@adcp/sdk 16.0.0-beta.2 → 16.0.0-beta.4

package/dist/lib/reporting/ledger/index.d.ts

@@ -1,9 +1,15 @@
 /**
- * Reliable Reporting ledger, row storage, change feed, managed-delivery runtime and router.
+ * Reliable Reporting protocol layer: the ledger store interface, the protocol handlers, the producer,
+ * status ingest, row encoding and the health, coverage and lifecycle helpers.
  *
- * Exports tagged `@experimental` (storage, rows, change feed, managed delivery, notification activity)
- * may change in minor releases. The protocol-facing handlers, producer, status ingest, health,
- * coverage, lifecycle and schedule helpers follow normal semver.
+ * Storage implementations (PostgreSQL ledger store, row storage, managed delivery, notification activity,
+ * the cloud providers and the BigQuery sink) live in `@adcp/reporting-storage`, which depends on this
+ * package. Nothing here imports it. A store from any package works with these handlers as long as it
+ * implements `ReportingLedgerStore`.
+ *
+ * The store, transaction, lease and row-read interfaces in `./types` are tagged `@experimental`: they
+ * change together with `@adcp/reporting-storage`, which is pre-1.0. The protocol-facing handlers,
+ * producer, status ingest, health, coverage and lifecycle helpers follow normal semver.
  *
  * Stability policy: https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
  *
@@ -13,18 +19,15 @@ export * from './types';
 export * from './health';
 export * from './coverage';
 export * from './lifecycle';
-export * from './postgres';
 export * from './producer';
 export * from './handler';
 export * from './status-ingest';
 export * from './consumer-status-identity';
-export * from './managed';
-export * from './managed-router';
-export * from './managed-postgres';
-export * from './object-writes';
-export * from './notification-activity';
 export * from './row-encoding';
-export * from './row-storage-migration';
-export * from './row-storage';
-export * from './row-storage-object';
-export * from './change-feed';
+export * from './row-storage-errors';
+export * from './receipts';
+export * from './offering-validation';
+export { compareReportingInstants } from './instant';
+export { isFrozenCalendarRulesMismatch, reportingPeriodDate, reportingPeriodSchedule } from './schedule';
+export { isReportingAdjustmentReceiptEvidence, isReportingReceiptEvidence, isReportingVerificationEvidence, } from '../evidence';
+export { isWellFormedUnicodeString } from '../../utils/well-formed-unicode';

