@adcp/sdk 16.0.0-beta.6 → 16.0.0-beta.7

package/dist/lib/validation/schema-loader.mjs

@@ -701,28 +701,108 @@ function hasSchemaBundle(version) {
     return false;
   }
 }
-const SERVED_RELEASE_MAJOR = /^(\d+)\.\d+(?:-[a-zA-Z0-9.-]+)?$/;
-const NUMERIC_PIN_MAJOR = /^(\d+)\.\d+/;
-function resolveServedValidationVersion(response, pinnedVersion) {
-  const pinMajor = NUMERIC_PIN_MAJOR.exec(pinnedVersion)?.[1];
-  if (pinMajor === void 0) return pinnedVersion;
+const servedReleaseSchemaRootScope = new AsyncLocalStorage();
+const servedReleaseRootAliases = /* @__PURE__ */ new Map();
+function withServedReleaseSchemaRoots(roots, fn) {
+  if (roots === void 0) return fn();
+  if (roots === null || typeof roots !== "object" || Array.isArray(roots)) {
+    throw new TypeError("servedReleaseSchemaRoots must be an object mapping AdCP versions to schema roots");
+  }
+  const entries = [];
+  for (const [version, root] of Object.entries(roots)) {
+    resolveBundleKey(version);
+    if (typeof root !== "string" || root.length === 0) {
+      throw new TypeError(`servedReleaseSchemaRoots["${version}"] must be a non-empty schema root path`);
+    }
+    const memoKey = `${version}\0${root}`;
+    let aliases = servedReleaseRootAliases.get(memoKey);
+    if (!aliases) {
+      if (!hasSchemaRootShape(root)) {
+        throw new Error(`Served-release AdCP schema root for version "${version}" not found or empty at ${root}`);
+      }
+      aliases = assertSchemaRootMatchesVersion(version, root);
+      servedReleaseRootAliases.set(memoKey, aliases);
+    }
+    const conflict = entries.find((entry) => entry.root !== root && [...aliases].some((alias) => entry.aliases.has(alias)));
+    if (conflict) {
+      throw new Error(
+        `servedReleaseSchemaRoots["${version}"] and servedReleaseSchemaRoots["${conflict.version}"] name the same release with different schema roots (${root}, ${conflict.root})`
+      );
+    }
+    entries.push({ version, root, aliases });
+  }
+  if (entries.length === 0) return fn();
+  const parent = servedReleaseSchemaRootScope.getStore() ?? [];
+  return servedReleaseSchemaRootScope.run([...entries, ...parent], fn);
+}
+function findServedReleaseSchemaRoot(release) {
+  const entries = servedReleaseSchemaRootScope.getStore();
+  if (!entries?.length) return void 0;
+  let key;
   try {
-    if (isExternalSchemaRootActive(pinnedVersion)) return pinnedVersion;
+    key = resolveBundleKey(release);
   } catch {
-    return pinnedVersion;
+    return void 0;
   }
-  const echoed = response !== null && typeof response === "object" ? response.adcp_version : void 0;
-  if (typeof echoed !== "string") return pinnedVersion;
+  return entries.find((entry) => entry.aliases.has(key) || entry.aliases.has(release));
+}
+const SERVED_RELEASE_MAJOR = /^(\d+)\.\d+(?:-[a-zA-Z0-9.-]+)?$/;
+const NUMERIC_PIN_MAJOR = /^(\d+)\.\d+/;
+function listsSupportedRelease(response, release) {
+  const adcp = response.adcp;
+  if (adcp === null || typeof adcp !== "object") return false;
+  const supported = adcp.supported_versions;
+  if (!Array.isArray(supported)) return false;
+  return supported.some((entry) => {
+    if (typeof entry !== "string") return false;
+    if (entry === release) return true;
+    try {
+      return toReleasePrecisionWire(entry) === release;
+    } catch {
+      return false;
+    }
+  });
+}
+function selectServedValidationVersion(response, pinnedVersion) {
+  const pin = { version: pinnedVersion };
+  const pinMajor = NUMERIC_PIN_MAJOR.exec(pinnedVersion)?.[1];
+  if (pinMajor === void 0) return pin;
+  if (response === null || typeof response !== "object") return pin;
+  const echoed = response.adcp_version;
+  if (typeof echoed !== "string") return pin;
   const echoMajor = SERVED_RELEASE_MAJOR.exec(echoed)?.[1];
-  if (echoMajor === void 0 || echoMajor !== pinMajor) return pinnedVersion;
+  if (echoMajor === void 0 || echoMajor !== pinMajor) return pin;
   let pinnedRelease;
   try {
     pinnedRelease = toReleasePrecisionWire(pinnedVersion);
+  } catch {
+    return pin;
+  }
+  if (echoed === pinnedRelease) return pin;
+  if (!listsSupportedRelease(response, echoed)) return pin;
+  const served = findServedReleaseSchemaRoot(echoed);
+  if (served) return { version: echoed, served };
+  return hasSchemaBundle(echoed) ? { version: echoed } : pin;
+}
+function resolveServedValidationVersion(response, pinnedVersion) {
+  try {
+    return selectServedValidationVersion(response, pinnedVersion).version;
   } catch {
     return pinnedVersion;
   }
-  if (echoed === pinnedRelease) return pinnedVersion;
-  return hasSchemaBundle(echoed) ? echoed : pinnedVersion;
+}
+function withServedValidationVersion(response, pinnedVersion, fn) {
+  let selection;
+  try {
+    selection = selectServedValidationVersion(response, pinnedVersion);
+  } catch {
+    selection = { version: pinnedVersion };
+  }
+  const { version, served } = selection;
+  if (!served) return fn(version);
+  const next = new Map(scopedExternalSchemaRoots.getStore());
+  for (const alias of served.aliases) next.set(alias, served.root);
+  return scopedExternalSchemaRoots.run(next, () => fn(version));
 }
 const mcpToolSchemaCache = /* @__PURE__ */ new Map();
 const mcpToolSummaryCache = /* @__PURE__ */ new Map();
@@ -994,5 +1074,7 @@ export {
   unregisterExternalSchemaRoot,
   validateAdcpVersionWire,
   withExternalSchemaRoot,
-  withIdentity33SchemaScope
+  withIdentity33SchemaScope,
+  withServedReleaseSchemaRoots,
+  withServedValidationVersion
 };

