@adcp/sdk 16.0.0-beta.2 → 16.0.0-beta.3

package/README.md

@@ -602,6 +602,60 @@ app.post(
 
 Full guide covering key generation, JWKS publication, brand.json setup, webhook signing, capability declaration, key rotation, and conformance testing: **[docs/guides/SIGNING-GUIDE.md](./docs/guides/SIGNING-GUIDE.md)**.
 
+### Response Size Cap
+
+Agent responses are untrusted input, so the SDK caps every response body it
+reads. **The default is 4 MiB** (`DEFAULT_MAX_RESPONSE_BYTES`), applied on
+every MCP and A2A call path: tool calls, endpoint discovery, `tools/list`,
+A2A agent-card lookup, and OAuth token exchange. (OAuth metadata discovery
+has its own, tighter 64 KiB cap and does not use this mechanism.)
+
+Bytes are counted as they stream in, a declared `Content-Length` over the cap
+is refused before the body is read, and an oversized response fails with a
+typed `ResponseTooLargeError`. Nothing is silently truncated.
+
+```typescript
+import { ResponseTooLargeError } from '@adcp/sdk';
+
+// Raise the cap for an agent that legitimately publishes a large catalog.
+const client = new ADCPMultiAgentClient(agents, {
+  transport: { maxResponseBytes: 32 * 1024 * 1024 },
+});
+
+// …or per call.
+await client.agent('agent_x').getProducts(params, {
+  transport: { maxResponseBytes: 32 * 1024 * 1024 },
+});
+
+// Opt out entirely — explicit, never the default. Only `0` opts out;
+// `Infinity` and negative values fall back to the 4 MiB default.
+await client.agent('agent_x').getProducts(params, { transport: { maxResponseBytes: 0 } });
+
+try {
+  await client.agent('agent_x').getProducts(params);
+} catch (err) {
+  if (err instanceof ResponseTooLargeError) {
+    console.warn(`agent returned > ${err.limit} bytes from ${err.url}`);
+  }
+}
+```
+
+`text/event-stream` responses are covered too, with two bounds: no single
+event frame may exceed `maxResponseBytes`, and the cumulative event-stream
+octets read during one call may not exceed `maxResponseBytes * 2` (8 MiB by
+default). A peer cannot escape the cap by replying with
+`Content-Type: text/event-stream`.
+
+The counter runs downstream of the runtime's content-decoder, so it measures
+**decompressed** octets: a small gzip blob that inflates to gigabytes still
+trips the cap after `maxResponseBytes` of output. The `Content-Length`
+pre-check sees the compressed length, so it is a fast path rather than the
+guarantee.
+
+A per-call `transport` object **replaces** the client's `transport` rather
+than merging into it — repeat `maxResponseBytes` when you override the object
+for some other reason.
+
 ### Authentication
 
 ```typescript

package/dist/lib/core/ConversationTypes.d.mts

@@ -184,10 +184,15 @@ export interface TaskOptions {
     /** Additional metadata to include */
     metadata?: Record<string, any>;
     /**
-     * Transport-level safeguards for this call. Overrides the matching field
-     * on the client constructor's `transport` option. Use to lift or tighten
+     * Transport-level safeguards for this call. Use to lift or tighten
      * `maxResponseBytes` per call when an agent legitimately publishes large
-     * catalogs (e.g., `list_creative_formats` on a generative seller).
+     * catalogs (e.g., `list_creative_formats` on a generative seller) — the
+     * default is 4 MiB.
+     *
+     * This object **replaces** the client constructor's `transport` rather than
+     * merging into it. A per-call object that sets only `requestTimeoutMs`
+     * drops the constructor's `maxResponseBytes` back to the default; repeat
+     * every field you still want.
      */
     transport?: import('../protocols/index.mjs').TransportOptions;
 }

package/dist/lib/core/ConversationTypes.d.ts

@@ -184,10 +184,15 @@ export interface TaskOptions {
     /** Additional metadata to include */
     metadata?: Record<string, any>;
     /**
-     * Transport-level safeguards for this call. Overrides the matching field
-     * on the client constructor's `transport` option. Use to lift or tighten
+     * Transport-level safeguards for this call. Use to lift or tighten
      * `maxResponseBytes` per call when an agent legitimately publishes large
-     * catalogs (e.g., `list_creative_formats` on a generative seller).
+     * catalogs (e.g., `list_creative_formats` on a generative seller) — the
+     * default is 4 MiB.
+     *
+     * This object **replaces** the client constructor's `transport` rather than
+     * merging into it. A per-call object that sets only `requestTimeoutMs`
+     * drops the constructor's `maxResponseBytes` back to the default; repeat
+     * every field you still want.
      */
     transport?: import('../protocols').TransportOptions;
 }

package/dist/lib/core/SingleAgentClient.d.mts

@@ -495,9 +495,11 @@ export interface SingleAgentClientConfig extends ConversationConfig {
      * Transport-level safeguards. Applies to every call this client dispatches
      * unless overridden at call time.
      *
-     * Set `maxResponseBytes` when crawling untrusted agents (registries,
-     * federated discovery layers) to prevent a hostile vendor from buffering
-     * a large reply before any application-layer schema validation runs. Set
+     * `maxResponseBytes` defaults to 4 MiB on every call; raise it for an agent
+     * that legitimately publishes a large catalog, lower it when crawling
+     * untrusted agents (registries, federated discovery layers), or set it to
+     * exactly `0` to opt out of the cap entirely. A per-call `transport`
+     * replaces this object wholesale rather than merging into it. Set
      * `requestTimeoutMs` to override the default 60s cap on A2A agent-card
      * discovery; use `0` to disable the SDK-imposed discovery timeout.