package/dist/lib/reporting/ledger/index.js

@@ -3,6 +3,10 @@ var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -14,45 +18,53 @@ var __copyProps = (to, from, except, desc) => {
 var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var ledger_exports = {};
+__export(ledger_exports, {
+  compareReportingInstants: () => import_instant.compareReportingInstants,
+  isFrozenCalendarRulesMismatch: () => import_schedule.isFrozenCalendarRulesMismatch,
+  isReportingAdjustmentReceiptEvidence: () => import_evidence.isReportingAdjustmentReceiptEvidence,
+  isReportingReceiptEvidence: () => import_evidence.isReportingReceiptEvidence,
+  isReportingVerificationEvidence: () => import_evidence.isReportingVerificationEvidence,
+  isWellFormedUnicodeString: () => import_well_formed_unicode.isWellFormedUnicodeString,
+  reportingPeriodDate: () => import_schedule.reportingPeriodDate,
+  reportingPeriodSchedule: () => import_schedule.reportingPeriodSchedule
+});
 module.exports = __toCommonJS(ledger_exports);
 __reExport(ledger_exports, require('./types.js'), module.exports);
 __reExport(ledger_exports, require('./health.js'), module.exports);
 __reExport(ledger_exports, require('./coverage.js'), module.exports);
 __reExport(ledger_exports, require('./lifecycle.js'), module.exports);
-__reExport(ledger_exports, require('./postgres.js'), module.exports);
 __reExport(ledger_exports, require('./producer.js'), module.exports);
 __reExport(ledger_exports, require('./handler.js'), module.exports);
 __reExport(ledger_exports, require('./status-ingest.js'), module.exports);
 __reExport(ledger_exports, require('./consumer-status-identity.js'), module.exports);
-__reExport(ledger_exports, require('./managed.js'), module.exports);
-__reExport(ledger_exports, require('./managed-router.js'), module.exports);
-__reExport(ledger_exports, require('./managed-postgres.js'), module.exports);
-__reExport(ledger_exports, require('./object-writes.js'), module.exports);
-__reExport(ledger_exports, require('./notification-activity.js'), module.exports);
 __reExport(ledger_exports, require('./row-encoding.js'), module.exports);
-__reExport(ledger_exports, require('./row-storage-migration.js'), module.exports);
-__reExport(ledger_exports, require('./row-storage.js'), module.exports);
-__reExport(ledger_exports, require('./row-storage-object.js'), module.exports);
-__reExport(ledger_exports, require('./change-feed.js'), module.exports);
+__reExport(ledger_exports, require('./row-storage-errors.js'), module.exports);
+__reExport(ledger_exports, require('./receipts.js'), module.exports);
+__reExport(ledger_exports, require('./offering-validation.js'), module.exports);
+var import_instant = require('./instant.js');
+var import_schedule = require('./schedule.js');
+var import_evidence = require('../evidence.js');
+var import_well_formed_unicode = require('../../utils/well-formed-unicode.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  compareReportingInstants,
+  isFrozenCalendarRulesMismatch,
+  isReportingAdjustmentReceiptEvidence,
+  isReportingReceiptEvidence,
+  isReportingVerificationEvidence,
+  isWellFormedUnicodeString,
+  reportingPeriodDate,
+  reportingPeriodSchedule,
   ...require('./types.js'),
   ...require('./health.js'),
   ...require('./coverage.js'),
   ...require('./lifecycle.js'),
-  ...require('./postgres.js'),
   ...require('./producer.js'),
   ...require('./handler.js'),
   ...require('./status-ingest.js'),
   ...require('./consumer-status-identity.js'),
-  ...require('./managed.js'),
-  ...require('./managed-router.js'),
-  ...require('./managed-postgres.js'),
-  ...require('./object-writes.js'),
-  ...require('./notification-activity.js'),
   ...require('./row-encoding.js'),
-  ...require('./row-storage-migration.js'),
-  ...require('./row-storage.js'),
-  ...require('./row-storage-object.js'),
-  ...require('./change-feed.js')
+  ...require('./row-storage-errors.js'),
+  ...require('./receipts.js'),
+  ...require('./offering-validation.js')
 });

package/dist/lib/reporting/ledger/index.mjs

@@ -2,18 +2,29 @@ export * from "./types.mjs";
 export * from "./health.mjs";
 export * from "./coverage.mjs";
 export * from "./lifecycle.mjs";
-export * from "./postgres.mjs";
 export * from "./producer.mjs";
 export * from "./handler.mjs";
 export * from "./status-ingest.mjs";
 export * from "./consumer-status-identity.mjs";
-export * from "./managed.mjs";
-export * from "./managed-router.mjs";
-export * from "./managed-postgres.mjs";
-export * from "./object-writes.mjs";
-export * from "./notification-activity.mjs";
 export * from "./row-encoding.mjs";
-export * from "./row-storage-migration.mjs";
-export * from "./row-storage.mjs";
-export * from "./row-storage-object.mjs";
-export * from "./change-feed.mjs";
+export * from "./row-storage-errors.mjs";
+export * from "./receipts.mjs";
+export * from "./offering-validation.mjs";
+import { compareReportingInstants } from "./instant.mjs";
+import { isFrozenCalendarRulesMismatch, reportingPeriodDate, reportingPeriodSchedule } from "./schedule.mjs";
+import {
+  isReportingAdjustmentReceiptEvidence,
+  isReportingReceiptEvidence,
+  isReportingVerificationEvidence
+} from "../evidence.mjs";
+import { isWellFormedUnicodeString } from "../../utils/well-formed-unicode.mjs";
+export {
+  compareReportingInstants,
+  isFrozenCalendarRulesMismatch,
+  isReportingAdjustmentReceiptEvidence,
+  isReportingReceiptEvidence,
+  isReportingVerificationEvidence,
+  isWellFormedUnicodeString,
+  reportingPeriodDate,
+  reportingPeriodSchedule
+};

