@adcp/sdk 16.4.0 → 16.6.0

package/dist/lib/schemas-data/3.2/sponsored-intelligence/si-send-message-request.json

@@ -1,12 +1,12 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-send-message-request.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-send-message-request.json",
   "title": "SI Send Message Request",
   "description": "Send a message to the brand agent within an active session",
   "type": "object",
   "allOf": [
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/version-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/version-envelope.json"
     }
   ],
   "x-status": "experimental",
@@ -44,14 +44,14 @@
       "additionalProperties": true
     },
     "sponsored_context_receipt": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-sponsored-context-receipt.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-sponsored-context-receipt.json",
       "description": "Host receipt for sponsored context accepted from a prior SI response in this session. This gives the brand/seller an audit-visible record of the host's accepted use mode and disclosure commitment for that context."
     },
     "context": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/context.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/context.json"
     },
     "ext": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/ext.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.2/sponsored-intelligence/si-send-message-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-send-message-response.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-send-message-response.json",
   "title": "SI Send Message Response",
   "description": "Brand agent's response to a user message",
   "type": "object",
   "allOf": [
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/version-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/version-envelope.json"
     },
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/protocol-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/protocol-envelope.json"
     }
   ],
   "x-status": "experimental",
@@ -28,13 +28,13 @@
           "description": "Conversational message from brand agent"
         },
         "surface": {
-          "$ref": "https://adcontextprotocol.org/schemas/3.2.5/a2ui/surface.json",
+          "$ref": "https://adcontextprotocol.org/schemas/3.2.7/a2ui/surface.json",
           "description": "A2UI surface with interactive components"
         },
         "ui_elements": {
           "type": "array",
           "items": {
-            "$ref": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-ui-element.json"
+            "$ref": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-ui-element.json"
           },
           "description": "Visual components to render (DEPRECATED: use surface instead)",
           "deprecated": true
@@ -47,11 +47,11 @@
       "description": "MCP resource URI for hosts with MCP Apps support (e.g., ui://si/session-abc123)"
     },
     "sponsored_context": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-sponsored-context.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-sponsored-context.json",
       "description": "Declaration for sponsored context carried by this brand-agent response. Hosts MUST either honor the declared context_use and disclosure_obligation or reject the context before presenting, comparing, or otherwise using it."
     },
     "session_status": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/enums/si-session-status.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/enums/si-session-status.json",
       "description": "Current session status. On a successful response, one of: active, pending_handoff, or complete. Terminated sessions return error codes (SESSION_NOT_FOUND or SESSION_TERMINATED) instead of a success response."
     },
     "handoff": {
@@ -117,14 +117,14 @@
     "errors": {
       "type": "array",
       "items": {
-        "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/error.json"
+        "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/error.json"
       }
     },
     "context": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/context.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/context.json"
     },
     "ext": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/ext.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.2/sponsored-intelligence/si-sponsored-context-receipt.json

