@adcp/sdk 16.5.0 → 16.6.0

package/dist/lib/protocols/mcp-scope.d.mts

@@ -1,6 +1,8 @@
-type ScopeCleanup = () => Promise<void>;
+type ScopeCleanup = (terminateSession: boolean) => Promise<void>;
 /** Cache-key suffix for the current caller-owned MCP workflow. */
 export declare function currentMCPConnectionScopeKey(): string | undefined;
+/** Preserve seller work even when a higher layer handles a request timeout. */
+export declare function markMCPConnectionScopeInterrupted(): void;
 /** Whether an LRU entry belongs to a workflow that has not finished yet. */
 export declare function isMCPConnectionScopeCacheKeyActive(cacheKey: string): boolean;
 /** Register one idempotent cache-entry cleanup with the current workflow. */
@@ -20,6 +22,9 @@ export declare function closeCurrentMCPConnectionScope(): Promise<boolean>;
  * Per-call correlation headers, `AbortSignal`s and timeouts do not choose the
  * session. The scope terminates its sessions once, when `fn` settles; pass
  * `{ isolate: true }` to force a fresh scope even when called from inside one.
+ * Explicit workflows terminate sessions at exit even if an inner call returned
+ * submitted/working; the caller owns that lifetime. Implicit task scopes may
+ * close only their local clients when their final result remains nonterminal.
  *
  * @example
  * ```ts

package/dist/lib/protocols/mcp-scope.d.ts

@@ -1,6 +1,8 @@
-type ScopeCleanup = () => Promise<void>;
+type ScopeCleanup = (terminateSession: boolean) => Promise<void>;
 /** Cache-key suffix for the current caller-owned MCP workflow. */
 export declare function currentMCPConnectionScopeKey(): string | undefined;
+/** Preserve seller work even when a higher layer handles a request timeout. */
+export declare function markMCPConnectionScopeInterrupted(): void;
 /** Whether an LRU entry belongs to a workflow that has not finished yet. */
 export declare function isMCPConnectionScopeCacheKeyActive(cacheKey: string): boolean;
 /** Register one idempotent cache-entry cleanup with the current workflow. */
@@ -20,6 +22,9 @@ export declare function closeCurrentMCPConnectionScope(): Promise<boolean>;
  * Per-call correlation headers, `AbortSignal`s and timeouts do not choose the
  * session. The scope terminates its sessions once, when `fn` settles; pass
  * `{ isolate: true }` to force a fresh scope even when called from inside one.
+ * Explicit workflows terminate sessions at exit even if an inner call returned
+ * submitted/working; the caller owns that lifetime. Implicit task scopes may
+ * close only their local clients when their final result remains nonterminal.
  *
  * @example
  * ```ts

