@adcp/sdk 16.0.0-beta.7 → 16.0.0-beta.8

package/dist/lib/supply-path/verify.js

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var verify_exports = {};
 __export(verify_exports, {
@@ -25,7 +35,6 @@ module.exports = __toCommonJS(verify_exports);
 var import_abort = require('../protocols/abort.js');
 var import_publisher_property_selector = require('../discovery/publisher-property-selector.js');
 var import_validation = require('./validation.js');
-var import_registry = require('../registry/index.js');
 var import_fetch_evidence = require('./fetch-evidence.js');
 var import_evaluate = require('./evaluate.js');
 var import_validation2 = require('./validation.js');
@@ -34,7 +43,8 @@ const MAX_PROPERTY_SELECTOR_EXPANSIONS = 4096;
 async function verifySupplyPath(request, options = { source: "authoritative" }) {
   const normalized = (0, import_validation2.validateSupplyPathRequest)(request);
   if (options.source === "registry") {
-    const result = await (options.registry ?? new import_registry.RegistryClient()).verifySupplyPath(normalized);
+    const registry = options.registry ?? new (await import("../registry/index.js")).RegistryClient();
+    const result = await registry.verifySupplyPath(normalized);
     (0, import_validation2.assertRegistrySupplyPathResult)(result, normalized);
     return result;
   }

package/dist/lib/supply-path/verify.mjs

@@ -4,7 +4,6 @@ import {
   expandPublisherPropertySelector
 } from "../discovery/publisher-property-selector.mjs";
 import { domain, records, strings } from "./validation.mjs";
-import { RegistryClient } from "../registry/index.mjs";
 import { SupplyPathEvidenceSession } from "./fetch-evidence.mjs";
 import {
   isUnqualifiedPropertySelector,
@@ -20,7 +19,8 @@ const MAX_PROPERTY_SELECTOR_EXPANSIONS = 4096;
 async function verifySupplyPath(request, options = { source: "authoritative" }) {
   const normalized = validateSupplyPathRequest(request);
   if (options.source === "registry") {
-    const result = await (options.registry ?? new RegistryClient()).verifySupplyPath(normalized);
+    const registry = options.registry ?? new (await import("../registry/index.mjs")).RegistryClient();
+    const result = await registry.verifySupplyPath(normalized);
     assertRegistrySupplyPathResult(result, normalized);
     return result;
   }

package/dist/lib/testing/storyboard/validations.d.mts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "16.0.0-beta.7";
+export declare const RUNNER_CAPABILITY_VERSION = "16.0.0-beta.8";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/testing/storyboard/validations.d.ts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "16.0.0-beta.7";
+export declare const RUNNER_CAPABILITY_VERSION = "16.0.0-beta.8";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/version.d.mts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "16.0.0-beta.7";
+export declare const LIBRARY_VERSION = "16.0.0-beta.8";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "16.0.0-beta.7";
+    readonly library: "16.0.0-beta.8";
     readonly adcp: "3.2.5";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5"];
-    readonly generatedAt: "2026-10-17T13:58:28.444Z";
+    readonly generatedAt: "2026-10-18T01:21:23.594Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "16.0.0-beta.7";
+export declare const LIBRARY_VERSION = "16.0.0-beta.8";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "16.0.0-beta.7";
+    readonly library: "16.0.0-beta.8";
     readonly adcp: "3.2.5";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5"];
-    readonly generatedAt: "2026-10-17T13:58:28.444Z";
+    readonly generatedAt: "2026-10-18T01:21:23.594Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js

@@ -31,7 +31,7 @@ __export(version_exports, {
   toReleasePrecisionVersion: () => toReleasePrecisionVersion
 });
 module.exports = __toCommonJS(version_exports);
-const LIBRARY_VERSION = "16.0.0-beta.7";
+const LIBRARY_VERSION = "16.0.0-beta.8";
 const ADCP_VERSION = "3.2.5";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -104,10 +104,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.5"
 ];
 const VERSION_INFO = {
-  library: "16.0.0-beta.7",
+  library: "16.0.0-beta.8",
   adcp: "3.2.5",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-17T13:58:28.444Z"
+  generatedAt: "2026-10-18T01:21:23.594Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/dist/lib/version.mjs

@@ -1,4 +1,4 @@
-const LIBRARY_VERSION = "16.0.0-beta.7";
+const LIBRARY_VERSION = "16.0.0-beta.8";
 const ADCP_VERSION = "3.2.5";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -71,10 +71,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.5"
 ];
 const VERSION_INFO = {
-  library: "16.0.0-beta.7",
+  library: "16.0.0-beta.8",
   adcp: "3.2.5",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-17T13:58:28.444Z"
+  generatedAt: "2026-10-18T01:21:23.594Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/docs/TYPE-SUMMARY.md