      */

package/dist/lib/core/SingleAgentClient.d.ts

@@ -495,9 +495,11 @@ export interface SingleAgentClientConfig extends ConversationConfig {
      * Transport-level safeguards. Applies to every call this client dispatches
      * unless overridden at call time.
      *
-     * Set `maxResponseBytes` when crawling untrusted agents (registries,
-     * federated discovery layers) to prevent a hostile vendor from buffering
-     * a large reply before any application-layer schema validation runs. Set
+     * `maxResponseBytes` defaults to 4 MiB on every call; raise it for an agent
+     * that legitimately publishes a large catalog, lower it when crawling
+     * untrusted agents (registries, federated discovery layers), or set it to
+     * exactly `0` to opt out of the cap entirely. A per-call `transport`
+     * replaces this object wholesale rather than merging into it. Set
      * `requestTimeoutMs` to override the default 60s cap on A2A agent-card
      * discovery; use `0` to disable the SDK-imposed discovery timeout.
      */

package/dist/lib/core/TaskExecutor.js

@@ -50,6 +50,7 @@ var import_signedRequestRejection = require('../protocols/signedRequestRejection
 var import_errors = require('../errors/index.js');
 var import_client_hooks = require('../validation/client-hooks.js');
 var import_schema_validator = require('../validation/schema-validator.js');
+var import_schema_loader = require('../validation/schema-loader.js');
 var import_version = require('../version.js');
 var import_response_unwrapper = require('../utils/response-unwrapper.js');
 var import_error_extraction = require('../utils/error-extraction.js');
@@ -4458,7 +4459,10 @@ class TaskExecutor {
     const mode = this.responseValidationMode;
     const logViolations = this.config.logSchemaViolations !== false;
     try {
-      const validationVersion = (serverVersion ?? this.lastKnownServerVersion) === "v2" ? "v2.5" : this.responseAdcpVersionForValidation() ?? this.config.adcpVersion ?? import_version.ADCP_VERSION;
+      let validationVersion = (serverVersion ?? this.lastKnownServerVersion) === "v2" ? "v2.5" : this.responseAdcpVersionForValidation() ?? this.config.adcpVersion ?? import_version.ADCP_VERSION;
+      if (taskName === "get_adcp_capabilities" && validationVersion !== "v2.5") {
+        validationVersion = (0, import_schema_loader.resolveServedValidationVersion)(response, validationVersion);
+      }
       const normalizedResponse = this.normalizeResponseForValidation(response, taskName, validationVersion === "v2.5");
       const outcome = (this.config.experimentalIdentity33?.() || this.config.identity33SchemaExperiment && normalizedResponse && typeof normalizedResponse === "object" && (0, import_adcp_version_config.isAdcpVersionAtLeast)(normalizedResponse.adcp_version, "3.3")) && mode !== "off" ? validateIdentity33Payload(taskName, "response", normalizedResponse, validationVersion) : (0, import_client_hooks.validateIncomingResponse)(taskName, normalizedResponse, mode, void 0, validationVersion);
       if (outcome.valid) return { valid: true, errors: [] };

package/dist/lib/core/TaskExecutor.mjs

@@ -26,6 +26,7 @@ import {
   resolveValidationModes
 } from "../validation/client-hooks.mjs";
 import { formatIssues } from "../validation/schema-validator.mjs";
+import { resolveServedValidationVersion } from "../validation/schema-loader.mjs";
 import { ADCP_VERSION } from "../version.mjs";
 import { unwrapProtocolResponse, isAdcpOperationSuccess } from "../utils/response-unwrapper.mjs";
 import { extractAdcpErrorInfo, extractCorrelationId } from "../utils/error-extraction.mjs";
@@ -4436,7 +4437,10 @@ class TaskExecutor {
     const mode = this.responseValidationMode;
     const logViolations = this.config.logSchemaViolations !== false;
     try {
-      const validationVersion = (serverVersion ?? this.lastKnownServerVersion) === "v2" ? "v2.5" : this.responseAdcpVersionForValidation() ?? this.config.adcpVersion ?? ADCP_VERSION;
+      let validationVersion = (serverVersion ?? this.lastKnownServerVersion) === "v2" ? "v2.5" : this.responseAdcpVersionForValidation() ?? this.config.adcpVersion ?? ADCP_VERSION;
+      if (taskName === "get_adcp_capabilities" && validationVersion !== "v2.5") {
+        validationVersion = resolveServedValidationVersion(response, validationVersion);
+      }
       const normalizedResponse = this.normalizeResponseForValidation(response, taskName, validationVersion === "v2.5");
       const outcome = (this.config.experimentalIdentity33?.() || this.config.identity33SchemaExperiment && normalizedResponse && typeof normalizedResponse === "object" && isAdcpVersionAtLeast(normalizedResponse.adcp_version, "3.3")) && mode !== "off" ? validateIdentity33Payload(taskName, "response", normalizedResponse, validationVersion) : validateIncomingResponse(taskName, normalizedResponse, mode, void 0, validationVersion);
       if (outcome.valid) return { valid: true, errors: [] };

package/dist/lib/errors/index.d.mts

@@ -374,10 +374,15 @@ export declare class ProtocolFeatureUnsupportedError extends FeatureUnsupportedE
 }
 export declare function getClientPreflightAdcpError(error: unknown): ClientPreflightAdcpErrorInfo | undefined;
 /**
- * Error thrown when a response body exceeds the configured `maxResponseBytes`
- * cap on the transport. Surfaced when crawling untrusted agents (registries,
- * federated discovery layers) to prevent a hostile vendor from buffering a
- * large reply before schema validation runs.