package/dist/lib/protocols/mcp-scope.js

@@ -21,18 +21,24 @@ __export(mcp_scope_exports, {
   closeCurrentMCPConnectionScope: () => closeCurrentMCPConnectionScope,
   currentMCPConnectionScopeKey: () => currentMCPConnectionScopeKey,
   isMCPConnectionScopeCacheKeyActive: () => isMCPConnectionScopeCacheKeyActive,
+  markMCPConnectionScopeInterrupted: () => markMCPConnectionScopeInterrupted,
   registerMCPConnectionScopeCleanup: () => registerMCPConnectionScopeCleanup,
   registerMCPConnectionScopePending: () => registerMCPConnectionScopePending,
   withMCPConnectionScope: () => withMCPConnectionScope
 });
 module.exports = __toCommonJS(mcp_scope_exports);
 var import_node_async_hooks = require("node:async_hooks");
+var import_abort = require('./abort.js');
 const scopeStorage = new import_node_async_hooks.AsyncLocalStorage();
 const activeScopeKeys = /* @__PURE__ */ new Set();
 let nextScopeId = 0;
 function currentMCPConnectionScopeKey() {
   return scopeStorage.getStore()?.cacheKey;
 }
+function markMCPConnectionScopeInterrupted() {
+  const scope = scopeStorage.getStore();
+  if (scope?.preserveOnInterruption) scope.interrupted = true;
+}
 function isMCPConnectionScopeCacheKeyActive(cacheKey) {
   const marker = cacheKey.lastIndexOf("::scope:");
   return marker >= 0 && activeScopeKeys.has(cacheKey.slice(marker + 2));
@@ -55,17 +61,32 @@ async function closeCurrentMCPConnectionScope() {
   }
   const cleanups = [...scope.cleanups.values()];
   scope.cleanups.clear();
-  await Promise.allSettled(cleanups.map((cleanup) => cleanup()));
+  await Promise.allSettled(
+    cleanups.map((cleanup) => cleanup(!scope.signal?.aborted && !scope.interrupted && !scope.preserveSession))
+  );
   return true;
 }
 async function withMCPConnectionScope(fn, options = {}) {
   if (scopeStorage.getStore() && options.isolate !== true) return fn();
   const id = ++nextScopeId;
-  const scope = { id, cacheKey: `scope:${id}`, pending: /* @__PURE__ */ new Set(), cleanups: /* @__PURE__ */ new Map() };
+  const scope = {
+    id,
+    cacheKey: `scope:${id}`,
+    pending: /* @__PURE__ */ new Set(),
+    cleanups: /* @__PURE__ */ new Map(),
+    signal: options.signal,
+    preserveOnInterruption: options.preserveOnInterruption,
+    preserveSessionOnResult: options.preserveSessionOnResult
+  };
   activeScopeKeys.add(scope.cacheKey);
   return scopeStorage.run(scope, async () => {
     try {
-      return await fn();
+      const result = await fn();
+      scope.preserveSession = scope.preserveSessionOnResult?.(result) === true;
+      return result;
+    } catch (error) {
+      if ((0, import_abort.isAbortOrTimeoutError)(error)) markMCPConnectionScopeInterrupted();
+      throw error;
     } finally {
       try {
         await closeCurrentMCPConnectionScope();
@@ -80,6 +101,7 @@ async function withMCPConnectionScope(fn, options = {}) {
   closeCurrentMCPConnectionScope,
   currentMCPConnectionScopeKey,
   isMCPConnectionScopeCacheKeyActive,
+  markMCPConnectionScopeInterrupted,
   registerMCPConnectionScopeCleanup,
   registerMCPConnectionScopePending,
   withMCPConnectionScope

package/dist/lib/protocols/mcp-scope.mjs

@@ -4,12 +4,17 @@ import { createRequire as __adcpCreateRequire } from "node:module";
 const __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));
 const require2 = __adcpCreateRequire(import.meta.url);
 import { AsyncLocalStorage } from "node:async_hooks";
+import { isAbortOrTimeoutError } from "./abort.mjs";
 const scopeStorage = new AsyncLocalStorage();
 const activeScopeKeys = /* @__PURE__ */ new Set();
 let nextScopeId = 0;
 function currentMCPConnectionScopeKey() {
   return scopeStorage.getStore()?.cacheKey;
 }
+function markMCPConnectionScopeInterrupted() {
+  const scope = scopeStorage.getStore();
+  if (scope?.preserveOnInterruption) scope.interrupted = true;
+}
 function isMCPConnectionScopeCacheKeyActive(cacheKey) {
   const marker = cacheKey.lastIndexOf("::scope:");
   return marker >= 0 && activeScopeKeys.has(cacheKey.slice(marker + 2));
@@ -32,17 +37,32 @@ async function closeCurrentMCPConnectionScope() {
   }
   const cleanups = [...scope.cleanups.values()];
   scope.cleanups.clear();
-  await Promise.allSettled(cleanups.map((cleanup) => cleanup()));
+  await Promise.allSettled(
+    cleanups.map((cleanup) => cleanup(!scope.signal?.aborted && !scope.interrupted && !scope.preserveSession))
+  );
   return true;
 }
 async function withMCPConnectionScope(fn, options = {}) {
   if (scopeStorage.getStore() && options.isolate !== true) return fn();
   const id = ++nextScopeId;
-  const scope = { id, cacheKey: `scope:${id}`, pending: /* @__PURE__ */ new Set(), cleanups: /* @__PURE__ */ new Map() };
+  const scope = {
+    id,
+    cacheKey: `scope:${id}`,
+    pending: /* @__PURE__ */ new Set(),
+    cleanups: /* @__PURE__ */ new Map(),
+    signal: options.signal,
+    preserveOnInterruption: options.preserveOnInterruption,
+    preserveSessionOnResult: options.preserveSessionOnResult
+  };
   activeScopeKeys.add(scope.cacheKey);
   return scopeStorage.run(scope, async () => {
     try {
-      return await fn();
+      const result = await fn();
+      scope.preserveSession = scope.preserveSessionOnResult?.(result) === true;
+      return result;
+    } catch (error) {
+      if (isAbortOrTimeoutError(error)) markMCPConnectionScopeInterrupted();
+      throw error;
     } finally {
       try {
         await closeCurrentMCPConnectionScope();
@@ -56,6 +76,7 @@ export {
   closeCurrentMCPConnectionScope,
   currentMCPConnectionScopeKey,
   isMCPConnectionScopeCacheKeyActive,
+  markMCPConnectionScopeInterrupted,
   registerMCPConnectionScopeCleanup,
   registerMCPConnectionScopePending,
   withMCPConnectionScope

