@adcp/sdk 15.9.6 → 15.9.7

package/compliance/cache/{3.1.29 → 3.1.30}/universal/stale-response-advisory.yaml

@@ -30,7 +30,7 @@ narrative: |
 
   The stale-cache forcing phases require comply_test_controller with the
   force_upstream_unavailable scenario. Steps requiring the controller grade not_applicable for
-  agents that do not advertise it. The non-emission guard (Phase 3) runs for all agents.
+  agents that do not advertise it. The healthy non-emission guard runs before outage forcing.
 
 agent:
   interaction_model: media_buy_seller
@@ -45,8 +45,8 @@ caller:
 
 prerequisites:
   description: |
-    Phase 2 (stale-cache forcing) requires comply_test_controller with
-    force_upstream_unavailable support. Phase 3 (non-emission guard) runs for all agents.
+    The stale-cache forcing phase requires comply_test_controller with
+    force_upstream_unavailable support. The healthy non-emission guard runs before outage forcing.
   test_kit: "test-kits/acme-outdoor.yaml"
 
 phases:
@@ -87,7 +87,67 @@ phases:
             value: "stale_response_advisory--get_capabilities"
             description: "Context correlation_id returned unchanged"
 
+  - id: non_emission_guard
+    title: "No STALE_RESPONSE on healthy upstream response"
+    narrative: |
+      STALE_RESPONSE MUST NOT be emitted when the upstream is healthy. Per the normative
+      error-code description, sellers MUST NOT emit STALE_RESPONSE when the cache hit is
+      within freshness target or when no cached payload exists — the correct code for a
+      completely unavailable upstream with no cache is SERVICE_UNAVAILABLE.
+
+      Run this healthy request before forcing any outage. It also warms the cache for
+      the same brief and account used by the subsequent stale-cache probe.
+
+    steps:
+      - id: no_stale_on_healthy_upstream
+        title: "STALE_RESPONSE absent on healthy upstream response"
+        narrative: |
+          A normal get_products request against a healthy upstream MUST NOT emit
+          STALE_RESPONSE. Sellers that unconditionally emit STALE_RESPONSE on every
+          get_products response are non-conformant — the code is only valid when a
+          specific cache-fallback condition is active.
+
+          NOTE: No machine-enforced absence check for STALE_RESPONSE exists today — the
+          `field_absent` primitive rejects errors[] entirely, but other error codes are
+          valid. The schema and correlation_id checks below prove conformance for
+          non-STALE_RESPONSE flows; a dedicated `error_code_absent` check kind would
+          close this gap. TODO: add check primitive when runner contract supports it.
+        task: get_products
+        schema_ref: "media-buy/get-products-request.json"
+        response_schema_ref: "media-buy/get-products-response.json"
+        doc_ref: "/media-buy/task-reference/get_products"
+        comply_scenario: stale_response_non_emission
+        stateful: false
+        expected: |
+          Return products normally. errors[] may be absent or present with codes other
+          than STALE_RESPONSE. STALE_RESPONSE MUST NOT appear unless the seller is
+          actively serving from a stale cache entry past its freshness target.
+
+        sample_request:
+          buying_mode: "brief"
+          brief: "Display advertising"
+          account:
+            brand:
+              domain: "acmeoutdoor.example"
+            operator: "pinnacle-agency.example"
+            sandbox: true
+          context:
+            correlation_id: "stale_response_advisory--no_stale_on_healthy"
+        validations:
+          - check: response_schema
+            description: "Response matches get-products-response.json schema on healthy upstream"
+          - check: field_present
+            path: "context"
+            description: "Response echoes back the context object"
+          - check: field_value
+            path: "context.correlation_id"
+            value: "stale_response_advisory--no_stale_on_healthy"
+            description: "Context correlation_id returned unchanged"
+
   - id: stale_response_forcing
+    requires_capability:
+      path: compliance_testing.scenarios
+      contains: force_upstream_unavailable
     title: "Force stale-cache condition and verify advisory-success wire placement"
     narrative: |
       The test controller forces an upstream dependency unavailable while a stale cache entry
@@ -127,6 +187,9 @@ phases:
             tool: "get_products"
             upstream_name: "inventory-service"
           account:
+            brand:
+              domain: "acmeoutdoor.example"
+            operator: "pinnacle-agency.example"
             sandbox: true
           context:
             correlation_id: "stale_response_advisory--force_upstream_unavailable"
@@ -184,6 +247,7 @@ phases:
             brand:
               domain: "acmeoutdoor.example"
             operator: "pinnacle-agency.example"
+            sandbox: true
           context:
             correlation_id: "stale_response_advisory--stale_response_wire_placement"
         validations:
@@ -191,105 +255,49 @@ phases:
             description: "Response matches get-products-response.json schema even under stale cache"
             severity: advisory
             permanent_advisory:
-              reason: "Gated on force_upstream_unavailable runner support. Promote to required when widely adopted — remove permanent_advisory and severity fields. See issue #4934."
+              reason: "Gated on force_upstream_unavailable being advertised in the seller's comply_test_controller scenarios. Promote to required when widely adopted — remove permanent_advisory and severity fields. See issue #4934."
           - check: field_present
             path: "errors"
             description: "errors[] is present on a stale-cache response"
             severity: advisory
             permanent_advisory:
-              reason: "Gated on force_upstream_unavailable runner support. Promote to required when widely adopted. See issue #4934."
+              reason: "Gated on force_upstream_unavailable being advertised in the seller's comply_test_controller scenarios. Promote to required when widely adopted. See issue #4934."
           - check: field_value
             path: "errors[0].code"
