@adcp/sdk 16.0.0-beta.3 → 16.0.0-beta.4

package/dist/lib/reporting/ledger/receipts.mjs

@@ -0,0 +1,161 @@
+import { createHash } from "node:crypto";
+import { canonicalize } from "../../utils/jcs.mjs";
+import { isReportingAdjustmentReceiptEvidence, isReportingReceiptEvidence } from "../evidence.mjs";
+import { AdcpError } from "../../server/decisioning/async-outcome.mjs";
+const MAX_RECEIPTS_PER_ARRAY = 100;
+const MAX_RECEIPT_RESULTS = 100;
+const MAX_RECEIPT_EVIDENCE_BYTES = 64 * 1024;
+function createSyncReportingReceiptsHandler(store, resolveConsumerId, now = () => /* @__PURE__ */ new Date()) {
+  return async (request, context) => {
+    const account_id = resolvedAccountId(context.account);
+    const consumer_id = await resolveConsumerId(context);
+    if (!consumer_id || consumer_id.length > 255) {
+      throw new TypeError("resolveConsumerId must return a durable authenticated principal of at most 255 characters");
+    }
+    if (request.receipts !== void 0 && !Array.isArray(request.receipts)) {
+      throw new AdcpError("VALIDATION_ERROR", { message: "sync_reporting_receipts receipts must be an array" });
+    }
+    if (request.adjustment_receipts !== void 0 && !Array.isArray(request.adjustment_receipts)) {
+      throw new AdcpError("VALIDATION_ERROR", {
+        message: "sync_reporting_receipts adjustment_receipts must be an array"
+      });
+    }
+    const revisionReceipts = request.receipts ?? [];
+    const adjustmentReceipts = request.adjustment_receipts ?? [];
+    if (!revisionReceipts.every(isRecord) || !adjustmentReceipts.every(isRecord)) {
+      throw new AdcpError("VALIDATION_ERROR", {
+        message: "sync_reporting_receipts entries must be objects"
+      });
+    }
+    if (revisionReceipts.length > MAX_RECEIPTS_PER_ARRAY || adjustmentReceipts.length > MAX_RECEIPTS_PER_ARRAY) {
+      throw new AdcpError("VALIDATION_ERROR", {
+        message: `sync_reporting_receipts accepts at most ${MAX_RECEIPTS_PER_ARRAY} receipts and ${MAX_RECEIPTS_PER_ARRAY} adjustment receipts per request`
+      });
+    }
+    if ([...revisionReceipts, ...adjustmentReceipts].some((receipt) => "received_at" in receipt)) {
+      throw new AdcpError("VALIDATION_ERROR", {
+        message: "sync_reporting_receipts receipts must not carry received_at; it is assigned by the server"
+      });
+    }
+    const entries = [
+      ...revisionReceipts.map((receipt) => ({ kind: "revision", receipt })),
+      ...adjustmentReceipts.map((receipt) => ({
+        kind: "adjustment",
+        receipt
+      }))
+    ];
+    if (entries.length > MAX_RECEIPT_RESULTS) {
+      throw new AdcpError("VALIDATION_ERROR", {
+        message: `sync_reporting_receipts can return at most ${MAX_RECEIPT_RESULTS} results, so a request may carry at most ${MAX_RECEIPT_RESULTS} receipts and adjustment receipts in total`
+      });
+    }
+    if (!entries.length) {
+      throw new AdcpError("VALIDATION_ERROR", {
+        message: "sync_reporting_receipts requires at least one receipt or adjustment receipt"
+      });
+    }
+    if (request.account && "account_id" in request.account && request.account.account_id !== account_id) {
+      return receiptBatchFailure(entries, "PERMISSION_DENIED", "Reporting receipt account is unavailable");
+    }
+    if (!/^[A-Za-z0-9_.:-]{16,255}$/.test(request.idempotency_key)) {
+      return receiptBatchFailure(entries, "VALIDATION_ERROR", "sync_reporting_receipts idempotency_key is invalid");
+    }
+    const submittedIds = entries.map(
+      (entry) => isRecord(entry.receipt) && typeof entry.receipt.reporting_receipt_id === "string" ? entry.receipt.reporting_receipt_id : ""
+    );
+    const duplicateSubmittedIds = new Set(
+      submittedIds.filter((value, index) => value !== "" && submittedIds.indexOf(value) !== index)