+ * Error thrown when a response body exceeds the `maxResponseBytes` cap on the
+ * transport — 4 MiB by default on every MCP and A2A call path. It prevents a
+ * hostile or merely careless agent from buffering a large reply before schema
+ * validation runs.
+ *
+ * Raised on three paths: a declared `Content-Length` over the cap, a one-shot
+ * body that crosses the cap mid-stream, and a `text/event-stream` response
+ * whose single event exceeds the cap or whose cumulative octets exceed the
+ * call's stream budget. Nothing is truncated — the read fails.
  *
  * Recovery: `terminal` from the SDK's view — repeating the call against the
  * same agent will hit the same cap. The buyer's options are to widen the

package/dist/lib/errors/index.d.ts

@@ -374,10 +374,15 @@ export declare class ProtocolFeatureUnsupportedError extends FeatureUnsupportedE
 }
 export declare function getClientPreflightAdcpError(error: unknown): ClientPreflightAdcpErrorInfo | undefined;
 /**
- * Error thrown when a response body exceeds the configured `maxResponseBytes`
- * cap on the transport. Surfaced when crawling untrusted agents (registries,
- * federated discovery layers) to prevent a hostile vendor from buffering a
- * large reply before schema validation runs.
+ * Error thrown when a response body exceeds the `maxResponseBytes` cap on the
+ * transport — 4 MiB by default on every MCP and A2A call path. It prevents a
+ * hostile or merely careless agent from buffering a large reply before schema
+ * validation runs.
+ *
+ * Raised on three paths: a declared `Content-Length` over the cap, a one-shot
+ * body that crosses the cap mid-stream, and a `text/event-stream` response
+ * whose single event exceeds the cap or whose cumulative octets exceed the
+ * call's stream budget. Nothing is truncated — the read fails.
  *
  * Recovery: `terminal` from the SDK's view — repeating the call against the
  * same agent will hit the same cap. The buyer's options are to widen the

package/dist/lib/index.d.mts

@@ -190,7 +190,7 @@ export { runAuthDiagnosis, AUTH_DIAGNOSIS_SCHEMA_VERSION, type DiagnoseOptions,
 export { NeedsAuthorizationError, discoverAuthorizationRequirements, hasValidatedMcpAuthorizationRequirements, createFileOAuthStorage, bindAgentStorage, getAgentStorage, unbindAgentStorage, type AuthorizationRequirements, type DiscoverAuthorizationOptions, type FileOAuthStorageOptions, } from './auth/oauth/index.mjs';
 export { exchangeClientCredentials, ensureClientCredentialsTokens, ClientCredentialsExchangeError, MissingEnvSecretError, resolveSecret, isEnvSecretReference, toEnvSecretReference, extractEnvSecretName, type ExchangeClientCredentialsOptions, type EnsureClientCredentialsOptions, type AgentOAuthClientCredentials, AgentOAuthClientCredentialsSchema, } from './auth/oauth/index.mjs';
 export { validateAgentUrl, validateAdCPResponse, getExpectedSchema, handleAdCPResponse } from './validation/index.mjs';
-export { ProtocolClient, callMCPTool, callA2ATool, createA2AClientFromCardUrl, createMCPClient, createA2AClient, closeMCPConnections, closeOAuthConnections, closeScopedConnections, withMCPConnectionScope, bundleSupportsAdcpVersionField, BODY_SNIPPET_TIMEOUT_MS, OBSERVER_FLUSH_TIMEOUT_MS, sanitizeTransportHeaders, sanitizeTransportUrl, } from './protocols/index.mjs';
+export { ProtocolClient, callMCPTool, callA2ATool, createA2AClientFromCardUrl, createMCPClient, createA2AClient, closeMCPConnections, closeOAuthConnections, closeScopedConnections, withMCPConnectionScope, bundleSupportsAdcpVersionField, BODY_SNIPPET_TIMEOUT_MS, OBSERVER_FLUSH_TIMEOUT_MS, sanitizeTransportHeaders, sanitizeTransportUrl, DEFAULT_MAX_RESPONSE_BYTES, SSE_CUMULATIVE_BUDGET_MULTIPLIER, } from './protocols/index.mjs';
 export { toReleasePrecisionWire, validateAdcpVersionWire } from './validation/schema-loader.mjs';
 export type { CallToolOptions, TransportActivity, TransportActivityContext, TransportActivityHandler, TransportActivityType, TransportResponseOutcome, TransportOptions, A2ALegacyCompatOptions, } from './protocols/index.mjs';
 import { bundleSupportsAdcpVersionField as _isSupported } from './protocols/index.mjs';
@@ -261,7 +261,7 @@ export declare function createAdCPClient(agents?: AgentConfig[]): ADCPMultiAgent
  * @deprecated Use ADCPMultiAgentClient.fromEnv() instead
  */