@@ -1,7 +1,7 @@
 # AdCP Type Summary
 
-> Generated at: 2026-10-17
-> @adcp/sdk v16.0.0-beta.7
+> Generated at: 2026-10-18
+> @adcp/sdk v16.0.0-beta.8
 
 Curated reference of the types that matter for using the AdCP client. For full generated types see `src/lib/types/tools.generated.ts` and `src/lib/types/core.generated.ts`.
 

package/docs/guides/PROPERTY-LISTS.md

@@ -0,0 +1,264 @@
+# Property lists: matching, registry contribution, and serving
+
+## Buyer enforcement
+
+`validation.productPropertyPolicy` reads `get_products.filters.property_list`
+and the deprecated top-level `property_list`. When both are present they must
+have the same `agent_url`, `list_id`, and `auth_token`; conflicting references
+fail closed with `property_list_conflicting_references`. A malformed nested
+reference never falls back to the top-level field. The same reference is kept
+for polling, tracking, and webhook completions.
+
+These location and mixed-identifier fixes ship together. As before, request
+list enforcement defaults to enabled. Set `enforceRequestPropertyList: false`
+to disable local resolution, or `productPropertyPolicy: false` to disable the
+policy entirely. Resolution errors (including a non-MCP list URL) fail closed.
+
+Lists may mix domains, app bundles, and CTV store IDs. Non-domain types no
+longer cause an unconditional response failure. A product's
+`publisher_properties` contains publisher selectors, not app IDs: `property_ids`
+are opaque names scoped to a publisher. Supply complete catalogs to match
+their real identifiers:
+
+```typescript
+import { AdCPClient, type ProductPolicyResolvedProperty } from '@adcp/sdk';
+
+declare const loadPublisherCatalog: (
+  domain: string
+) => Promise<readonly ProductPolicyResolvedProperty[] | undefined>;
+
+const client = new AdCPClient(agents, {
+  validation: {
+    productPropertyPolicy: {
+      enforceRequestPropertyList: true,
+      unknownSelectorBehavior: 'flag',
+      resolvePublisherProperties: loadPublisherCatalog,
+    },
+  },
+});
+```
+
+The resolver receives normalized, untrusted publisher hostnames and an optional
+`{ signal }` argument. It returns the complete
+catalog of `{ property_id?, identifiers: [{ type, value }], tags? }` records
+from your publisher metadata store or discovery layer. Alternatively provide
+`publisherProperties: { [publisherDomain]: catalog }` directly. Keys use the exact
+normalized publisher hostname, including `www.` when present; catalogs are not
+shared across host aliases. When catalogs are configured, missing or failed
+lookups mean unknown metadata; `[]` means a known empty catalog. This hook does
+not initiate any additional registry or publisher lookups unless you implement
+them. Identifier type and value must match exactly for non-domain identifiers;
+bundle casing is preserved. `all`, `by_id`, and `by_tag` selectors are resolved
+against these records. Products with `property_targeting_allowed: true` may
+retain a proven eligible subset; other products must satisfy the policy for
+every selected property.
+
+Catalog loading is limited to 100 distinct lookups per response, 10 seconds
+per lookup, and a 10-second total budget by default (`maxPublisherLookups`,
+`publisherLookupTimeoutMs`, `publisherLookupBudgetMs`).
+Overflow and failed/timed-out lookups stay unknown even when a domain matches.
+Literal IP and localhost inputs do not reach the hook. For network discovery,
+use the SDK's SSRF-safe networking utilities to protect DNS resolution too;
+catalog identity/ownership verification remains the catalog provider's job.
+
+Products whose membership cannot be judged follow `unknownSelectorBehavior`
+(`allow`, `flag`, or `reject`). Request-derived policies remain strict by
+default, so the default unknown behavior is `reject`; choose `flag` explicitly
+to retain uncertain products. Known disallowed properties still reject even
+when another property is unknown. Diagnostics appear under
+`metadata.productPropertyPolicy`, including per-product
+`unresolved_property_identifiers` / `identifier_types` and
+`request_property_list.unsupported_identifier_types` for unrecognized types.
+
+## Identifier normalization and registration
+
+`normalizePropertyIdentifier(type, value)` (also exported as
+`validatePropertyIdentifier`) returns either `{ ok: true, value, rewrite? }`
+or `{ ok: false, error: IdentifierValidationError }`. Named normalizers cover
+domain, subdomain, iOS/Android bundles, Apple/Google/Roku/Samsung store IDs,
+Fire TV ASINs, and Apple TV/generic bundles. Each normalizer validates too.
+
