@adcp/sdk 16.4.0 → 16.6.0

package/dist/lib/version.d.mts

@@ -1,11 +1,11 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "16.4.0";
+export declare const LIBRARY_VERSION = "16.6.0";
 /**
  * AdCP specification version this library is built for
  */
-export declare const ADCP_VERSION = "3.2.5";
+export declare const ADCP_VERSION = "3.2.7";
 /**
  * AdCP major version sent with every request (adcp_major_version field).
  * Sellers validate this against their supported versions and return
@@ -19,7 +19,7 @@ export declare const ADCP_MAJOR_VERSION = 3;
  * this list by hand; bumping the AdCP pin via `npm run sync-version`
  * extends it.
  */
-export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5"];
+export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7"];
 /**
  * String literal union of every AdCP version the SDK formally supports.
  *
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "16.4.0";
-    readonly adcp: "3.2.5";
-    readonly compatibleVersions: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5"];
-    readonly generatedAt: "2026-10-23T04:33:29.838Z";
+    readonly library: "16.6.0";
+    readonly adcp: "3.2.7";
+    readonly compatibleVersions: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7"];
+    readonly generatedAt: "2026-10-27T06:39:57.335Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts

@@ -1,11 +1,11 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "16.4.0";
+export declare const LIBRARY_VERSION = "16.6.0";
 /**
  * AdCP specification version this library is built for
  */
-export declare const ADCP_VERSION = "3.2.5";
+export declare const ADCP_VERSION = "3.2.7";
 /**
  * AdCP major version sent with every request (adcp_major_version field).
  * Sellers validate this against their supported versions and return
@@ -19,7 +19,7 @@ export declare const ADCP_MAJOR_VERSION = 3;
  * this list by hand; bumping the AdCP pin via `npm run sync-version`
  * extends it.
  */
-export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5"];
+export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7"];
 /**
  * String literal union of every AdCP version the SDK formally supports.
  *
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "16.4.0";
-    readonly adcp: "3.2.5";
-    readonly compatibleVersions: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5"];
-    readonly generatedAt: "2026-10-23T04:33:29.838Z";
+    readonly library: "16.6.0";
+    readonly adcp: "3.2.7";
+    readonly compatibleVersions: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7"];
+    readonly generatedAt: "2026-10-27T06:39:57.335Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js

@@ -31,8 +31,8 @@ __export(version_exports, {
   toReleasePrecisionVersion: () => toReleasePrecisionVersion
 });
 module.exports = __toCommonJS(version_exports);
-const LIBRARY_VERSION = "16.4.0";
-const ADCP_VERSION = "3.2.5";
+const LIBRARY_VERSION = "16.6.0";
+const ADCP_VERSION = "3.2.7";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
   "v3",
@@ -99,13 +99,15 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.2",
   "3.2.3",
   "3.2.4",
-  "3.2.5"
+  "3.2.5",
+  "3.2.6",
+  "3.2.7"
 ];
 const VERSION_INFO = {
-  library: "16.4.0",
-  adcp: "3.2.5",
+  library: "16.6.0",
+  adcp: "3.2.7",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-23T04:33:29.838Z"
+  generatedAt: "2026-10-27T06:39:57.335Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/dist/lib/version.mjs

@@ -1,5 +1,5 @@
-const LIBRARY_VERSION = "16.4.0";
-const ADCP_VERSION = "3.2.5";
+const LIBRARY_VERSION = "16.6.0";
+const ADCP_VERSION = "3.2.7";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
   "v3",
@@ -66,13 +66,15 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.2.2",
   "3.2.3",
   "3.2.4",
-  "3.2.5"
+  "3.2.5",
+  "3.2.6",
+  "3.2.7"
 ];
 const VERSION_INFO = {
-  library: "16.4.0",
-  adcp: "3.2.5",
+  library: "16.6.0",
+  adcp: "3.2.7",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-23T04:33:29.838Z"
+  generatedAt: "2026-10-27T06:39:57.335Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/dist/lib/webhooks/index.d.mts