package/dist/lib/protocols/mcp.js

@@ -207,10 +207,10 @@ async function getOrCreateConnection(cacheKey, baseUrl, authHeaders, debugLogs,
         throw new Error(`MCP ${label} completed after connection teardown`);
       }
       connectionCache.set(cacheKey, client);
-      (0, import_mcp_scope.registerMCPConnectionScopeCleanup)("legacy", cacheKey, async () => {
+      (0, import_mcp_scope.registerMCPConnectionScopeCleanup)("legacy", cacheKey, async (terminateSession) => {
         if (connectionCache.get(cacheKey) !== client) return;
         connectionCache.delete(cacheKey);
-        await closeMCPClient(client);
+        await closeMCPClient(client, terminateSession);
       });
       evictLeastRecentlyUsed();
       return client;
@@ -280,10 +280,10 @@ async function getOrCreateOAuthConnection(cacheKey, options) {
         throw new Error("OAuth MCP connection completed after connection teardown");
       }
       oauthConnectionCache.set(cacheKey, client);
-      (0, import_mcp_scope.registerMCPConnectionScopeCleanup)("oauth", cacheKey, async () => {
+      (0, import_mcp_scope.registerMCPConnectionScopeCleanup)("oauth", cacheKey, async (terminateSession) => {
         if (oauthConnectionCache.get(cacheKey) !== client) return;
         oauthConnectionCache.delete(cacheKey);
-        await closeMCPClient(client);
+        await closeMCPClient(client, terminateSession);
       });
       evictLeastRecentlyUsedOAuth();
       return client;
@@ -337,7 +337,10 @@ async function withCachedOAuthConnectionImpl(options, label, fn) {
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       error
     });
-    if ((0, import_abort.isAbortOrTimeoutError)(error)) throw error;
+    if ((0, import_abort.isAbortOrTimeoutError)(error)) {
+      (0, import_mcp_scope.markMCPConnectionScopeInterrupted)();
+      throw error;
+    }
     if ((0, import_errors.is401Error)(error)) {
       options.debugLogs.push({
         type: "warning",
@@ -405,7 +408,10 @@ async function withCachedConnectionImpl(agentUrl, authToken, authHeaders, debugL
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       error
     });
-    if ((0, import_abort.isAbortOrTimeoutError)(error)) throw error;
+    if ((0, import_abort.isAbortOrTimeoutError)(error)) {
+      (0, import_mcp_scope.markMCPConnectionScopeInterrupted)();
+      throw error;
+    }
     if ((0, import_errors.is401Error)(error)) {
       debugLogs.push({
         type: "warning",