@@ -1,13 +1,13 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-sponsored-context-receipt.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-sponsored-context-receipt.json",
   "title": "SI Sponsored Context Receipt",
   "description": "Host receipt for sponsored context previously delivered into an SI host boundary. The receipt records what use mode the host accepted and what disclosure commitment it made; it does not claim that AdCP inspected hidden model reasoning.",
   "x-status": "experimental",
   "type": "object",
   "properties": {
     "sponsored_context": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-sponsored-context.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-sponsored-context.json",
       "description": "The sponsored-context declaration the host received and is accepting or rejecting."
     },
     "host_receipt": {
@@ -23,7 +23,7 @@
           ]
         },
         "accepted_context_use": {
-          "$ref": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-context-use.json",
+          "$ref": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-context-use.json",
           "description": "Use mode the host accepted. When host_receipt.status is accepted, this MUST match the declaration's context_use; a host that cannot honor the declared use mode rejects the sponsored context instead of down-scoping it."
         },
         "received_at": {
@@ -121,7 +121,7 @@
       ]
     },
     "ext": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/ext.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.2/sponsored-intelligence/si-sponsored-context.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-sponsored-context.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-sponsored-context.json",
   "title": "SI Sponsored Context",
   "description": "Declaration attached to sponsored context delivered into an SI host boundary. Separates the economic accountability fact (`paying_principal`) from the host's receipt/acceptance record, which is carried separately by si-sponsored-context-receipt.json.",
   "x-status": "experimental",
@@ -11,7 +11,7 @@
       "description": "Economic accountability fact: the brand that funded or sponsored this context, with optional account/operator context. This identifies who paid for the sponsored context; it is distinct from the host's later receipt and use commitment.",
       "properties": {
         "brand": {
-          "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/brand-ref.json",
+          "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/brand-ref.json",
           "description": "Brand economically accountable for the sponsored context."
         },
         "account": {
@@ -46,7 +46,7 @@
       "additionalProperties": true
     },
     "context_use": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-context-use.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-context-use.json",
       "description": "Declared host-side use mode for this sponsored context."
     },
     "disclosure_obligation": {
@@ -154,7 +154,7 @@
       "additionalProperties": true
     },
     "ext": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/ext.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.2/sponsored-intelligence/si-terminate-session-request.json

@@ -1,12 +1,12 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-terminate-session-request.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-terminate-session-request.json",
   "title": "SI Terminate Session Request",
   "description": "Request to terminate an SI session. Naturally idempotent — `session_id` is the dedup boundary, and terminating an already-terminated session is a no-op that returns the same terminal state. No `idempotency_key` is needed on this request.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/version-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/version-envelope.json"
     }
   ],
   "x-status": "experimental",
@@ -62,10 +62,10 @@
       "additionalProperties": true
     },
     "context": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/context.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/context.json"
     },
     "ext": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/ext.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.2/sponsored-intelligence/si-terminate-session-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-terminate-session-response.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-terminate-session-response.json",
   "title": "SI Terminate Session Response",
   "description": "Confirmation of session termination",
   "type": "object",
   "allOf": [
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/version-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/version-envelope.json"
     },
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/protocol-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/protocol-envelope.json"
     }
   ],
   "x-status": "experimental",
@@ -24,7 +24,7 @@
       "description": "Whether session was successfully terminated"
     },
     "session_status": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/enums/si-session-status.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/enums/si-session-status.json",
       "description": "Resulting session state. 'complete' for handoff_transaction/handoff_complete, 'terminated' for user_exit/session_timeout/host_terminated."
     },
     "acp_handoff": {
@@ -76,14 +76,14 @@
     "errors": {
       "type": "array",
       "items": {
-        "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/error.json"
+        "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/error.json"
       }
     },
     "context": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/context.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/context.json"
     },
     "ext": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/ext.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.2/sponsored-intelligence/si-ui-element.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/sponsored-intelligence/si-ui-element.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/sponsored-intelligence/si-ui-element.json",
   "title": "SI UI Element",
   "description": "Standard visual component that brand returns and host renders",
   "x-status": "experimental",

