@adcp/sdk 16.0.0-beta.7 → 16.0.0-beta.8

package/dist/lib/registry/index.mjs

@@ -1,3 +1,5 @@
+import { validatePublisherDomain, IdentifierValidationError } from "../identifiers.mjs";
+export * from "../identifiers.mjs";
 import { validateSupplyPathRequest, assertRegistrySupplyPathResult } from "../supply-path/validation.mjs";
 import { openFeedStream } from "./feed-stream.mjs";
 import { RegistrySync } from "./sync.mjs";
@@ -22,6 +24,9 @@ const ERROR_BODY_PREVIEW_CHARS = 200;
 const MAX_BRAND_BULK_DOMAINS = 25;
 const MAX_BULK_DOMAINS = 100;
 const MAX_CHECK_DOMAINS = 1e4;
+const MAX_RESOLVE_IDENTIFIERS = 1e4;
+const DEFAULT_RESOLVE_REQUEST_BYTES = 1024 * 1024;
+const DEFAULT_RESOLVE_RESPONSE_BYTES = 16 * 1024 * 1024;
 const COMMUNITY_MIRROR_PLATFORM_RE = /^[a-z0-9_-]{1,64}$/;
 const MAX_REGISTRY_ERROR_DETAILS_BYTES = 64 * 1024;
 const MAX_RETRY_AFTER_MS = 2147483647;
@@ -274,7 +279,15 @@ class RegistryClient {
   }
   /** Save or update a hosted property. Requires authentication. */
   async saveProperty(property) {
-    if (!property?.publisher_domain?.trim()) throw new Error("publisher_domain is required");
+    if (typeof property?.publisher_domain !== "string" || !property.publisher_domain.trim()) {
+      throw new IdentifierValidationError(
+        "invalid_publisher_domain",
+        "publisher_domain",
+        "publisher_domain is required"
+      );
+    }
+    const domain = validatePublisherDomain(property.publisher_domain);
+    if (!domain.ok) throw domain.error;
     if (!this.apiKey) throw new Error("apiKey is required for save operations");
     const payload = this.normalizeSavePropertyRequest(property);
     return this.post(`${this.baseUrl}/api/properties/save`, payload);
@@ -306,17 +319,19 @@ class RegistryClient {
    */
   async saveProperties(properties, options) {
     const concurrency = options?.concurrency ?? 5;
-    const results = {};
+    if (!Number.isSafeInteger(concurrency) || concurrency < 1)
+      throw new RangeError("concurrency must be a positive integer");
+    const results = /* @__PURE__ */ Object.create(null);
     for (let i = 0; i < properties.length; i += concurrency) {
       const batch = properties.slice(i, i + concurrency);
       const settled = await Promise.allSettled(batch.map((p) => this.saveProperty(p)));
       for (let j = 0; j < batch.length; j++) {
         const domain = batch[j].publisher_domain;
         const s = settled[j];
-        results[domain] = s.status === "fulfilled" ? s.value : { error: String(s.reason) };
+        results[domain] = s.status === "fulfilled" ? s.value : { error: String(s.reason), ...s.reason instanceof Error ? { cause: s.reason } : {} };
       }
     }
-    return results;
+    return Object.fromEntries(Object.entries(results));
   }
   /**
    * Resolve catalog identifiers to stable property_rids.
@@ -325,11 +340,147 @@ class RegistryClient {
    */
   async resolveIdentifiers(request) {
     if (!request?.identifiers?.length) throw new Error("identifiers are required");
+    if (request.identifiers.length > MAX_RESOLVE_IDENTIFIERS) {
+      throw new RangeError("At most 10,000 identifiers are allowed; use resolveIdentifiersAll for larger lists");
+    }
     if ((request.mode ?? "resolve") !== "lookup" && !this.apiKey) {
       throw new Error("apiKey is required for resolveIdentifiers in resolve mode");
     }
     return this.post(`${this.baseUrl}/api/registry/resolve`, request);
   }
+  /**
+   * Bulk catalog registration (`resolve`, the default) or read-only `lookup`.
+   * Splits by identifier count and UTF-8 request bytes, bounds concurrency,
+   * and honors Retry-After on 429. Results retain input order and duplicates.
+   * Network/5xx failures are not retried: resolve contributions have additive
+   * activity logs even though identifier-to-RID mapping is idempotent.
+   */
+  async resolveIdentifiersAll(request, options = {}) {
+    const {
+      batchSize = MAX_RESOLVE_IDENTIFIERS,
+      maxRequestBytes = DEFAULT_RESOLVE_REQUEST_BYTES,
+      concurrency = 2,
+      maxRetries = 3,
+      maxRetryDelayMs = 6e4
+    } = options;
+    for (const [name, value, minimum] of [
+      ["batchSize", batchSize, 1],
+      ["maxRequestBytes", maxRequestBytes, 1],
+      ["concurrency", concurrency, 1],
+      ["maxRetries", maxRetries, 0],
+      ["maxRetryDelayMs", maxRetryDelayMs, 0]
+    ]) {
+      if (!Number.isSafeInteger(value) || value < minimum)
+        throw new RangeError(`${name} must be an integer >= ${minimum}`);
+    }
+    if (batchSize > MAX_RESOLVE_IDENTIFIERS) throw new RangeError("batchSize must not exceed 10,000");
+    if (!Array.isArray(request?.identifiers)) throw new TypeError("identifiers are required");
+    if ((request.mode ?? "resolve") !== "lookup" && !this.apiKey)
+      throw new Error("apiKey is required for resolveIdentifiers in resolve mode");
+    const { identifiers, ...envelope } = request;
+    const envelopeBytes = Buffer.byteLength(JSON.stringify({ ...envelope, identifiers: [] }), "utf8");
+    const outcomes = new Array(identifiers.length);
+    const batches = [];
+    let batch = { indexes: [], identifiers: [] };
+    let bytes = envelopeBytes;
+    for (const [index, identifier] of identifiers.entries()) {
+      if (!identifier || typeof identifier !== "object" || typeof identifier.type !== "string" || typeof identifier.value !== "string") {
+        outcomes[index] = {
+          index,
+          identifier,
+          success: false,
+          error: new TypeError("Identifier must contain string type and value")