             value: "STALE_RESPONSE"
             description: "First errors[] entry carries STALE_RESPONSE code"
             severity: advisory
             permanent_advisory:
-              reason: "Gated on force_upstream_unavailable runner support. Promote to required when widely adopted. See issue #4934."
+              reason: "Gated on force_upstream_unavailable being advertised in the seller's comply_test_controller scenarios. Promote to required when widely adopted. See issue #4934."
           - check: field_value
             path: "errors[0].details.served_from_cache"
             value: true
             description: "details.served_from_cache is true per error-details/stale-response.json"
             severity: advisory
             permanent_advisory:
-              reason: "Gated on force_upstream_unavailable runner support. Promote to required when widely adopted. See issue #4934."
+              reason: "Gated on force_upstream_unavailable being advertised in the seller's comply_test_controller scenarios. Promote to required when widely adopted. See issue #4934."
           - check: field_present
             path: "errors[0].details.cache_age_seconds"
             description: "details.cache_age_seconds is present (required details field)"
             severity: advisory
             permanent_advisory:
-              reason: "Gated on force_upstream_unavailable runner support. Promote to required when widely adopted. See issue #4934."
+              reason: "Gated on force_upstream_unavailable being advertised in the seller's comply_test_controller scenarios. Promote to required when widely adopted. See issue #4934."
           - check: field_present
             path: "context"
             description: "Response echoes back the context object on stale-cache advisory"
             severity: advisory
             permanent_advisory:
-              reason: "Gated on force_upstream_unavailable runner support. Promote to required when widely adopted. See issue #4934."
+              reason: "Gated on force_upstream_unavailable being advertised in the seller's comply_test_controller scenarios. Promote to required when widely adopted. See issue #4934."
           - check: field_value
             path: "context.correlation_id"
             value: "stale_response_advisory--stale_response_wire_placement"
             description: "Context correlation_id returned unchanged"
             severity: advisory
             permanent_advisory:
-              reason: "Gated on force_upstream_unavailable runner support. Promote to required when widely adopted. See issue #4934."
+              reason: "Gated on force_upstream_unavailable being advertised in the seller's comply_test_controller scenarios. Promote to required when widely adopted. See issue #4934."
           - check: field_present
             path: "products[0]"
             description: "Response payload is non-empty (products[] has at least one entry from stale cache)"
             severity: advisory
             permanent_advisory:
-              reason: "Gated on force_upstream_unavailable runner support. Promote to required when widely adopted. See issue #4934."
-
-  - id: non_emission_guard
-    title: "No STALE_RESPONSE on healthy upstream response"
-    narrative: |
-      STALE_RESPONSE MUST NOT be emitted when the upstream is healthy. Per the normative
-      error-code description, sellers MUST NOT emit STALE_RESPONSE when the cache hit is
-      within freshness target or when no cached payload exists — the correct code for a
-      completely unavailable upstream with no cache is SERVICE_UNAVAILABLE.
-
-      This phase sends a normal get_products request and verifies no STALE_RESPONSE appears.
-      Runs for all agents — no controller required.
-
-    steps:
-      - id: no_stale_on_healthy_upstream
-        title: "STALE_RESPONSE absent on healthy upstream response"
-        narrative: |
-          A normal get_products request against a healthy upstream MUST NOT emit
-          STALE_RESPONSE. Sellers that unconditionally emit STALE_RESPONSE on every
-          get_products response are non-conformant — the code is only valid when a
-          specific cache-fallback condition is active.
-
-          NOTE: No machine-enforced absence check for STALE_RESPONSE exists today — the
-          `field_absent` primitive rejects errors[] entirely, but other error codes are
-          valid. The schema and correlation_id checks below prove conformance for
-          non-STALE_RESPONSE flows; a dedicated `error_code_absent` check kind would
-          close this gap. TODO: add check primitive when runner contract supports it.
-        task: get_products
-        schema_ref: "media-buy/get-products-request.json"
-        response_schema_ref: "media-buy/get-products-response.json"
-        doc_ref: "/media-buy/task-reference/get_products"
-        comply_scenario: stale_response_non_emission
-        stateful: false
-        expected: |
-          Return products normally. errors[] may be absent or present with codes other
-          than STALE_RESPONSE. STALE_RESPONSE MUST NOT appear unless the seller is
-          actively serving from a stale cache entry past its freshness target.
-
-        sample_request:
-          buying_mode: "brief"
-          brief: "Display advertising for outdoor lifestyle campaign"
-          account:
-            brand:
-              domain: "acmeoutdoor.example"
-            operator: "pinnacle-agency.example"
-          context:
-            correlation_id: "stale_response_advisory--no_stale_on_healthy"
-        validations:
-          - check: response_schema
-            description: "Response matches get-products-response.json schema on healthy upstream"
-          - check: field_present
-            path: "context"
-            description: "Response echoes back the context object"
-          - check: field_value
-            path: "context.correlation_id"
-            value: "stale_response_advisory--no_stale_on_healthy"
-            description: "Context correlation_id returned unchanged"
+              reason: "Gated on force_upstream_unavailable being advertised in the seller's comply_test_controller scenarios. Promote to required when widely adopted. See issue #4934."