package/dist/lib/protocols/mcp.mjs

@@ -35,6 +35,7 @@ import {
 import { closeModernMCPConnections, tryCallModernMCPTool } from "./mcp-modern.mjs";
 import {
   currentMCPConnectionScopeKey,
+  markMCPConnectionScopeInterrupted,
   isMCPConnectionScopeCacheKeyActive,
   registerMCPConnectionScopeCleanup,
   registerMCPConnectionScopePending
@@ -208,10 +209,10 @@ async function getOrCreateConnection(cacheKey, baseUrl, authHeaders, debugLogs,
         throw new Error(`MCP ${label} completed after connection teardown`);
       }
       connectionCache.set(cacheKey, client);
-      registerMCPConnectionScopeCleanup("legacy", cacheKey, async () => {
+      registerMCPConnectionScopeCleanup("legacy", cacheKey, async (terminateSession) => {
         if (connectionCache.get(cacheKey) !== client) return;
         connectionCache.delete(cacheKey);
-        await closeMCPClient(client);
+        await closeMCPClient(client, terminateSession);
       });
       evictLeastRecentlyUsed();
       return client;
@@ -281,10 +282,10 @@ async function getOrCreateOAuthConnection(cacheKey, options) {
         throw new Error("OAuth MCP connection completed after connection teardown");
       }
       oauthConnectionCache.set(cacheKey, client);
-      registerMCPConnectionScopeCleanup("oauth", cacheKey, async () => {
+      registerMCPConnectionScopeCleanup("oauth", cacheKey, async (terminateSession) => {
         if (oauthConnectionCache.get(cacheKey) !== client) return;
         oauthConnectionCache.delete(cacheKey);
-        await closeMCPClient(client);
+        await closeMCPClient(client, terminateSession);
       });
       evictLeastRecentlyUsedOAuth();
       return client;
@@ -338,7 +339,10 @@ async function withCachedOAuthConnectionImpl(options, label, fn) {
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       error
     });
-    if (isAbortOrTimeoutError(error)) throw error;
+    if (isAbortOrTimeoutError(error)) {
+      markMCPConnectionScopeInterrupted();
+      throw error;
+    }
     if (is401Error(error)) {
       options.debugLogs.push({
         type: "warning",
@@ -406,7 +410,10 @@ async function withCachedConnectionImpl(agentUrl, authToken, authHeaders, debugL
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       error
     });
-    if (isAbortOrTimeoutError(error)) throw error;
+    if (isAbortOrTimeoutError(error)) {
+      markMCPConnectionScopeInterrupted();
+      throw error;
+    }
     if (is401Error(error)) {
       debugLogs.push({
         type: "warning",

package/dist/lib/reporting/inspection.js

@@ -502,6 +502,7 @@ function compileRowSchema(schema, maxCompileMs, deadline) {
   assertInspectionDeadline(deadline);
   const startedAt = Date.now();
   const ajv = new Ajv2020({
+    inlineRefs: false,
     strictSchema: true,
     strictTypes: false,
     allErrors: true,

package/dist/lib/reporting/inspection.mjs

@@ -472,6 +472,7 @@ function compileRowSchema(schema, maxCompileMs, deadline) {
   assertInspectionDeadline(deadline);
   const startedAt = Date.now();
   const ajv = new Ajv2020({
+    inlineRefs: false,
     strictSchema: true,
     strictTypes: false,
     allErrors: true,

package/dist/lib/schemas/browser.d.mts

@@ -12,3 +12,5 @@ export { BiddingPolicySchema } from '../validation/bidding-policy.mjs';
 export { CanonicalBudgetAllocationSchema } from '../validation/budget-allocation.mjs';
 export { SyncCreativesItemSchema, SyncCreativesSuccessStrictSchema, SyncCreativesResponseStrictSchema, SyncCreativesActionSchema, } from '../validation/sync-creatives.mjs';
 export type { SyncCreativesItem, SyncCreativesSuccessStrict } from '../validation/sync-creatives.mjs';
+export { MediaBuyDeliveryReportSchema } from '../validation/media-buy-delivery-report.mjs';
+export type { MediaBuyDeliveryReport } from '../types/media-buy-delivery-report.mjs';