package/dist/lib/reporting/ledger/offering-validation.d.mts

@@ -0,0 +1,9 @@
+/**
+ * Validator for one reporting delivery offering, built from the installed AdCP bundle's
+ * `core/reporting-delivery-offering.json`. Returns `undefined` when the installed bundle cannot
+ * validate offerings, so a caller can refuse to publish a capability it cannot check.
+ *
+ * Storage packages use this to hold a managed-delivery runtime to the same offering contract the
+ * protocol layer enforces.
+ */
+export declare function getReportingDeliveryOfferingValidatorV1(): ((offering: unknown) => boolean) | undefined;

package/dist/lib/reporting/ledger/offering-validation.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Validator for one reporting delivery offering, built from the installed AdCP bundle's
+ * `core/reporting-delivery-offering.json`. Returns `undefined` when the installed bundle cannot
+ * validate offerings, so a caller can refuse to publish a capability it cannot check.
+ *
+ * Storage packages use this to hold a managed-delivery runtime to the same offering contract the
+ * protocol layer enforces.
+ */
+export declare function getReportingDeliveryOfferingValidatorV1(): ((offering: unknown) => boolean) | undefined;

package/dist/lib/reporting/{gcs/bucket-policy.js → ledger/offering-validation.js}

@@ -16,16 +16,17 @@ var __copyProps = (to, from, except, desc) => {
   return to;
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var bucket_policy_exports = {};
-__export(bucket_policy_exports, {
-  assertGcsReportingBucketPolicy: () => assertGcsReportingBucketPolicy
+var offering_validation_exports = {};
+__export(offering_validation_exports, {
+  getReportingDeliveryOfferingValidatorV1: () => getReportingDeliveryOfferingValidatorV1
 });
-module.exports = __toCommonJS(bucket_policy_exports);
-function assertGcsReportingBucketPolicy(metadata) {
-  if (!metadata || metadata.versioning?.enabled || metadata.softDeletePolicy?.retentionDurationSeconds === void 0 || Number(metadata.softDeletePolicy.retentionDurationSeconds) !== 0 || Number(metadata.retentionPolicy?.retentionPeriod ?? 0) !== 0 || metadata.defaultEventBasedHold === true || metadata.objectRetention?.mode === "Enabled" || (metadata.lifecycle?.rule?.length ?? 0) > 0 || metadata.iamConfiguration?.uniformBucketLevelAccess?.enabled !== true || metadata.iamConfiguration?.publicAccessPrevention !== "enforced")
-    throw new Error("Unsafe reporting GCS bucket policy");
+module.exports = __toCommonJS(offering_validation_exports);
+var import_schema_loader = require('../../validation/schema-loader.js');
+function getReportingDeliveryOfferingValidatorV1() {
+  const validate = (0, import_schema_loader.getSchemaValidatorByRef)("core/reporting-delivery-offering.json");
+  return validate ? (offering) => Boolean(validate(offering)) : void 0;
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  assertGcsReportingBucketPolicy
+  getReportingDeliveryOfferingValidatorV1
 });

package/dist/lib/reporting/ledger/offering-validation.mjs

@@ -0,0 +1,8 @@
+import { getSchemaValidatorByRef } from "../../validation/schema-loader.mjs";
+function getReportingDeliveryOfferingValidatorV1() {
+  const validate = getSchemaValidatorByRef("core/reporting-delivery-offering.json");
+  return validate ? (offering) => Boolean(validate(offering)) : void 0;
+}
+export {
+  getReportingDeliveryOfferingValidatorV1
+};