+        };
+        continue;
+      }
+      const size = Buffer.byteLength(JSON.stringify(identifier), "utf8");
+      if (envelopeBytes + size > maxRequestBytes) {
+        outcomes[index] = {
+          index,
+          identifier,
+          success: false,
+          error: new RangeError("Identifier and provenance exceed maxRequestBytes")
+        };
+        continue;
+      }
+      if (batch.indexes.length && (batch.indexes.length >= batchSize || bytes + size + 1 > maxRequestBytes)) {
+        batches.push(batch);
+        batch = { indexes: [], identifiers: [] };
+        bytes = envelopeBytes;
+      }
+      bytes += size + (batch.indexes.length ? 1 : 0);
+      batch.indexes.push(index);
+      batch.identifiers.push(identifier);
+    }
+    if (batch.indexes.length) batches.push(batch);
+    let nextBatch = 0;
+    let retryNotBefore = 0;
+    let rateLimitFailure;
+    const worker = async () => {
+      while (nextBatch < batches.length) {
+        const current = batches[nextBatch++];
+        let response;
+        let failure;
+        for (let attempt = 0; attempt <= maxRetries; attempt++) {
+          if (rateLimitFailure) {
+            failure = rateLimitFailure;
+            break;
+          }
+          while (!rateLimitFailure && retryNotBefore > Date.now())
+            await new Promise(
+              (resolve) => setTimeout(resolve, Math.min(retryNotBefore - Date.now(), MAX_RETRY_AFTER_MS))
+            );
+          if (rateLimitFailure) {
+            failure = rateLimitFailure;
+            break;
+          }
+          try {
+            response = await this.resolveIdentifiers({ ...envelope, identifiers: current.identifiers });
+            if (!response || !Array.isArray(response.resolved)) {
+              throw new TypeError("Registry returned an invalid identifier resolution response");
+            }
+            break;
+          } catch (error) {
+            response = void 0;
+            failure = error instanceof Error ? error : new Error("Registry resolution failed");
+            if (!isRegistryRequestError(error) || error.status !== 429) break;
+            const delay = typeof error.retryAfterMs === "number" && Number.isFinite(error.retryAfterMs) && error.retryAfterMs >= 0 ? error.retryAfterMs : Math.min(1e3 * 2 ** attempt, 3e4);
+            if (delay > maxRetryDelayMs) {
+              rateLimitFailure = error;
+              break;
+            }
+            retryNotBefore = Math.max(retryNotBefore, Date.now() + delay);
+            if (attempt === maxRetries) break;
+          }
+        }
+        const entries = /* @__PURE__ */ new Map();
+        let malformedEntries = false;
+        for (const entry of response?.resolved ?? []) {
+          if (!entry || typeof entry !== "object" || !entry.identifier || typeof entry.identifier.type !== "string" || typeof entry.identifier.value !== "string" || entry.property_rid !== null && typeof entry.property_rid !== "string" || !["existing", "created", "excluded"].includes(entry.status)) {
+            malformedEntries = true;
+            continue;
+          }
+          const key = JSON.stringify([entry.identifier.type, entry.identifier.value]);
+          const group = entries.get(key) ?? [];
+          group.push(entry);
+          entries.set(key, group);
+        }
+        for (const index of current.indexes) {
+          const identifier = identifiers[index];
+          const group = entries.get(JSON.stringify([identifier.type, identifier.value]));
+          const entry = group && (group.length > 1 ? group.shift() : group[0]);
+          outcomes[index] = entry ? { index, identifier, success: true, result: entry } : {
+            index,
+            identifier,
+            success: false,
+            error: response ? malformedEntries ? new TypeError("Registry returned an invalid identifier resolution response") : new Error("Registry response omitted identifier") : failure
+          };
+        }
+      }
+    };
+    await Promise.all(Array.from({ length: Math.min(concurrency, batches.length) }, worker));
+    return outcomes;
+  }
   /** File a catalog fact dispute. Requires authentication. */
   async fileCatalogDispute(request) {
     if (!request?.subject_type?.trim()) throw new Error("subject_type is required");
@@ -1101,6 +1252,7 @@ class RegistryClient {
   bodyLimitForUrl(url) {
     if (this.hasCustomMaxBodyBytes) return this.maxBodyBytes;
     const path = new URL(url).pathname;
+    if (path === "/api/registry/resolve") return DEFAULT_RESOLVE_RESPONSE_BYTES;
     if (path === "/api/brands/registry" || path === "/api/brands/resolve/bulk" || path === "/api/properties/registry" || path === "/api/properties/resolve/bulk" || path === "/api/registry/agents" || path === "/api/registry/publishers" || path === "/api/registry/feed" || path === "/api/registry/mirrors" || path === "/api/registry/agents/search" || path === "/api/registry/authorizations" || path === "/api/registry/authorizations/snapshot" || path === "/api/search" || path === "/api/policies/registry" || path === "/api/policies/resolve/bulk" || path === "/api/public/discover-agent" || path === "/api/public/agent-formats" || path === "/api/public/agent-products" || path === "/api/public/validate-publisher" || path === "/api/registry/agents/storyboard-status" || path.startsWith("/api/registry/agents/") && path.endsWith("/storyboard-status") || path.startsWith("/api/registry/mirrors/") || path.startsWith("/api/properties/check")) {
       return DEFAULT_LARGE_RESPONSE_MAX_BODY_BYTES;
     }