@@ -74,3 +74,6 @@ export type PreflightWebhookRequestResult = {
 };
 /** Validate headers and freshness before looking up a secret. Success does not authenticate the request. */
 export declare function preflightWebhookRequest(request: PreflightWebhookRequest, options?: PreflightWebhookRequestOptions): PreflightWebhookRequestResult;
+export { parseMediaBuyDeliveryWebhook } from './media-buy-delivery.mjs';
+export type { ParseMediaBuyDeliveryWebhookOptions, MediaBuyDeliveryWebhookEnvelope, MediaBuyDeliveryWebhookParseErrorCode, MediaBuyDeliveryWebhookParseResult, } from './media-buy-delivery.mjs';
+export type { MediaBuyDeliveryReport } from '../types/media-buy-delivery-report.mjs';

package/dist/lib/webhooks/index.d.ts

@@ -74,3 +74,6 @@ export type PreflightWebhookRequestResult = {
 };
 /** Validate headers and freshness before looking up a secret. Success does not authenticate the request. */
 export declare function preflightWebhookRequest(request: PreflightWebhookRequest, options?: PreflightWebhookRequestOptions): PreflightWebhookRequestResult;
+export { parseMediaBuyDeliveryWebhook } from './media-buy-delivery';
+export type { ParseMediaBuyDeliveryWebhookOptions, MediaBuyDeliveryWebhookEnvelope, MediaBuyDeliveryWebhookParseErrorCode, MediaBuyDeliveryWebhookParseResult, } from './media-buy-delivery';
+export type { MediaBuyDeliveryReport } from '../types/media-buy-delivery-report';

package/dist/lib/webhooks/index.js

@@ -21,6 +21,7 @@ var webhooks_exports = {};
 __export(webhooks_exports, {
   WholesaleFeedWebhookNotificationError: () => import_webhook_notification.WholesaleFeedWebhookNotificationError,
   normalizeWholesaleFeedWebhookNotification: () => import_webhook_notification.normalizeWholesaleFeedWebhookNotification,
+  parseMediaBuyDeliveryWebhook: () => import_media_buy_delivery.parseMediaBuyDeliveryWebhook,
   parseWholesaleFeedWebhookNotification: () => import_webhook_notification.parseWholesaleFeedWebhookNotification,
   preflightWebhookRequest: () => preflightWebhookRequest,
   verifyWebhookRequest: () => verifyWebhookRequest
@@ -29,6 +30,7 @@ module.exports = __toCommonJS(webhooks_exports);
 var import_crypto = require("crypto");
 __reExport(webhooks_exports, require('../notifications/account-change-recorded.js'), module.exports);
 var import_webhook_notification = require('../wholesale-feed-sync/webhook-notification.js');
+var import_media_buy_delivery = require('./media-buy-delivery.js');
 function verifyWebhookRequest(options) {
   const preflight = preflightWebhookRequest(options, {
     now: options.now,
@@ -172,6 +174,7 @@ function isHeaders(headers) {
 0 && (module.exports = {
   WholesaleFeedWebhookNotificationError,
   normalizeWholesaleFeedWebhookNotification,
+  parseMediaBuyDeliveryWebhook,
   parseWholesaleFeedWebhookNotification,
   preflightWebhookRequest,
   verifyWebhookRequest,

package/dist/lib/webhooks/index.mjs

@@ -144,9 +144,11 @@ function normalizeHeaderValue(value) {
 function isHeaders(headers) {
   return typeof headers.get === "function";
 }
+import { parseMediaBuyDeliveryWebhook } from "./media-buy-delivery.mjs";
 export {
   WholesaleFeedWebhookNotificationError,
   normalizeWholesaleFeedWebhookNotification,
+  parseMediaBuyDeliveryWebhook,
   parseWholesaleFeedWebhookNotification,
   preflightWebhookRequest,
   verifyWebhookRequest

