@adcp/sdk 16.4.0 → 16.6.0

package/dist/lib/schemas-data/3.2/trusted-match/publisher-tmpx-config.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/publisher-tmpx-config.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/publisher-tmpx-config.json",
   "title": "Publisher TMPX Macro Mapping",
   "description": "Publisher-owned deployment configuration that maps each identity provider's TMPX slots to the ad-server macro names (or targeting keys, VAST substitutions, DOOH play-log fields) the publisher wants those chunks fired into on this surface. Mapping is authored by the publisher — the same operator who trafficks the corresponding ad-server line items — and never travels on the wire between identity provider and router. This keeps macro naming a deployment concern rather than a protocol identifier: providers emit chunks as `{slot_id, value}` pairs (see provider-identity-match-response.json), the router preserves ordering and slot IDs under the emitting `provider_id` (see identity-match-response.json), and this configuration resolves each `(provider_id, slot_id)` to a local destination on the way to the ad server. A publisher may map the same provider to different destinations across surfaces (GAM key-values vs. VAST macros vs. DOOH play-log fields) by carrying one instance of this configuration per surface.",
   "x-status": "experimental",

package/dist/lib/schemas-data/3.2/trusted-match/tmpx-chunk.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://adcontextprotocol.org/schemas/3.2.5/trusted-match/tmpx-chunk.json",
+  "$id": "https://adcontextprotocol.org/schemas/3.2.7/trusted-match/tmpx-chunk.json",
   "title": "TMPX Chunk",
   "description": "A single provider TMPX chunk — the provider-local `slot_id` (declared at registration in `tmpx_slots`) and its opaque URL-safe `value`. Same shape on both hops of the Identity Match response: providers emit `tmpx_chunks[]` on the provider→router shape, the router forwards them under `tmpx_providers[provider_id].chunks[]` on the router→publisher shape. Publisher-local destination names never appear here — the publisher's deployment configuration resolves `(provider_id, slot_id)` → local destination via publisher-tmpx-config.json.",
   "x-status": "experimental",

package/dist/lib/server/account-response-identity.d.mts

@@ -0,0 +1,17 @@
+import type { SyncAccountsSuccess } from '../types/tools.generated.mjs';
+declare const IDENTITY_RESPONSE_SCHEMAS: {
+    readonly account: "core/account-ref.json";
+    readonly operator_unit: "core/operator-unit.json";
+    readonly identity_change: "core/account-identity-change.json";
+    readonly identity_change_preview: "core/account-identity-change-preview.json";
+};
+type IdentityFields = Pick<SyncAccountsSuccess['accounts'][number], keyof typeof IDENTITY_RESPONSE_SCHEMAS>;
+/**
+ * These canonical identity objects have closed schemas, including their nested
+ * operator identities. Validate and emit the same detached snapshot so retained
+ * DB/request fields or later mutations cannot enter a response or replay cache,
+ * even with whole-response validation off. These four core contracts are shared
+ * by the maintained 3.2 and 3.3 bundles.
+ */
+export declare function projectAccountResponseIdentityFields(account: object): IdentityFields;
+export {};

package/dist/lib/server/account-response-identity.d.ts

@@ -0,0 +1,17 @@
+import type { SyncAccountsSuccess } from '../types/tools.generated';
+declare const IDENTITY_RESPONSE_SCHEMAS: {
+    readonly account: "core/account-ref.json";
+    readonly operator_unit: "core/operator-unit.json";
+    readonly identity_change: "core/account-identity-change.json";
+    readonly identity_change_preview: "core/account-identity-change-preview.json";
+};
+type IdentityFields = Pick<SyncAccountsSuccess['accounts'][number], keyof typeof IDENTITY_RESPONSE_SCHEMAS>;
+/**
+ * These canonical identity objects have closed schemas, including their nested
+ * operator identities. Validate and emit the same detached snapshot so retained
+ * DB/request fields or later mutations cannot enter a response or replay cache,
+ * even with whole-response validation off. These four core contracts are shared
+ * by the maintained 3.2 and 3.3 bundles.
+ */
+export declare function projectAccountResponseIdentityFields(account: object): IdentityFields;
+export {};