package/dist/lib/registry/types.d.mts

@@ -150,6 +150,29 @@ export type ResolveIdentifiersRequest = Omit<RegistryResolveIdentifiersRequest,
 };
 /** Response from POST /api/registry/resolve (200) */
 export type ResolveIdentifiersResponse = operations['resolveIdentifiers']['responses']['200']['content']['application/json'];
+export interface ResolveIdentifiersAllOptions {
+    /** Per-request identifier cap, from 1 through the registry limit of 10,000. */
+    batchSize?: number;
+    /** UTF-8 JSON request cap including provenance and envelope. Default: 1 MiB. */
+    maxRequestBytes?: number;
+    /** Maximum simultaneous requests. Default: 2. */
+    concurrency?: number;
+    /** Retries for HTTP 429 only. Other failures are returned without retrying contributions. Default: 3. */
+    maxRetries?: number;
+    /** Maximum server-requested retry delay. Default: 60 seconds; longer rate limits return errors without early retries. */
+    maxRetryDelayMs?: number;
+}
+/** One outcome per input, in input order (including duplicates). */
+export type ResolveIdentifierOutcome = {
+    index: number;
+    identifier: ResolveIdentifiersRequest['identifiers'][number];
+} & ({
+    success: true;
+    result: ResolveIdentifiersResponse['resolved'][number];
+} | {
+    success: false;
+    error: Error;
+});
 /** Request body for POST /api/registry/catalog/disputes */
 export type FileCatalogDisputeRequest = NonNullable<operations['fileCatalogDispute']['requestBody']>['content']['application/json'];
 /** Response from POST /api/registry/catalog/disputes (200) */