 export declare function createAdCPClientFromEnv(): ADCPMultiAgentClient;
-export { SubstitutionObserver, SubstitutionEncoder, PreviewFetchError, MacroInRawValueError, CATALOG_MACRO_VECTORS, getCatalogMacroVector, extractTrackerUrls, matchBindings, assertRfc3986Safe, assertUnreservedOnly, assertNoNestedExpansion, assertSchemePreserved, DEFAULT_MACRO_PROHIBITED_PATTERN, enforceSsrfPolicy, enforceSsrfPolicyResolved, DEFAULT_SSRF_POLICY, encodeUnreserved, equalUnderHexCasePolicy, isUnreservedOnly, divergenceOffset, translateUniversalMacros, UnsafeNativeMappingError, compileUniversalMacroTemplate, } from './substitution/index.mjs';
+export { SubstitutionObserver, SubstitutionEncoder, PreviewFetchError, MacroInRawValueError, CATALOG_MACRO_VECTORS, getCatalogMacroVector, extractTrackerUrls, matchBindings, assertRfc3986Safe, assertUnreservedOnly, assertNoNestedExpansion, assertSchemePreserved, DEFAULT_MACRO_PROHIBITED_PATTERN, enforceSsrfPolicy, enforceSsrfPolicyResolved, DEFAULT_SSRF_POLICY, encodeUnreserved, equalUnderHexCasePolicy, isUnreservedOnly, divergenceOffset, translateUniversalMacros, UnsafeNativeMappingError, MultipleVendorConsentMacrosError, compileUniversalMacroTemplate, } from './substitution/index.mjs';
 export type { ObserverFetchOptions, ObserverDispatcher, CatalogMacroVectorName, AssertionOptions as SubstitutionAssertionOptions, AssertionResult as SubstitutionAssertionResult, BindingMatch, CatalogBinding, CatalogMacroVector, PolicyResult as SubstitutionPolicyResult, SsrfPolicy, TrackerUrlRecord, MacroMapping, TranslateResult, BuiltInSourceMacroSyntax, CompileUniversalMacroTemplateInput, CompileUniversalMacroTemplateResult, CustomSourceMacroSyntax, MacroDocumentationReference, SourceMacroMapping, SourceMacroRequirement, SourceMacroRequirementSatisfaction, SourceMacroSyntax, SourceMacroSyntaxDeclaration, UniversalMacroCompileDiagnostic, UniversalMacroOccurrence, } from './substitution/index.mjs';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, testBrandRightsFlow, hasBrandRightsTools, expectControllerError, expectControllerSuccess, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, } from './testing/index.mjs';
 export type { ControllerErrorWithDetail, TestClient, RateLimitTripSpec, RateLimitTripClient, RateLimitTripFailureCode, RateLimitTripObservation, RateLimitTripObserverOptions, RateLimitTripResponseSnapshot, RateLimitTripStructuredResult, RateLimitTripTaskOptions, } from './testing/index.mjs';

package/dist/lib/index.d.ts

@@ -190,7 +190,7 @@ export { runAuthDiagnosis, AUTH_DIAGNOSIS_SCHEMA_VERSION, type DiagnoseOptions,
 export { NeedsAuthorizationError, discoverAuthorizationRequirements, hasValidatedMcpAuthorizationRequirements, createFileOAuthStorage, bindAgentStorage, getAgentStorage, unbindAgentStorage, type AuthorizationRequirements, type DiscoverAuthorizationOptions, type FileOAuthStorageOptions, } from './auth/oauth';
 export { exchangeClientCredentials, ensureClientCredentialsTokens, ClientCredentialsExchangeError, MissingEnvSecretError, resolveSecret, isEnvSecretReference, toEnvSecretReference, extractEnvSecretName, type ExchangeClientCredentialsOptions, type EnsureClientCredentialsOptions, type AgentOAuthClientCredentials, AgentOAuthClientCredentialsSchema, } from './auth/oauth';
 export { validateAgentUrl, validateAdCPResponse, getExpectedSchema, handleAdCPResponse } from './validation';
-export { ProtocolClient, callMCPTool, callA2ATool, createA2AClientFromCardUrl, createMCPClient, createA2AClient, closeMCPConnections, closeOAuthConnections, closeScopedConnections, withMCPConnectionScope, bundleSupportsAdcpVersionField, BODY_SNIPPET_TIMEOUT_MS, OBSERVER_FLUSH_TIMEOUT_MS, sanitizeTransportHeaders, sanitizeTransportUrl, } from './protocols';
+export { ProtocolClient, callMCPTool, callA2ATool, createA2AClientFromCardUrl, createMCPClient, createA2AClient, closeMCPConnections, closeOAuthConnections, closeScopedConnections, withMCPConnectionScope, bundleSupportsAdcpVersionField, BODY_SNIPPET_TIMEOUT_MS, OBSERVER_FLUSH_TIMEOUT_MS, sanitizeTransportHeaders, sanitizeTransportUrl, DEFAULT_MAX_RESPONSE_BYTES, SSE_CUMULATIVE_BUDGET_MULTIPLIER, } from './protocols';
 export { toReleasePrecisionWire, validateAdcpVersionWire } from './validation/schema-loader';