package/dist/lib/reporting/ledger/receipts.d.mts

@@ -0,0 +1,48 @@
+import type { ReportingAdjustmentReceipt, ReportingReceipt, SyncReportingReceiptsResponse } from '../../types/index.mjs';
+import type { AdcpToolMap } from '../../server/create-adcp-server.mjs';
+import type { ReportingManagedDeliveryBindingV1 } from './types.mjs';
+/**
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export type ReportingReceiptBatchEntryV1 = {
+    kind: 'revision';
+    receipt: ReportingReceipt;
+} | {
+    kind: 'adjustment';
+    receipt: ReportingAdjustmentReceipt;
+};
+/**
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export interface ReportingReceiptBatchInputV1 {
+    account_id: string;
+    consumer_id: string;
+    idempotency_key: string;
+    request_fingerprint: string;
+    entries: ReportingReceiptBatchEntryV1[];
+    received_at: string;
+}
+/** The `sync_reporting_receipts` request as the server framework hands it to a handler. */
+export type SyncReportingReceiptsParamsV1 = AdcpToolMap['sync_reporting_receipts']['params'];
+/**
+ * The one store method `sync_reporting_receipts` needs. A managed-delivery store implements it as
+ * part of its full contract; the protocol handler depends on nothing else, so it works against any
+ * store that can record receipts.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export interface ReportingReceiptSyncStoreV1 {
+    syncReceiptBatch(input: ReportingReceiptBatchInputV1): Promise<SyncReportingReceiptsResponse['results']>;
+}
+/** Protocol handler for `sync_reporting_receipts`. Works against any `ReportingReceiptSyncStoreV1`. */
+export declare function createSyncReportingReceiptsHandler<TContext extends {
+    account?: unknown;
+}>(store: ReportingReceiptSyncStoreV1, resolveConsumerId: (context: TContext) => string | Promise<string>, now?: () => Date): (request: SyncReportingReceiptsParamsV1, context: TContext) => Promise<SyncReportingReceiptsResponse>;
+/**
+ * Stable helper for immutable binding creation.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare function reportingManagedDeliveryBindingV1(input: Omit<ReportingManagedDeliveryBindingV1, 'created_at' | 'semantic_fingerprint'> & {
+    created_at?: string;
+}): ReportingManagedDeliveryBindingV1;

package/dist/lib/reporting/ledger/receipts.d.ts

@@ -0,0 +1,48 @@
+import type { ReportingAdjustmentReceipt, ReportingReceipt, SyncReportingReceiptsResponse } from '../../types';
+import type { AdcpToolMap } from '../../server/create-adcp-server';
+import type { ReportingManagedDeliveryBindingV1 } from './types';
+/**
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export type ReportingReceiptBatchEntryV1 = {
+    kind: 'revision';
+    receipt: ReportingReceipt;
+} | {
+    kind: 'adjustment';
+    receipt: ReportingAdjustmentReceipt;
+};
+/**
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export interface ReportingReceiptBatchInputV1 {
+    account_id: string;
+    consumer_id: string;
+    idempotency_key: string;
+    request_fingerprint: string;
+    entries: ReportingReceiptBatchEntryV1[];
+    received_at: string;
+}
+/** The `sync_reporting_receipts` request as the server framework hands it to a handler. */
+export type SyncReportingReceiptsParamsV1 = AdcpToolMap['sync_reporting_receipts']['params'];
+/**
+ * The one store method `sync_reporting_receipts` needs. A managed-delivery store implements it as
+ * part of its full contract; the protocol handler depends on nothing else, so it works against any
+ * store that can record receipts.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export interface ReportingReceiptSyncStoreV1 {
+    syncReceiptBatch(input: ReportingReceiptBatchInputV1): Promise<SyncReportingReceiptsResponse['results']>;
+}
+/** Protocol handler for `sync_reporting_receipts`. Works against any `ReportingReceiptSyncStoreV1`. */
+export declare function createSyncReportingReceiptsHandler<TContext extends {
+    account?: unknown;
+}>(store: ReportingReceiptSyncStoreV1, resolveConsumerId: (context: TContext) => string | Promise<string>, now?: () => Date): (request: SyncReportingReceiptsParamsV1, context: TContext) => Promise<SyncReportingReceiptsResponse>;
+/**
+ * Stable helper for immutable binding creation.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare function reportingManagedDeliveryBindingV1(input: Omit<ReportingManagedDeliveryBindingV1, 'created_at' | 'semantic_fingerprint'> & {
+    created_at?: string;
+}): ReportingManagedDeliveryBindingV1;