package/dist/lib/version.d.mts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "16.0.0-beta.6";
+export declare const LIBRARY_VERSION = "16.0.0-beta.7";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "16.0.0-beta.6";
+    readonly library: "16.0.0-beta.7";
     readonly adcp: "3.2.5";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5"];
-    readonly generatedAt: "2026-10-16T23:00:08.396Z";
+    readonly generatedAt: "2026-10-17T13:58:28.444Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "16.0.0-beta.6";
+export declare const LIBRARY_VERSION = "16.0.0-beta.7";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "16.0.0-beta.6";
+    readonly library: "16.0.0-beta.7";
     readonly adcp: "3.2.5";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5"];
-    readonly generatedAt: "2026-10-16T23:00:08.396Z";
+    readonly generatedAt: "2026-10-17T13:58:28.444Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js

@@ -31,7 +31,7 @@ __export(version_exports, {
   toReleasePrecisionVersion: () => toReleasePrecisionVersion
 });
 module.exports = __toCommonJS(version_exports);
-const LIBRARY_VERSION = "16.0.0-beta.6";
+const LIBRARY_VERSION = "16.0.0-beta.7";
 const ADCP_VERSION = "3.2.5";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -104,10 +104,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.5"
 ];
 const VERSION_INFO = {
-  library: "16.0.0-beta.6",
+  library: "16.0.0-beta.7",
   adcp: "3.2.5",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-16T23:00:08.396Z"
+  generatedAt: "2026-10-17T13:58:28.444Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/dist/lib/version.mjs

@@ -1,4 +1,4 @@
-const LIBRARY_VERSION = "16.0.0-beta.6";
+const LIBRARY_VERSION = "16.0.0-beta.7";
 const ADCP_VERSION = "3.2.5";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -71,10 +71,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.5"
 ];
 const VERSION_INFO = {
-  library: "16.0.0-beta.6",
+  library: "16.0.0-beta.7",
   adcp: "3.2.5",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-16T23:00:08.396Z"
+  generatedAt: "2026-10-17T13:58:28.444Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/docs/TYPE-SUMMARY.md