+    );
+    if (duplicateSubmittedIds.size) {
+      return receiptBatchFailure(
+        entries,
+        "VALIDATION_ERROR",
+        "sync_reporting_receipts receipt IDs must be unique across the batch"
+      );
+    }
+    const evidenceValid = entries.map(
+      (entry) => entry.kind === "revision" ? isReportingReceiptEvidence(entry.receipt) : isReportingAdjustmentReceiptEvidence(entry.receipt)
+    );
+    const oversized = entries.map(
+      (entry) => Buffer.byteLength(JSON.stringify(entry.receipt), "utf8") > MAX_RECEIPT_EVIDENCE_BYTES
+    );
+    const valid = entries.map((_, index) => evidenceValid[index] && !oversized[index]);
+    const validEntries = entries.filter((_, index) => valid[index]);
+    const request_fingerprint = sha256({ entries });
+    const stored = validEntries.length ? await store.syncReceiptBatch({
+      account_id,
+      consumer_id,
+      idempotency_key: request.idempotency_key,
+      request_fingerprint,
+      entries: validEntries,
+      received_at: now().toISOString()
+    }) : [];
+    let storedIndex = 0;
+    return {
+      status: "completed",
+      results: entries.map((entry, index) => {
+        if (valid[index]) return stored[storedIndex++];
+        const field = entry.kind === "revision" ? `receipts[${index}]` : `adjustment_receipts[${index - revisionReceipts.length}]`;
+        return oversized[index] ? receiptFailure(
+          reflectableReceiptId(entry.receipt.reporting_receipt_id, index),
+          "VALIDATION_ERROR",
+          "Reporting receipt evidence exceeds the 64 KiB limit",
+          {
+            field,
+            suggestion: `Reduce ${field} to 64 KiB or less and retry.`
+          }
+        ) : receiptFailure(
+          reflectableReceiptId(entry.receipt.reporting_receipt_id, index),
+          "VALIDATION_ERROR",
+          "Reporting receipt evidence is malformed",
+          {
+            field,
+            suggestion: `Correct ${field} to satisfy the reporting receipt evidence schema and retry.`
+          }
+        );
+      })
+    };
+  };
+}
+function receiptBatchFailure(entries, code, message) {
+  return {
+    status: "completed",
+    results: entries.map(
+      (entry, index) => receiptFailure(reflectableReceiptId(entry.receipt.reporting_receipt_id, index), code, message)
+    )
+  };
+}
+const RECEIPT_ID_PATTERN = /^[A-Za-z0-9_.:-]{16,255}$/;
+function reflectableReceiptId(value, index) {
+  return typeof value === "string" && RECEIPT_ID_PATTERN.test(value) ? value : `unidentified-reporting-receipt-${String(index).padStart(3, "0")}`;
+}
+function receiptFailure(reporting_receipt_id, code, message, metadata = {}) {
+  return {
+    result: "failed",
+    reporting_receipt_id,
+    errors: [{ code, message, recovery: "correctable", ...metadata }]
+  };
+}
+function resolvedAccountId(account) {
+  if (!account || typeof account !== "object") throw new Error("Reporting receipts require a resolved account");
+  const value = account;
+  const id = typeof value.id === "string" ? value.id : typeof value.account_id === "string" ? value.account_id : "";
+  if (!id) throw new Error("Reporting receipts require a resolved account");
+  return id;
+}
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function sha256(value) {
+  return createHash("sha256").update(canonicalize(value === void 0 ? null : value)).digest("hex");
+}
+function reportingManagedDeliveryBindingV1(input) {
+  const created_at = input.created_at ?? (/* @__PURE__ */ new Date()).toISOString();
+  const { semantic_fingerprint: _predecessor, ...semantic } = input;
+  const semantic_fingerprint = sha256({ ...semantic, created_at: void 0 });
+  return { ...semantic, created_at, semantic_fingerprint };
+}
+export {
+  createSyncReportingReceiptsHandler,
+  reportingManagedDeliveryBindingV1
+};