package/dist/lib/schemas-data/3.2/trusted-match/available-package.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/available-package.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/available-package.json",
   "title": "Available Package",
   "description": "A package available for contextual matching. Synced to providers at media buy creation time — not sent per request. Providers cache this metadata and use it when evaluating context match requests for the placement. The `seller_agent` field binds the package to the originating seller agent; providers MUST use this binding rather than re-deriving seller identity from media_buy_id.",
   "x-status": "experimental",
@@ -15,22 +15,23 @@
       "description": "Media buy that this package belongs to"
     },
     "seller_agent": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/seller-agent-ref.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/seller-agent-ref.json",
       "description": "The seller agent that owns this package. `agent_url` MUST match one of `authorized_agents[].url` in the publisher's adagents.json authoritative for every property this package may serve. Providers SHOULD validate at sync time and reject mismatches with `seller_not_authorized`. Cached alongside the package and used for offer attribution, per-seller observability, and dispute resolution — not for request-time filtering."
     },
     "format_ids": {
       "type": "array",
       "deprecated": true,
+      "x-removed-in": "4.0.0",
       "description": "Deprecated in AdCP 3.2; removed in AdCP 4.0. Legacy named-format identifiers eligible for this package. Use canonical `format_options`.",
       "items": {
-        "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/format-id.json"
+        "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/format-id.json"
       }
     },
     "format_options": {
       "type": "array",
       "description": "Immutable seller-resolved PackageFormatSnapshots eligible for this package. A sender projects this field only when the Trusted Match transport profile supports the highest AdCP release version of every field in every snapshot. It MUST NOT strip an unsupported selector or digest field from a snapshot; for an older or version-unknown provider, omit the entire contract-bearing snapshot and do not claim production-path evidence from a legacy projection.",
       "items": {
-        "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/package-format-snapshot.json"
+        "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/package-format-snapshot.json"
       },
       "minItems": 1,
       "x-adcp-validation": {
@@ -44,7 +45,7 @@
       "type": "array",
       "description": "The buyer's catalogs attached to this package, with selectors (ids, gtins, tags, category, query) scoping which items are in play. References synced catalogs by catalog_id. The provider resolves items from its cached copy.",
       "items": {
-        "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/catalog.json"
+        "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/catalog.json"
       }
     }
   },

package/dist/lib/schemas-data/3.2/trusted-match/context-match-request.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/context-match-request.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/context-match-request.json",
   "title": "Context Match Request",
   "description": "Sent by publisher to router or provider to evaluate packages against contextual signals. The provider uses its synced package set for the placement. MUST NOT contain user identity. The request_id MUST NOT correlate with any identity match request_id. Extension fields (ext, context) are intentionally omitted — extension data in the context path could inadvertently carry or correlate user identity signals.",
   "type": "object",
@@ -19,6 +19,7 @@
     "adcp_major_version": {
       "type": "integer",
       "deprecated": true,
+      "x-removed-in": "4.0.0",
       "description": "DEPRECATED in favor of adcp_version. Removed in 4.0. Inlined alongside adcp_version to preserve strict-mode on this endpoint.",
       "minimum": 1,
       "maximum": 99
@@ -43,11 +44,11 @@
       "description": "Property catalog UUID (UUID v7). Globally unique, stable identifier assigned by the property catalog. The primary key for TMP matching and property list targeting."
     },
     "property_id": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/property-id.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/property-id.json",
       "description": "Publisher's human-readable property slug (e.g., 'cnn_homepage'). Optional when property_rid is present. Useful for logging and debugging."
     },
     "property_type": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/enums/property-type.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/enums/property-type.json",
       "description": "Type of the publisher property"
     },
     "placement_id": {
@@ -60,7 +61,7 @@
       "description": "API endpoint URL of the seller agent issuing this request. The provider uses this to resolve the active package set it has synced for this seller; when `package_ids` is omitted, evaluation occurs against that full set. If `seller_agent_url` does not match any seller the provider has synced packages for, the provider MUST return an empty offer set — it MUST NOT fall back to another seller's active set. The value identifies the asking seller, is identical for every user on a given placement, and carries no user identity, so it neither varies the request per user nor weakens the context/identity decorrelation boundary. Compared using the AdCP URL canonicalization rules, not byte-equality — see docs/reference/url-canonicalization. Consistent with `seller_agent_url` on the identity match request, `seller_agent.agent_url` on `AvailablePackage`, and `agent_url` in `adagents.json`."
     },
     "artifact": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/content-standards/artifact.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/content-standards/artifact.json",
       "description": "Full content artifact adjacent to this ad opportunity. Same schema used for content standards evaluation. The publisher sends the artifact when they want the buyer to evaluate the full content. Contractual protections govern buyer use. TEE deployment upgrades contractual trust to cryptographic verification. Because the router fans out to multiple buyer agents, publishers MUST NOT include bearer tokens, service-account credentials, or signed URLs in this artifact. Routers MUST remove every asset `access` object and remove or replace every credential-bearing asset `url` before forwarding; only public asset URLs that recipients can resolve independently may remain."
     },
     "artifact_refs": {
@@ -117,7 +118,7 @@
           "description": "Metro area, using the same classification systems as AdCP targeting.",
           "properties": {
             "system": {
-              "$ref": "https://adcontextprotocol.org/schemas/3.2.5/enums/metro-system.json",
+              "$ref": "https://adcontextprotocol.org/schemas/3.2.7/enums/metro-system.json",
               "description": "Metro area classification system (e.g., 'nielsen_dma', 'uk_itl2')."
             },
             "value": {