package/dist/lib/server/account-response-identity.js

@@ -0,0 +1,52 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var account_response_identity_exports = {};
+__export(account_response_identity_exports, {
+  projectAccountResponseIdentityFields: () => projectAccountResponseIdentityFields
+});
+module.exports = __toCommonJS(account_response_identity_exports);
+var import_schema_loader = require('../validation/schema-loader.js');
+const IDENTITY_RESPONSE_SCHEMAS = {
+  account: "core/account-ref.json",
+  operator_unit: "core/operator-unit.json",
+  identity_change: "core/account-identity-change.json",
+  identity_change_preview: "core/account-identity-change-preview.json"
+};
+function projectAccountResponseIdentityFields(account) {
+  const fields = account;
+  const projected = {};
+  for (const [field, schemaRef] of Object.entries(IDENTITY_RESPONSE_SCHEMAS)) {
+    const value = fields[field];
+    if (value === void 0) continue;
+    const snapshot = structuredClone(value);
+    const validate = (0, import_schema_loader.getSchemaValidatorByRef)(schemaRef);
+    if (!validate) throw new Error(`Account response identity schema unavailable: ${schemaRef}.`);
+    if (!validate(snapshot)) {
+      throw new Error(
+        `Account response ${field} must match its canonical identity schema without retained internal fields.`
+      );
+    }
+    Object.assign(projected, { [field]: snapshot });
+  }
+  return projected;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  projectAccountResponseIdentityFields
+});

package/dist/lib/server/account-response-identity.mjs

@@ -0,0 +1,28 @@
+import { getSchemaValidatorByRef } from "../validation/schema-loader.mjs";
+const IDENTITY_RESPONSE_SCHEMAS = {
+  account: "core/account-ref.json",
+  operator_unit: "core/operator-unit.json",
+  identity_change: "core/account-identity-change.json",
+  identity_change_preview: "core/account-identity-change-preview.json"
+};
+function projectAccountResponseIdentityFields(account) {
+  const fields = account;
+  const projected = {};
+  for (const [field, schemaRef] of Object.entries(IDENTITY_RESPONSE_SCHEMAS)) {
+    const value = fields[field];
+    if (value === void 0) continue;
+    const snapshot = structuredClone(value);
+    const validate = getSchemaValidatorByRef(schemaRef);
+    if (!validate) throw new Error(`Account response identity schema unavailable: ${schemaRef}.`);
+    if (!validate(snapshot)) {
+      throw new Error(
+        `Account response ${field} must match its canonical identity schema without retained internal fields.`
+      );
+    }
+    Object.assign(projected, { [field]: snapshot });
+  }
+  return projected;
+}
+export {
+  projectAccountResponseIdentityFields
+};

package/dist/lib/server/account-sync-contract.js

@@ -206,6 +206,7 @@ async function checkSyncAccountRows(accounts, entries, existing, rows, indices,
         }
       ).toStructuredError();
       row = {
+        ...row.account !== void 0 && { account: row.account },
         brand: row.brand,
         operator: row.operator,
         ...priorId === row.account_id && priorId && { account_id: priorId },

package/dist/lib/server/account-sync-contract.mjs

@@ -179,6 +179,7 @@ async function checkSyncAccountRows(accounts, entries, existing, rows, indices,
         }
       ).toStructuredError();
       row = {
+        ...row.account !== void 0 && { account: row.account },
         brand: row.brand,
         operator: row.operator,
         ...priorId === row.account_id && priorId && { account_id: priorId },