package/compliance/cache/{3.1.29 → 3.1.30}/universal/storyboard-schema.yaml

@@ -922,6 +922,13 @@
 #   Omitting `negative_path` when `expect_error: true` behaves as `schema_invalid`
 #   (backwards-compatible default).
 #
+# enrich_request: true (optional — only with expect_error: true and
+#   negative_path: payload_well_formed). Opt this semantic rejection probe into
+#   the normal per-task request enricher, including discovered auction bids.
+#   The default for negative probes preserves the authored request exactly;
+#   intentionally malformed requests MUST NOT set this flag. Explicit fixture
+#   values still win, and governance-authorized payloads remain unmodified.
+#
 # sample_request_skip_schema: boolean (optional — explicit opt-out of schema
 #   validation for a step regardless of `expect_error` / `negative_path`. Use
 #   sparingly; prefer `negative_path: schema_invalid` for intentionally malformed

package/dist/lib/registry/types.generated.d.mts

@@ -525,6 +525,8 @@ export interface paths {
          * @description Given a percent-encoded `agent_url`, returns the publishers whose adagents.json authorizes that agent, with provenance (`discovery_method`, `manager_domain`), per-publisher property counts (`properties_authorized`, `properties_total`, scoped to this publisher only — never network-wide), signing-key pin status, and lifecycle state (`authorized` / `revoked`).
          *
          *     Spec: [docs/aao/directory-api.mdx](/docs/aao/directory-api) (adcp#4823). This endpoint is the spec-compliant richer-shape replacement for the legacy `/api/registry/lookup/agent/{agentUrl}/domains`, which returns domain strings only.
+         *
+         *     `agent_url` is matched with [AdCP URL canonicalization](/docs/reference/url-canonicalization) and a **non-root trailing slash is significant**: `https://a.example/mcp` and `https://a.example/mcp/` are different agents and can return different publisher sets, the same rule the SDK applies in `verify_agent_authorization`. Ask for the spelling the publisher's adagents.json lists. (Through 2026-10-18 this endpoint folded the two spellings together and answered both with the slashless agent's publishers; that disagreed with the spec and with the validator.) The `agent_url` in the response echoes the canonicalized lookup key, slash included.
          */
         get: operations["getPublishersForAgentLegacyApiPrefix"];
         put?: never;
@@ -547,6 +549,8 @@ export interface paths {
          * @description Given a percent-encoded `agent_url`, returns the publishers whose adagents.json authorizes that agent, with provenance (`discovery_method`, `manager_domain`), per-publisher property counts (`properties_authorized`, `properties_total`, scoped to this publisher only — never network-wide), signing-key pin status, and lifecycle state (`authorized` / `revoked`).
          *
          *     Spec: [docs/aao/directory-api.mdx](/docs/aao/directory-api) (adcp#4823). This endpoint is the spec-compliant richer-shape replacement for the legacy `/api/registry/lookup/agent/{agentUrl}/domains`, which returns domain strings only.
+         *
+         *     `agent_url` is matched with [AdCP URL canonicalization](/docs/reference/url-canonicalization) and a **non-root trailing slash is significant**: `https://a.example/mcp` and `https://a.example/mcp/` are different agents and can return different publisher sets, the same rule the SDK applies in `verify_agent_authorization`. Ask for the spelling the publisher's adagents.json lists. (Through 2026-10-18 this endpoint folded the two spellings together and answered both with the slashless agent's publishers; that disagreed with the spec and with the validator.) The `agent_url` in the response echoes the canonicalized lookup key, slash included.
          */
         get: operations["getPublishersForAgent"];
         put?: never;
@@ -2526,6 +2530,8 @@ export interface components {
             stats?: components["schemas"]["AgentStats"];
             capabilities?: components["schemas"]["AgentCapabilities"];
             compliance?: components["schemas"]["AgentCompliance"];
+            /** @description Every raw agent_url spelling the directory has indexed under this agent's identity, with the listed (canonical) url first. The registry keys an agent by identity, folding a non-root trailing slash, but GET /v1/agents/{agent_url}/publishers matches spec-exactly with the slash significant — so a client answering "which publishers authorize this agent" must query once per spelling here and merge the results. */
+            declared_urls?: string[];
             publisher_domains?: string[];
             property_summary?: components["schemas"]["PropertySummary"];
         };
@@ -2590,6 +2596,8 @@ export interface components {
             measurement_capabilities?: {
                 metrics: {
                     metric_id: string;
+                    /** @description Vendor-authored display name of the metric. Show it in place of `metric_id` when present; never join, key, or deduplicate on it — `metric_id` is the identifier. */
+                    name?: string;
                     standard_reference?: string;
                     accreditations?: {
                         accrediting_body: string;
@@ -2661,6 +2669,8 @@ export interface components {
             timeout_ms: number | null;
             storyboard_start_offset: number | null;
             auth_type: string | null;
+            /** @description Declared specialisms the graded compliance release does not define. Capability resolution skipped them instead of voiding the run; they were not graded. Absent on ordinary runs. */
+            tolerated_undefined_specialisms?: string[];
         } | null;
         /** @enum {string} */
         BadgeRole: "media-buy" | "creative" | "signals" | "governance" | "brand" | "sponsored-intelligence";
@@ -3604,7 +3614,7 @@ export interface components {
                     } | {
                         /** @enum {string} */
                         kind: "targeting_restriction";
-                        restricted_attributes?: ("racial_ethnic_origin" | "political_opinions" | "religious_beliefs" | "trade_union_membership" | "health_data" | "sex_life_sexual_orientation" | "genetic_data" | "biometric_data" | "age" | "familial_status")[];
+                        restricted_attributes?: ("racial_ethnic_origin" | "political_opinions" | "religious_beliefs" | "trade_union_membership" | "health_data" | "sex_life_sexual_orientation" | "genetic_data" | "biometric_data" | "age" | "familial_status" | "sex_gender")[];
                         description?: string;
                     } | {