package/dist/lib/webhooks/media-buy-delivery.d.mts

@@ -0,0 +1,43 @@
+import type { MCPWebhookPayload } from '../types/core.generated.mjs';
+import type { MediaBuyDeliveryReport } from '../types/media-buy-delivery-report.mjs';
+export interface ParseMediaBuyDeliveryWebhookOptions {
+    /** Trusted release negotiated with the seller. Defaults to the SDK pin; never read from the body. */
+    adcpVersion?: string;
+    /** Accept an unenveloped report and mark its wire format. Defaults to false. */
+    acceptBareDeliveryReport?: boolean;
+}
+/** AdCP 3.0 permits operation_id to be absent. No missing envelope fields are synthesized. */
+export type MediaBuyDeliveryWebhookEnvelope = Omit<MCPWebhookPayload, 'result' | 'task_type' | 'operation_id'> & {
+    task_type: 'media_buy_delivery';
+    operation_id?: string;
+    result: MediaBuyDeliveryReport;
+};
+export type MediaBuyDeliveryWebhookParseErrorCode = 'webhook_envelope_invalid' | 'webhook_result_invalid' | 'webhook_unsupported_payload';
+export type MediaBuyDeliveryWebhookParseResult = {
+    ok: true;
+    wireFormat: 'mcp_envelope';
+    adcpVersion: string;
+    envelope: MediaBuyDeliveryWebhookEnvelope;
+    result: MediaBuyDeliveryReport;
+} | {
+    ok: true;
+    wireFormat: 'bare_delivery_report';
+    adcpVersion: string;
+    envelope?: undefined;
+    result: MediaBuyDeliveryReport;
+} | {
+    ok: false;
+    code: MediaBuyDeliveryWebhookParseErrorCode;
+    message: string;
+    errors: readonly string[];
+};
+/**
+ * Validate an ALREADY AUTHENTICATED delivery webhook. This performs no signature,
+ * sender, registration, or replay verification. Verify the original request bytes
+ * first and select adcpVersion from trusted seller/buy state. Malformed bodies
+ * return diagnostics; invalid version configuration throws ConfigurationError.
+ *
+ * Envelope status follows the selected release's task-status enum. A delayed
+ * notification may use working; notification_type is independent of task status.
+ */
+export declare function parseMediaBuyDeliveryWebhook(body: unknown, options?: ParseMediaBuyDeliveryWebhookOptions): MediaBuyDeliveryWebhookParseResult;

package/dist/lib/webhooks/media-buy-delivery.d.ts

@@ -0,0 +1,43 @@
+import type { MCPWebhookPayload } from '../types/core.generated';
+import type { MediaBuyDeliveryReport } from '../types/media-buy-delivery-report';
+export interface ParseMediaBuyDeliveryWebhookOptions {
+    /** Trusted release negotiated with the seller. Defaults to the SDK pin; never read from the body. */
+    adcpVersion?: string;
+    /** Accept an unenveloped report and mark its wire format. Defaults to false. */
+    acceptBareDeliveryReport?: boolean;
+}
+/** AdCP 3.0 permits operation_id to be absent. No missing envelope fields are synthesized. */
+export type MediaBuyDeliveryWebhookEnvelope = Omit<MCPWebhookPayload, 'result' | 'task_type' | 'operation_id'> & {
+    task_type: 'media_buy_delivery';
+    operation_id?: string;
+    result: MediaBuyDeliveryReport;
+};
+export type MediaBuyDeliveryWebhookParseErrorCode = 'webhook_envelope_invalid' | 'webhook_result_invalid' | 'webhook_unsupported_payload';
+export type MediaBuyDeliveryWebhookParseResult = {
+    ok: true;
+    wireFormat: 'mcp_envelope';
+    adcpVersion: string;
+    envelope: MediaBuyDeliveryWebhookEnvelope;
+    result: MediaBuyDeliveryReport;
+} | {
+    ok: true;
+    wireFormat: 'bare_delivery_report';
+    adcpVersion: string;
+    envelope?: undefined;
+    result: MediaBuyDeliveryReport;
+} | {
+    ok: false;
+    code: MediaBuyDeliveryWebhookParseErrorCode;
+    message: string;
+    errors: readonly string[];
+};
+/**
+ * Validate an ALREADY AUTHENTICATED delivery webhook. This performs no signature,
+ * sender, registration, or replay verification. Verify the original request bytes
+ * first and select adcpVersion from trusted seller/buy state. Malformed bodies
+ * return diagnostics; invalid version configuration throws ConfigurationError.
+ *
+ * Envelope status follows the selected release's task-status enum. A delayed
+ * notification may use working; notification_type is independent of task status.
+ */
+export declare function parseMediaBuyDeliveryWebhook(body: unknown, options?: ParseMediaBuyDeliveryWebhookOptions): MediaBuyDeliveryWebhookParseResult;