package/dist/lib/server/create-adcp-server.js

@@ -30,6 +30,7 @@ __export(create_adcp_server_exports, {
   requireSessionKey: () => requireSessionKey
 });
 module.exports = __toCommonJS(create_adcp_server_exports);
+var import_adcp_version_config = require('../utils/adcp-version-config.js');
 var import_web_bot_auth = require('../signing/web-bot-auth.js');
 var import_version = require('../adapters/version/index.js');
 var import_schema_loader = require('../validation/schema-loader.js');
@@ -40,7 +41,7 @@ var import_validation = require('../identity-3.3/validation.js');
 var import_trust = require('../identity-3.3/trust.js');
 var import_zod = require("zod");
 var import_version2 = require('../version.js');
-var import_adcp_version_config = require('../utils/adcp-version-config.js');
+var import_adcp_version_config2 = require('../utils/adcp-version-config.js');
 var import_errors = require('../errors/index.js');
 var import_schema_loader2 = require('../validation/schema-loader.js');
 var import_schemas = require('../schemas/index.js');
@@ -957,8 +958,7 @@ function projectValueToCapabilitySchema(root, schema, value, depth = 0) {
   return projectedObject;
 }
 function projectCapabilitiesToVersion(data, version) {
-  const validator = (0, import_schema_loader2.getValidator)("get_adcp_capabilities", "sync", version);
-  const schema = asProjectionSchema(validator?.schema);
+  const schema = asProjectionSchema((0, import_schema_loader2.getToolSchemaDocument)("get_adcp_capabilities", "sync", version)?.schema);
   if (!schema) return data;
   const projected = projectValueToCapabilitySchema(schema, schema, data);
   if (!isPlainObject(projected)) return data;
@@ -1368,7 +1368,9 @@ function injectContextIntoResponse(response, context) {
     syncContentJsonText(response, sc, mirrorsStructuredContent);
   }
 }
-function injectEnvelopeStatusIntoResponse(response, toolName) {
+function injectEnvelopeStatusIntoResponse(response, toolName, servedVersion) {
+  if (servedVersion && (0, import_adcp_version_config.isPre31AdcpVersion)(servedVersion) && MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName) && response.isError !== true)
+    return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
   if ("status" in sc) return;
@@ -1392,12 +1394,23 @@ const MEDIA_BUY_STATUS_VALUES = /* @__PURE__ */ new Set([
   "rejected",
   "canceled"
 ]);
-function normalizeMediaBuyStatusCollision(response, toolName) {
+function normalizeMediaBuyStatusCollision(response, toolName, servedVersion) {
   if (!MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName)) return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
+  if (servedVersion && (0, import_adcp_version_config.isPre31AdcpVersion)(servedVersion)) {
+    const adapted = typeof sc.media_buy_status === "string" ? (0, import_version.getVersionAdapter)("3.0", toolName)?.downgradeResponse?.(sc) : void 0;
+    if (adapted && adapted.data !== sc && adapted.data && typeof adapted.data === "object") {
+      const mirrors = contentTextMirrorsStructuredContent(response, sc);
+      response.structuredContent = adapted.data;
+      syncContentJsonText(response, response.structuredContent, mirrors);
+    }
+    return;
+  }
   const status = sc.status;
   if (typeof status !== "string" || !MEDIA_BUY_STATUS_VALUES.has(status)) return;
+  if (servedVersion && sc.media_buy_status === void 0 && (status === "completed" || status === "rejected" || status === "canceled"))
+    return;
   const looksLikeMediaBuyPayload = typeof sc.media_buy_id === "string" || "media_buy_status" in sc || Array.isArray(sc.packages);
   if (!looksLikeMediaBuyPayload) return;