                         /** @enum {string} */
@@ -4246,13 +4256,31 @@ export interface components {
                 storyboards_total: number | null;
                 first_blocker: string | null;
             } | null;
+            /** @description Owner/operator-only. Present while the newest scheduled heartbeat ran out of time, so the owner can see that the published result is not being refreshed. Null for other viewers and once a later heartbeat completes. This does not change the public verdict. */
+            heartbeat_timeout?: {
+                /** Format: uuid */
+                run_id: string;
+                /** Format: date-time */
+                timed_out_at: string;
+                duration_ms: number | null;
+                timeout_ms: number | null;
+                storyboards_completed: number | null;
+                storyboards_total: number | null;
+                consecutive: number;
+                /** @description True when the streak filled the lookback window, so the real run of timeouts may be longer than `consecutive`. */
+                consecutive_capped: boolean;
+                /** Format: date-time */
+                published_at: string | null;
+                /** @description Ready-to-render owner-facing sentence. Built only from platform- and runner-generated values; no agent response text. */
+                summary: string;
+            } | null;
             /** @description How often the heartbeat re-tests this agent, in hours */
             check_interval_hours?: number;
             /** @description Specialisms the agent declared in get_adcp_capabilities, from the latest run */
             declared_specialisms?: string[];
-            /** @description Per-specialism pass/fail/untested status — keyed on declared specialism, derived from the matching storyboard's status */
+            /** @description Per-specialism pass/fail/untested status — keyed on declared specialism, derived from the matching storyboard's status. `not_applicable` means AdCP introduced the specialism after the compliance release this run graded, so it could not be tested. */
             specialism_status?: {
-                [key: string]: "passing" | "failing" | "untested" | "unknown";
+                [key: string]: "passing" | "failing" | "untested" | "unknown" | "not_applicable";
             };
             eligibility?: components["schemas"]["ComplianceEligibility"];
             /** @description Public per-storyboard verdicts and aggregate step counts. First-failure diagnostic fields are populated only for owners; scalar diagnostics are null and validation evidence is empty for other callers. */
@@ -4288,6 +4316,12 @@ export interface components {
                 severity: string;
                 message: string;
             }[];
+            /** @description Advisory AdCP 4.0 readiness from the latest non-dry-run compliance run, graded against universal/v4-compatibility.yaml. Does not affect 3.x verification or conformance. Null when the latest run predates the report. */
+            v4_readiness?: {
+                registry_version: string;
+                target_version: string;
+                checks: components["schemas"]["V4ReadinessCheck"][];
+            } | null;
             /** @description Owner-scoped: the agent owner's membership tier. Populated only when the authenticated viewer owns the agent; null otherwise. Field is always present so response shape doesn't reveal ownership. */
             membership_tier?: string | null;
             /** @description Owner-scoped: human-readable label for membership_tier (e.g. 'Builder'). Null for non-owners. */
@@ -4362,6 +4396,23 @@ export interface components {
             /** Format: uri */
             reference_url?: string;
         };
+        V4ReadinessCheck: {
+            /** @description Stable check id from universal/v4-compatibility.yaml. */
+            id: string;
+            /** @enum {string} */
+            status: "passed" | "failing" | "not_observable";
+            /**
+             * @description Why a not_observable check could not be graded. Null for passed and failing.
+             * @enum {string|null}
+             */
+            reason: "storyboard_not_run" | "step_not_run" | "step_skipped" | "not_graded" | "notice_absent" | "not_observed_by_suite" | null;
+            issue: number | null;
+            change: string | null;
+            detection: string;
+            fix: string;
+            /** @description Migration guide anchor for the check. */
+            guide_url: string | null;
+        };
         /** @description Owner-scoped membership leg of badge eligibility. Non-owners receive eligible: null and an empty blocker list. */
         OwnerComplianceEligibility: {
             criteria_version: string;
@@ -4379,7 +4430,7 @@ export interface components {
             adcp_version: string;
             verified_at: string;
             /** @description Specialisms demonstrably passed (enums/specialism.json). Preview specialisms are excluded from stable badges. */
-            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
+            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-fixed-rate" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
             /** @description Evidence modes earned. 'spec' = AdCP storyboards were exercised; 'live' = production traffic was observed. Independent of grading_profile and always non-empty when a badge is present. */
             verification_modes: ("spec" | "live")[];
             /**
@@ -10966,6 +11017,8 @@ export interface operations {
                             }[];
                         }[];
                         total_storyboards: number;
+                        /** @description Declared specialisms AdCP introduced after this compliance release. They have no bundle to run here, so they are listed separately instead of failing resolution. */
+                        specialisms_not_applicable?: string[];
                     };
                 };
             };
@@ -11451,13 +11504,17 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Not authorized */
+            /** @description Not authorized. Prepared fixture denials disclose only machine codes. */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Error"];
+                    "application/json": components["schemas"]["Error"] | {
+                        /** @enum {string} */
+                        code: "PREPARED_FIXTURES_DENIED";
+                        refusal_code: string;
+                    };
                 };
             };
             /** @description Storyboard not found */