@@ -1,7 +1,7 @@
 # AdCP Type Summary
 
-> Generated at: 2026-10-16
-> @adcp/sdk v16.0.0-beta.6
+> Generated at: 2026-10-17
+> @adcp/sdk v16.0.0-beta.7
 
 Curated reference of the types that matter for using the AdCP client. For full generated types see `src/lib/types/tools.generated.ts` and `src/lib/types/core.generated.ts`.
 

package/docs/guides/VALIDATE-YOUR-AGENT.md

@@ -187,6 +187,40 @@ await comply(agentUrl, {
 });
 ```
 
+**Capabilities served at a newer release.** A 3.0 pin sends only
+`adcp_major_version: 3`, so a conformant agent may serve and echo its highest
+3.x release in `get_adcp_capabilities` (versioning spec, "Server echoes"). The
+runner validates that one response against the echoed release when the echo is
+the pin's major, is listed in the response's own `adcp.supported_versions`, and
+has a schema root. That covers discovery's `capabilities_response_schema_invalid`
+notices, `getAdcpCapabilities()` and every storyboard `response_schema` check on
+`get_adcp_capabilities`, even with `schemaRoot` set for the pin. Otherwise it
+validates strictly against the pin. Every other task's response, storyboard
+selection, the run's `adcp_version` and grading stay on the pin.
+
+The echoed release's schemas come from the SDK's bundle by default. A grader
+that ships its own roots per release can supply them with
+`servedReleaseSchemaRoots` (on `comply()`, `runStoryboard()` and
+`runStoryboardStep()`), keyed by AdCP version:
+
+```ts
+await comply(agentUrl, {
+  version: '3.0.27',
+  complianceDir: '/app/dist/compliance/3.0.27',
+  schemaRoot: '/app/dist/schemas/3.0.27',
+  servedReleaseSchemaRoots: {
+    '3.1.29': '/app/dist/schemas/3.1.29',
+    '3.2.5': '/app/dist/schemas/3.2.5',
+  },
+});
+```
+
+Those roots are used only for that capabilities validation. Each one is checked
+against its key once per process, and a mismatched or missing root throws
+before the run starts. Callers that validate outside `comply()` and the runner
+can scope the same map with `withServedReleaseSchemaRoots(roots, fn)` from
+`@adcp/sdk/testing`.
+
 **Multi-agent storyboards under `comply()`.** `comply()` grades one agent, so
 storyboards that declare `requires: [multi_agent]` (for example the
 governance-aware seller scenarios) skip with `requirement_unmet` and cap their

package/docs/llms.txt

@@ -1,7 +1,7 @@
 # Ad Context Protocol (AdCP)
 
-> Generated at: 2026-10-16
-> Library: @adcp/sdk v16.0.0-beta.6
+> Generated at: 2026-10-17
+> Library: @adcp/sdk v16.0.0-beta.7
 > AdCP major version: 3
 > Canonical URL: https://adcontextprotocol.github.io/adcp-client/llms.txt
 > Note: the `Library` stamp reflects the package.json version at doc-generation time. The narrative below describes the surface that lands on the next-published minor — including any 6.7 helpers documented here ahead of the release tag.

package/docs/migration-14.x-rc-worksheet.md

@@ -16,8 +16,8 @@ pin using `ADCP_VERSION` inside that tarball.
 
 | Fact | Value |
 | --- | --- |
-| Checkout `package.json` version | `@adcp/sdk@16.0.0-beta.6` |
-| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@16.0.0-beta.6 dist.integrity` |
+| Checkout `package.json` version | `@adcp/sdk@16.0.0-beta.7` |
+| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@16.0.0-beta.7 dist.integrity` |
 | Node.js runtime | `^20.19.0 || >=22.12.0` |
 | Default AdCP wire release | `3.2.5` |
 | Maintained wire releases | `v2.5`, `v2.6`, `v3`, `3.0.0`, `3.0`, `3.0.1`, `3.0.2`, `3.0.3`, `3.0.4`, `3.0.5`, `3.0.6`, `3.0.7`, `3.0.8`, `3.0.9`, `3.0.10`, `3.0.11`, `3.0.12`, `3.0.13`, `3.0.14`, `3.0.15`, `3.0.16`, `3.0.17`, `3.0.18`, `3.0.19`, `3.0.20`, `3.0.21`, `3.0.22`, `3.0.23`, `3.0.24`, `3.0.25`, `3.1.0`, `3.1`, `3.1.1`, `3.1.2`, `3.1.3`, `3.1.4`, `3.1.5`, `3.1.6`, `3.1.7`, `3.1.8`, `3.1.9`, `3.1.10`, `3.1.11`, `3.1.12`, `3.1.13`, `3.1.14`, `3.1.15`, `3.1.16`, `3.1.17`, `3.1.18`, `3.1.19`, `3.1.20`, `3.1.21`, `3.1.22`, `3.1.23`, `3.1.24`, `3.1.25`, `3.1.26`, `3.1.27`, `3.1.28`, `3.1.29`, `3.2.1`, `3.2`, `3.2.2`, `3.2.3`, `3.2.4`, `3.2.5` |
@@ -26,8 +26,8 @@ pin using `ADCP_VERSION` inside that tarball.
 For a checkout at the published release commit, install the exact package version:
 