   const mirrorsStructuredContent = contentTextMirrorsStructuredContent(response, sc);
@@ -1774,7 +1787,7 @@ function supportedVersionsForTool(toolName, ranges, capConfig, serverPin) {
 }
 const PUSH_OPERATION_ID_PATTERN = /^[A-Za-z0-9_.:-]{1,255}$/;
 function releaseRequiresPushOperationId(release) {
-  return (0, import_adcp_version_config.isAdcpVersionAtLeast)((0, import_schema_loader2.resolveBundleKey)(release), "3.2.0-beta.5");
+  return (0, import_adcp_version_config2.isAdcpVersionAtLeast)((0, import_schema_loader2.resolveBundleKey)(release), "3.2.0-beta.5");
 }
 function pushOperationIdError(params, release) {
   const config = params.push_notification_config;
@@ -2058,18 +2071,18 @@ function createAdcpServer(config) {
     logger.warn(message);
   }
   const credentialPolicyPatterns = credentialPolicy === void 0 || typeof credentialPolicy === "string" ? void 0 : credentialPolicy.patterns;
-  const adcpVersion = (0, import_adcp_version_config.resolveAdcpVersion)(
+  const adcpVersion = (0, import_adcp_version_config2.resolveAdcpVersion)(
     configuredAdcpVersion ?? (config.identity33 ? "3.3" : config.proposalNegotiation ? import_version3.ADCP_VERSION : void 0)
   );
   const toolVersionRanges = parseToolVersionRanges(config.toolVersions);
   const toolAvailableForRelease = (toolName, release) => toolIsAvailableInRelease(toolVersionRanges, toolName, release);
-  const movingSupportedVersion = capConfig?.supported_versions?.find(import_adcp_version_config.isMovingAdcpPrereleaseFamilyAlias);
+  const movingSupportedVersion = capConfig?.supported_versions?.find(import_adcp_version_config2.isMovingAdcpPrereleaseFamilyAlias);
   if (movingSupportedVersion) {
     throw new Error(
       `createAdcpServer: capabilities.supported_versions contains moving prerelease-family alias ${JSON.stringify(movingSupportedVersion)}; pin ${JSON.stringify((0, import_version2.toReleasePrecisionVersion)(import_version3.ADCP_VERSION))} instead`
     );
   }
-  const configuredDefaultVersion = configuredDefaultAdcpVersion === void 0 ? void 0 : (0, import_adcp_version_config.resolveAdcpVersion)(configuredDefaultAdcpVersion, "defaultAdcpVersion");
+  const configuredDefaultVersion = configuredDefaultAdcpVersion === void 0 ? void 0 : (0, import_adcp_version_config2.resolveAdcpVersion)(configuredDefaultAdcpVersion, "defaultAdcpVersion");
   const maximumRelease = parseAdcpRelease(adcpVersion);
   const requestedDefaultRelease = configuredDefaultVersion === void 0 ? void 0 : parseAdcpRelease(configuredDefaultVersion);
   if (maximumRelease === void 0) {
@@ -2406,8 +2419,8 @@ function createAdcpServer(config) {
     enrichErrorTwoLayer(response, toolName, (0, import_error_arm_tools.getToolsWithErrorArm)(release.validationVersion));
     if (!isErrorResponse(response)) {
       response = downgradeTaskStatusResult(toolName, response, release.validationVersion);
-      normalizeMediaBuyStatusCollision(response, toolName);
-      injectEnvelopeStatusIntoResponse(response, toolName);
+      normalizeMediaBuyStatusCollision(response, toolName, release.validationVersion);
+      injectEnvelopeStatusIntoResponse(response, toolName, release.validationVersion);
       const validationError = protocolTaskResponseValidationError(toolName, response, params);
       if (validationError) return finalizeProtocolTaskToolResponse(toolName, params, validationError, opts);
     }
@@ -2786,8 +2799,8 @@ function createAdcpServer(config) {
         const finalizeProtocolEnvelope = (response) => {
           sanitizeAdcpErrorEnvelope(response);
           enrichErrorTwoLayer(response, toolName, requestErrorArms);
-          normalizeMediaBuyStatusCollision(response, toolName);