package/dist/lib/registry/types.d.ts

@@ -150,6 +150,29 @@ export type ResolveIdentifiersRequest = Omit<RegistryResolveIdentifiersRequest,
 };
 /** Response from POST /api/registry/resolve (200) */
 export type ResolveIdentifiersResponse = operations['resolveIdentifiers']['responses']['200']['content']['application/json'];
+export interface ResolveIdentifiersAllOptions {
+    /** Per-request identifier cap, from 1 through the registry limit of 10,000. */
+    batchSize?: number;
+    /** UTF-8 JSON request cap including provenance and envelope. Default: 1 MiB. */
+    maxRequestBytes?: number;
+    /** Maximum simultaneous requests. Default: 2. */
+    concurrency?: number;
+    /** Retries for HTTP 429 only. Other failures are returned without retrying contributions. Default: 3. */
+    maxRetries?: number;
+    /** Maximum server-requested retry delay. Default: 60 seconds; longer rate limits return errors without early retries. */
+    maxRetryDelayMs?: number;
+}
+/** One outcome per input, in input order (including duplicates). */
+export type ResolveIdentifierOutcome = {
+    index: number;
+    identifier: ResolveIdentifiersRequest['identifiers'][number];
+} & ({
+    success: true;
+    result: ResolveIdentifiersResponse['resolved'][number];
+} | {
+    success: false;
+    error: Error;
+});
 /** Request body for POST /api/registry/catalog/disputes */
 export type FileCatalogDisputeRequest = NonNullable<operations['fileCatalogDispute']['requestBody']>['content']['application/json'];
 /** Response from POST /api/registry/catalog/disputes (200) */

package/dist/lib/schemas-data/v2.5/_provenance.json

@@ -4,5 +4,5 @@
   "source_sha": "4e553ad955f83b49c7d221ab5c3ff78237ad02e3",
   "source_tarball_sha256": "580656d6466ef9f0d1119985e6726c2efea718dc671e2ad30957fcb2fd54af0f",
   "upstream_adcp_version": "2.5.3",
-  "synced_at": "2026-10-17T14:29:51.574Z"
+  "synced_at": "2026-10-18T02:15:53.357Z"
 }

package/dist/lib/server/decisioning/specialisms/lists.d.mts

@@ -21,7 +21,7 @@
  * one-time fetch token sellers store in their secret manager; `delete_*`
  * revokes the token. Tokens are scoped per-seller for revocation.
  *
- * Status: Preview / 6.0.
+ * For standalone list-token reads, use registerPropertyListTool from @adcp/sdk/server.
  *
  * @public
  */
@@ -42,19 +42,19 @@ export type ListCollectionListsPayload = ServerPayload<ListCollectionListsRespon
 export type DeleteCollectionListPayload = ServerPayload<DeleteCollectionListResponse>;
 export interface PropertyListsPlatform<TCtxMeta = Record<string, unknown>> {
     /**
-     * Create a property list. Returns a `fetch_token` the buyer stores in
+     * Create a property list. Returns an `auth_token` the buyer stores in
      * their secret manager. Token is scoped to this list_id; MUST NOT be
      * reused across lists.
      */
     createPropertyList(req: CreatePropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<CreatePropertyListPayload>;
     /** Patch an existing property list. */
     updatePropertyList(req: UpdatePropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<UpdatePropertyListPayload>;
-    /** Read a property list by id. Sellers call this with the fetch_token. */
+    /** Read a property list by id. Sellers call this with the auth_token. */
     getPropertyList(req: GetPropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<GetPropertyListPayload>;
     /** Discover property lists the caller is authorized to read. */
     listPropertyLists(req: ListPropertyListsRequest, ctx: Ctx<TCtxMeta>): Promise<ListPropertyListsPayload>;
     /**
-     * Delete a property list. MUST revoke the fetch_token immediately and
+     * Delete a property list. MUST revoke the auth_token immediately and
      * signal cache invalidation to sellers (reduced cache_valid_until or
      * a list-changed webhook). Compromise-driven revocation MUST also
      * trigger this path.