package/dist/lib/webhooks/media-buy-delivery.js

@@ -0,0 +1,119 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var media_buy_delivery_exports = {};
+__export(media_buy_delivery_exports, {
+  parseMediaBuyDeliveryWebhook: () => parseMediaBuyDeliveryWebhook,
+  prepareMediaBuyDeliveryWebhookValidation: () => prepareMediaBuyDeliveryWebhookValidation
+});
+module.exports = __toCommonJS(media_buy_delivery_exports);
+var import_node_util = require("node:util");
+var import_account_change_json = require('../client/account-change-json.js');
+var import_errors = require('../errors/index.js');
+var import_adcp_version_config = require('../utils/adcp-version-config.js');
+var import_schema_loader = require('../validation/schema-loader.js');
+const MAX_BODY_BYTES = 16 * 1024 * 1024;
+const ENVELOPE_FIELDS = ["result", "task_type", "task_id", "operation_id", "idempotency_key", "timestamp"];
+function prepareMediaBuyDeliveryWebhookValidation(version) {
+  const adcpVersion = (0, import_adcp_version_config.resolveAdcpVersion)(version);
+  const validateEnvelope = (0, import_schema_loader.getMediaBuyDeliveryEnvelopeValidator)(adcpVersion);
+  const validateResult = (0, import_schema_loader.getSchemaValidatorByRef)(
+    (0, import_adcp_version_config.isPre31AdcpVersion)(adcpVersion) ? "media-buy/get-media-buy-delivery-response.json" : "media-buy/media-buy-delivery-webhook-result.json",
+    adcpVersion
+  );
+  if (!validateEnvelope || !validateResult) {
+    throw new import_errors.ConfigurationError("Bundled delivery webhook schemas are unavailable.", "adcpVersion");
+  }
+  return { adcpVersion, validateEnvelope, validateResult };
+}
+function parseMediaBuyDeliveryWebhook(body, options = {}) {
+  const { adcpVersion, validateEnvelope, validateResult } = prepareMediaBuyDeliveryWebhookValidation(
+    options.adcpVersion
+  );
+  let parsed;
+  try {
+    if (typeof body === "string" || body instanceof Uint8Array) {
+      if ((typeof body === "string" ? Buffer.byteLength(body) : body.byteLength) > MAX_BODY_BYTES) {
+        throw new Error("Body is too large");
+      }
+      parsed = JSON.parse(
+        typeof body === "string" ? body : new import_node_util.TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(body)
+      );
+    } else {
+      parsed = body;
+    }
+    (0, import_account_change_json.assertAccountChangeJsonSize)(parsed, MAX_BODY_BYTES);
+    parsed = structuredClone(parsed);
+  } catch {
+    return failure("webhook_envelope_invalid", [
+      "Webhook body must be valid JSON within 16 MiB and 64 nesting levels."
+    ]);
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return failure("webhook_envelope_invalid", ["Webhook body must be an object."]);
+  }
+  const envelope = parsed;
+  const bare = Object.hasOwn(envelope, "media_buy_deliveries") && !ENVELOPE_FIELDS.some((field) => Object.hasOwn(envelope, field));
+  if (bare && options.acceptBareDeliveryReport !== true) {
+    return failure("webhook_unsupported_payload", [
+      "Bare delivery reports require acceptBareDeliveryReport: true; the default expects an MCP envelope with result."
+    ]);
+  }
+  if (!bare) {
+    if (typeof envelope.task_type === "string" && envelope.task_type !== "media_buy_delivery") {
+      return failure("webhook_unsupported_payload", ["task_type must be media_buy_delivery."]);
+    }
+    if (!validateEnvelope(envelope)) return failure("webhook_envelope_invalid", diagnostics(validateEnvelope.errors));
+  }
+  const result = bare ? envelope : envelope.result;
+  if (!validateResult(result))
+    return failure("webhook_result_invalid", diagnostics(validateResult.errors, bare ? "" : "result"));
+  if (bare)
+    return { ok: true, wireFormat: "bare_delivery_report", adcpVersion, result };
+  return {
+    ok: true,
+    wireFormat: "mcp_envelope",
+    adcpVersion,
+    envelope,
+    result
+  };
+}
+function failure(code, errors) {
+  return { ok: false, code, message: errors.join("; "), errors };
+}
+function diagnostics(errors, prefix = "") {
+  if (!errors?.length) return [`${prefix || "body"} is invalid`];
+  return errors.slice(0, 20).map((error) => {
+    const fields = error.instancePath.split("/").slice(1).map((field) => field.replace(/~1/g, "/").replace(/~0/g, "~"));
+    if (error.keyword === "required" && typeof error.params.missingProperty === "string")
+      fields.push(error.params.missingProperty);
+    if (error.keyword === "additionalProperties" && typeof error.params.additionalProperty === "string")
+      fields.push(error.params.additionalProperty);
+    let path = prefix;
+    for (const field of fields) {
+      const bounded = field.length > 80 ? field.slice(0, 80) + "\u2026" : field;
+      path += /^(0|[1-9][0-9]*)$/.test(bounded) ? `[${bounded}]` : /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(bounded) ? `${path ? "." : ""}${bounded}` : `[${JSON.stringify(bounded)}]`;
+    }
+    return `${path || "body"} ${error.keyword === "required" ? "is required" : error.message ?? "is invalid"}`;
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  parseMediaBuyDeliveryWebhook,
+  prepareMediaBuyDeliveryWebhookValidation
+});