package/dist/lib/schemas-data/3.2/trusted-match/context-match-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/context-match-response.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/context-match-response.json",
   "title": "Context Match Response (Router → Publisher)",
   "description": "Router-to-publisher shape of the Context Match response. The router collects offers and non-keyed signals from provider responses, and preserves provider-local targeting pairs under signals_by_provider using the publisher-assigned provider_id from registration. Flattened signals.targeting_kvs is a provider-hop field and MUST NOT appear on this shape. Publisher-local targeting destination names never travel on either protocol hop; the publisher resolves each (provider_id, key) tuple through deployment configuration and drops tuples without a mapping. Envelope extension fields (ext, context) are intentionally omitted and forbidden because extension data in the context path could inadvertently carry or correlate user identity signals.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/version-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/version-envelope.json"
     },
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/protocol-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/protocol-envelope.json"
     }
   ],
   "x-status": "experimental",
@@ -51,7 +51,7 @@
       "type": "array",
       "description": "Offers collected across the provider fan-out, one per activated package. An empty array means no packages matched. For simple activation, each offer has just package_id. For richer responses, offers include brand, price, summary, and creative manifest.",
       "items": {
-        "$ref": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/offer.json"
+        "$ref": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/offer.json"
       }
     },
     "signals": {

package/dist/lib/schemas-data/3.2/trusted-match/error.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/error.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/error.json",
   "title": "TMP Error",
   "description": "Error response from a TMP provider or router. Returned instead of a normal response when the provider cannot process the request. Distinguishes errors from empty results (an empty offers array is a valid response meaning no matches, not an error).",
   "x-status": "experimental",

package/dist/lib/schemas-data/3.2/trusted-match/identity-match-request.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/identity-match-request.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/identity-match-request.json",
   "title": "Identity Match Request",
   "description": "Sent by publisher to evaluate user eligibility for packages using an opaque identity token. MUST NOT contain page context. The request_id MUST NOT correlate with any context match request_id. The buyer resolves the active package set for this seller from `seller_agent_url`; if `package_ids` is provided, its composition MUST be independent of the current placement (e.g., all-active or fuzzed; see field description) to prevent set-correlation attacks. Extension fields (ext, context) are intentionally omitted to prevent data leakage across the identity privacy boundary. The optional `attestation` (per identity) and `sealed_credentials` (top-level) fields carry verifiable proof ABOUT the identity — on the identity side of that boundary, not page context — so they are a deliberate, reviewed widening of this otherwise-closed schema, not a leak.",
   "type": "object",
@@ -19,6 +19,7 @@
     "adcp_major_version": {
       "type": "integer",
       "deprecated": true,
+      "x-removed-in": "4.0.0",
       "description": "DEPRECATED in favor of adcp_version. Removed in 4.0. Inlined alongside adcp_version to preserve strict-mode on this endpoint.",
       "minimum": 1,
       "maximum": 99
@@ -53,7 +54,7 @@
             "description": "Opaque token from an identity provider (ID5, LiveRamp, UID2) or publisher-generated. Buyer may map to internal identity graph but cannot reverse to PII."
           },
           "uid_type": {
-            "$ref": "https://adcontextprotocol.org/schemas/3.2.5/enums/uid-type.json",
+            "$ref": "https://adcontextprotocol.org/schemas/3.2.7/enums/uid-type.json",
             "description": "Type of the user identifier. Tells the buyer which identity graph to resolve against, avoiding trial-and-error matching."
           },
           "attestation": {
@@ -61,7 +62,7 @@
             "description": "Optional verifiable proof ABOUT this identity (e.g. World ID proof-of-personhood and/or age). The receiver MUST verify it (see conformance) and MUST treat an absent-or-unverifiable attestation as 'no attestation' — never as an asserted-true claim. Issuer-agnostic: World ID is the first scheme; mDL / VC-style issuers use the same shape. Receivers MUST bound attestation size to prevent DoS.",
             "properties": {
               "issuer": {
-                "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/brand-ref.json",
+                "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/brand-ref.json",
                 "description": "Attestation authority / identity issuer, referenced as a vendor BrandRef (e.g. {\"domain\": \"world.org\"}) — the same vendor-reference shape AdCP uses for measurement and signals vendors. The issuer's canonical domain is the anchor; brand.json hosting is optional. `scheme` selects the verifier version within the issuer."
               },
               "scheme": {
@@ -81,7 +82,7 @@
                 "type": "array",
                 "description": "Claims this attestation establishes. Closed, issuer-agnostic set.",
                 "items": {
-                  "$ref": "https://adcontextprotocol.org/schemas/3.2.5/enums/attestation-claim.json"
+                  "$ref": "https://adcontextprotocol.org/schemas/3.2.7/enums/attestation-claim.json"
                 },
                 "minItems": 1,
                 "uniqueItems": true,