package/dist/lib/reporting/ledger/status-ingest.js

@@ -156,7 +156,7 @@ function createSyncReportingStatusHandler(store, options) {
         });
         if (replay) return completed(replay);
       } catch (error) {
-        if (!(error instanceof import_types.ReportingConsumerStatusConflictError)) throw error;
+        if (!(0, import_types.isReportingLedgerErrorNamed)(error, "ReportingConsumerStatusConflictError")) throw error;
         return failed(statusIds, "IDEMPOTENCY_CONFLICT", "Reporting status idempotency conflict");
       }
       const now = (options.now ?? (() => /* @__PURE__ */ new Date()))();
@@ -216,7 +216,7 @@ function createSyncReportingStatusHandler(store, options) {
         });
         return completed(results);
       } catch (error) {
-        const conflict = error instanceof import_types.ReportingConsumerStatusConflictError;
+        const conflict = (0, import_types.isReportingLedgerErrorNamed)(error, "ReportingConsumerStatusConflictError");
         if (!conflict && !(error instanceof ReportingStatusValidationError)) throw error;
         return failed(
           statusIds,
@@ -277,7 +277,7 @@ async function validateStatus(store, configurations, accountId, consumerId, stat
     try {
       page = await store.readSnapshotPage(status.seller_ledger_snapshot_id, accountId, void 0, 1);
     } catch (error) {
-      if (!(error instanceof import_types.ReportingLedgerSnapshotUnavailableError)) throw error;
+      if (!(0, import_types.isReportingLedgerErrorNamed)(error, "ReportingLedgerSnapshotUnavailableError")) throw error;
       throw new ReportingStatusValidationError("snapshot provenance unavailable");
     }
     const scope = (0, import_coverage.reportingLedgerEffectivePeriod)(page.snapshot.query, page.snapshot.ledgerAsOf);

package/dist/lib/reporting/ledger/status-ingest.mjs

@@ -24,8 +24,7 @@ import {
 import {
   REPORTING_CONSUMER_STATUS_ERROR_FIELD_MAX_BYTES,
   REPORTING_CONSUMER_STATUS_ERROR_MESSAGE_MAX_BYTES,
-  ReportingConsumerStatusConflictError,
-  ReportingLedgerSnapshotUnavailableError
+  isReportingLedgerErrorNamed
 } from "./types.mjs";
 const statusId = z.string().min(16).max(255).regex(/^[A-Za-z0-9_.:-]+$/);
 const INVALID_REPORTING_STATUS_ID = "invalid-reporting-status-id";
@@ -147,7 +146,7 @@ function createSyncReportingStatusHandler(store, options) {
         });
         if (replay) return completed(replay);
       } catch (error) {
-        if (!(error instanceof ReportingConsumerStatusConflictError)) throw error;
+        if (!isReportingLedgerErrorNamed(error, "ReportingConsumerStatusConflictError")) throw error;
         return failed(statusIds, "IDEMPOTENCY_CONFLICT", "Reporting status idempotency conflict");
       }
       const now = (options.now ?? (() => /* @__PURE__ */ new Date()))();
@@ -207,7 +206,7 @@ function createSyncReportingStatusHandler(store, options) {
         });
         return completed(results);
       } catch (error) {
-        const conflict = error instanceof ReportingConsumerStatusConflictError;
+        const conflict = isReportingLedgerErrorNamed(error, "ReportingConsumerStatusConflictError");
         if (!conflict && !(error instanceof ReportingStatusValidationError)) throw error;
         return failed(
           statusIds,
@@ -268,7 +267,7 @@ async function validateStatus(store, configurations, accountId, consumerId, stat
     try {
       page = await store.readSnapshotPage(status.seller_ledger_snapshot_id, accountId, void 0, 1);
     } catch (error) {
-      if (!(error instanceof ReportingLedgerSnapshotUnavailableError)) throw error;
+      if (!isReportingLedgerErrorNamed(error, "ReportingLedgerSnapshotUnavailableError")) throw error;
       throw new ReportingStatusValidationError("snapshot provenance unavailable");
     }
     const scope = reportingLedgerEffectivePeriod(page.snapshot.query, page.snapshot.ledgerAsOf);