package/dist/lib/webhooks/media-buy-delivery.mjs

@@ -0,0 +1,94 @@
+import { TextDecoder } from "node:util";
+import { assertAccountChangeJsonSize } from "../client/account-change-json.mjs";
+import { ConfigurationError } from "../errors/index.mjs";
+import { isPre31AdcpVersion, resolveAdcpVersion } from "../utils/adcp-version-config.mjs";
+import { getMediaBuyDeliveryEnvelopeValidator, getSchemaValidatorByRef } from "../validation/schema-loader.mjs";
+const MAX_BODY_BYTES = 16 * 1024 * 1024;
+const ENVELOPE_FIELDS = ["result", "task_type", "task_id", "operation_id", "idempotency_key", "timestamp"];
+function prepareMediaBuyDeliveryWebhookValidation(version) {
+  const adcpVersion = resolveAdcpVersion(version);
+  const validateEnvelope = getMediaBuyDeliveryEnvelopeValidator(adcpVersion);
+  const validateResult = getSchemaValidatorByRef(
+    isPre31AdcpVersion(adcpVersion) ? "media-buy/get-media-buy-delivery-response.json" : "media-buy/media-buy-delivery-webhook-result.json",
+    adcpVersion
+  );
+  if (!validateEnvelope || !validateResult) {
+    throw new ConfigurationError("Bundled delivery webhook schemas are unavailable.", "adcpVersion");
+  }
+  return { adcpVersion, validateEnvelope, validateResult };
+}
+function parseMediaBuyDeliveryWebhook(body, options = {}) {
+  const { adcpVersion, validateEnvelope, validateResult } = prepareMediaBuyDeliveryWebhookValidation(
+    options.adcpVersion
+  );
+  let parsed;
+  try {
+    if (typeof body === "string" || body instanceof Uint8Array) {
+      if ((typeof body === "string" ? Buffer.byteLength(body) : body.byteLength) > MAX_BODY_BYTES) {
+        throw new Error("Body is too large");
+      }
+      parsed = JSON.parse(
+        typeof body === "string" ? body : new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(body)
+      );
+    } else {
+      parsed = body;
+    }
+    assertAccountChangeJsonSize(parsed, MAX_BODY_BYTES);
+    parsed = structuredClone(parsed);
+  } catch {
+    return failure("webhook_envelope_invalid", [
+      "Webhook body must be valid JSON within 16 MiB and 64 nesting levels."
+    ]);
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return failure("webhook_envelope_invalid", ["Webhook body must be an object."]);
+  }
+  const envelope = parsed;
+  const bare = Object.hasOwn(envelope, "media_buy_deliveries") && !ENVELOPE_FIELDS.some((field) => Object.hasOwn(envelope, field));
+  if (bare && options.acceptBareDeliveryReport !== true) {
+    return failure("webhook_unsupported_payload", [
+      "Bare delivery reports require acceptBareDeliveryReport: true; the default expects an MCP envelope with result."
+    ]);
+  }
+  if (!bare) {
+    if (typeof envelope.task_type === "string" && envelope.task_type !== "media_buy_delivery") {
+      return failure("webhook_unsupported_payload", ["task_type must be media_buy_delivery."]);
+    }
+    if (!validateEnvelope(envelope)) return failure("webhook_envelope_invalid", diagnostics(validateEnvelope.errors));
+  }
+  const result = bare ? envelope : envelope.result;
+  if (!validateResult(result))
+    return failure("webhook_result_invalid", diagnostics(validateResult.errors, bare ? "" : "result"));
+  if (bare)
+    return { ok: true, wireFormat: "bare_delivery_report", adcpVersion, result };
+  return {
+    ok: true,
+    wireFormat: "mcp_envelope",
+    adcpVersion,
+    envelope,
+    result
+  };
+}
+function failure(code, errors) {
+  return { ok: false, code, message: errors.join("; "), errors };
+}
+function diagnostics(errors, prefix = "") {
+  if (!errors?.length) return [`${prefix || "body"} is invalid`];
+  return errors.slice(0, 20).map((error) => {
+    const fields = error.instancePath.split("/").slice(1).map((field) => field.replace(/~1/g, "/").replace(/~0/g, "~"));
+    if (error.keyword === "required" && typeof error.params.missingProperty === "string")
+      fields.push(error.params.missingProperty);
+    if (error.keyword === "additionalProperties" && typeof error.params.additionalProperty === "string")
+      fields.push(error.params.additionalProperty);
+    let path = prefix;
+    for (const field of fields) {
+      const bounded = field.length > 80 ? field.slice(0, 80) + "\u2026" : field;
+      path += /^(0|[1-9][0-9]*)$/.test(bounded) ? `[${bounded}]` : /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(bounded) ? `${path ? "." : ""}${bounded}` : `[${JSON.stringify(bounded)}]`;
+    }
+    return `${path || "body"} ${error.keyword === "required" ? "is required" : error.message ?? "is invalid"}`;
+  });
+}
+export {
+  parseMediaBuyDeliveryWebhook,
+  prepareMediaBuyDeliveryWebhookValidation
+};