package/dist/lib/registry/types.generated.d.ts

@@ -525,6 +525,8 @@ export interface paths {
          * @description Given a percent-encoded `agent_url`, returns the publishers whose adagents.json authorizes that agent, with provenance (`discovery_method`, `manager_domain`), per-publisher property counts (`properties_authorized`, `properties_total`, scoped to this publisher only — never network-wide), signing-key pin status, and lifecycle state (`authorized` / `revoked`).
          *
          *     Spec: [docs/aao/directory-api.mdx](/docs/aao/directory-api) (adcp#4823). This endpoint is the spec-compliant richer-shape replacement for the legacy `/api/registry/lookup/agent/{agentUrl}/domains`, which returns domain strings only.
+         *
+         *     `agent_url` is matched with [AdCP URL canonicalization](/docs/reference/url-canonicalization) and a **non-root trailing slash is significant**: `https://a.example/mcp` and `https://a.example/mcp/` are different agents and can return different publisher sets, the same rule the SDK applies in `verify_agent_authorization`. Ask for the spelling the publisher's adagents.json lists. (Through 2026-10-18 this endpoint folded the two spellings together and answered both with the slashless agent's publishers; that disagreed with the spec and with the validator.) The `agent_url` in the response echoes the canonicalized lookup key, slash included.
          */
         get: operations["getPublishersForAgentLegacyApiPrefix"];
         put?: never;
@@ -547,6 +549,8 @@ export interface paths {
          * @description Given a percent-encoded `agent_url`, returns the publishers whose adagents.json authorizes that agent, with provenance (`discovery_method`, `manager_domain`), per-publisher property counts (`properties_authorized`, `properties_total`, scoped to this publisher only — never network-wide), signing-key pin status, and lifecycle state (`authorized` / `revoked`).
          *
          *     Spec: [docs/aao/directory-api.mdx](/docs/aao/directory-api) (adcp#4823). This endpoint is the spec-compliant richer-shape replacement for the legacy `/api/registry/lookup/agent/{agentUrl}/domains`, which returns domain strings only.
+         *
+         *     `agent_url` is matched with [AdCP URL canonicalization](/docs/reference/url-canonicalization) and a **non-root trailing slash is significant**: `https://a.example/mcp` and `https://a.example/mcp/` are different agents and can return different publisher sets, the same rule the SDK applies in `verify_agent_authorization`. Ask for the spelling the publisher's adagents.json lists. (Through 2026-10-18 this endpoint folded the two spellings together and answered both with the slashless agent's publishers; that disagreed with the spec and with the validator.) The `agent_url` in the response echoes the canonicalized lookup key, slash included.
          */
         get: operations["getPublishersForAgent"];
         put?: never;
@@ -2526,6 +2530,8 @@ export interface components {
             stats?: components["schemas"]["AgentStats"];
             capabilities?: components["schemas"]["AgentCapabilities"];
             compliance?: components["schemas"]["AgentCompliance"];
+            /** @description Every raw agent_url spelling the directory has indexed under this agent's identity, with the listed (canonical) url first. The registry keys an agent by identity, folding a non-root trailing slash, but GET /v1/agents/{agent_url}/publishers matches spec-exactly with the slash significant — so a client answering "which publishers authorize this agent" must query once per spelling here and merge the results. */
+            declared_urls?: string[];
             publisher_domains?: string[];
             property_summary?: components["schemas"]["PropertySummary"];
         };
@@ -2590,6 +2596,8 @@ export interface components {
             measurement_capabilities?: {
                 metrics: {
                     metric_id: string;
+                    /** @description Vendor-authored display name of the metric. Show it in place of `metric_id` when present; never join, key, or deduplicate on it — `metric_id` is the identifier. */
+                    name?: string;
                     standard_reference?: string;
                     accreditations?: {
                         accrediting_body: string;
@@ -2661,6 +2669,8 @@ export interface components {