package/dist/lib/server/decisioning/specialisms/lists.d.ts

@@ -21,7 +21,7 @@
  * one-time fetch token sellers store in their secret manager; `delete_*`
  * revokes the token. Tokens are scoped per-seller for revocation.
  *
- * Status: Preview / 6.0.
+ * For standalone list-token reads, use registerPropertyListTool from @adcp/sdk/server.
  *
  * @public
  */
@@ -42,19 +42,19 @@ export type ListCollectionListsPayload = ServerPayload<ListCollectionListsRespon
 export type DeleteCollectionListPayload = ServerPayload<DeleteCollectionListResponse>;
 export interface PropertyListsPlatform<TCtxMeta = Record<string, unknown>> {
     /**
-     * Create a property list. Returns a `fetch_token` the buyer stores in
+     * Create a property list. Returns an `auth_token` the buyer stores in
      * their secret manager. Token is scoped to this list_id; MUST NOT be
      * reused across lists.
      */
     createPropertyList(req: CreatePropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<CreatePropertyListPayload>;
     /** Patch an existing property list. */
     updatePropertyList(req: UpdatePropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<UpdatePropertyListPayload>;
-    /** Read a property list by id. Sellers call this with the fetch_token. */
+    /** Read a property list by id. Sellers call this with the auth_token. */
     getPropertyList(req: GetPropertyListRequest, ctx: Ctx<TCtxMeta>): Promise<GetPropertyListPayload>;
     /** Discover property lists the caller is authorized to read. */
     listPropertyLists(req: ListPropertyListsRequest, ctx: Ctx<TCtxMeta>): Promise<ListPropertyListsPayload>;
     /**
-     * Delete a property list. MUST revoke the fetch_token immediately and
+     * Delete a property list. MUST revoke the auth_token immediately and
      * signal cache invalidation to sellers (reduced cache_valid_until or
      * a list-changed webhook). Compromise-driven revocation MUST also
      * trigger this path.

package/dist/lib/server/index.d.mts

@@ -105,3 +105,6 @@ export { createDerivedAccountStore, type DerivedAccountStoreOptions, type Derive
 export { ConformanceClient, WebSocketTransport, type ConformanceClientOptions, type ConformanceStatus, } from './socket-mode/index.mjs';
 export { mediaBuyActionResolver } from './media-buy-action-resolver.mjs';
 export type { SellerActionDecision, SellerActionResolutionOptions, SellerActionResolution, } from './media-buy-action-resolver.mjs';
+export * from '../identifiers.mjs';
+export { registerPropertyListTool, sendPropertyListChanged } from './property-lists.mjs';
+export type { PropertyListPage, PropertyListToolOptions, PropertyListChangedNotification, SendPropertyListChangedOptions, } from './property-lists.mjs';

package/dist/lib/server/index.d.ts

@@ -105,3 +105,6 @@ export { createDerivedAccountStore, type DerivedAccountStoreOptions, type Derive
 export { ConformanceClient, WebSocketTransport, type ConformanceClientOptions, type ConformanceStatus, } from './socket-mode';
 export { mediaBuyActionResolver } from './media-buy-action-resolver';
 export type { SellerActionDecision, SellerActionResolutionOptions, SellerActionResolution, } from './media-buy-action-resolver';
+export * from '../identifiers';
+export { registerPropertyListTool, sendPropertyListChanged } from './property-lists';
+export type { PropertyListPage, PropertyListToolOptions, PropertyListChangedNotification, SendPropertyListChangedOptions, } from './property-lists';