package/dist/lib/schemas-data/3.2/trusted-match/identity-match-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/identity-match-response.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/identity-match-response.json",
   "title": "Identity Match Response (Router → Publisher)",
   "description": "Router-to-publisher shape of the Identity Match response. The router collects each identity agent's ordered TMPX chunks (see provider-identity-match-response.json) and forwards them under the emitting `provider_id`, preserving provider attribution and chunk order. Each chunk is a provider-declared `{slot_id, value}` pair; the publisher's deployment configuration (see publisher-tmpx-config.json) maps `(provider_id, slot_id)` to the local ad-server macro name, targeting key, VAST substitution, or play-log field. The provider→router boundary never carries a publisher-local destination name, so no cross-provider name-hijack surface exists. Provider-hop fields (`tmpx_chunks` at the root) MUST NOT appear on this shape — a router that leaks them alongside `tmpx_providers` corrupts per-provider accounting. Envelope extension fields (`context`, `ext`) are intentionally omitted to prevent data leakage across the identity privacy boundary; they are forbidden by this schema. The serve_window_sec field defines a per-package single-shot fcap: after serving the user one impression on each eligible package, the publisher MUST re-query Identity Match before serving from those packages again.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/version-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/version-envelope.json"
     },
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/protocol-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/protocol-envelope.json"
     }
   ],
   "x-status": "experimental",
@@ -39,6 +39,7 @@
     "tmpx": {
       "type": "string",
       "deprecated": true,
+      "x-removed-in": "4.0.0",
       "description": "DEPRECATED in favor of tmpx_providers. Routers MAY continue to populate this field for back-compat with consumers that only know the single-token shape; when both fields are present, tmpx_providers is authoritative. Single HPKE-encrypted exposure token containing the resolved user identity tokens. Wire format: kid.base64url_nopad(ciphertext) — unpadded base64url per RFC 4648 section 5 (no = characters). Publishers MUST treat this value as opaque pass-through data. Removed in 4.0."
     },
     "tmpx_providers": {
@@ -57,7 +58,7 @@
             "type": "array",
             "description": "Ordered TMPX chunks for this provider. Each entry is a `{slot_id, value}` pair copied verbatim from the provider's `tmpx_chunks`. Ordered-prefix invariant: the sequence of `slot_id`s MUST equal an ordered prefix of the provider's registered `tmpx_slots` — publishers MAY reject responses whose slot_ids or ordering diverge. Cap of 2 chunks in v1; the cap MAY rise without a shape change.",
             "items": {
-              "$ref": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/tmpx-chunk.json"
+              "$ref": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/tmpx-chunk.json"
             },
             "minItems": 1,
             "maxItems": 2