package/dist/lib/schemas/browser.d.ts

@@ -12,3 +12,5 @@ export { BiddingPolicySchema } from '../validation/bidding-policy';
 export { CanonicalBudgetAllocationSchema } from '../validation/budget-allocation';
 export { SyncCreativesItemSchema, SyncCreativesSuccessStrictSchema, SyncCreativesResponseStrictSchema, SyncCreativesActionSchema, } from '../validation/sync-creatives';
 export type { SyncCreativesItem, SyncCreativesSuccessStrict } from '../validation/sync-creatives';
+export { MediaBuyDeliveryReportSchema } from '../validation/media-buy-delivery-report';
+export type { MediaBuyDeliveryReport } from '../types/media-buy-delivery-report';

package/dist/lib/schemas/browser.js

@@ -23,6 +23,7 @@ __export(browser_exports, {
   CanonicalBudgetAllocationSchema: () => import_budget_allocation.CanonicalBudgetAllocationSchema,
   GetProductsRequestSchema: () => import_get_products_request.GetProductsRequestSchema,
   LegacyGetProductsRequestSchema: () => import_get_products_request.LegacyGetProductsRequestSchema,
+  MediaBuyDeliveryReportSchema: () => import_media_buy_delivery_report.MediaBuyDeliveryReportSchema,
   SyncCreativesActionSchema: () => import_sync_creatives.SyncCreativesActionSchema,
   SyncCreativesItemSchema: () => import_sync_creatives.SyncCreativesItemSchema,
   SyncCreativesResponseStrictSchema: () => import_sync_creatives.SyncCreativesResponseStrictSchema,
@@ -34,12 +35,14 @@ var import_get_products_request = require('../validation/get-products-request.js
 var import_bidding_policy = require('../validation/bidding-policy.js');
 var import_budget_allocation = require('../validation/budget-allocation.js');
 var import_sync_creatives = require('../validation/sync-creatives.js');
+var import_media_buy_delivery_report = require('../validation/media-buy-delivery-report.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   BiddingPolicySchema,
   CanonicalBudgetAllocationSchema,
   GetProductsRequestSchema,
   LegacyGetProductsRequestSchema,
+  MediaBuyDeliveryReportSchema,
   SyncCreativesActionSchema,
   SyncCreativesItemSchema,
   SyncCreativesResponseStrictSchema,

package/dist/lib/schemas/browser.mjs

@@ -8,11 +8,13 @@ import {
   SyncCreativesResponseStrictSchema,
   SyncCreativesActionSchema
 } from "../validation/sync-creatives.mjs";
+import { MediaBuyDeliveryReportSchema } from "../validation/media-buy-delivery-report.mjs";
 export {
   BiddingPolicySchema,
   CanonicalBudgetAllocationSchema,
   GetProductsRequestSchema,
   LegacyGetProductsRequestSchema,
+  MediaBuyDeliveryReportSchema,
   SyncCreativesActionSchema,
   SyncCreativesItemSchema,
   SyncCreativesResponseStrictSchema,

package/dist/lib/schemas/index.d.mts

@@ -42,7 +42,7 @@
 import { z } from 'zod';
 import * as schemas from '../types/schemas.generated.mjs';
 import type { KnownToolRequestSchemas } from '../utils/tool-request-schemas.mjs';
-import { getSchemaDocumentByRef, type Direction, type ResolvedToolSchemaDocument, type ResponseVariant } from '../validation/schema-loader.mjs';
+import { getSchemaDocumentByRef, getSchemaValidatorByRef, type Direction, type ResolvedToolSchemaDocument, type ResponseVariant } from '../validation/schema-loader.mjs';
 import type { ValidateFunction } from 'ajv';
 export * from '../types/schemas.generated.mjs';
 export { AgentOAuthClientCredentialsSchema } from '../auth/oauth/client-credentials-schema.mjs';
@@ -73,7 +73,7 @@ export type VersionedToolSchema = ResolvedToolSchemaDocument;
  * callers should normally prefer {@link getCanonicalToolValidator} so
  * reference registration stays internal.
  */
-export { getSchemaDocumentByRef };
+export { getSchemaDocumentByRef, getSchemaValidatorByRef };
 /** Retrieve the protocol-authored request JSON Schema for a specific AdCP release. */
 export declare function getToolInputSchema(toolName: string, options?: ToolSchemaLookupOptions): VersionedToolSchema | undefined;
 /** Retrieve a protocol-authored response JSON Schema for a specific AdCP release. */
@@ -178,3 +178,6 @@ export declare function customToolForSchema<TSchema extends InputSchema>(name: s
     inputSchema: TSchema;
     handler: (args: z.input<TSchema>, extra?: unknown) => unknown | Promise<unknown>;
 };
+export { MediaBuyDeliveryReportSchema } from '../validation/media-buy-delivery-report.mjs';
+export type { MediaBuyDeliveryReport } from '../types/media-buy-delivery-report.mjs';
+export type { AssetVariant } from '../types/core.generated.mjs';