package/dist/lib/reporting/ledger/types.d.mts

@@ -722,6 +722,35 @@ export interface ReportingLedgerLeaseV1 {
     generation: number;
     expiresAt: string;
 }
+/**
+ * The writer's lease was lost before the commit completed.
+ *
+ * `ReportingLedgerLeaseLostError`, `ReportingLedgerPeriodRetiredError` and
+ * `ReportingLedgerContinuityError` are the errors every `ReportingLedgerStore` throws. The protocol
+ * layer recognizes them by `name`, so a store from another package (or another copy of the SDK) is
+ * understood as well as one built here. Store implementations should throw these classes.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare class ReportingLedgerLeaseLostError extends Error {
+    constructor(message?: string);
+}
+/**
+ * A planner or writer named a period whose ledger records were retired by retention.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare class ReportingLedgerPeriodRetiredError extends Error {
+    constructor(message?: string);
+}
+/**
+ * A revision continuity invariant failed (a gap or a fork in the revision chain).
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare class ReportingLedgerContinuityError extends Error {
+    constructor(message?: string);
+}
 export declare class ReportingLedgerSnapshotUnavailableError extends Error {
     constructor();
 }
@@ -732,10 +761,24 @@ export declare class ReportingConsumerStatusConflictError extends Error {
      */
     constructor(message?: string);
 }
+/**
+ * Recognizes a store-contract error by its `name`, not its class. A host that loads the SDK once through
+ * `require` and once through `import` holds two copies of every class, and a store from another package can
+ * be built against either, so `instanceof` would miss an error the store legitimately threw.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare function isReportingLedgerErrorNamed(error: unknown, name: 'ReportingLedgerSnapshotUnavailableError' | 'ReportingConsumerStatusConflictError' | 'ReportingLedgerIssueIntegrityError' | 'ReportingLedgerLeaseLostError' | 'ReportingLedgerPeriodRetiredError' | 'ReportingLedgerContinuityError'): boolean;
 /**
  * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
  */
 export interface ReportingLedgerStore {
+    /**
+     * Setup scripts the host applies before first use (SQL for a SQL store), in order and idempotent.
+     * `createReliableReportingService` surfaces them as `service.setup.migrations`. A store with nothing
+     * to install omits it.
+     */
+    readonly migrations?: readonly string[];
     /** Optional substrate identity for an add-on store that must prove shared authority. */
     readonly [REPORTING_LEDGER_AUTHORITY]?: ReportingLedgerAuthorityV1;
     /**

package/dist/lib/reporting/ledger/types.d.ts

@@ -722,6 +722,35 @@ export interface ReportingLedgerLeaseV1 {
     generation: number;
     expiresAt: string;
 }
+/**
+ * The writer's lease was lost before the commit completed.
+ *
+ * `ReportingLedgerLeaseLostError`, `ReportingLedgerPeriodRetiredError` and
+ * `ReportingLedgerContinuityError` are the errors every `ReportingLedgerStore` throws. The protocol
+ * layer recognizes them by `name`, so a store from another package (or another copy of the SDK) is
+ * understood as well as one built here. Store implementations should throw these classes.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare class ReportingLedgerLeaseLostError extends Error {
+    constructor(message?: string);
+}
+/**
+ * A planner or writer named a period whose ledger records were retired by retention.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare class ReportingLedgerPeriodRetiredError extends Error {
+    constructor(message?: string);
+}
+/**
+ * A revision continuity invariant failed (a gap or a fork in the revision chain).
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare class ReportingLedgerContinuityError extends Error {
+    constructor(message?: string);
+}
 export declare class ReportingLedgerSnapshotUnavailableError extends Error {
     constructor();
 }
@@ -732,10 +761,24 @@ export declare class ReportingConsumerStatusConflictError extends Error {
      */
     constructor(message?: string);
 }
+/**
+ * Recognizes a store-contract error by its `name`, not its class. A host that loads the SDK once through
+ * `require` and once through `import` holds two copies of every class, and a store from another package can
+ * be built against either, so `instanceof` would miss an error the store legitimately threw.
+ *
+ * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
+ */
+export declare function isReportingLedgerErrorNamed(error: unknown, name: 'ReportingLedgerSnapshotUnavailableError' | 'ReportingConsumerStatusConflictError' | 'ReportingLedgerIssueIntegrityError' | 'ReportingLedgerLeaseLostError' | 'ReportingLedgerPeriodRetiredError' | 'ReportingLedgerContinuityError'): boolean;
 /**
  * @experimental Reliable Reporting storage surface: breaking changes may ship in minor releases. See https://github.com/adcontextprotocol/adcp-client/blob/main/docs/guides/REPORTING-STABILITY.md
  */
 export interface ReportingLedgerStore {
+    /**
+     * Setup scripts the host applies before first use (SQL for a SQL store), in order and idempotent.
+     * `createReliableReportingService` surfaces them as `service.setup.migrations`. A store with nothing
+     * to install omits it.
+     */
+    readonly migrations?: readonly string[];
     /** Optional substrate identity for an add-on store that must prove shared authority. */
     readonly [REPORTING_LEDGER_AUTHORITY]?: ReportingLedgerAuthorityV1;
     /**

