiness?: {
+                registry_version: string;
+                target_version: string;
+                checks: components["schemas"]["V4ReadinessCheck"][];
+            } | null;
             /** @description Owner-scoped: the agent owner's membership tier. Populated only when the authenticated viewer owns the agent; null otherwise. Field is always present so response shape doesn't reveal ownership. */
             membership_tier?: string | null;
             /** @description Owner-scoped: human-readable label for membership_tier (e.g. 'Builder'). Null for non-owners. */
@@ -4362,6 +4396,23 @@ export interface components {
             /** Format: uri */
             reference_url?: string;
         };
+        V4ReadinessCheck: {
+            /** @description Stable check id from universal/v4-compatibility.yaml. */
+            id: string;
+            /** @enum {string} */
+            status: "passed" | "failing" | "not_observable";
+            /**
+             * @description Why a not_observable check could not be graded. Null for passed and failing.
+             * @enum {string|null}
+             */
+            reason: "storyboard_not_run" | "step_not_run" | "step_skipped" | "not_graded" | "notice_absent" | "not_observed_by_suite" | null;
+            issue: number | null;
+            change: string | null;
+            detection: string;
+            fix: string;
+            /** @description Migration guide anchor for the check. */
+            guide_url: string | null;
+        };
         /** @description Owner-scoped membership leg of badge eligibility. Non-owners receive eligible: null and an empty blocker list. */
         OwnerComplianceEligibility: {
             criteria_version: string;
@@ -4379,7 +4430,7 @@ export interface components {
             adcp_version: string;
             verified_at: string;
             /** @description Specialisms demonstrably passed (enums/specialism.json). Preview specialisms are excluded from stable badges. */
-            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
+            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-fixed-rate" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
             /** @description Evidence modes earned. 'spec' = AdCP storyboards were exercised; 'live' = production traffic was observed. Independent of grading_profile and always non-empty when a badge is present. */
             verification_modes: ("spec" | "live")[];
             /**
@@ -4892,6 +4943,11 @@ export interface components {
          */
         OrganizationRevenueTier: "under_1m" | "1m_5m" | "5m_50m" | "50m_250m" | "250m_1b" | "1b_plus";
         ResolveResponse: {
+            /**
+             * @description Present for a non-persistent sandbox simulation. New property handles are ephemeral.
+             * @enum {boolean}
+             */
+            sandbox?: true;
             resolved: components["schemas"]["ResolvedEntry"][];
             summary: {
                 total: number;
@@ -4915,30 +4971,30 @@ export interface components {
         CatalogIdentifier: {
             /** @example domain */
             type: string;
-            /** @example nytimes.com */
+            /** @example streamhaus.com */
             value: string;
         };
+        /** @description Up to 10,000 identifiers plus provenance. resolve requires authentication and contributes unknown identifiers; lookup is read-only. Domain/subdomain values must follow core/identifier.json; production rejects reserved test domains. sandbox: true simulates contributions without writes. */
         ResolveRequest: {
             /** @description Identifiers to resolve (and, in resolve mode, contribute). Max 10,000 per call for all callers. */
             identifiers: components["schemas"]["CatalogIdentifier"][];
             provenance: components["schemas"]["FactProvenance"];
             /**
-             * @description `resolve` (default) contributes the identifiers, auto-creates missing catalog entries, logs demand activity, and returns rids — requires authentication. `lookup` is a pure read: no write, no activity log, no auth.
+             * @description resolve (default) contributes identifiers, creates missing catalog entries, and logs activity; authentication is required. lookup is a public read with no writes or activity logging.
              * @default resolve
              * @enum {string}
              */
             mode: "resolve" | "lookup";
+            /** @description Simulate contributions without storing properties, identifiers, facts, or activity. Reads existing catalog data; new handles are ephemeral. Reserved test domains are allowed only in sandbox mode. Defaults to false when omitted. */
+            sandbox?: boolean;
         };
         FactProvenance: {
             /**
-             * @description How the caller knows these identifiers — the trust/audit envelope on the fact. Determines the confidence the catalog assigns. `crawl` is reserved for server-side pipelines; callers use the others.
+             * @description How the caller knows these identifiers — the trust/audit envelope on the fact. Determines the confidence the catalog assigns. crawl is reserved for server-side pipelines; callers use the others.
              * @enum {string}
              */
             type: "agency_allowlist" | "publisher_declaration" | "impression_log" | "ssp_inventory" | "deal_history" | "crawl" | "data_partner" | "member_assertion";
-            /**
-             * @description Optional free-text annotation (campaign, dataset).
-             * @example unilever_q3
-             */
+            /** @description Optional free-text annotation (campaign, dataset). */
             context?: string;
         };
         CatalogDisputeTriageResult: {
@@ -5731,6 +5787,11 @@ export interface operations {
                 "application/json": {
                     /** @example examplepub.com */
                     publisher_domain: string;
+                    /**
+                     * @description Validate and simulate a save without persisting it. Allows reserved test hostnames.
+                     * @default false
+                     */
+                    sandbox?: boolean;
                     /**
                      * @description Ignored. Community-registry rows never assert sales authorization — the owner's origin adagents.json is the sole authorization source — so any value here is dropped and the stored document carries authorized_agents:[].
                      * @example []
@@ -5770,6 +5831,8 @@ export interface operations {
                         success: true;
                         message: string;
                         id: string;
+                        /** @enum {boolean} */
+                        sandbox?: true;
                         revision_number?: number;
                     };
                 };
@@ -8475,7 +8538,7 @@ export interface operations {
     getAgentAuthorizations: {
         parameters: {
             query: {
-                /** @description Agent URL to look up. Canonicalized server-side (lowercased, trailing slashes trimmed). */
+                /** @description Agent URL to look up. Canonicalized server-side per AdCP URL canonicalization: the scheme and host fold, the path does not. */
                 agent_url: string;
                 /** @description `effective` (default) applies override layer; `raw` reads base table. */
                 include?: "raw" | "effective";
@@ -10954,6 +11017,8 @@ export interface operations {
                             }[];
                         }[];
                         total_storyboards: number;
+                        /** @description Declared specialisms AdCP introduced after this compliance release. They have no bundle to run here, so they are listed separately instead of failing resolution. */
+                        specialisms_not_applicable?: string[];
                     };
                 };
             };
@@ -11439,13 +11504,17 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Not authorized */
+            /** @description Not authorized. Prepared fixture denials disclose only machine codes. */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Error"];
+                    "application/json": components["schemas"]["Error"] | {
+                        /** @enum {string} */
+                        code: "PREPARED_FIXTURES_DENIED";
+                        refusal_code: string;
+                    };
                 };
             };
             /** @description Storyboard not found */