 export type { CallToolOptions, TransportActivity, TransportActivityContext, TransportActivityHandler, TransportActivityType, TransportResponseOutcome, TransportOptions, A2ALegacyCompatOptions, } from './protocols';
 import { bundleSupportsAdcpVersionField as _isSupported } from './protocols';
@@ -261,7 +261,7 @@ export declare function createAdCPClient(agents?: AgentConfig[]): ADCPMultiAgent
  * @deprecated Use ADCPMultiAgentClient.fromEnv() instead
  */
 export declare function createAdCPClientFromEnv(): ADCPMultiAgentClient;
-export { SubstitutionObserver, SubstitutionEncoder, PreviewFetchError, MacroInRawValueError, CATALOG_MACRO_VECTORS, getCatalogMacroVector, extractTrackerUrls, matchBindings, assertRfc3986Safe, assertUnreservedOnly, assertNoNestedExpansion, assertSchemePreserved, DEFAULT_MACRO_PROHIBITED_PATTERN, enforceSsrfPolicy, enforceSsrfPolicyResolved, DEFAULT_SSRF_POLICY, encodeUnreserved, equalUnderHexCasePolicy, isUnreservedOnly, divergenceOffset, translateUniversalMacros, UnsafeNativeMappingError, compileUniversalMacroTemplate, } from './substitution';
+export { SubstitutionObserver, SubstitutionEncoder, PreviewFetchError, MacroInRawValueError, CATALOG_MACRO_VECTORS, getCatalogMacroVector, extractTrackerUrls, matchBindings, assertRfc3986Safe, assertUnreservedOnly, assertNoNestedExpansion, assertSchemePreserved, DEFAULT_MACRO_PROHIBITED_PATTERN, enforceSsrfPolicy, enforceSsrfPolicyResolved, DEFAULT_SSRF_POLICY, encodeUnreserved, equalUnderHexCasePolicy, isUnreservedOnly, divergenceOffset, translateUniversalMacros, UnsafeNativeMappingError, MultipleVendorConsentMacrosError, compileUniversalMacroTemplate, } from './substitution';
 export type { ObserverFetchOptions, ObserverDispatcher, CatalogMacroVectorName, AssertionOptions as SubstitutionAssertionOptions, AssertionResult as SubstitutionAssertionResult, BindingMatch, CatalogBinding, CatalogMacroVector, PolicyResult as SubstitutionPolicyResult, SsrfPolicy, TrackerUrlRecord, MacroMapping, TranslateResult, BuiltInSourceMacroSyntax, CompileUniversalMacroTemplateInput, CompileUniversalMacroTemplateResult, CustomSourceMacroSyntax, MacroDocumentationReference, SourceMacroMapping, SourceMacroRequirement, SourceMacroRequirementSatisfaction, SourceMacroSyntax, SourceMacroSyntaxDeclaration, UniversalMacroCompileDiagnostic, UniversalMacroOccurrence, } from './substitution';
 export { testAgent, testAgentA2A, testAgentClient, createTestAgent, TEST_AGENT_TOKEN, TEST_AGENT_MCP_CONFIG, TEST_AGENT_A2A_CONFIG, testAgentNoAuth, testAgentNoAuthA2A, TEST_AGENT_NO_AUTH_MCP_CONFIG, TEST_AGENT_NO_AUTH_A2A_CONFIG, creativeAgent, testBrandRightsFlow, hasBrandRightsTools, expectControllerError, expectControllerSuccess, RateLimitTripObserver, RATE_LIMIT_TRIP_CONTRACT, RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX, RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN, validateRateLimitTripSpec, } from './testing/index';
 export type { ControllerErrorWithDetail, TestClient, RateLimitTripSpec, RateLimitTripClient, RateLimitTripFailureCode, RateLimitTripObservation, RateLimitTripObserverOptions, RateLimitTripResponseSnapshot, RateLimitTripStructuredResult, RateLimitTripTaskOptions, } from './testing/index';

package/dist/lib/index.js

@@ -75,6 +75,7 @@ __export(index_exports, {
   CreativeFormatCapabilityError: () => import_projection2.CreativeFormatCapabilityError,
   CreativeFormatProjectionError: () => import_projection2.CreativeFormatProjectionError,
   DEFAULT_MACRO_PROHIBITED_PATTERN: () => import_substitution.DEFAULT_MACRO_PROHIBITED_PATTERN,
+  DEFAULT_MAX_RESPONSE_BYTES: () => import_protocols.DEFAULT_MAX_RESPONSE_BYTES,
   DEFAULT_MAX_SSE_FRAME_BYTES: () => import_registry2.DEFAULT_MAX_SSE_FRAME_BYTES,
   DEFAULT_REPORTING_CAPABILITIES: () => import_server.DEFAULT_REPORTING_CAPABILITIES,
   DEFAULT_SSRF_POLICY: () => import_substitution.DEFAULT_SSRF_POLICY,
@@ -141,6 +142,7 @@ __export(index_exports, {
   MemoryStorage: () => import_MemoryStorage.MemoryStorage,
   MissingEnvSecretError: () => import_oauth4.MissingEnvSecretError,
   MissingInputHandlerError: () => import_errors.MissingInputHandlerError,
+  MultipleVendorConsentMacrosError: () => import_substitution.MultipleVendorConsentMacrosError,
   NeedsAuthorizationError: () => import_oauth3.NeedsAuthorizationError,
   NetworkConsistencyChecker: () => import_network_consistency_checker.NetworkConsistencyChecker,