package/dist/lib/reporting/ledger/types.js

@@ -25,7 +25,11 @@ __export(types_exports, {
   REPORTING_CONSUMER_STATUS_MAX_BYTES: () => REPORTING_CONSUMER_STATUS_MAX_BYTES,
   REPORTING_LEDGER_AUTHORITY: () => REPORTING_LEDGER_AUTHORITY,
   ReportingConsumerStatusConflictError: () => ReportingConsumerStatusConflictError,
-  ReportingLedgerSnapshotUnavailableError: () => ReportingLedgerSnapshotUnavailableError
+  ReportingLedgerContinuityError: () => ReportingLedgerContinuityError,
+  ReportingLedgerLeaseLostError: () => ReportingLedgerLeaseLostError,
+  ReportingLedgerPeriodRetiredError: () => ReportingLedgerPeriodRetiredError,
+  ReportingLedgerSnapshotUnavailableError: () => ReportingLedgerSnapshotUnavailableError,
+  isReportingLedgerErrorNamed: () => isReportingLedgerErrorNamed
 });
 module.exports = __toCommonJS(types_exports);
 const REPORTING_LEDGER_AUTHORITY = /* @__PURE__ */ Symbol.for("@adcp/sdk/reporting-ledger-authority");
@@ -34,6 +38,24 @@ const REPORTING_CONSUMER_STATUS_ERROR_MESSAGE_MAX_BYTES = 1024;
 const REPORTING_CONSUMER_STATUS_MAX_BYTES = 64 * 1024;
 const REPORTING_CONSUMER_STATUS_BATCH_MAX_BYTES = 8 * 1024 * 1024;
 const REPORTING_CONSUMER_STATUS_BATCH_RESULT_MAX_BYTES = 64 * 1024;
+class ReportingLedgerLeaseLostError extends Error {
+  constructor(message = "Reporting ledger lease was lost before commit") {
+    super(message);
+    this.name = "ReportingLedgerLeaseLostError";
+  }
+}
+class ReportingLedgerPeriodRetiredError extends Error {
+  constructor(message = "Reporting obligation period was retired by retention") {
+    super(message);
+    this.name = "ReportingLedgerPeriodRetiredError";
+  }
+}
+class ReportingLedgerContinuityError extends Error {
+  constructor(message = "Reporting ledger revision continuity invariant failed") {
+    super(message);
+    this.name = "ReportingLedgerContinuityError";
+  }
+}
 class ReportingLedgerSnapshotUnavailableError extends Error {
   constructor() {
     super("Reporting ledger snapshot is unavailable");
@@ -50,6 +72,9 @@ class ReportingConsumerStatusConflictError extends Error {
     this.name = "ReportingConsumerStatusConflictError";
   }
 }
+function isReportingLedgerErrorNamed(error, name) {
+  return error instanceof Error && error.name === name;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   REPORTING_CONSUMER_STATUS_BATCH_MAX_BYTES,
@@ -59,5 +84,9 @@ class ReportingConsumerStatusConflictError extends Error {
   REPORTING_CONSUMER_STATUS_MAX_BYTES,
   REPORTING_LEDGER_AUTHORITY,
   ReportingConsumerStatusConflictError,
-  ReportingLedgerSnapshotUnavailableError
+  ReportingLedgerContinuityError,
+  ReportingLedgerLeaseLostError,
+  ReportingLedgerPeriodRetiredError,
+  ReportingLedgerSnapshotUnavailableError,
+  isReportingLedgerErrorNamed
 });