package/dist/lib/schemas/index.d.ts

@@ -42,7 +42,7 @@
 import { z } from 'zod';
 import * as schemas from '../types/schemas.generated';
 import type { KnownToolRequestSchemas } from '../utils/tool-request-schemas';
-import { getSchemaDocumentByRef, type Direction, type ResolvedToolSchemaDocument, type ResponseVariant } from '../validation/schema-loader';
+import { getSchemaDocumentByRef, getSchemaValidatorByRef, type Direction, type ResolvedToolSchemaDocument, type ResponseVariant } from '../validation/schema-loader';
 import type { ValidateFunction } from 'ajv';
 export * from '../types/schemas.generated';
 export { AgentOAuthClientCredentialsSchema } from '../auth/oauth/client-credentials-schema';
@@ -73,7 +73,7 @@ export type VersionedToolSchema = ResolvedToolSchemaDocument;
  * callers should normally prefer {@link getCanonicalToolValidator} so
  * reference registration stays internal.
  */
-export { getSchemaDocumentByRef };
+export { getSchemaDocumentByRef, getSchemaValidatorByRef };
 /** Retrieve the protocol-authored request JSON Schema for a specific AdCP release. */
 export declare function getToolInputSchema(toolName: string, options?: ToolSchemaLookupOptions): VersionedToolSchema | undefined;
 /** Retrieve a protocol-authored response JSON Schema for a specific AdCP release. */
@@ -178,3 +178,6 @@ export declare function customToolForSchema<TSchema extends InputSchema>(name: s
     inputSchema: TSchema;
     handler: (args: z.input<TSchema>, extra?: unknown) => unknown | Promise<unknown>;
 };
+export { MediaBuyDeliveryReportSchema } from '../validation/media-buy-delivery-report';
+export type { MediaBuyDeliveryReport } from '../types/media-buy-delivery-report';
+export type { AssetVariant } from '../types/core.generated';

package/dist/lib/schemas/index.js

@@ -34,6 +34,7 @@ __export(schemas_exports, {
   CanonicalBudgetAllocationSchema: () => import_budget_allocation.CanonicalBudgetAllocationSchema,
   GetProductsRequestSchema: () => import_get_products_request.GetProductsRequestSchema,
   LegacyGetProductsRequestSchema: () => import_get_products_request.LegacyGetProductsRequestSchema,
+  MediaBuyDeliveryReportSchema: () => import_media_buy_delivery_report.MediaBuyDeliveryReportSchema,
   SyncCreativesActionSchema: () => import_sync_creatives.SyncCreativesActionSchema,
   SyncCreativesItemSchema: () => import_sync_creatives.SyncCreativesItemSchema,
   SyncCreativesResponseStrictSchema: () => import_sync_creatives.SyncCreativesResponseStrictSchema,
@@ -46,6 +47,7 @@ __export(schemas_exports, {
   customToolForSchema: () => customToolForSchema,
   getCanonicalToolValidator: () => getCanonicalToolValidator,
   getSchemaDocumentByRef: () => import_schema_loader.getSchemaDocumentByRef,
+  getSchemaValidatorByRef: () => import_schema_loader.getSchemaValidatorByRef,
   getToolInputSchema: () => getToolInputSchema,
   getToolResponseSchema: () => getToolResponseSchema
 });
@@ -62,6 +64,7 @@ var import_budget_allocation = require('../validation/budget-allocation.js');
 var import_tool_request_schemas2 = require('../utils/tool-request-schemas.js');
 var import_response_schemas = require('../utils/response-schemas.js');
 var import_sync_creatives = require('../validation/sync-creatives.js');
+var import_media_buy_delivery_report = require('../validation/media-buy-delivery-report.js');
 function getToolInputSchema(toolName, options = {}) {
   return (0, import_schema_loader.getToolSchemaDocument)(toolName, "request", (0, import_adcp_version_config.resolveAdcpVersion)(options.adcpVersion));
 }
@@ -113,6 +116,7 @@ function customToolForSchema(name, description, inputSchema, handler) {
   CanonicalBudgetAllocationSchema,
   GetProductsRequestSchema,
   LegacyGetProductsRequestSchema,
+  MediaBuyDeliveryReportSchema,
   SyncCreativesActionSchema,
   SyncCreativesItemSchema,
   SyncCreativesResponseStrictSchema,
@@ -125,6 +129,7 @@ function customToolForSchema(name, description, inputSchema, handler) {
   customToolForSchema,
   getCanonicalToolValidator,
   getSchemaDocumentByRef,
+  getSchemaValidatorByRef,
   getToolInputSchema,
   getToolResponseSchema,
   ...require('../types/schemas.generated.js')