   OBSERVER_FLUSH_TIMEOUT_MS: () => import_protocols.OBSERVER_FLUSH_TIMEOUT_MS,
@@ -183,6 +185,7 @@ __export(index_exports, {
   SIErrorCodes: () => import_adapters.SIErrorCodes,
   SIGNALS_TOOLS: () => import_capabilities.SIGNALS_TOOLS,
   SISessionManager: () => import_adapters.SISessionManager,
+  SSE_CUMULATIVE_BUDGET_MULTIPLIER: () => import_protocols.SSE_CUMULATIVE_BUDGET_MULTIPLIER,
   SSRF_TRANSIENT_CODES: () => import_net.SSRF_TRANSIENT_CODES,
   STANDARD_CREATIVE_AGENTS: () => import_CreativeAgentClient.STANDARD_CREATIVE_AGENTS,
   STANDARD_ERROR_CODES: () => import_error_codes.STANDARD_ERROR_CODES,
@@ -921,6 +924,7 @@ function createAdCPClientFromEnv() {
   CreativeFormatCapabilityError,
   CreativeFormatProjectionError,
   DEFAULT_MACRO_PROHIBITED_PATTERN,
+  DEFAULT_MAX_RESPONSE_BYTES,
   DEFAULT_MAX_SSE_FRAME_BYTES,
   DEFAULT_REPORTING_CAPABILITIES,
   DEFAULT_SSRF_POLICY,
@@ -987,6 +991,7 @@ function createAdCPClientFromEnv() {
   MemoryStorage,
   MissingEnvSecretError,
   MissingInputHandlerError,
+  MultipleVendorConsentMacrosError,
   NeedsAuthorizationError,
   NetworkConsistencyChecker,
   OBSERVER_FLUSH_TIMEOUT_MS,
@@ -1029,6 +1034,7 @@ function createAdCPClientFromEnv() {
   SIErrorCodes,
   SIGNALS_TOOLS,
   SISessionManager,
+  SSE_CUMULATIVE_BUDGET_MULTIPLIER,
   SSRF_TRANSIENT_CODES,
   STANDARD_CREATIVE_AGENTS,
   STANDARD_ERROR_CODES,

package/dist/lib/index.mjs

@@ -465,7 +465,9 @@ import {
   BODY_SNIPPET_TIMEOUT_MS,
   OBSERVER_FLUSH_TIMEOUT_MS,
   sanitizeTransportHeaders,
-  sanitizeTransportUrl
+  sanitizeTransportUrl,
+  DEFAULT_MAX_RESPONSE_BYTES,
+  SSE_CUMULATIVE_BUDGET_MULTIPLIER
 } from "./protocols/index.mjs";
 import { toReleasePrecisionWire, validateAdcpVersionWire } from "./validation/schema-loader.mjs";
 import { bundleSupportsAdcpVersionField as _isSupported } from "./protocols/index.mjs";
@@ -785,6 +787,7 @@ import {
   divergenceOffset,
   translateUniversalMacros,
   UnsafeNativeMappingError,
+  MultipleVendorConsentMacrosError,
   compileUniversalMacroTemplate
 } from "./substitution/index.mjs";
 import {
@@ -879,6 +882,7 @@ export {
   CreativeFormatCapabilityError,
   CreativeFormatProjectionError,
   DEFAULT_MACRO_PROHIBITED_PATTERN,
+  DEFAULT_MAX_RESPONSE_BYTES,
   DEFAULT_MAX_SSE_FRAME_BYTES,
   DEFAULT_REPORTING_CAPABILITIES,
   DEFAULT_SSRF_POLICY,
@@ -945,6 +949,7 @@ export {
   MemoryStorage,
   MissingEnvSecretError,
   MissingInputHandlerError,
+  MultipleVendorConsentMacrosError,
   NeedsAuthorizationError,
   NetworkConsistencyChecker,
   OBSERVER_FLUSH_TIMEOUT_MS,
@@ -987,6 +992,7 @@ export {
   SIErrorCodes,
   SIGNALS_TOOLS,
   SISessionManager,
+  SSE_CUMULATIVE_BUDGET_MULTIPLIER,
   SSRF_TRANSIENT_CODES,
   STANDARD_CREATIVE_AGENTS,
   STANDARD_ERROR_CODES,

package/dist/lib/negotiation/types.d.mts

@@ -1,5 +1,5 @@
 /** Public AdCP proposal-negotiation types (introduced by the 3.2 contract). */
-import type { AcceptanceContext, CanonicalDeliveryForecast, CanonicalProposal as GeneratedCanonicalProposal, MediaBuyFrequencyCap, OutcomeTarget, ProductMediaBuySupportRequirements, ProductPurchase as GeneratedProductPurchase } from '../types/core.generated.mjs';
+import type { AcceptanceContext, CanonicalProposal as GeneratedCanonicalProposal, MediaBuyFrequencyCap, OutcomeTarget, ProductMediaBuySupportRequirements, ProductPurchase as GeneratedProductPurchase } from '../types/core.generated.mjs';
 export type { AcceptanceContext, CanonicalDeliveryForecast, CanonicalForecastPoint, MediaBuyFrequencyCap, OutcomeTarget, ProductMediaBuySupportRequirements, } from '../types/core.generated.mjs';
 export declare const PROPOSAL_REFINEMENT_DIMENSIONS: readonly ["total_budget", "cpm", "impressions", "flight", "product_changes", "alternatives", "criteria"];
 export type ProposalRefinementDimension = (typeof PROPOSAL_REFINEMENT_DIMENSIONS)[number];
@@ -109,31 +109,17 @@ export interface ProposalResolvedPricing {
     min_spend_per_package?: number;
     commission_rate?: number;
 }
-export interface ProposalPurchase {
-    product_id: string;
-    pricing_option_id: string;
+/**
+ * A purchase inside proposal commercial terms. Every field comes from the
+ * generated `ProductPurchase` wire type, so fields the pinned schemas add reach
+ * this type without edits here. Only `pricing` is widened.