-          injectEnvelopeStatusIntoResponse(response, toolName);
+          normalizeMediaBuyStatusCollision(response, toolName, requestRelease.validationVersion);
+          injectEnvelopeStatusIntoResponse(response, toolName, requestRelease.validationVersion);
           injectContextIntoResponse(response, params.context);
           injectVersionIntoResponse(response, requestRelease.wireVersion);
           return response;
@@ -2813,7 +2826,7 @@ function createAdcpServer(config) {
           const offered = capabilitiesData.webhook_signing?.profiles ?? [
             "adcp/webhook-signing/v1"
           ];
-          if (typeof selectedProfile !== "string" || !offered.includes(selectedProfile) || selectedProfile === "web-bot-auth" && (!config.identity33 || !(0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")) || selectedProfile === "web-bot-auth" && registration.authentication !== void 0)
+          if (typeof selectedProfile !== "string" || !offered.includes(selectedProfile) || selectedProfile === "web-bot-auth" && (!config.identity33 || !(0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")) || selectedProfile === "web-bot-auth" && registration.authentication !== void 0)
             return finalize(
               (0, import_errors2.adcpError)("INVALID_REQUEST", {
                 message: "Unsupported or ambiguous webhook signing profile",
@@ -3001,7 +3014,7 @@ function createAdcpServer(config) {
             params,
             requestRelease.validationVersion,
             proposalRefinementCapabilities,
-            !!config.identity33 && (0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
+            !!config.identity33 && (0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
           );
           if (!outcome.valid) {
             if ("refinementError" in outcome && outcome.refinementError?.code === "UNSUPPORTED_FEATURE") {
@@ -3968,8 +3981,8 @@ function createAdcpServer(config) {
               formatted = normalizeGetProductsCacheScope(formatted, params, ctx.account, ctx.authInfo, exposeErrorDetails) ?? formatted;
             }
             if (!isErrorResponse(formatted)) {
-              normalizeMediaBuyStatusCollision(formatted, toolName);
-              injectEnvelopeStatusIntoResponse(formatted, toolName);
+              normalizeMediaBuyStatusCollision(formatted, toolName, adcpVersion);
+              injectEnvelopeStatusIntoResponse(formatted, toolName, adcpVersion);
             }
           }
           if (translatesRelease && !isErrorResponse(formatted) && formatted.structuredContent) {
@@ -4005,7 +4018,7 @@ function createAdcpServer(config) {
               payload,
               requestRelease.validationVersion,
               void 0,
-              !!config.identity33 && (0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
+              !!config.identity33 && (0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
             );
             if (!outcome.valid) {
               logger.warn(
@@ -4889,7 +4902,7 @@ function createAdcpServer(config) {
           delete validationPayload.media_buy.proposal_refinement;
           delete validationPayload.media_buy.lifecycle_tools;
         }
-        const responseOutcome = config.identity33 && (0, import_adcp_version_config.isAdcpVersionAtLeast)(release.wireVersion, "3.3") ? (0, import_validation.validateIdentity33Payload)(
+        const responseOutcome = config.identity33 && (0, import_adcp_version_config2.isAdcpVersionAtLeast)(release.wireVersion, "3.3") ? (0, import_validation.validateIdentity33Payload)(
           "get_adcp_capabilities",
           "response",
           validationPayload,