+Domain normalization accepts HTTP(S) URLs and reports their reduction to a
+hostname, lowercases IDNs, and preserves wildcards. It preserves `www.` and
+`m.` because removing those labels would broaden an explicit allowlist.
+`subdomain` rejects wildcards. Platform names preserve case; numeric IDs stay
+strings without losing precision. Formats for app/store identifiers are SDK
+input hygiene rules, not assertions of registration, ownership, or existence.
+Opaque identifier families retain their spelling (including station names
+with spaces). Use these opt-in helpers before storing or matching values:
+
+```typescript
+import { normalizePropertyIdentifier } from '@adcp/sdk';
+
+const checked = normalizePropertyIdentifier('domain', submittedValue);
+if (!checked.ok) throw checked.error;
+await identifierStore.save({ type: 'domain', value: checked.value });
+// checked.rewrite, when present, records { from, to } for your review/audit UI.
+```
+
+`validatePublisherDomain(value)` is deliberately stricter: a publisher
+registration must already be a lowercase bare hostname. URLs, wildcards,
+ports, whitespace, trailing dots, malformed labels, and IP literals reject
+with `IdentifierValidationError.code === 'invalid_publisher_domain'`.
+`RegistryClient.saveProperty()` always performs this validation before HTTP.
+`saveProperties()` uses the same check for every record; failed records retain
+the existing `error` string and expose the typed error as `cause`.
+
+## Bulk catalog contribution
+
+`resolveIdentifiers()` in default `resolve` mode is the primary bulk catalog
+registration path: it contributes provenance, creates missing entries, and
+returns stable `property_rid` handles. Use `mode: 'lookup'` for read-only lookup.
+A RID is a join handle and does not grant advertising authorization.
+
+```typescript
+import { RegistryClient, isRegistryRequestError } from '@adcp/sdk';
+
+const registry = new RegistryClient({ apiKey: process.env.ADCP_REGISTRY_API_KEY });
+const outcomes = await registry.resolveIdentifiersAll({
+  identifiers,
+  provenance: { type: 'agency_allowlist', context: campaignId },
+  // Omit mode to register/contribute. Use mode: 'lookup' for a pure read.
+}, {
+  batchSize: 10_000,
+  maxRequestBytes: 1024 * 1024,
+  concurrency: 2,
+  maxRetries: 3,
+  maxRetryDelayMs: 60_000,
+});
+
+for (const outcome of outcomes) {
+  if (outcome.success) useCatalogHandle(outcome.identifier, outcome.result.property_rid);
+  else if (isRegistryRequestError(outcome.error)) {
+    reportRegistryFailure(outcome.index, outcome.error.status, outcome.error.retryAfterMs);
+  } else reportInputFailure(outcome.index, outcome.error);
+}
+```
+
+The helper caps each request at 10,000 identifiers and the configured UTF-8
+JSON byte limit, including provenance. It limits concurrency, honors
+`retryAfterMs` on HTTP 429, and returns an outcome for each input in input order,
+including duplicates. Oversized individual items, missing/malformed response
+entries, and failed batches become per-input errors; successful batches remain
+available. Inputs should already use canonical identifier spelling so registry
+results can be correlated by type and value. Empty input returns `[]`.
+
+Only rate limits are retried automatically. A server delay exceeding
+`maxRetryDelayMs` stops pending requests and returns the typed 429 (including
+its `retryAfterMs`) for callers to reschedule, without retrying early.
+Network and 5xx failures may have
+already contributed activity: identifier-to-RID resolution is idempotent, but
+the activity log is additive. The single-call API guards the 10,000-item limit;
+use the helper for byte-based splitting. `/api/registry/resolve` accepts responses
+up to 16 MiB by default; explicit `RegistryClientConfig.maxBodyBytes` still wins.
+
+Use `saveProperty()` when publishing or updating hosted publisher
+configuration (names, property identities, tags), rather than contributing a
+large identifier catalog. `saveProperties()` is a bounded client-side fan-out
+over that endpoint, intended for configuration updates. Its results are keyed
+by publisher domain; submit one configuration per domain.
+
+Registry HTTP failures use the exported `RegistryRequestError` /
+`isRegistryRequestError` contract, with `status`, `method`, `retryAfterMs`, and
+bounded untrusted `details`. Do not parse `error.message` for status or retry
+timing. Input validation and transport failures are separate errors.
+
+## Serve buyer-issued references over MCP
+
+`registerPropertyListTool` registers a real MCP `get_property_list` tool using