+ */
+export interface ProposalPurchase extends Omit<GeneratedProductPurchase, ProposalPurchaseOverriddenKey> {
     /** Resolved pricing is required in accepted snapshots but optional on direct-purchase inputs. */
     pricing?: ProposalResolvedPricing | GeneratedProductPurchase['pricing'];
-    format_option_refs?: GeneratedProductPurchase['format_option_refs'];
-    catalog_ids?: GeneratedProductPurchase['catalog_ids'];
-    budget?: GeneratedProductPurchase['budget'];
-    daily_budget_cap?: GeneratedProductPurchase['daily_budget_cap'];
-    min_spend_target?: GeneratedProductPurchase['min_spend_target'];
-    impressions?: number;
-    start_time?: string;
-    end_time?: string;
-    pacing?: GeneratedProductPurchase['pacing'];
-    bidding?: GeneratedProductPurchase['bidding'];
-    targeting_overlay?: GeneratedProductPurchase['targeting_overlay'];
-    optimization_goals?: GeneratedProductPurchase['optimization_goals'];
-    audience_evidence_requirements?: GeneratedProductPurchase['audience_evidence_requirements'];
-    audience_evidence_pins?: GeneratedProductPurchase['audience_evidence_pins'];
-    agency_estimate_number?: GeneratedProductPurchase['agency_estimate_number'];
-    context?: GeneratedProductPurchase['context'];
-    ext?: GeneratedProductPurchase['ext'];
-    measurement_terms?: GeneratedProductPurchase['measurement_terms'];
-    performance_standards?: GeneratedProductPurchase['performance_standards'];
 }
+/** Generated `ProductPurchase` fields whose SDK type is intentionally wider. */
+type ProposalPurchaseOverriddenKey = 'pricing';
 export interface ProposalCommercialTerms<TPurchase extends ProposalPurchase = ProposalPurchase> {
     /** Keep the legacy open object while accepting the generated compact BrandKey. */
     brand: Record<string, unknown> | GeneratedCanonicalProposal['commercial_terms']['brand'];
@@ -145,25 +131,20 @@ export interface ProposalCommercialTerms<TPurchase extends ProposalPurchase = Pr
         currency: string;
     };
 }
-export interface CanonicalProposal<TTerms extends ProposalCommercialTerms = ProposalCommercialTerms> {
-    proposal_id: string;
-    proposal_kind: 'new_media_buy' | 'media_buy_update' | 'media_buy_cancellation';
-    parent_proposal_id?: string;
-    media_buy_id?: string;
-    base_media_buy_revision?: number;
-    opportunity_id?: string;
-    proposal_status: 'draft' | 'committed' | 'accepted';
-    accepted_at?: string;
-    expires_at?: string;
-    name: string;
-    description?: string;
-    brief_alignment?: string;
+/**
+ * A canonical proposal snapshot. Every field comes from the generated
+ * `CanonicalProposal` wire type (including fields such as `hold_policy` and
+ * `hold_placed_at` once the pinned schemas define them), so the SDK type tracks
+ * spec revisions without edits here. Only two fields are re-declared:
+ * `commercial_terms` is generic over the caller's terms type and `insertion_order` keeps the
+ * legacy open object.
+ */
+export interface CanonicalProposal<TTerms extends ProposalCommercialTerms = ProposalCommercialTerms> extends Omit<GeneratedCanonicalProposal, CanonicalProposalOverriddenKey> {
     commercial_terms: TTerms;
-    terms_digest: string;
     insertion_order?: Record<string, unknown> | GeneratedCanonicalProposal['insertion_order'];
-    total_budget_guidance?: GeneratedCanonicalProposal['total_budget_guidance'];
-    forecast?: CanonicalDeliveryForecast;
 }
+/** Generated `CanonicalProposal` fields whose SDK type is intentionally re-declared. */
+type CanonicalProposalOverriddenKey = 'commercial_terms' | 'insertion_order';
 export type ProposalRefinementReason = 'commercially_declined' | 'constraint_unsatisfiable' | 'unsupported_dimension' | 'uninterpreted' | 'alternatives_unavailable' | 'source_unavailable' | 'hold_unavailable' | 'batch_aborted';
 export interface RefinedProposalResult<TProposal extends CanonicalProposal = CanonicalProposal> {
     source_proposal_id: string;

package/dist/lib/negotiation/types.d.ts

@@ -1,5 +1,5 @@
 /** Public AdCP proposal-negotiation types (introduced by the 3.2 contract). */
-import type { AcceptanceContext, CanonicalDeliveryForecast, CanonicalProposal as GeneratedCanonicalProposal, MediaBuyFrequencyCap, OutcomeTarget, ProductMediaBuySupportRequirements, ProductPurchase as GeneratedProductPurchase } from '../types/core.generated';
+import type { AcceptanceContext, CanonicalProposal as GeneratedCanonicalProposal, MediaBuyFrequencyCap, OutcomeTarget, ProductMediaBuySupportRequirements, ProductPurchase as GeneratedProductPurchase } from '../types/core.generated';
 export type { AcceptanceContext, CanonicalDeliveryForecast, CanonicalForecastPoint, MediaBuyFrequencyCap, OutcomeTarget, ProductMediaBuySupportRequirements, } from '../types/core.generated';
 export declare const PROPOSAL_REFINEMENT_DIMENSIONS: readonly ["total_budget", "cpm", "impressions", "flight", "product_changes", "alternatives", "criteria"];
 export type ProposalRefinementDimension = (typeof PROPOSAL_REFINEMENT_DIMENSIONS)[number];
@@ -109,31 +109,17 @@ export interface ProposalResolvedPricing {
     min_spend_per_package?: number;
     commission_rate?: number;
 }
-export interface ProposalPurchase {
-    product_id: string;
-    pricing_option_id: string;
+/**
+ * A purchase inside proposal commercial terms. Every field comes from the
+ * generated `ProductPurchase` wire type, so fields the pinned schemas add reach
+ * this type without edits here. Only `pricing` is widened.