package/dist/lib/server/index.js

@@ -254,6 +254,7 @@ __export(server_exports, {
   redisWebhookDeliveryRecoveryBackend: () => import_webhook_delivery.redisWebhookDeliveryRecoveryBackend,
   redisWebhookDeliveryStore: () => import_webhook_delivery.redisWebhookDeliveryStore,
   registerAdcpTaskTool: () => import_tasks.registerAdcpTaskTool,
+  registerPropertyListTool: () => import_property_lists.registerPropertyListTool,
   registerTestController: () => import_test_controller.registerTestController,
   replaceAccountFinancialsIfSeeded: () => import_test_controller_bridge.replaceAccountFinancialsIfSeeded,
   requireAuthenticatedOrSigned: () => import_auth_signature.requireAuthenticatedOrSigned,
@@ -269,6 +270,7 @@ __export(server_exports, {
   scopeCtxMetadataKey: () => import_ctx_metadata.scopeCtxMetadataKey,
   scopedStore: () => import_state_store.scopedStore,
   scrubExtensions: () => import_wire_safe.scrubExtensions,
+  sendPropertyListChanged: () => import_property_lists.sendPropertyListChanged,
   serve: () => import_serve.serve,
   signatureErrorCodeFromCause: () => import_auth.signatureErrorCodeFromCause,
   stripCtxMetadata: () => import_ctx_metadata.stripCtxMetadata,
@@ -353,6 +355,8 @@ var import_keyed_account_backend = require('../adapters/keyed-account-backend.js
 var import_derived_account_store = require('../adapters/derived-account-store.js');
 var import_socket_mode = require('./socket-mode/index.js');
 var import_media_buy_action_resolver = require('./media-buy-action-resolver.js');
+__reExport(server_exports, require('../identifiers.js'), module.exports);
+var import_property_lists = require('./property-lists.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   A2AInvocationError,
@@ -590,6 +594,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   redisWebhookDeliveryRecoveryBackend,
   redisWebhookDeliveryStore,
   registerAdcpTaskTool,
+  registerPropertyListTool,
   registerTestController,
   replaceAccountFinancialsIfSeeded,
   requireAuthenticatedOrSigned,
@@ -605,6 +610,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   scopeCtxMetadataKey,
   scopedStore,
   scrubExtensions,
+  sendPropertyListChanged,
   serve,
   signatureErrorCodeFromCause,
   stripCtxMetadata,
@@ -631,5 +637,6 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   verifyProposalTermsDigest,
   verifySignatureAsAuthenticator,
   wrapEnvelope,
-  ...require('./decisioning/index.js')
+  ...require('./decisioning/index.js'),
+  ...require('../identifiers.js')
 });

package/dist/lib/server/index.mjs

@@ -302,6 +302,8 @@ import {
   WebSocketTransport
 } from "./socket-mode/index.mjs";
 import { mediaBuyActionResolver } from "./media-buy-action-resolver.mjs";
+export * from "../identifiers.mjs";
+import { registerPropertyListTool, sendPropertyListChanged } from "./property-lists.mjs";
 export {
   A2AInvocationError,
   ACCOUNT_NOTIFICATION_TYPES,
@@ -538,6 +540,7 @@ export {
   redisWebhookDeliveryRecoveryBackend,
   redisWebhookDeliveryStore,
   registerAdcpTaskTool,
+  registerPropertyListTool,
   registerTestController,
   replaceAccountFinancialsIfSeeded,
   requireAuthenticatedOrSigned,
@@ -553,6 +556,7 @@ export {
   scopeCtxMetadataKey,
   scopedStore,
   scrubExtensions,
+  sendPropertyListChanged,
   serve,
   signatureErrorCodeFromCause,
   stripCtxMetadata,