 ```bash
-npm install --save-exact '@adcp/sdk@16.0.0-beta.6'
-npm view '@adcp/sdk@16.0.0-beta.6' dist.integrity
+npm install --save-exact '@adcp/sdk@16.0.0-beta.7'
+npm view '@adcp/sdk@16.0.0-beta.7' dist.integrity
 ```
 
 ### Required and optional peers

package/docs/migration-agent-identity-3.3.md

@@ -123,13 +123,21 @@ seller must advertise `request_signing.profiles` containing `web-bot-auth`.
 Provider configurations additionally supply `public_key`; the provider's
 thumbprint kid and algorithm must match that public key. The wrapper signs the
 final UTF-8 body, covers the selected `Signature-Agent` member and digest,
-uses a fresh nonce, and refuses automatic HTTP redirects. `signWebBotAuth`
-also supports `relay: true` with a new label; the verifier validates every
-layer regardless of dictionary ordering.
+uses a fresh 64-byte nonce, and refuses automatic HTTP redirects. A request
+carries exactly one `web-bot-auth` signature and one `Signature-Agent` member:
+relays were removed from the profile, `signWebBotAuth` throws on `relay: true`
+and on a request that already carries signature fields, and the verifier
+answers a second signature (of any profile) or a second `Signature-Agent`
+member with 403. Signing keys are Ed25519 or RSA-PSS-SHA512 (2048 to 4096
+bits, e = 65537); ES256 stays on the AdCP RFC 9421 profile, and
+`createWebBotAuthFetch`, `createWebhookEmitter` and `createAdcpServer` refuse
+a P-256 Web Bot Auth key at wire-up.
 
 `SignatureDirectoryResolver` derives the directory from the covered canonical
-origin. It validates a possession signature for every key and the exact body
-digest before caching keys. Its audit proof retains the signed body and
+origin. Directories must be signed (WBA Appendix B.1): it validates a
+possession signature for every key, covering `"@authority";req` and
+`content-digest`, and the exact body digest before caching keys. An unsigned
+directory is a discovery failure. Its audit proof retains the signed body and
 headers. Verification requires this resolver so context-free JWKS adapters cannot
 attribute a key to an arbitrary origin. Discovery uses HTTPS, DNS pinning, no redirects, a 256 KiB cap, a
 5-second connect bound and 10-second total bound, at most 64 keys, and bounded
@@ -147,7 +155,8 @@ Serve the exact JWS at `/.well-known/governance-revocations.json` and refresh it
 before `next_update` (the command defaults to five minutes). Pass `--snapshot`
 to sign a list of revoked key thumbprints and optional reasons/dates.
 `createSignedOriginRevocationList` provides the same authoring API. The SDK
-supports Ed25519 and P-256 identity keys. Observed key revocations are permanent;
+signs and verifies revocation lists with directory keys: EdDSA for Ed25519 keys
+and PS512 for RSA keys (a P-256 key cannot be published in a key directory). Observed key revocations are permanent;
 refresh failures use the last verified list only within the published grace
 window. Staleness follows the list's signed `next_update`, never the polling
 interval: the verifier re-polls at least every polling interval (at most 30
@@ -370,7 +379,7 @@ released schemas:
 
 | PR | Pinned head | Surface |
 | --- | --- | --- |
-| [7894](https://github.com/adcontextprotocol/adcp/pull/7894) | `656bd080f01cc2fca4a1e623af44e96cfd827ba5` | WBA wire profile, profile selectors, directory and request/relay vectors |
+| [7894](https://github.com/adcontextprotocol/adcp/pull/7894) | `e24eeb090c4365707641099cbbb45f9945c6d6e0` | WBA wire profile (`wba-profile.mdx`), profile selectors, directory and request vectors |