package/dist/lib/server/create-adcp-server.mjs

@@ -1,5 +1,11 @@
+import { isPre31AdcpVersion } from "../utils/adcp-version-config.mjs";
 import { assertWebBotAuthSigningKey, getWebBotAuthLegacyOriginGate } from "../signing/web-bot-auth.mjs";
-import { downgradeResponse, translationSteps, upgradeRequest } from "../adapters/version/index.mjs";
+import {
+  downgradeResponse,
+  getVersionAdapter,
+  translationSteps,
+  upgradeRequest
+} from "../adapters/version/index.mjs";
 import {
   isIdentity33SchemaScope,
   withIdentity33SchemaScope,
@@ -37,7 +43,13 @@ import {
   resolveAdcpVersion
 } from "../utils/adcp-version-config.mjs";
 import { ConfigurationError } from "../errors/index.mjs";
-import { getValidator, hasSchemaBundle, resolveBundleKey, getMcpProfileInputSchema } from "../validation/schema-loader.mjs";
+import {
+  getValidator,
+  getToolSchemaDocument,
+  hasSchemaBundle,
+  resolveBundleKey,
+  getMcpProfileInputSchema
+} from "../validation/schema-loader.mjs";
 import { TOOL_INPUT_SHAPES } from "../schemas/index.mjs";
 import { TaskTypeValues } from "../types/enums.generated.mjs";
 import { bundleSupportsAdcpVersionField } from "../protocols/index.mjs";
@@ -1048,8 +1060,7 @@ function projectValueToCapabilitySchema(root, schema, value, depth = 0) {
   return projectedObject;
 }
 function projectCapabilitiesToVersion(data, version) {
-  const validator = getValidator("get_adcp_capabilities", "sync", version);
-  const schema = asProjectionSchema(validator?.schema);
+  const schema = asProjectionSchema(getToolSchemaDocument("get_adcp_capabilities", "sync", version)?.schema);
   if (!schema) return data;
   const projected = projectValueToCapabilitySchema(schema, schema, data);
   if (!isPlainObject(projected)) return data;
@@ -1459,7 +1470,9 @@ function injectContextIntoResponse(response, context) {
     syncContentJsonText(response, sc, mirrorsStructuredContent);
   }
 }
-function injectEnvelopeStatusIntoResponse(response, toolName) {
+function injectEnvelopeStatusIntoResponse(response, toolName, servedVersion) {
+  if (servedVersion && isPre31AdcpVersion(servedVersion) && MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName) && response.isError !== true)
+    return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
   if ("status" in sc) return;
@@ -1483,12 +1496,23 @@ const MEDIA_BUY_STATUS_VALUES = /* @__PURE__ */ new Set([
   "rejected",
   "canceled"
 ]);
-function normalizeMediaBuyStatusCollision(response, toolName) {
+function normalizeMediaBuyStatusCollision(response, toolName, servedVersion) {
   if (!MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName)) return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
+  if (servedVersion && isPre31AdcpVersion(servedVersion)) {
+    const adapted = typeof sc.media_buy_status === "string" ? getVersionAdapter("3.0", toolName)?.downgradeResponse?.(sc) : void 0;
+    if (adapted && adapted.data !== sc && adapted.data && typeof adapted.data === "object") {
+      const mirrors = contentTextMirrorsStructuredContent(response, sc);
+      response.structuredContent = adapted.data;
+      syncContentJsonText(response, response.structuredContent, mirrors);
+    }
+    return;
+  }
   const status = sc.status;
   if (typeof status !== "string" || !MEDIA_BUY_STATUS_VALUES.has(status)) return;
+  if (servedVersion && sc.media_buy_status === void 0 && (status === "completed" || status === "rejected" || status === "canceled"))
+    return;
   const looksLikeMediaBuyPayload = typeof sc.media_buy_id === "string" || "media_buy_status" in sc || Array.isArray(sc.packages);
   if (!looksLikeMediaBuyPayload) return;
   const mirrorsStructuredContent = contentTextMirrorsStructuredContent(response, sc);
@@ -2497,8 +2521,8 @@ function createAdcpServer(config) {
     enrichErrorTwoLayer(response, toolName, getToolsWithErrorArm(release.validationVersion));
     if (!isErrorResponse(response)) {
       response = downgradeTaskStatusResult(toolName, response, release.validationVersion);
-      normalizeMediaBuyStatusCollision(response, toolName);
-      injectEnvelopeStatusIntoResponse(response, toolName);
+      normalizeMediaBuyStatusCollision(response, toolName, release.validationVersion);
+      injectEnvelopeStatusIntoResponse(response, toolName, release.validationVersion);
       const validationError = protocolTaskResponseValidationError(toolName, response, params);
       if (validationError) return finalizeProtocolTaskToolResponse(toolName, params, validationError, opts);
     }
@@ -2877,8 +2901,8 @@ function createAdcpServer(config) {
         const finalizeProtocolEnvelope = (response) => {
           sanitizeAdcpErrorEnvelope(response);
           enrichErrorTwoLayer(response, toolName, requestErrorArms);
-          normalizeMediaBuyStatusCollision(response, toolName);
-          injectEnvelopeStatusIntoResponse(response, toolName);
+          normalizeMediaBuyStatusCollision(response, toolName, requestRelease.validationVersion);
+          injectEnvelopeStatusIntoResponse(response, toolName, requestRelease.validationVersion);
           injectContextIntoResponse(response, params.context);
           injectVersionIntoResponse(response, requestRelease.wireVersion);
           return response;
@@ -4059,8 +4083,8 @@ function createAdcpServer(config) {
               formatted = normalizeGetProductsCacheScope(formatted, params, ctx.account, ctx.authInfo, exposeErrorDetails) ?? formatted;
             }
             if (!isErrorResponse(formatted)) {
-              normalizeMediaBuyStatusCollision(formatted, toolName);
-              injectEnvelopeStatusIntoResponse(formatted, toolName);
+              normalizeMediaBuyStatusCollision(formatted, toolName, adcpVersion);
+              injectEnvelopeStatusIntoResponse(formatted, toolName, adcpVersion);
             }
           }
           if (translatesRelease && !isErrorResponse(formatted) && formatted.structuredContent) {