package/dist/lib/server/property-lists.d.mts

@@ -0,0 +1,36 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { GetPropertyListRequest, GetPropertyListResponse } from '../types/tools.generated.mjs';
+import type { WebhookEmitter, WebhookEmitParams, WebhookEmitResult } from './webhook-emitter.mjs';
+export type PropertyListPage = Pick<GetPropertyListResponse, 'list' | 'identifiers' | 'pagination' | 'resolved_at' | 'cache_valid_until' | 'coverage_gaps'>;
+export interface PropertyListToolOptions<TPrincipal> {
+    /** Verify this token's access to this exact list on every request/page. Return null/false to deny access. */
+    verifyToken: (input: {
+        listId: string;
+        token: string;
+    }) => TPrincipal | null | false | Promise<TPrincipal | null | false>;
+    /** Load an authorized page. Honor resolve:false without resolving identifiers. Cursors must be bound to the list and principal. */
+    loadPage: (request: GetPropertyListRequest, principal: TPrincipal) => Promise<PropertyListPage>;
+}
+/**
+ * Register a read-only MCP tool using per-list tokens, independently of normal
+ * platform account credentials. Tokens arrive through Authorization: Bearer
+ * or x-adcp-auth, never tool arguments. Mount on an MCP endpoint whose HTTP
+ * auth layer permits list tokens through to this verifier.
+ */
+export declare function registerPropertyListTool<TPrincipal>(server: McpServer, options: PropertyListToolOptions<TPrincipal>): import("@modelcontextprotocol/sdk/server/mcp.js").RegisteredTool;
+export interface PropertyListChangedNotification {
+    list_id: string;
+    list_name?: string;
+    resolved_at: string;
+    cache_valid_until?: string;
+    change_summary?: {
+        properties_added?: number;
+        properties_removed?: number;
+        total_properties?: number;
+    };
+}
+export type SendPropertyListChangedOptions = Pick<WebhookEmitParams, 'url' | 'delivery_id' | 'retries' | 'attemptAuthorizationContext'> & {
+    notification: PropertyListChangedNotification;
+};
+/** Send a summary-only notification through the SDK's signed, retrying delivery kernel. Reuse delivery_id and notification for retries. */
+export declare function sendPropertyListChanged(emitter: WebhookEmitter, options: SendPropertyListChangedOptions): Promise<WebhookEmitResult>;

package/dist/lib/server/property-lists.d.ts

@@ -0,0 +1,36 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { GetPropertyListRequest, GetPropertyListResponse } from '../types/tools.generated';
+import type { WebhookEmitter, WebhookEmitParams, WebhookEmitResult } from './webhook-emitter';
+export type PropertyListPage = Pick<GetPropertyListResponse, 'list' | 'identifiers' | 'pagination' | 'resolved_at' | 'cache_valid_until' | 'coverage_gaps'>;
+export interface PropertyListToolOptions<TPrincipal> {
+    /** Verify this token's access to this exact list on every request/page. Return null/false to deny access. */
+    verifyToken: (input: {
+        listId: string;
+        token: string;
+    }) => TPrincipal | null | false | Promise<TPrincipal | null | false>;
+    /** Load an authorized page. Honor resolve:false without resolving identifiers. Cursors must be bound to the list and principal. */
+    loadPage: (request: GetPropertyListRequest, principal: TPrincipal) => Promise<PropertyListPage>;
+}
+/**
+ * Register a read-only MCP tool using per-list tokens, independently of normal
+ * platform account credentials. Tokens arrive through Authorization: Bearer
+ * or x-adcp-auth, never tool arguments. Mount on an MCP endpoint whose HTTP
+ * auth layer permits list tokens through to this verifier.
+ */
+export declare function registerPropertyListTool<TPrincipal>(server: McpServer, options: PropertyListToolOptions<TPrincipal>): import("@modelcontextprotocol/sdk/server/mcp.js").RegisteredTool;
+export interface PropertyListChangedNotification {
+    list_id: string;
+    list_name?: string;
+    resolved_at: string;
+    cache_valid_until?: string;
+    change_summary?: {
+        properties_added?: number;
+        properties_removed?: number;
+        total_properties?: number;
+    };
+}
+export type SendPropertyListChangedOptions = Pick<WebhookEmitParams, 'url' | 'delivery_id' | 'retries' | 'attemptAuthorizationContext'> & {
+    notification: PropertyListChangedNotification;
+};
+/** Send a summary-only notification through the SDK's signed, retrying delivery kernel. Reuse delivery_id and notification for retries. */
+export declare function sendPropertyListChanged(emitter: WebhookEmitter, options: SendPropertyListChangedOptions): Promise<WebhookEmitResult>;