+ */
+export interface ProposalPurchase extends Omit<GeneratedProductPurchase, ProposalPurchaseOverriddenKey> {
     /** Resolved pricing is required in accepted snapshots but optional on direct-purchase inputs. */
     pricing?: ProposalResolvedPricing | GeneratedProductPurchase['pricing'];
-    format_option_refs?: GeneratedProductPurchase['format_option_refs'];
-    catalog_ids?: GeneratedProductPurchase['catalog_ids'];
-    budget?: GeneratedProductPurchase['budget'];
-    daily_budget_cap?: GeneratedProductPurchase['daily_budget_cap'];
-    min_spend_target?: GeneratedProductPurchase['min_spend_target'];
-    impressions?: number;
-    start_time?: string;
-    end_time?: string;
-    pacing?: GeneratedProductPurchase['pacing'];
-    bidding?: GeneratedProductPurchase['bidding'];
-    targeting_overlay?: GeneratedProductPurchase['targeting_overlay'];
-    optimization_goals?: GeneratedProductPurchase['optimization_goals'];
-    audience_evidence_requirements?: GeneratedProductPurchase['audience_evidence_requirements'];
-    audience_evidence_pins?: GeneratedProductPurchase['audience_evidence_pins'];
-    agency_estimate_number?: GeneratedProductPurchase['agency_estimate_number'];
-    context?: GeneratedProductPurchase['context'];
-    ext?: GeneratedProductPurchase['ext'];
-    measurement_terms?: GeneratedProductPurchase['measurement_terms'];
-    performance_standards?: GeneratedProductPurchase['performance_standards'];
 }
+/** Generated `ProductPurchase` fields whose SDK type is intentionally wider. */
+type ProposalPurchaseOverriddenKey = 'pricing';
 export interface ProposalCommercialTerms<TPurchase extends ProposalPurchase = ProposalPurchase> {
     /** Keep the legacy open object while accepting the generated compact BrandKey. */
     brand: Record<string, unknown> | GeneratedCanonicalProposal['commercial_terms']['brand'];
@@ -145,25 +131,20 @@ export interface ProposalCommercialTerms<TPurchase extends ProposalPurchase = Pr
         currency: string;
     };
 }
-export interface CanonicalProposal<TTerms extends ProposalCommercialTerms = ProposalCommercialTerms> {
-    proposal_id: string;
-    proposal_kind: 'new_media_buy' | 'media_buy_update' | 'media_buy_cancellation';
-    parent_proposal_id?: string;
-    media_buy_id?: string;
-    base_media_buy_revision?: number;
-    opportunity_id?: string;
-    proposal_status: 'draft' | 'committed' | 'accepted';
-    accepted_at?: string;
-    expires_at?: string;
-    name: string;
-    description?: string;
-    brief_alignment?: string;
+/**
+ * A canonical proposal snapshot. Every field comes from the generated
+ * `CanonicalProposal` wire type (including fields such as `hold_policy` and
+ * `hold_placed_at` once the pinned schemas define them), so the SDK type tracks
+ * spec revisions without edits here. Only two fields are re-declared:
+ * `commercial_terms` is generic over the caller's terms type and `insertion_order` keeps the
+ * legacy open object.
+ */
+export interface CanonicalProposal<TTerms extends ProposalCommercialTerms = ProposalCommercialTerms> extends Omit<GeneratedCanonicalProposal, CanonicalProposalOverriddenKey> {
     commercial_terms: TTerms;
-    terms_digest: string;
     insertion_order?: Record<string, unknown> | GeneratedCanonicalProposal['insertion_order'];
-    total_budget_guidance?: GeneratedCanonicalProposal['total_budget_guidance'];
-    forecast?: CanonicalDeliveryForecast;
 }
+/** Generated `CanonicalProposal` fields whose SDK type is intentionally re-declared. */
+type CanonicalProposalOverriddenKey = 'commercial_terms' | 'insertion_order';
 export type ProposalRefinementReason = 'commercially_declined' | 'constraint_unsatisfiable' | 'unsupported_dimension' | 'uninterpreted' | 'alternatives_unavailable' | 'source_unavailable' | 'hold_unavailable' | 'batch_aborted';
 export interface RefinedProposalResult<TProposal extends CanonicalProposal = CanonicalProposal> {
     source_proposal_id: string;