             timeout_ms: number | null;
             storyboard_start_offset: number | null;
             auth_type: string | null;
+            /** @description Declared specialisms the graded compliance release does not define. Capability resolution skipped them instead of voiding the run; they were not graded. Absent on ordinary runs. */
+            tolerated_undefined_specialisms?: string[];
         } | null;
         /** @enum {string} */
         BadgeRole: "media-buy" | "creative" | "signals" | "governance" | "brand" | "sponsored-intelligence";
@@ -3604,7 +3614,7 @@ export interface components {
                     } | {
                         /** @enum {string} */
                         kind: "targeting_restriction";
-                        restricted_attributes?: ("racial_ethnic_origin" | "political_opinions" | "religious_beliefs" | "trade_union_membership" | "health_data" | "sex_life_sexual_orientation" | "genetic_data" | "biometric_data" | "age" | "familial_status")[];
+                        restricted_attributes?: ("racial_ethnic_origin" | "political_opinions" | "religious_beliefs" | "trade_union_membership" | "health_data" | "sex_life_sexual_orientation" | "genetic_data" | "biometric_data" | "age" | "familial_status" | "sex_gender")[];
                         description?: string;
                     } | {
                         /** @enum {string} */
@@ -4246,13 +4256,31 @@ export interface components {
                 storyboards_total: number | null;
                 first_blocker: string | null;
             } | null;
+            /** @description Owner/operator-only. Present while the newest scheduled heartbeat ran out of time, so the owner can see that the published result is not being refreshed. Null for other viewers and once a later heartbeat completes. This does not change the public verdict. */
+            heartbeat_timeout?: {
+                /** Format: uuid */
+                run_id: string;
+                /** Format: date-time */
+                timed_out_at: string;
+                duration_ms: number | null;
+                timeout_ms: number | null;
+                storyboards_completed: number | null;
+                storyboards_total: number | null;
+                consecutive: number;
+                /** @description True when the streak filled the lookback window, so the real run of timeouts may be longer than `consecutive`. */
+                consecutive_capped: boolean;
+                /** Format: date-time */
+                published_at: string | null;
+                /** @description Ready-to-render owner-facing sentence. Built only from platform- and runner-generated values; no agent response text. */
+                summary: string;
+            } | null;
             /** @description How often the heartbeat re-tests this agent, in hours */
             check_interval_hours?: number;
             /** @description Specialisms the agent declared in get_adcp_capabilities, from the latest run */
             declared_specialisms?: string[];
-            /** @description Per-specialism pass/fail/untested status — keyed on declared specialism, derived from the matching storyboard's status */
+            /** @description Per-specialism pass/fail/untested status — keyed on declared specialism, derived from the matching storyboard's status. `not_applicable` means AdCP introduced the specialism after the compliance release this run graded, so it could not be tested. */
             specialism_status?: {
-                [key: string]: "passing" | "failing" | "untested" | "unknown";
+                [key: string]: "passing" | "failing" | "untested" | "unknown" | "not_applicable";
             };
             eligibility?: components["schemas"]["ComplianceEligibility"];
             /** @description Public per-storyboard verdicts and aggregate step counts. First-failure diagnostic fields are populated only for owners; scalar diagnostics are null and validation evidence is empty for other callers. */
@@ -4288,6 +4316,12 @@ export interface components {
                 severity: string;
                 message: string;
             }[];
+            /** @description Advisory AdCP 4.0 readiness from the latest non-dry-run compliance run, graded against universal/v4-compatibility.yaml. Does not affect 3.x verification or conformance. Null when the latest run predates the report. */