package/dist/lib/schemas/index.mjs

@@ -3,6 +3,7 @@ import { TOOL_REQUEST_SCHEMAS } from "../utils/tool-request-schemas.mjs";
 import {
   getCanonicalToolValidatorForVersion,
   getSchemaDocumentByRef,
+  getSchemaValidatorByRef,
   getToolSchemaDocument
 } from "../validation/schema-loader.mjs";
 import { resolveAdcpVersion } from "../utils/adcp-version-config.mjs";
@@ -63,12 +64,14 @@ function customToolForSchema(name, description, inputSchema, handler) {
   void name;
   return { description, inputSchema, handler };
 }
+import { MediaBuyDeliveryReportSchema } from "../validation/media-buy-delivery-report.mjs";
 export {
   AgentOAuthClientCredentialsSchema,
   BiddingPolicySchema,
   CanonicalBudgetAllocationSchema,
   GetProductsRequestSchema,
   LegacyGetProductsRequestSchema,
+  MediaBuyDeliveryReportSchema,
   SyncCreativesActionSchema,
   SyncCreativesItemSchema,
   SyncCreativesResponseStrictSchema,
@@ -81,6 +84,7 @@ export {
   customToolForSchema,
   getCanonicalToolValidator,
   getSchemaDocumentByRef,
+  getSchemaValidatorByRef,
   getToolInputSchema,
   getToolResponseSchema
 };

package/dist/lib/server/account-response-identity.d.mts

@@ -0,0 +1,17 @@
+import type { SyncAccountsSuccess } from '../types/tools.generated.mjs';
+declare const IDENTITY_RESPONSE_SCHEMAS: {
+    readonly account: "core/account-ref.json";
+    readonly operator_unit: "core/operator-unit.json";
+    readonly identity_change: "core/account-identity-change.json";
+    readonly identity_change_preview: "core/account-identity-change-preview.json";
+};
+type IdentityFields = Pick<SyncAccountsSuccess['accounts'][number], keyof typeof IDENTITY_RESPONSE_SCHEMAS>;
+/**
+ * These canonical identity objects have closed schemas, including their nested
+ * operator identities. Validate and emit the same detached snapshot so retained
+ * DB/request fields or later mutations cannot enter a response or replay cache,
+ * even with whole-response validation off. These four core contracts are shared
+ * by the maintained 3.2 and 3.3 bundles.
+ */
+export declare function projectAccountResponseIdentityFields(account: object): IdentityFields;
+export {};