 | [8121](https://github.com/adcontextprotocol/adcp/pull/8121) | `f5973ac0267b1b94d714c55fc4e3ad8fc2511350` | Origin identity and key-free trust v1 |
 | [8162](https://github.com/adcontextprotocol/adcp/pull/8162) | `5c9914c5c382cc32f3d2ad7842942e548c414705` | Ratified identity, coexistence, revocation |
 | [8168](https://github.com/adcontextprotocol/adcp/pull/8168) | `45540941dfd61e80ab8a463f780cb147c82a32f0` | Relationship and principal response arms |
@@ -378,8 +387,14 @@ released schemas:
 | [8170](https://github.com/adcontextprotocol/adcp/pull/8170) | `8d3591e70e9a717c7fdfb513360a796fba24ca9a` | Onboarding additions only; its old trust key fields are excluded |
 | [8177](https://github.com/adcontextprotocol/adcp/pull/8177) | `b663f8e4235fe4276c73fb9bac6db491b2252bbf` | Reporting authentication omission |
 
-Ratified R2 defaults replay to 429. Older vector negative/002 expects 403;
-`replayStatus: 403` is an explicit compatibility test option, not the default.
+The vectors in `test/fixtures/wba-profile/` are byte-identical to #7894 at that
+head and are all graded except the governance-token vectors (see `PINNED.json`).
+
+Verification runs in Cloudflare's `http-message-sig` (signature base, coverage,
+window, algorithm and cryptographic checks); the SDK adds the profile rules in
+front of it (one signature, one covered `Signature-Agent` member, the nonce and
+lifetime rules, key lookup by origin and thumbprint) and replay state behind it.
+`verifyKeyDirectory` and `verifySignatureDirectory` now return promises.
 
 Verifier outcomes follow DR-0023 and WBA §5.5/§6.10. `verifyWebBotAuth` needs
 only key discovery and a replay store and returns the verified origins;
@@ -387,20 +402,39 @@ revocation, bindings and the origin-binding fence run afterwards in the
 identity layer (`createIdentity33PrincipalResolver({ lifecycle, revocation })`),
 so verification can run in a CDN or middleware in front of the AdCP server.
 
-- Signature-path errors are WBA statuses and headers only: 400 for a field that
-  does not parse, 403 with `Accept-Signature` for a signature that does not
-  verify, 429 for a replayed nonce. Any AdCP body is the generic authentication
-  error (`AUTH_INVALID`); the specific reason is logged, never sent.
+- Signature-path errors are WBA statuses and headers only: 400 when
+  `Signature`, `Signature-Input` or `Signature-Agent` does not parse as a
+  Structured Field; 403 with `Accept-Signature` for every other signature or
+  profile failure (a wrongly typed parameter, a short nonce, an uncovered or
+  extra `Signature-Agent` member); 429 with `Accept-Signature` carrying a fresh
+  `nonce` for a reused signature or nonce. `Accept-Signature` names the label,
+  the required components and `created;expires;nonce;keyid;alg;tag`. Any AdCP
+  body is the generic authentication error (`AUTH_INVALID`); the specific
+  reason is logged, never sent. A 429 for local load shedding (directory fetch
+  limiter, replay-store `rate_abuse`) carries `Retry-After` instead.
+- Every signed request carries `created`, `expires` (at most 300 seconds
+  later), `keyid`, `alg` (`ed25519` or `rsa-pss-sha512`) and a `nonce` of 64
+  bytes, unpadded Base64URL or canonical padded Base64 (Cloudflare's default).
+  The former 16-byte floor is gone: a shorter nonce is a 403. Replay state is
+  keyed on the nonce bytes, so the two encodings of one nonce collide.