package/dist/lib/schemas-data/3.2/trusted-match/offer-price.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/offer-price.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/offer-price.json",
   "title": "Offer Price",
   "description": "Lightweight price for a TMP offer. Used when the product supports variable pricing and the buyer specifies a price at match time.",
   "x-status": "experimental",

package/dist/lib/schemas-data/3.2/trusted-match/offer.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/offer.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/offer.json",
   "title": "Offer",
   "description": "A buyer's response to a context match request. Generalizes package activation — a simple activation is an offer with just package_id. A rich response includes brand, price, summary, and optionally an inline creative manifest.",
   "x-status": "experimental",
@@ -11,15 +11,15 @@
       "description": "Package identifier from the media buy."
     },
     "seller_agent": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/seller-agent-ref.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/seller-agent-ref.json",
       "description": "Optional echo of the package's seller agent from sync-time metadata. Provided for publisher-side observability so log pipelines can attribute offers to sellers without round-tripping to the media-buy store. Non-authoritative: the binding on the cached AvailablePackage is source of truth. When omitted, the router MAY stamp this field from its cached package→seller map."
     },
     "brand": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/brand-ref.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/brand-ref.json",
       "description": "Brand for this offer. Required when the product allows dynamic brands (brand selected at match time rather than fixed on the package). For single-brand packages, the brand is already known from the media buy."
     },
     "price": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/offer-price.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/offer-price.json",
       "description": "Price for this offer. Only present when the product supports variable pricing. For fixed-price packages, price is already set on the media buy."
     },
     "summary": {
@@ -27,7 +27,7 @@
       "description": "Buyer-generated description of the offer, for the publisher to judge relevance. E.g., '50% off Goldenfield mayo — recipe integration'. The publisher (or their AI assistant) uses this to decide whether the offer fits the context."
     },
     "creative_manifest": {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/creative-manifest.json",
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/creative-manifest.json",
       "description": "Full creative details, inline. When present, the publisher has everything needed to render. Inline for small creatives (markdown, product card). For large creatives (VAST, video), the manifest references external assets via URLs."
     },
     "creative_data": {

package/dist/lib/schemas-data/3.2/trusted-match/provider-context-match-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/provider-context-match-response.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/provider-context-match-response.json",
   "title": "Context Match Response (Provider → Router)",
   "description": "Provider-to-router shape of the Context Match response. A context provider returns offers, optional cache guidance, and response-level signals using its own targeting vocabulary in signals.targeting_kvs. The router attributes those targeting pairs using the publisher-assigned provider_id from registration; a provider MUST NOT author signals_by_provider or choose its attribution bucket. Publisher-local targeting destination names never travel on this hop. Envelope extension fields (ext, context) are intentionally omitted and forbidden because extension data in the context path could inadvertently carry or correlate user identity signals.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/version-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/version-envelope.json"
     },
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/protocol-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/protocol-envelope.json"
     }
   ],
   "x-status": "experimental",
@@ -51,7 +51,7 @@
       "type": "array",
       "description": "Offers from this provider, one per activated package. An empty array means no packages matched. For simple activation, each offer has just package_id. For richer responses, offers include brand, price, summary, and creative manifest.",
       "items": {
-        "$ref": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/offer.json"
+        "$ref": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/offer.json"
       }
     },
     "cache_ttl": {