package/docs/CLI.md

@@ -328,6 +328,27 @@ Useful flags:
 - `--strict-flags`: Exit non-zero if any removed flag (e.g. `--platform-type`, removed in 5.1) is passed — recommended for CI
 - `--oauth`: Complete the browser OAuth flow inline when the saved alias has no valid tokens (MCP only — requires a saved alias)
 
+The versioned compliance summary reports actual storyboard-wide assertion failures in
+`failures`, with a command to rerun the whole storyboard. A false storyboard verdict
+without a failed step or assertion appears separately in `incomplete_storyboards`
+and as `STORYBOARD-INCOMPLETE` in text output. CI consumers that require complete
+coverage should inspect `overall_status`, `completeness`, and
+`incomplete_storyboards` as well as `failures`; partial coverage can exit zero.
+
+Discovery-only runs do not count as lifecycle observations. A lifecycle task that
+runs without observable state still leaves its lifecycle coverage partial. An
+optional-only storyboard passes only when a passing optional phase executes real
+coverage and no prerequisite fails; skipping every step does not earn a pass.
+
+Persistent notification assertions observe the URL from a successful subscriber
+registration. Positive `expect_webhook` payload selectors may use `filter.body`
+or flat selectors; conflicting values are rejected. Negative `expect_no_webhook`
+payload selectors require `filter.body`. Each ordinary positive assertion needs
+a fresh delivery or logical notification; explicit delivery-count and retry
+assertions can inspect the full delivery history. The flat account-change
+`change_id: '*'` selector means presence, while a nested `filter.body.change_id`
+matches its value exactly.
+
 > **Removed in 5.1:** `--platform-type` / `--list-platform-types` / `--storyboards` options. Agent selection is now driven by `get_adcp_capabilities` (`supported_protocols` + `specialisms`). Use `--storyboards` above to target a specific bundle.
 
 ### OAuth-protected agents

package/docs/TYPE-SUMMARY.md

@@ -1,10 +1,14 @@
 # AdCP Type Summary
 
-> Generated at: 2026-10-23
-> @adcp/sdk v16.4.0
+> Generated at: 2026-10-27
+> @adcp/sdk v16.6.0
 
 Curated reference of the types that matter for using the AdCP client. For full generated types see `src/lib/types/tools.generated.ts` and `src/lib/types/core.generated.ts`.
 