+            v4_readiness?: {
+                registry_version: string;
+                target_version: string;
+                checks: components["schemas"]["V4ReadinessCheck"][];
+            } | null;
             /** @description Owner-scoped: the agent owner's membership tier. Populated only when the authenticated viewer owns the agent; null otherwise. Field is always present so response shape doesn't reveal ownership. */
             membership_tier?: string | null;
             /** @description Owner-scoped: human-readable label for membership_tier (e.g. 'Builder'). Null for non-owners. */
@@ -4362,6 +4396,23 @@ export interface components {
             /** Format: uri */
             reference_url?: string;
         };
+        V4ReadinessCheck: {
+            /** @description Stable check id from universal/v4-compatibility.yaml. */
+            id: string;
+            /** @enum {string} */
+            status: "passed" | "failing" | "not_observable";
+            /**
+             * @description Why a not_observable check could not be graded. Null for passed and failing.
+             * @enum {string|null}
+             */
+            reason: "storyboard_not_run" | "step_not_run" | "step_skipped" | "not_graded" | "notice_absent" | "not_observed_by_suite" | null;
+            issue: number | null;
+            change: string | null;
+            detection: string;
+            fix: string;
+            /** @description Migration guide anchor for the check. */
+            guide_url: string | null;
+        };
         /** @description Owner-scoped membership leg of badge eligibility. Non-owners receive eligible: null and an empty blocker list. */
         OwnerComplianceEligibility: {
             criteria_version: string;
@@ -4379,7 +4430,7 @@ export interface components {
             adcp_version: string;
             verified_at: string;
             /** @description Specialisms demonstrably passed (enums/specialism.json). Preview specialisms are excluded from stable badges. */
-            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
+            verified_specialisms: ("audience-sync" | "brand-rights" | "buyer-activation" | "buyer-discovery" | "buyer-monitoring" | "buyer-negotiation" | "buyer-recovery" | "collection-lists" | "content-standards" | "creative-ad-server" | "creative-generative" | "creative-template" | "creative-transformers" | "governance-aware-seller" | "governance-delivery-monitor" | "governance-spend-authority" | "property-lists" | "sales-broadcast-tv" | "sales-catalog-driven" | "sales-dooh" | "sales-exchange" | "sales-fixed-rate" | "sales-guaranteed" | "sales-non-guaranteed" | "sales-proposal-mode" | "sales-retail-media" | "sales-streaming-tv" | "sales-social" | "signal-marketplace" | "orchestrator-multi-agent" | "signal-owned" | "signed-requests" | "sponsored-intelligence")[];
             /** @description Evidence modes earned. 'spec' = AdCP storyboards were exercised; 'live' = production traffic was observed. Independent of grading_profile and always non-empty when a badge is present. */
             verification_modes: ("spec" | "live")[];
             /**
@@ -10966,6 +11017,8 @@ export interface operations {
                             }[];
                         }[];
                         total_storyboards: number;
+                        /** @description Declared specialisms AdCP introduced after this compliance release. They have no bundle to run here, so they are listed separately instead of failing resolution. */
+                        specialisms_not_applicable?: string[];
                     };
                 };
             };
@@ -11451,13 +11504,17 @@ export interface operations {
                     "application/json": components["schemas"]["Error"];
                 };
             };
-            /** @description Not authorized */
+            /** @description Not authorized. Prepared fixture denials disclose only machine codes. */
             403: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Error"];
+                    "application/json": components["schemas"]["Error"] | {
+                        /** @enum {string} */
+                        code: "PREPARED_FIXTURES_DENIED";
+                        refusal_code: string;
+                    };
                 };
             };
             /** @description Storyboard not found */