package/dist/lib/server/decisioning/account.d.mts

@@ -633,11 +633,10 @@ export interface AccountStore<TCtxMeta = Record<string, unknown>> {
      * already run, and note the framework performs no such check for
      * `'explicit'` / `'implicit'`, where the entry key is buyer-declared.
      *
-     * **Rows must carry `brand` + `operator`** (`sync-accounts-response.json`
-     * requires them on every row, including `action: 'failed'`). Echo them from
-     * your own account record on settings-update results. If your upstream
-     * accounts have no expressible natural key, don't wire this method — see
-     * adcontextprotocol/adcp#7517.
+     * **Keep the stable result interface's legacy fields.** AdCP 3.2 settings
+     * updates may also populate `account`; the projector uses that wire anchor
+     * and omits flat brand/operator for 3.2, while older releases keep the flat
+     * identity. SDK 17 adds modern account-only result typing.
      *
      * In AdCP 3.1 beta, adopters that need settings-update entries with
      * `notification_configs[]` can read the full wire body from `ctx.input`
@@ -892,6 +891,14 @@ export type AccountFilter = ListAccountsRequest;
  */
 export interface SyncAccountsResultRow {
     account_id?: string;
+    /** 3.2+ settings-update wire anchor. Legacy fields remain required for stable source compatibility. */
+    account?: SyncAccountsRow['account'];
+    operator_unit?: SyncAccountsRow['operator_unit'];
+    revision?: SyncAccountsRow['revision'];
+    identity_change?: SyncAccountsRow['identity_change'];
+    identity_change_preview?: SyncAccountsRow['identity_change_preview'];
+    currency?: SyncAccountsRow['currency'];
+    timezone?: SyncAccountsRow['timezone'];
     brand: BrandReference;
     operator: string;
     /** Human-readable account name assigned by the seller. */
@@ -956,7 +963,7 @@ export type WireSyncAccountRow = SyncAccountsSuccess['accounts'][number];
  * never call this directly — they return `SyncAccountsResultRow[]` from
  * `accounts.upsert` and the framework projects.
  */
-export declare function toWireSyncAccountRow(row: SyncAccountsResultRow): WireSyncAccountRow;
+export declare function toWireSyncAccountRow(row: SyncAccountsResultRow, servedAdcpVersion?: string): WireSyncAccountRow;
 export type WireSyncGovernanceRow = SyncGovernanceSuccess['accounts'][number];
 /**
  * Project a `sync_governance` response row to the wire shape, stripping

package/dist/lib/server/decisioning/account.d.ts

@@ -633,11 +633,10 @@ export interface AccountStore<TCtxMeta = Record<string, unknown>> {
      * already run, and note the framework performs no such check for
      * `'explicit'` / `'implicit'`, where the entry key is buyer-declared.
      *
-     * **Rows must carry `brand` + `operator`** (`sync-accounts-response.json`
-     * requires them on every row, including `action: 'failed'`). Echo them from
-     * your own account record on settings-update results. If your upstream
-     * accounts have no expressible natural key, don't wire this method — see
-     * adcontextprotocol/adcp#7517.
+     * **Keep the stable result interface's legacy fields.** AdCP 3.2 settings
+     * updates may also populate `account`; the projector uses that wire anchor
+     * and omits flat brand/operator for 3.2, while older releases keep the flat
+     * identity. SDK 17 adds modern account-only result typing.
      *
      * In AdCP 3.1 beta, adopters that need settings-update entries with
      * `notification_configs[]` can read the full wire body from `ctx.input`
@@ -892,6 +891,14 @@ export type AccountFilter = ListAccountsRequest;
  */
 export interface SyncAccountsResultRow {
     account_id?: string;
+    /** 3.2+ settings-update wire anchor. Legacy fields remain required for stable source compatibility. */
+    account?: SyncAccountsRow['account'];
+    operator_unit?: SyncAccountsRow['operator_unit'];
+    revision?: SyncAccountsRow['revision'];
+    identity_change?: SyncAccountsRow['identity_change'];
+    identity_change_preview?: SyncAccountsRow['identity_change_preview'];
+    currency?: SyncAccountsRow['currency'];
+    timezone?: SyncAccountsRow['timezone'];
     brand: BrandReference;
     operator: string;
     /** Human-readable account name assigned by the seller. */
@@ -956,7 +963,7 @@ export type WireSyncAccountRow = SyncAccountsSuccess['accounts'][number];
  * never call this directly — they return `SyncAccountsResultRow[]` from
  * `accounts.upsert` and the framework projects.
  */
-export declare function toWireSyncAccountRow(row: SyncAccountsResultRow): WireSyncAccountRow;
+export declare function toWireSyncAccountRow(row: SyncAccountsResultRow, servedAdcpVersion?: string): WireSyncAccountRow;
 export type WireSyncGovernanceRow = SyncGovernanceSuccess['accounts'][number];
 /**
  * Project a `sync_governance` response row to the wire shape, stripping