package/dist/lib/schemas-data/3.2/trusted-match/provider-identity-match-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/provider-identity-match-response.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/provider-identity-match-response.json",
   "title": "Identity Match Response (Provider → Router)",
   "description": "Provider-to-router shape of the Identity Match response. An identity agent returns eligibility, the per-package serve-window throttle, and — when it mints one — an ordered list of TMPX chunks. Each chunk pairs a provider-local `slot_id` (declared at registration in `tmpx_slots`) with an opaque URL-safe `value`. Publisher-local destination names (ad-server macros, GAM key-values, VAST URL macros, DOOH play-log fields) MUST NOT appear on this hop; the router keys chunks under the emitting `provider_id` and the publisher's deployment configuration resolves `(provider_id, slot_id)` to the local destination (see publisher-tmpx-config.json). Router-hop fields (`tmpx_providers`, `tmpx`) MUST NOT appear on this shape — a router receiving them from a provider MUST reject the response. Envelope extension fields (`context`, `ext`) are intentionally omitted to prevent data leakage across the identity privacy boundary; they are forbidden by this schema.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/version-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/version-envelope.json"
     },
     {
-      "$ref": "https://adcontextprotocol.org/schemas/3.2.5/core/protocol-envelope.json"
+      "$ref": "https://adcontextprotocol.org/schemas/3.2.7/core/protocol-envelope.json"
     }
   ],
   "x-status": "experimental",
@@ -40,7 +40,7 @@
       "type": "array",
       "description": "Ordered TMPX chunk/value pairs this identity agent mints. Each entry names the provider-local `slot_id` the value fills (from the provider's registered `tmpx_slots` in provider-registration.json). Ordered-prefix invariant: a response that carries fewer chunks than the provider registered MUST emit an ordered prefix of the registered `tmpx_slots` — routers MUST NOT reorder or fill gaps. The router MUST validate this contract before forwarding: if the provider has no `tmpx_slots` registration, or if the chunk `slot_id` sequence is not an exact non-empty ordered prefix of the registered list (duplicate, reordered, sparse, or unregistered slot IDs), the router MUST drop that provider's chunks atomically and MUST NOT forward them into `tmpx_providers`. Cap of 2 chunks in v1 aligned with the GAM macro-slot budget; the cap MAY rise without a shape change. Omitted when this provider mints no TMPX (e.g. no eligible packages).",
       "items": {
-        "$ref": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/tmpx-chunk.json"
+        "$ref": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/tmpx-chunk.json"
       },
       "minItems": 1,
       "maxItems": 2

package/dist/lib/schemas-data/3.2/trusted-match/provider-registration.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/provider-registration.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/provider-registration.json",
   "title": "TMP Provider Registration",
   "description": "Declares a TMP provider's endpoint, capabilities, and operational parameters. Used in router configuration (static YAML or dynamic API) and referenced by product-level provider entries. The publisher controls which providers participate in their ad decisioning. Endpoint URLs MUST be validated against SSRF, and dynamic registration endpoints MUST authenticate callers — see docs/trusted-match/specification#provider-registration-security.",
   "x-status": "experimental",
@@ -39,7 +39,7 @@
       "type": "array",
       "description": "Identity types this provider can resolve. The router selects Identity Match providers whose uid_types overlaps with any uid_type in the request's identities array. MUST be present and non-empty when identity_match is true.",
       "items": {
-        "$ref": "https://adcontextprotocol.org/schemas/3.2.5/enums/uid-type.json"
+        "$ref": "https://adcontextprotocol.org/schemas/3.2.7/enums/uid-type.json"
       },
       "minItems": 1
     },

package/dist/lib/schemas-data/3.2/trusted-match/publisher-targeting-kv-config.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/publisher-targeting-kv-config.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/publisher-targeting-kv-config.json",
   "title": "Publisher Targeting KV Mapping",
   "description": "Publisher-owned deployment configuration that maps each context provider's local targeting keys to the publisher's ad-server targeting destinations on one surface. The mapping never travels on either Trusted Match protocol hop. Providers emit `{key, value}` pairs in their own vocabulary, the router preserves those pairs under the registered `provider_id` in `signals_by_provider`, and the publisher resolves each `(provider_id, key)` through this configuration before setting ad-server targeting. Unmapped tuples are dropped and provider-local keys are never treated as publisher-owned destinations by default.",
   "x-status": "experimental",