package/dist/lib/reporting/ledger/types.mjs

@@ -4,6 +4,24 @@ const REPORTING_CONSUMER_STATUS_ERROR_MESSAGE_MAX_BYTES = 1024;
 const REPORTING_CONSUMER_STATUS_MAX_BYTES = 64 * 1024;
 const REPORTING_CONSUMER_STATUS_BATCH_MAX_BYTES = 8 * 1024 * 1024;
 const REPORTING_CONSUMER_STATUS_BATCH_RESULT_MAX_BYTES = 64 * 1024;
+class ReportingLedgerLeaseLostError extends Error {
+  constructor(message = "Reporting ledger lease was lost before commit") {
+    super(message);
+    this.name = "ReportingLedgerLeaseLostError";
+  }
+}
+class ReportingLedgerPeriodRetiredError extends Error {
+  constructor(message = "Reporting obligation period was retired by retention") {
+    super(message);
+    this.name = "ReportingLedgerPeriodRetiredError";
+  }
+}
+class ReportingLedgerContinuityError extends Error {
+  constructor(message = "Reporting ledger revision continuity invariant failed") {
+    super(message);
+    this.name = "ReportingLedgerContinuityError";
+  }
+}
 class ReportingLedgerSnapshotUnavailableError extends Error {
   constructor() {
     super("Reporting ledger snapshot is unavailable");
@@ -20,6 +38,9 @@ class ReportingConsumerStatusConflictError extends Error {
     this.name = "ReportingConsumerStatusConflictError";
   }
 }
+function isReportingLedgerErrorNamed(error, name) {
+  return error instanceof Error && error.name === name;
+}
 export {
   REPORTING_CONSUMER_STATUS_BATCH_MAX_BYTES,
   REPORTING_CONSUMER_STATUS_BATCH_RESULT_MAX_BYTES,
@@ -28,5 +49,9 @@ export {
   REPORTING_CONSUMER_STATUS_MAX_BYTES,
   REPORTING_LEDGER_AUTHORITY,
   ReportingConsumerStatusConflictError,
-  ReportingLedgerSnapshotUnavailableError
+  ReportingLedgerContinuityError,
+  ReportingLedgerLeaseLostError,
+  ReportingLedgerPeriodRetiredError,
+  ReportingLedgerSnapshotUnavailableError,
+  isReportingLedgerErrorNamed
 };

package/dist/lib/reporting/pagination.d.mts

@@ -0,0 +1,6 @@
+/**
+ * The largest `pagination.max_results` AdCP allows (`core/pagination-request.json`), read from the generated
+ * schema so a protocol change carries through. The reporting walkers ask for pages this large: a seller that
+ * validates the schema answers 50 rows when `max_results` is omitted.
+ */
+export declare function reportingMaxPageSize(): number;

package/dist/lib/reporting/pagination.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The largest `pagination.max_results` AdCP allows (`core/pagination-request.json`), read from the generated
+ * schema so a protocol change carries through. The reporting walkers ask for pages this large: a seller that
+ * validates the schema answers 50 rows when `max_results` is omitted.
+ */
+export declare function reportingMaxPageSize(): number;

package/dist/lib/reporting/{gcs/errors.js → pagination.js}

@@ -16,26 +16,21 @@ var __copyProps = (to, from, except, desc) => {
   return to;
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var errors_exports = {};
-__export(errors_exports, {
-  ReportingGcsFenceError: () => ReportingGcsFenceError,
-  isReportingGcsFenceError: () => isReportingGcsFenceError
+var pagination_exports = {};
+__export(pagination_exports, {
+  reportingMaxPageSize: () => reportingMaxPageSize
 });
-module.exports = __toCommonJS(errors_exports);
-class ReportingGcsFenceError extends Error {
-  constructor(code) {
-    super(`Reporting GCS fence: ${code}`);
-    this.code = code;
-    this.name = "ReportingGcsFenceError";
-    Object.defineProperty(this, /* @__PURE__ */ Symbol.for("adcp.reportingGcsFenceError"), { value: true });
+module.exports = __toCommonJS(pagination_exports);
+var import_schemas = require('../types/schemas.generated.js');
+function reportingMaxPageSize() {
+  const field = import_schemas.PaginationRequestSchema.shape.max_results;
+  const maximum = field.unwrap().maxValue;
+  if (maximum === null || !Number.isSafeInteger(maximum) || maximum < 1) {
+    throw new Error("The AdCP pagination-request schema does not define a maximum for max_results");
   }
-  code;
-}
-function isReportingGcsFenceError(error) {
-  return !!error && typeof error === "object" && error[/* @__PURE__ */ Symbol.for("adcp.reportingGcsFenceError")] === true;
+  return maximum;
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  ReportingGcsFenceError,
-  isReportingGcsFenceError
+  reportingMaxPageSize
 });