package/dist/lib/reporting/ledger/receipts.js

@@ -0,0 +1,186 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var receipts_exports = {};
+__export(receipts_exports, {
+  createSyncReportingReceiptsHandler: () => createSyncReportingReceiptsHandler,
+  reportingManagedDeliveryBindingV1: () => reportingManagedDeliveryBindingV1
+});
+module.exports = __toCommonJS(receipts_exports);
+var import_node_crypto = require("node:crypto");
+var import_jcs = require('../../utils/jcs.js');
+var import_evidence = require('../evidence.js');
+var import_async_outcome = require('../../server/decisioning/async-outcome.js');
+const MAX_RECEIPTS_PER_ARRAY = 100;
+const MAX_RECEIPT_RESULTS = 100;
+const MAX_RECEIPT_EVIDENCE_BYTES = 64 * 1024;
+function createSyncReportingReceiptsHandler(store, resolveConsumerId, now = () => /* @__PURE__ */ new Date()) {
+  return async (request, context) => {
+    const account_id = resolvedAccountId(context.account);
+    const consumer_id = await resolveConsumerId(context);
+    if (!consumer_id || consumer_id.length > 255) {
+      throw new TypeError("resolveConsumerId must return a durable authenticated principal of at most 255 characters");
+    }
+    if (request.receipts !== void 0 && !Array.isArray(request.receipts)) {
+      throw new import_async_outcome.AdcpError("VALIDATION_ERROR", { message: "sync_reporting_receipts receipts must be an array" });
+    }
+    if (request.adjustment_receipts !== void 0 && !Array.isArray(request.adjustment_receipts)) {
+      throw new import_async_outcome.AdcpError("VALIDATION_ERROR", {
+        message: "sync_reporting_receipts adjustment_receipts must be an array"
+      });
+    }
+    const revisionReceipts = request.receipts ?? [];
+    const adjustmentReceipts = request.adjustment_receipts ?? [];
+    if (!revisionReceipts.every(isRecord) || !adjustmentReceipts.every(isRecord)) {
+      throw new import_async_outcome.AdcpError("VALIDATION_ERROR", {
+        message: "sync_reporting_receipts entries must be objects"
+      });
+    }
+    if (revisionReceipts.length > MAX_RECEIPTS_PER_ARRAY || adjustmentReceipts.length > MAX_RECEIPTS_PER_ARRAY) {
+      throw new import_async_outcome.AdcpError("VALIDATION_ERROR", {
+        message: `sync_reporting_receipts accepts at most ${MAX_RECEIPTS_PER_ARRAY} receipts and ${MAX_RECEIPTS_PER_ARRAY} adjustment receipts per request`
+      });
+    }
+    if ([...revisionReceipts, ...adjustmentReceipts].some((receipt) => "received_at" in receipt)) {
+      throw new import_async_outcome.AdcpError("VALIDATION_ERROR", {
+        message: "sync_reporting_receipts receipts must not carry received_at; it is assigned by the server"
+      });
+    }
+    const entries = [
+      ...revisionReceipts.map((receipt) => ({ kind: "revision", receipt })),
+      ...adjustmentReceipts.map((receipt) => ({
+        kind: "adjustment",
+        receipt
+      }))
+    ];
+    if (entries.length > MAX_RECEIPT_RESULTS) {
+      throw new import_async_outcome.AdcpError("VALIDATION_ERROR", {
+        message: `sync_reporting_receipts can return at most ${MAX_RECEIPT_RESULTS} results, so a request may carry at most ${MAX_RECEIPT_RESULTS} receipts and adjustment receipts in total`
+      });
+    }
+    if (!entries.length) {
+      throw new import_async_outcome.AdcpError("VALIDATION_ERROR", {
+        message: "sync_reporting_receipts requires at least one receipt or adjustment receipt"
+      });
+    }
+    if (request.account && "account_id" in request.account && request.account.account_id !== account_id) {
+      return receiptBatchFailure(entries, "PERMISSION_DENIED", "Reporting receipt account is unavailable");
+    }
+    if (!/^[A-Za-z0-9_.:-]{16,255}$/.test(request.idempotency_key)) {
+      return receiptBatchFailure(entries, "VALIDATION_ERROR", "sync_reporting_receipts idempotency_key is invalid");
+    }
+    const submittedIds = entries.map(
+      (entry) => isRecord(entry.receipt) && typeof entry.receipt.reporting_receipt_id === "string" ? entry.receipt.reporting_receipt_id : ""
+    );