package/dist/lib/reporting/source/schemas/reporting-source-capabilities-v1.json

@@ -988,7 +988,7 @@
                       },
                       "daysAfterPeriodEnd": {
                         "type": "integer",
-                        "minimum": -9007199254740991,
+                        "minimum": 0,
                         "maximum": 9007199254740991
                       }
                     },

package/dist/lib/reporting/source/schemas/reporting-source-error-v1.json

@@ -54,7 +54,7 @@
     },
     "retryAfterMs": {
       "type": "integer",
-      "minimum": -9007199254740991,
+      "minimum": 0,
       "maximum": 9007199254740991
     }
   },

package/dist/lib/reporting/source/schemas/reporting-source-offering-v1.json

@@ -968,7 +968,7 @@
                 },
                 "daysAfterPeriodEnd": {
                   "type": "integer",
-                  "minimum": -9007199254740991,
+                  "minimum": 0,
                   "maximum": 9007199254740991
                 }
               },

package/dist/lib/reporting/source/schemas/reporting-source-slice-request-v1.json

@@ -205,12 +205,12 @@
         "start": {
           "type": "string",
           "format": "date-time",
-          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
         },
         "end": {
           "type": "string",
           "format": "date-time",
-          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
         },
         "sourceTimezone": {
           "type": "string",
@@ -220,7 +220,7 @@
         "sourceReadCutoffAt": {
           "type": "string",
           "format": "date-time",
-          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
         },
         "grain": {
           "type": "string",
@@ -772,7 +772,7 @@
         "deadlineAt": {
           "type": "string",
           "format": "date-time",
-          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
         },
         "cancellationIdentity": {
           "type": "string",