+## Prepared Storyboard Authorization
+
+Import `PrepareStoryboardFixturesOptions`, `PreparedFixturesPreparationAuthorizer`, and `PreparedFixturesPreparationLookup` from `@adcp/sdk/testing`. `prepareStoryboardFixtures` alone accepts `prepared_fixtures_preparation_authorizer`, asked once before seller contact with `{ gate: 'prepare', current }` and no stored binding. `PreparedFixturesAuthorizer` and its required `PreparedFixturesLookup.binding` remain reuse-only through `prepared_fixtures_authorizer` on run/pass/step lookups. A preparation grant never authorizes reuse. See [collection fixture foundation](guides/COLLECTION-FIXTURE-FOUNDATION.md).
+
 ## Buyer Reliable Reporting
 
 Import `reconcileReportingCoreV1`, `reconcileReporting`, `createPostgresReportingConsumerRuntimeV1`, and `createReliableReportingConsumerV1` from `@adcp/sdk/reporting/consumer`. `ReliableReportingConsumerRunResultV1` and `ReliableReportingConsumerErrorContextV1` identify a run with `consumerScope`, `accountId`, and `reason`. Retain `expectedPeriods` from buyer commitments, use a non-secret seller/principal `consumerScope`, and make post-official adjustment acceptance an explicit `evaluateAdjustment` policy decision. Verify RFC 9421 with `@adcp/sdk/signing/server` before calling `handleAuthenticatedNotification`. See [Reporting reconciliation](guides/REPORTING-RECONCILIATION.md) and the [existing-app buyer worker](../examples/reliable-reporting-buyer/README.md).
@@ -49,6 +53,11 @@ interface A2ALegacyCompatOptions {
 }
 
 interface TransportOptions {
+  // Local principal partition; never sent on the wire. Enables MCP process reuse.
+  connectionPartition?: string;
+  // Explicit opt-in when all unpartitioned callers share one principal.
+  // Otherwise unscoped MCP calls close their session after the operation.
+  connectionReuse?: 'process';
   // Defaults to 4 MiB (DEFAULT_MAX_RESPONSE_BYTES); only 0 opts out
   // (Infinity / negatives fall back to the default).
   // SSE is bounded per event plus `maxResponseBytes * 2` cumulative per call.
@@ -3027,6 +3036,8 @@ await reporting.stop();
 
 Account identity comes only from the framework-resolved context. Trusted host callbacks derive adapter routing, credential-free `sourceScope`, source timezone, currency, and the authorized constituent denominator. A declaration cannot supply `account`, `sourceScope`, `sourceTimezone`, `contract`, `currency`, `constituents`, or `mediaBuyIds`; `mediaBuyIds` is derived from `resolveCoverage`, so a buyer cannot name another buyer's media buys on a shared upstream network. Currency is frozen into configuration and obligation lineage. Capabilities are Core-only and derived from installed adapters and handlers; managed delivery, reconciled billing, receipts, webhook activity, and notifications are not advertised. Installation requires `platform.accounts.upsert`, which owns the advertised `sync_accounts` configuration path.
 
+Source offering `applicability` keeps required `productIds: string[]`; opt into `products: { kind: 'host_attested' }` with an empty `productIds` array. Host attestation supports products created per buy: trusted `resolveCoverage` must authorize each product for the selected offering using its `reporting_capabilities.reporting_delivery_offering_ids`. Constituent kinds, product bindings, and frozen coverage remain enforced. SDK 16.5.0+ is required to read the new variants; existing declaration hashes are unchanged. See `docs/guides/REPORTING-SOURCE-EXECUTOR.md`.
+
 For complete seller production assembly, use async `createPostgresReliableReportingProductionService` from `@adcp/reporting-storage/service`. It owns the PostgreSQL Core/Managed stores, receipts, all three reporting notifications, webhook activity, migrations, probes, recovery, and capability publication. Supply `activity.tenantScopeForAccount`; Reconciled Billing offerings also require a trusted `obligatedConsumers` roster. Its scheduler and `recoverOnce` require explicit `deploymentWide: true` because recovery scans the whole namespace. See `docs/guides/REPORTING-LEDGER.md` and `docs/guides/REPORTING-OPERATIONS.md`.
 
 Buyer production processes use `createPostgresReportingConsumerRuntimeV1` with `createReliableReportingConsumerV1` from the package root. Verify webhook signatures before passing authenticated hints, preserve seller/principal scope, and configure `evaluateAdjustment` to authorize integrity-valid post-official corrections; the default defers them. See `docs/guides/REPORTING-RECONCILIATION.md`.

package/docs/ZOD-SCHEMAS.md

@@ -40,7 +40,9 @@ This entry has no Node built-ins in its import graph and shares the Node entry's
 | Gzipped bundle | 265,418 B | 67,420 B | 75,000 B |
 | Generated validators retained | 1,203,529 B | 744 B | 2,048 B |
 