package/dist/lib/server/account-response-identity.d.ts

@@ -0,0 +1,17 @@
+import type { SyncAccountsSuccess } from '../types/tools.generated';
+declare const IDENTITY_RESPONSE_SCHEMAS: {
+    readonly account: "core/account-ref.json";
+    readonly operator_unit: "core/operator-unit.json";
+    readonly identity_change: "core/account-identity-change.json";
+    readonly identity_change_preview: "core/account-identity-change-preview.json";
+};
+type IdentityFields = Pick<SyncAccountsSuccess['accounts'][number], keyof typeof IDENTITY_RESPONSE_SCHEMAS>;
+/**
+ * These canonical identity objects have closed schemas, including their nested
+ * operator identities. Validate and emit the same detached snapshot so retained
+ * DB/request fields or later mutations cannot enter a response or replay cache,
+ * even with whole-response validation off. These four core contracts are shared
+ * by the maintained 3.2 and 3.3 bundles.
+ */
+export declare function projectAccountResponseIdentityFields(account: object): IdentityFields;
+export {};

package/dist/lib/server/account-response-identity.js

@@ -0,0 +1,52 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var account_response_identity_exports = {};
+__export(account_response_identity_exports, {
+  projectAccountResponseIdentityFields: () => projectAccountResponseIdentityFields
+});
+module.exports = __toCommonJS(account_response_identity_exports);
+var import_schema_loader = require('../validation/schema-loader.js');
+const IDENTITY_RESPONSE_SCHEMAS = {
+  account: "core/account-ref.json",
+  operator_unit: "core/operator-unit.json",
+  identity_change: "core/account-identity-change.json",
+  identity_change_preview: "core/account-identity-change-preview.json"
+};
+function projectAccountResponseIdentityFields(account) {
+  const fields = account;
+  const projected = {};
+  for (const [field, schemaRef] of Object.entries(IDENTITY_RESPONSE_SCHEMAS)) {
+    const value = fields[field];
+    if (value === void 0) continue;
+    const snapshot = structuredClone(value);
+    const validate = (0, import_schema_loader.getSchemaValidatorByRef)(schemaRef);
+    if (!validate) throw new Error(`Account response identity schema unavailable: ${schemaRef}.`);
+    if (!validate(snapshot)) {
+      throw new Error(
+        `Account response ${field} must match its canonical identity schema without retained internal fields.`
+      );
+    }
+    Object.assign(projected, { [field]: snapshot });
+  }
+  return projected;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  projectAccountResponseIdentityFields
+});

package/dist/lib/server/account-response-identity.mjs

@@ -0,0 +1,28 @@
+import { getSchemaValidatorByRef } from "../validation/schema-loader.mjs";
+const IDENTITY_RESPONSE_SCHEMAS = {
+  account: "core/account-ref.json",
+  operator_unit: "core/operator-unit.json",
+  identity_change: "core/account-identity-change.json",
+  identity_change_preview: "core/account-identity-change-preview.json"
+};
+function projectAccountResponseIdentityFields(account) {
+  const fields = account;
+  const projected = {};
+  for (const [field, schemaRef] of Object.entries(IDENTITY_RESPONSE_SCHEMAS)) {
+    const value = fields[field];
+    if (value === void 0) continue;
+    const snapshot = structuredClone(value);
+    const validate = getSchemaValidatorByRef(schemaRef);
+    if (!validate) throw new Error(`Account response identity schema unavailable: ${schemaRef}.`);
+    if (!validate(snapshot)) {
+      throw new Error(
+        `Account response ${field} must match its canonical identity schema without retained internal fields.`
+      );
+    }
+    Object.assign(projected, { [field]: snapshot });
+  }
+  return projected;
+}
+export {
+  projectAccountResponseIdentityFields
+};

package/dist/lib/server/account-sync-contract.js

@@ -206,6 +206,7 @@ async function checkSyncAccountRows(accounts, entries, existing, rows, indices,
         }
       ).toStructuredError();
       row = {
+        ...row.account !== void 0 && { account: row.account },
         brand: row.brand,
         operator: row.operator,
         ...priorId === row.account_id && priorId && { account_id: priorId },

package/dist/lib/server/account-sync-contract.mjs

@@ -179,6 +179,7 @@ async function checkSyncAccountRows(accounts, entries, existing, rows, indices,
         }
       ).toStructuredError();
       row = {
+        ...row.account !== void 0 && { account: row.account },
         brand: row.brand,
         operator: row.operator,
         ...priorId === row.account_id && priorId && { account_id: priorId },