+the official MCP server. The reference's `auth_token` must authorize its exact
+`list_id`. It arrives in `Authorization: Bearer` or `x-adcp-auth`, never as a
+tool argument. The verifier runs before storage is read, on every page.
+
+```typescript
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { serve } from '@adcp/sdk';
+import { registerPropertyListTool } from '@adcp/sdk/server';
+
+serve(() => {
+  const server = new McpServer({ name: 'Buyer property lists', version: '1.0.0' });
+  registerPropertyListTool(server, {
+    verifyToken: ({ listId, token }) => listStore.verifyListToken(listId, token),
+    loadPage: (request, principal) => listStore.loadAuthorizedPage(request, principal),
+  });
+  return server;
+}, {
+  path: '/property-lists/mcp',
+  publicUrl: 'https://buyer.example/property-lists/mcp',
+  authenticate: listEndpointAuthenticator,
+});
+```
+
+Use your list endpoint's authenticator to validate list tokens globally and
+return `{ principal, token }`; the per-tool verifier still checks exact list
+access. Mount this read-only endpoint separately if your normal platform auth
+only accepts account bearers. Its proxy/auth middleware must allow the list
+token through. Ordinary MCP initialization needs no list ID. The helper also
+supports raw HTTP headers when a transport does not populate `authInfo`.
+It denies conflicting credentials and does not expose verifier/storage errors.
+
+`loadPage` receives a verified principal and the validated request, including
+`resolve` and `pagination`. Return `{ list, identifiers, pagination?,
+resolved_at?, cache_valid_until? }`. The list includes at least `list_id` and
+`name`; `identifiers` must be an array when resolving, including `[]` for an
+empty list. For `resolve: false`, return metadata without resolving identifiers.
+Honor the requested page limit (default 1,000; maximum 10,000). Provide a
+nonempty continuation cursor only when `has_more` is true, and bind cursors to
+the list, principal, and catalog revision. `list.property_count` is the total
+property count, not the current page's identifier count. Return coherent
+`cache_valid_until` timestamps across pages. The helper adds completion status
+and echoes request context on success and errors.
+
+Issue references whose `agent_url` points at this MCP endpoint. A plain REST
+URL returning JSON does not implement `get_property_list`.
+
+## Signed change notifications and certification
+
+Use your configured SDK `WebhookEmitter` (or the emitter from
+`createPostgresWebhookRuntime`) so signing, bounded retries, durable delivery
+bindings, and crash recovery use the same infrastructure as other webhooks:
+
+```typescript
+import { sendPropertyListChanged } from '@adcp/sdk/server';
+
+const result = await sendPropertyListChanged(
+  webhooks.emitter.forTenantScope(trustedTenantId),
+  {
+    url: subscriber.webhookUrl,
+    delivery_id: persistedDeliveryId,
+    notification: {
+      list_id: changedListId,
+      resolved_at: resolvedAt.toISOString(),
+      change_summary: { properties_added: added, properties_removed: removed, total_properties: total },
+    },
+  },
+);
+```
+
+Retain the same delivery ID and exact notification for retries. Each distinct
+event/subscriber delivery needs its own ID. The helper selects RFC 9421,
+includes the compatibility marker `signature: 'rfc9421'`, and lets the emitter
+bind a stable cryptographic `idempotency_key`. It sends a summary; receivers
+refresh through `get_property_list`. Configure production delivery storage,
+recovery, signing keys, and per-attempt subscription authorization on the
+emitter; see [the runtime reference](../TYPE-SUMMARY.md#postgresql-webhook-runtime).
+
+Before certifying a buyer, resolve references it actually issued:
+
+```typescript
+import { runPropertyListConformance, runConformance } from '@adcp/sdk/conformance';
+
+const report = await runPropertyListConformance(issuedReferences);
+if (report.totalFailures) throw new Error('Buyer-issued property lists are not resolvable');
+
+// Or include them in the main certification report/failure count:
+const fullReport = await runConformance(buyerAgentUrl, {
+  propertyListReferences: issuedReferences,
+});
+```
+
+Certification disables caches, validates each resolved page, checks list
+identity, rejects failure envelopes/oversized pages/cursor cycles, and uses
+the same MCP resolver as sellers. Reports identify inputs by index and never
+echo the reference token, URL, or remote exception. Empty lists are valid;
+unresolvable references fail the report rather than silently certifying.