+- `replayStatus` is deprecated and has no effect: a replay is always 429.
+- An unsigned request to an operation in `required_for`, from a caller with no
+  other accepted credential, is answered by what the verifier advertises in
+  `request_signing.profiles`: `['web-bot-auth']` alone gets 403 with
+  `Accept-Signature`; alongside `adcp/request-signing/v1` the AdCP RFC 9421 401
+  `request_signature_required` also carries `Accept-Signature`. Both
+  `createAdcpServer({ signedRequests: { webBotAuth } })` and
+  `requireSignatureWhenPresent(verifySignatureAsAuthenticator({ webBotAuth }), ...)`
+  apply this; a valid fallback credential still satisfies `required_for`.
 - A key-directory fetch failure (transport error or any non-200, 404/410/5xx
   included) is a discovery failure. It never evicts a cached, unexpired
   directory, which keeps verifying. Without one the request is unverified and
   answered 403 with `Accept-Signature` (the SDK's default unverified-request
   policy). A fetched directory without the key is a signature failure.
-- Plain JWKS directories without Appendix B signatures are accepted, with every
-  key checked against its RFC 7638 thumbprint; pass
-  `requireSignedDirectories: true` to the resolver to refuse them. An unsigned
-  directory keeps verifying through failed refreshes for at most
-  `maxUnsignedDirectoryAgeSeconds` (default one day).
+- Key directories must be signed and served as
+  `application/http-message-signatures-directory+json`; a plain JWKS is a
+  discovery failure. `requireSignedDirectories` and
+  `maxUnsignedDirectoryAgeSeconds` are deprecated and have no effect.
 - A revoked key is 403 with the generic authentication error and no
   `Accept-Signature`: the signer must stop using that key. Revocation status
   `unknown` (stale past grace) leaves the identity unverified (403 with
@@ -420,11 +454,14 @@ so verification can run in a CDN or middleware in front of the AdCP server.
   back off on 429 or 503.
 - `@target-uri` and `@authority` are taken from the target URI as received
   (RFC 9421 §2.2.2), never canonicalized; canonical origins identify the signer
-  only. Default nonces are 64 bytes (draft §4.2). Ed25519, ECDSA P-256 and
-  RSA-PSS-SHA512 keys are supported. `test/fixtures/wba-interop/` holds fixtures
-  verified in both directions against Cloudflare's `web-bot-auth`.
-Older #7894 governance vectors propose a superseded migration and are retained
-with their non-applicability recorded in `test/fixtures/wba-profile/PINNED.json`.
+  only. Ed25519 and RSA-PSS-SHA512 keys are supported; RSA-PSS uses WebCrypto
+  where the runtime has it, so it also works on Cloudflare workerd.
+  `test/fixtures/wba-interop/` holds fixtures verified in both directions against
+  Cloudflare's `web-bot-auth`; they already used signed directories and are
+  unchanged.
+The #7894 governance-token vectors are vendored but not graded: ratified R4
+keeps the RFC 9421 discovery chain for governance through 3.3, and the profile
+page leaves document signing to a separate decision. `PINNED.json` records this.
 The buyer default onboarding field is `profiles.adcp.onboarding`, matching the
 schema; the design's `record_profiles` wording names the schema definition.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adcp/sdk",
-  "version": "16.0.0-beta.6",
+  "version": "16.0.0-beta.7",
   "description": "AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)",
   "workspaces": [
     ".",