package/dist/lib/reporting/pagination.mjs

@@ -0,0 +1,12 @@
+import { PaginationRequestSchema } from "../types/schemas.generated.mjs";
+function reportingMaxPageSize() {
+  const field = PaginationRequestSchema.shape.max_results;
+  const maximum = field.unwrap().maxValue;
+  if (maximum === null || !Number.isSafeInteger(maximum) || maximum < 1) {
+    throw new Error("The AdCP pagination-request schema does not define a maximum for max_results");
+  }
+  return maximum;
+}
+export {
+  reportingMaxPageSize
+};

package/dist/lib/reporting/reconciliation.d.mts

@@ -82,6 +82,7 @@ export interface ReportingReconciliationClient {
         account?: GetReportingStatusRequest['account'];
         reporting_revision_id: string;
         pagination?: {
+            max_results?: number;
             cursor?: string;
         };
     }, options?: {

package/dist/lib/reporting/reconciliation.d.ts

@@ -82,6 +82,7 @@ export interface ReportingReconciliationClient {
         account?: GetReportingStatusRequest['account'];
         reporting_revision_id: string;
         pagination?: {
+            max_results?: number;
             cursor?: string;
         };
     }, options?: {

package/dist/lib/reporting/reconciliation.js

@@ -30,6 +30,7 @@ module.exports = __toCommonJS(reconciliation_exports);
 var import_crypto = require("crypto");
 var import_idempotency = require('../utils/idempotency.js');
 var import_jcs = require('../utils/jcs.js');
+var import_pagination = require('./pagination.js');
 var import_content_mismatch = require('./content-mismatch.js');
 var import_evidence = require('./evidence.js');
 var import_inspection = require('./inspection.js');
@@ -319,7 +320,7 @@ async function loadReportingLedger(client, request, maxSnapshotRestarts = 2, lim
             {
               ...request,
               view: "periods",
-              ...cursor ? { pagination: { cursor } } : {}
+              pagination: { max_results: (0, import_pagination.reportingMaxPageSize)(), ...cursor ? { cursor } : {} }
             },
             { signal }
           ),
@@ -2040,7 +2041,7 @@ async function consumeReportingRevision(options, reportingRevisionId, deadline,
           {
             ...options.request.account ? { account: options.request.account } : {},
             reporting_revision_id: reportingRevisionId,
-            ...cursor ? { pagination: { cursor } } : {}
+            pagination: { max_results: (0, import_pagination.reportingMaxPageSize)(), ...cursor ? { cursor } : {} }
           },
           { signal }
         ),

package/dist/lib/reporting/reconciliation.mjs

@@ -1,6 +1,7 @@
 import { createHash } from "crypto";
 import { generateIdempotencyKey } from "../utils/idempotency.mjs";
 import { canonicalize } from "../utils/jcs.mjs";
+import { reportingMaxPageSize } from "./pagination.mjs";
 import {
   detectReportingContentMismatch
 } from "./content-mismatch.mjs";
@@ -295,7 +296,7 @@ async function loadReportingLedger(client, request, maxSnapshotRestarts = 2, lim
             {
               ...request,
               view: "periods",
-              ...cursor ? { pagination: { cursor } } : {}
+              pagination: { max_results: reportingMaxPageSize(), ...cursor ? { cursor } : {} }
             },
             { signal }
           ),
@@ -2016,7 +2017,7 @@ async function consumeReportingRevision(options, reportingRevisionId, deadline,
           {
             ...options.request.account ? { account: options.request.account } : {},
             reporting_revision_id: reportingRevisionId,
-            ...cursor ? { pagination: { cursor } } : {}
+            pagination: { max_results: reportingMaxPageSize(), ...cursor ? { cursor } : {} }
           },
           { signal }
         ),