package/docs/guides/SIGNING-GUIDE.md

@@ -503,6 +503,31 @@ app.post('/webhook', async (req, res) => {
 });
 ```
 
+Webhook-v1 uses unpadded Base64URL for `Signature` throughout AdCP 3.x,
+including 3.2. Its URL canonicalization follows AdCP 3.2 independently of
+that encoding. The 3.2 request-signing migration to padded standard Base64
+does not change the webhook-v1 profile. Python senders should use
+`adcp.signing.webhook_signer.sign_webhook` rather than a generic
+`sign_request` call with `signing_profile_version="3.2"` and the webhook tag.
+See the [protocol's binary-value encoding rules](https://github.com/adcontextprotocol/adcp/blob/v3.2.5/docs/building/by-layer/L1/security.mdx#adcp-rfc-9421-profile).
+
+When a known peer uses a generic RFC 9421 signer that emits standard padded
+Base64, configure that receiver route explicitly:
+
+```typescript
+await verifyWebhookSignature(req, {
+  jwks,
+  replayStore,
+  revocationStore,
+  signatureEncoding: 'rfc8941-base64',
+});
+```
+
+`createWebhookVerifier` accepts the same option. Each mode strictly parses
+its configured encoding; neither retries the other encoding. Select this
+option from trusted integration configuration, independently of incoming
+headers or webhook payloads.
+
 ## Step 6: Sign Outbound Webhooks (Seller)
 
 Configure `createAdcpServerFromPlatform` with a webhook signing key:

package/docs/llms.txt

@@ -1,7 +1,7 @@
 # Ad Context Protocol (AdCP)
 
-> Generated at: 2026-10-17
-> Library: @adcp/sdk v16.0.0-beta.7
+> Generated at: 2026-10-18
+> Library: @adcp/sdk v16.0.0-beta.8
 > AdCP major version: 3
 > Canonical URL: https://adcontextprotocol.github.io/adcp-client/llms.txt
 > Note: the `Library` stamp reflects the package.json version at doc-generation time. The narrative below describes the surface that lands on the next-published minor — including any 6.7 helpers documented here ahead of the release tag.

package/docs/migration-14.x-rc-worksheet.md

@@ -16,8 +16,8 @@ pin using `ADCP_VERSION` inside that tarball.
 
 | Fact | Value |
 | --- | --- |
-| Checkout `package.json` version | `@adcp/sdk@16.0.0-beta.7` |
-| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@16.0.0-beta.7 dist.integrity` |
+| Checkout `package.json` version | `@adcp/sdk@16.0.0-beta.8` |
+| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@16.0.0-beta.8 dist.integrity` |
 | Node.js runtime | `^20.19.0 || >=22.12.0` |
 | Default AdCP wire release | `3.2.5` |
 | Maintained wire releases | `v2.5`, `v2.6`, `v3`, `3.0.0`, `3.0`, `3.0.1`, `3.0.2`, `3.0.3`, `3.0.4`, `3.0.5`, `3.0.6`, `3.0.7`, `3.0.8`, `3.0.9`, `3.0.10`, `3.0.11`, `3.0.12`, `3.0.13`, `3.0.14`, `3.0.15`, `3.0.16`, `3.0.17`, `3.0.18`, `3.0.19`, `3.0.20`, `3.0.21`, `3.0.22`, `3.0.23`, `3.0.24`, `3.0.25`, `3.1.0`, `3.1`, `3.1.1`, `3.1.2`, `3.1.3`, `3.1.4`, `3.1.5`, `3.1.6`, `3.1.7`, `3.1.8`, `3.1.9`, `3.1.10`, `3.1.11`, `3.1.12`, `3.1.13`, `3.1.14`, `3.1.15`, `3.1.16`, `3.1.17`, `3.1.18`, `3.1.19`, `3.1.20`, `3.1.21`, `3.1.22`, `3.1.23`, `3.1.24`, `3.1.25`, `3.1.26`, `3.1.27`, `3.1.28`, `3.1.29`, `3.2.1`, `3.2`, `3.2.2`, `3.2.3`, `3.2.4`, `3.2.5` |
@@ -26,8 +26,8 @@ pin using `ADCP_VERSION` inside that tarball.
 For a checkout at the published release commit, install the exact package version:
 
 ```bash
-npm install --save-exact '@adcp/sdk@16.0.0-beta.7'
-npm view '@adcp/sdk@16.0.0-beta.7' dist.integrity
+npm install --save-exact '@adcp/sdk@16.0.0-beta.8'
+npm view '@adcp/sdk@16.0.0-beta.8' dist.integrity
 ```
 
 ### Required and optional peers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adcp/sdk",
-  "version": "16.0.0-beta.7",
+  "version": "16.0.0-beta.8",
   "description": "AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)",
   "workspaces": [
     ".",