package/dist/lib/reporting/source/schemas/reporting-source-capabilities-v1.json

@@ -988,7 +988,7 @@
                       },
                       "daysAfterPeriodEnd": {
                         "type": "integer",
-                        "minimum": -9007199254740991,
+                        "minimum": 0,
                         "maximum": 9007199254740991
                       }
                     },

package/dist/lib/reporting/source/schemas/reporting-source-error-v1.json

@@ -54,7 +54,7 @@
     },
     "retryAfterMs": {
       "type": "integer",
-      "minimum": -9007199254740991,
+      "minimum": 0,
       "maximum": 9007199254740991
     }
   },

package/dist/lib/reporting/source/schemas/reporting-source-offering-v1.json

@@ -968,7 +968,7 @@
                 },
                 "daysAfterPeriodEnd": {
                   "type": "integer",
-                  "minimum": -9007199254740991,
+                  "minimum": 0,
                   "maximum": 9007199254740991
                 }
               },

package/dist/lib/reporting/source/schemas/reporting-source-slice-request-v1.json

@@ -205,12 +205,12 @@
         "start": {
           "type": "string",
           "format": "date-time",
-          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
         },
         "end": {
           "type": "string",
           "format": "date-time",
-          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
         },
         "sourceTimezone": {
           "type": "string",
@@ -220,7 +220,7 @@
         "sourceReadCutoffAt": {
           "type": "string",
           "format": "date-time",
-          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
         },
         "grain": {
           "type": "string",
@@ -772,7 +772,7 @@
         "deadlineAt": {
           "type": "string",
           "format": "date-time",
-          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
         },
         "cancellationIdentity": {
           "type": "string",