+    const duplicateSubmittedIds = new Set(
+      submittedIds.filter((value, index) => value !== "" && submittedIds.indexOf(value) !== index)
+    );
+    if (duplicateSubmittedIds.size) {
+      return receiptBatchFailure(
+        entries,
+        "VALIDATION_ERROR",
+        "sync_reporting_receipts receipt IDs must be unique across the batch"
+      );
+    }
+    const evidenceValid = entries.map(
+      (entry) => entry.kind === "revision" ? (0, import_evidence.isReportingReceiptEvidence)(entry.receipt) : (0, import_evidence.isReportingAdjustmentReceiptEvidence)(entry.receipt)
+    );
+    const oversized = entries.map(
+      (entry) => Buffer.byteLength(JSON.stringify(entry.receipt), "utf8") > MAX_RECEIPT_EVIDENCE_BYTES
+    );
+    const valid = entries.map((_, index) => evidenceValid[index] && !oversized[index]);
+    const validEntries = entries.filter((_, index) => valid[index]);
+    const request_fingerprint = sha256({ entries });
+    const stored = validEntries.length ? await store.syncReceiptBatch({
+      account_id,
+      consumer_id,
+      idempotency_key: request.idempotency_key,
+      request_fingerprint,
+      entries: validEntries,
+      received_at: now().toISOString()
+    }) : [];
+    let storedIndex = 0;
+    return {
+      status: "completed",
+      results: entries.map((entry, index) => {
+        if (valid[index]) return stored[storedIndex++];
+        const field = entry.kind === "revision" ? `receipts[${index}]` : `adjustment_receipts[${index - revisionReceipts.length}]`;
+        return oversized[index] ? receiptFailure(
+          reflectableReceiptId(entry.receipt.reporting_receipt_id, index),
+          "VALIDATION_ERROR",
+          "Reporting receipt evidence exceeds the 64 KiB limit",
+          {
+            field,
+            suggestion: `Reduce ${field} to 64 KiB or less and retry.`
+          }
+        ) : receiptFailure(
+          reflectableReceiptId(entry.receipt.reporting_receipt_id, index),
+          "VALIDATION_ERROR",
+          "Reporting receipt evidence is malformed",
+          {
+            field,
+            suggestion: `Correct ${field} to satisfy the reporting receipt evidence schema and retry.`
+          }
+        );
+      })
+    };
+  };
+}
+function receiptBatchFailure(entries, code, message) {
+  return {
+    status: "completed",
+    results: entries.map(
+      (entry, index) => receiptFailure(reflectableReceiptId(entry.receipt.reporting_receipt_id, index), code, message)
+    )
+  };
+}
+const RECEIPT_ID_PATTERN = /^[A-Za-z0-9_.:-]{16,255}$/;
+function reflectableReceiptId(value, index) {
+  return typeof value === "string" && RECEIPT_ID_PATTERN.test(value) ? value : `unidentified-reporting-receipt-${String(index).padStart(3, "0")}`;
+}
+function receiptFailure(reporting_receipt_id, code, message, metadata = {}) {
+  return {
+    result: "failed",
+    reporting_receipt_id,
+    errors: [{ code, message, recovery: "correctable", ...metadata }]
+  };
+}
+function resolvedAccountId(account) {
+  if (!account || typeof account !== "object") throw new Error("Reporting receipts require a resolved account");
+  const value = account;
+  const id = typeof value.id === "string" ? value.id : typeof value.account_id === "string" ? value.account_id : "";
+  if (!id) throw new Error("Reporting receipts require a resolved account");
+  return id;
+}
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function sha256(value) {
+  return (0, import_node_crypto.createHash)("sha256").update((0, import_jcs.canonicalize)(value === void 0 ? null : value)).digest("hex");
+}
+function reportingManagedDeliveryBindingV1(input) {
+  const created_at = input.created_at ?? (/* @__PURE__ */ new Date()).toISOString();
+  const { semantic_fingerprint: _predecessor, ...semantic } = input;
+  const semantic_fingerprint = sha256({ ...semantic, created_at: void 0 });
+  return { ...semantic, created_at, semantic_fingerprint };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createSyncReportingReceiptsHandler,
+  reportingManagedDeliveryBindingV1
+});