package/dist/lib/server/decisioning/account.js

@@ -30,6 +30,8 @@ __export(account_exports, {
 });
 module.exports = __toCommonJS(account_exports);
 var import_reporting_delivery_config = require('../reporting-delivery-config.js');
+var import_adcp_version_config = require('../../utils/adcp-version-config.js');
+var import_account_response_identity = require('../account-response-identity.js');
 const ACCOUNT_AUTHORIZATION_WIRE_KEYS = [
   "allowed_tasks",
   "field_scopes",
@@ -50,6 +52,30 @@ class AccountNotFoundError extends Error {
     super(message);
   }
 }
+const SYNC_ACCOUNT_PASSTHROUGH_KEYS = [
+  "account_id",
+  "brand",
+  "operator",
+  "revision",
+  "currency",
+  "timezone",
+  "name",
+  "action",
+  "status",
+  "billing",
+  "account_scope",
+  "setup",
+  "rate_card",
+  "payment_terms",
+  "credit_limit",
+  "errors",
+  "warnings",
+  "sandbox"
+];
+const SYNC_ACCOUNTS_RESULT_KEY_COVERAGE = {};
+void SYNC_ACCOUNTS_RESULT_KEY_COVERAGE;
+const SYNC_ACCOUNTS_PROJECTION_KEY_COVERAGE = {};
+void SYNC_ACCOUNTS_PROJECTION_KEY_COVERAGE;
 function toWireAccount(account) {
   const wire = {
     account_id: account.id,
@@ -106,23 +132,22 @@ function projectAccountAuthorization(authorization) {
   if (authorization.read_only !== void 0) projected.read_only = authorization.read_only;
   return projected;
 }
-function toWireSyncAccountRow(row) {
+function toWireSyncAccountRow(row, servedAdcpVersion) {
+  const modernAnchor = !(0, import_adcp_version_config.isPre32AdcpVersion)(servedAdcpVersion);
+  const identity = (0, import_account_response_identity.projectAccountResponseIdentityFields)(modernAnchor ? row : { ...row, account: void 0 });
   const wire = {
-    brand: row.brand,
-    operator: row.operator,
     action: row.action,
-    status: row.status
+    ...identity
   };
-  if (row.account_id !== void 0) wire.account_id = row.account_id;
-  if (row.name !== void 0) wire.name = row.name;
-  if (row.billing !== void 0) wire.billing = row.billing;
+  const source = row;
+  function copyField(key) {
+    if (modernAnchor && identity.account !== void 0 && (key === "brand" || key === "operator")) return;
+    const value = source[key];
+    if (value !== void 0) wire[key] = value;
+  }
+  for (const key of SYNC_ACCOUNT_PASSTHROUGH_KEYS) copyField(key);
   const projectedEntity = projectBillingEntity(row.billing_entity);
   if (projectedEntity !== void 0) wire.billing_entity = projectedEntity;
-  if (row.account_scope !== void 0) wire.account_scope = row.account_scope;
-  if (row.setup !== void 0) wire.setup = row.setup;
-  if (row.rate_card !== void 0) wire.rate_card = row.rate_card;
-  if (row.payment_terms !== void 0) wire.payment_terms = row.payment_terms;
-  if (row.credit_limit !== void 0) wire.credit_limit = row.credit_limit;
   if (row.notification_configs !== void 0) {
     wire.notification_configs = row.notification_configs.map(projectNotificationConfig);
   }
@@ -134,9 +159,6 @@ function toWireSyncAccountRow(row) {
       row.authorization
     );
   }
-  if (row.errors !== void 0) wire.errors = row.errors;
-  if (row.warnings !== void 0) wire.warnings = row.warnings;
-  if (row.sandbox !== void 0) wire.sandbox = row.sandbox;
   return wire;
 }
 function projectNotificationConfig(config) {