-The total-size limits leave roughly 11% headroom for dependency changes. The separate generated-code limit catches unrelated validators being retained even if dependencies become smaller. The check also verifies that product, media-buy, and reporting-obligation validators disappear and that the bundled schema still validates without Node globals. Existing tests exercise all exports through ESM and CommonJS, declaration paths, and portable cross-field validation.
+The original total-size limits left roughly 11% headroom for dependency changes. With Zod 4.6.7 and a direct namespace import in the generated schemas, the same check measures about 100 KB minified / 29 KB gzip, with 607 B of generated validators retained. The namespace import lets bundlers remove unused Zod exports; the CI limits remain unchanged.
+
+The separate generated-code limit catches unrelated validators being retained even if dependencies become smaller. The check also verifies that product, media-buy, and reporting-obligation validators disappear and that the bundled schema still validates without Node globals. Existing tests exercise all exports through ESM and CommonJS, declaration paths, and portable cross-field validation.
 
 ## Why Zod Schemas?
 

package/docs/guides/BUILD-AN-AGENT.md

@@ -252,11 +252,19 @@ Six helper families adopters reach for. Pick what your agent shape needs:
 | `InMemoryImplicitAccountStore` (Shape A) / `createOAuthPassthroughResolver` (Shape B) / `createRosterAccountStore` (Shape C) | Reference `AccountStore` shapes. Shape A: `'implicit'` buyer-driven onboarding. Shape B: vendor OAuth + `/me/adaccounts`. Shape C: publisher-curated roster. |
 | `createTenantRegistry` (host-routed) / `createTenantStore` (account-routed) | Multi-tenant. Host-routed = one server per tenant + tenant-id keyed lookup. Account-routed = one server with built-in fail-closed tenant-isolation gate on `upsert` / `syncGovernance`. |
 | `BuyerAgentRegistry.signingOnly` / `bearerOnly` / `mixed` (+ `cached`) | Durable buyer-agent identity. Resolved `BuyerAgent` flows through `ctx.agent` to every `AccountStore` method and `tasks_get` polling. `BuyerAgent.status === 'suspended' \| 'blocked'` triggers `AGENT_SUSPENDED` / `AGENT_BLOCKED`; `sync_accounts.billing` is enforced against `BuyerAgent.billing_capabilities`. See [`docs/migration-buyer-agent-registry.md`](../migration-buyer-agent-registry.md). |
-| `MEDIA_BUY_TRANSITIONS` / `assertMediaBuyTransition` (+ creative pair) | Canonical lifecycle graph the storyboard runner uses. `assertMediaBuyTransition(from, to)` throws `AdcpError` with the spec-correct code (`NOT_CANCELLABLE` / `INVALID_STATE`). Replaces local copies of the status graph. |
+| `MEDIA_BUY_TRANSITIONS` / `getMediaBuyTransitions` / `assertMediaBuyTransition` (+ creative pair) | Canonical lifecycle graphs shared with the storyboard runner. `getMediaBuyTransitions(adcpVersion)` selects the served release; `MEDIA_BUY_TRANSITIONS` uses the SDK default. `assertMediaBuyTransition(from, to, adcpVersion?)` throws `AdcpError` with the spec-correct code (`NOT_CANCELLABLE` / `INVALID_STATE`). Replaces local copies of the status graph. |
 | `createMediaBuyStore({ store })`                                       | Opt-in `targeting_overlay` echo on `get_media_buys`. Sellers claiming `property-lists` / `collection-lists` MUST echo the persisted list reference. |
 
 The full migration recipe walking adopters through each is at [`docs/migration-6.6-to-6.7.md`](../migration-6.6-to-6.7.md). The `examples/hello_*` family demonstrates each helper in a runnable adapter.
 
+When serving AdCP 3.3 or its beta/RC candidates, pass the negotiated release to
+`isLegalMediaBuyTransition` or `assertMediaBuyTransition` as the optional third
+argument. A blocking creative review rejection can move a not-yet-active buy
+from `pending_start` to `pending_creatives`; active and paused buys still cannot
+rewind to a pending state. Omitting the version keeps the SDK default release's
+contract. The storyboard runner selects the graph from the seller's response
+version, falling back to the run's `adcpVersion` and then the SDK default.
+
 ### Exposing your agent over A2A (preview)
 
 MCP is the default transport. To additionally expose the same `AdcpServer` over A2A JSON-RPC — so A2A-native buyers can discover and call your agent — mount `createA2AAdapter`: