@adcp/sdk 17.0.0-beta.0 → 17.0.0-beta.2

package/dist/lib/server/account-response-identity.js

@@ -0,0 +1,52 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var account_response_identity_exports = {};
+__export(account_response_identity_exports, {
+  projectAccountResponseIdentityFields: () => projectAccountResponseIdentityFields
+});
+module.exports = __toCommonJS(account_response_identity_exports);
+var import_schema_loader = require('../validation/schema-loader.js');
+const IDENTITY_RESPONSE_SCHEMAS = {
+  account: "core/account-ref.json",
+  operator_unit: "core/operator-unit.json",
+  identity_change: "core/account-identity-change.json",
+  identity_change_preview: "core/account-identity-change-preview.json"
+};
+function projectAccountResponseIdentityFields(account) {
+  const fields = account;
+  const projected = {};
+  for (const [field, schemaRef] of Object.entries(IDENTITY_RESPONSE_SCHEMAS)) {
+    const value = fields[field];
+    if (value === void 0) continue;
+    const snapshot = structuredClone(value);
+    const validate = (0, import_schema_loader.getSchemaValidatorByRef)(schemaRef);
+    if (!validate) throw new Error(`Account response identity schema unavailable: ${schemaRef}.`);
+    if (!validate(snapshot)) {
+      throw new Error(
+        `Account response ${field} must match its canonical identity schema without retained internal fields.`
+      );
+    }
+    Object.assign(projected, { [field]: snapshot });
+  }
+  return projected;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  projectAccountResponseIdentityFields
+});

package/dist/lib/server/account-response-identity.mjs

@@ -0,0 +1,28 @@
+import { getSchemaValidatorByRef } from "../validation/schema-loader.mjs";
+const IDENTITY_RESPONSE_SCHEMAS = {
+  account: "core/account-ref.json",
+  operator_unit: "core/operator-unit.json",
+  identity_change: "core/account-identity-change.json",
+  identity_change_preview: "core/account-identity-change-preview.json"
+};
+function projectAccountResponseIdentityFields(account) {
+  const fields = account;
+  const projected = {};
+  for (const [field, schemaRef] of Object.entries(IDENTITY_RESPONSE_SCHEMAS)) {
+    const value = fields[field];
+    if (value === void 0) continue;
+    const snapshot = structuredClone(value);
+    const validate = getSchemaValidatorByRef(schemaRef);
+    if (!validate) throw new Error(`Account response identity schema unavailable: ${schemaRef}.`);
+    if (!validate(snapshot)) {
+      throw new Error(
+        `Account response ${field} must match its canonical identity schema without retained internal fields.`
+      );
+    }
+    Object.assign(projected, { [field]: snapshot });
+  }
+  return projected;
+}
+export {
+  projectAccountResponseIdentityFields
+};

package/dist/lib/server/account-sync-contract.js

@@ -205,9 +205,9 @@ async function checkSyncAccountRows(accounts, entries, existing, rows, indices,
           field: `accounts[${index}]${termsViolation ? ".payment_terms" : billingViolation ? ".billing" : ""}`
         }
       ).toStructuredError();
+      const anchor = row.account !== void 0 ? { account: row.account } : { brand: row.brand, operator: row.operator };
       row = {
-        brand: row.brand,
-        operator: row.operator,
+        ...anchor,
         ...priorId === row.account_id && priorId && { account_id: priorId },
         action: "failed",
         status: existing[offset]?.status ?? row.status,

package/dist/lib/server/account-sync-contract.mjs

@@ -178,9 +178,9 @@ async function checkSyncAccountRows(accounts, entries, existing, rows, indices,
           field: `accounts[${index}]${termsViolation ? ".payment_terms" : billingViolation ? ".billing" : ""}`
         }
       ).toStructuredError();
+      const anchor = row.account !== void 0 ? { account: row.account } : { brand: row.brand, operator: row.operator };
       row = {
-        brand: row.brand,
-        operator: row.operator,
+        ...anchor,
         ...priorId === row.account_id && priorId && { account_id: priorId },
         action: "failed",
         status: existing[offset]?.status ?? row.status,

package/dist/lib/server/create-adcp-server.js

@@ -30,6 +30,7 @@ __export(create_adcp_server_exports, {
   requireSessionKey: () => requireSessionKey
 });
 module.exports = __toCommonJS(create_adcp_server_exports);
+var import_adcp_version_config = require('../utils/adcp-version-config.js');
 var import_web_bot_auth = require('../signing/web-bot-auth.js');
 var import_version = require('../adapters/version/index.js');
 var import_schema_loader = require('../validation/schema-loader.js');
@@ -40,7 +41,7 @@ var import_validation = require('../identity-3.3/validation.js');
 var import_trust = require('../identity-3.3/trust.js');
 var import_zod = require("zod");
 var import_version2 = require('../version.js');
-var import_adcp_version_config = require('../utils/adcp-version-config.js');
+var import_adcp_version_config2 = require('../utils/adcp-version-config.js');
 var import_errors = require('../errors/index.js');
 var import_schema_loader2 = require('../validation/schema-loader.js');
 var import_schemas = require('../schemas/index.js');
@@ -962,8 +963,7 @@ function projectValueToCapabilitySchema(root, schema, value, depth = 0) {
   return projectedObject;
 }
 function projectCapabilitiesToVersion(data, version) {
-  const validator = (0, import_schema_loader2.getValidator)("get_adcp_capabilities", "sync", version);
-  const schema = asProjectionSchema(validator?.schema);
+  const schema = asProjectionSchema((0, import_schema_loader2.getToolSchemaDocument)("get_adcp_capabilities", "sync", version)?.schema);
   if (!schema) return data;
   const projected = projectValueToCapabilitySchema(schema, schema, data);
   if (!isPlainObject(projected)) return data;
@@ -1392,7 +1392,9 @@ function injectContextIntoResponse(response, context) {
     syncContentJsonText(response, sc, mirrorsStructuredContent);
   }
 }
-function injectEnvelopeStatusIntoResponse(response, toolName) {
+function injectEnvelopeStatusIntoResponse(response, toolName, servedVersion) {
+  if (servedVersion && (0, import_adcp_version_config.isPre31AdcpVersion)(servedVersion) && MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName) && response.isError !== true)
+    return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
   if ("status" in sc) return;
@@ -1416,12 +1418,23 @@ const MEDIA_BUY_STATUS_VALUES = /* @__PURE__ */ new Set([
   "rejected",
   "canceled"
 ]);
-function normalizeMediaBuyStatusCollision(response, toolName) {
+function normalizeMediaBuyStatusCollision(response, toolName, servedVersion) {
   if (!MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName)) return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
+  if (servedVersion && (0, import_adcp_version_config.isPre31AdcpVersion)(servedVersion)) {
+    const adapted = typeof sc.media_buy_status === "string" ? (0, import_version.getVersionAdapter)("3.0", toolName)?.downgradeResponse?.(sc) : void 0;
+    if (adapted && adapted.data !== sc && adapted.data && typeof adapted.data === "object") {
+      const mirrors = contentTextMirrorsStructuredContent(response, sc);
+      response.structuredContent = adapted.data;
+      syncContentJsonText(response, response.structuredContent, mirrors);
+    }
+    return;
+  }
   const status = sc.status;
   if (typeof status !== "string" || !MEDIA_BUY_STATUS_VALUES.has(status)) return;
+  if (servedVersion && sc.media_buy_status === void 0 && (status === "completed" || status === "rejected" || status === "canceled"))
+    return;
   const looksLikeMediaBuyPayload = typeof sc.media_buy_id === "string" || "media_buy_status" in sc || Array.isArray(sc.packages);
   if (!looksLikeMediaBuyPayload) return;
   const mirrorsStructuredContent = contentTextMirrorsStructuredContent(response, sc);
@@ -1798,7 +1811,7 @@ function supportedVersionsForTool(toolName, ranges, capConfig, serverPin) {
 }
 const PUSH_OPERATION_ID_PATTERN = /^[A-Za-z0-9_.:-]{1,255}$/;
 function releaseRequiresPushOperationId(release) {
-  return (0, import_adcp_version_config.isAdcpVersionAtLeast)((0, import_schema_loader2.resolveBundleKey)(release), "3.2.0-beta.5");
+  return (0, import_adcp_version_config2.isAdcpVersionAtLeast)((0, import_schema_loader2.resolveBundleKey)(release), "3.2.0-beta.5");
 }
 function pushOperationIdError(params, release) {
   const config = params.push_notification_config;
@@ -2082,18 +2095,18 @@ function createAdcpServer(config) {
     logger.warn(message);
   }
   const credentialPolicyPatterns = credentialPolicy === void 0 || typeof credentialPolicy === "string" ? void 0 : credentialPolicy.patterns;
-  const adcpVersion = (0, import_adcp_version_config.resolveAdcpVersion)(
+  const adcpVersion = (0, import_adcp_version_config2.resolveAdcpVersion)(
     configuredAdcpVersion ?? (config.identity33 ? "3.3" : config.proposalNegotiation ? import_version3.ADCP_VERSION : void 0)
   );
   const toolVersionRanges = parseToolVersionRanges(config.toolVersions);
   const toolAvailableForRelease = (toolName, release) => toolIsAvailableInRelease(toolVersionRanges, toolName, release);
-  const movingSupportedVersion = capConfig?.supported_versions?.find(import_adcp_version_config.isMovingAdcpPrereleaseFamilyAlias);
+  const movingSupportedVersion = capConfig?.supported_versions?.find(import_adcp_version_config2.isMovingAdcpPrereleaseFamilyAlias);
   if (movingSupportedVersion) {
     throw new Error(
       `createAdcpServer: capabilities.supported_versions contains moving prerelease-family alias ${JSON.stringify(movingSupportedVersion)}; pin ${JSON.stringify((0, import_version2.toReleasePrecisionVersion)(import_version3.ADCP_VERSION))} instead`
     );
   }
-  const configuredDefaultVersion = configuredDefaultAdcpVersion === void 0 ? void 0 : (0, import_adcp_version_config.resolveAdcpVersion)(configuredDefaultAdcpVersion, "defaultAdcpVersion");
+  const configuredDefaultVersion = configuredDefaultAdcpVersion === void 0 ? void 0 : (0, import_adcp_version_config2.resolveAdcpVersion)(configuredDefaultAdcpVersion, "defaultAdcpVersion");
   const maximumRelease = parseAdcpRelease(adcpVersion);
   const requestedDefaultRelease = configuredDefaultVersion === void 0 ? void 0 : parseAdcpRelease(configuredDefaultVersion);
   if (maximumRelease === void 0) {
@@ -2430,8 +2443,8 @@ function createAdcpServer(config) {
     enrichErrorTwoLayer(response, toolName, (0, import_error_arm_tools.getToolsWithErrorArm)(release.validationVersion));
     if (!isErrorResponse(response)) {
       response = downgradeTaskStatusResult(toolName, response, release.validationVersion);
-      normalizeMediaBuyStatusCollision(response, toolName);
-      injectEnvelopeStatusIntoResponse(response, toolName);
+      normalizeMediaBuyStatusCollision(response, toolName, release.validationVersion);
+      injectEnvelopeStatusIntoResponse(response, toolName, release.validationVersion);
       const validationError = protocolTaskResponseValidationError(toolName, response, params);
       if (validationError) return finalizeProtocolTaskToolResponse(toolName, params, validationError, opts);
     }
@@ -2810,8 +2823,8 @@ function createAdcpServer(config) {
         const finalizeProtocolEnvelope = (response) => {
           sanitizeAdcpErrorEnvelope(response);
           enrichErrorTwoLayer(response, toolName, requestErrorArms);
-          normalizeMediaBuyStatusCollision(response, toolName);
-          injectEnvelopeStatusIntoResponse(response, toolName);
+          normalizeMediaBuyStatusCollision(response, toolName, requestRelease.validationVersion);
+          injectEnvelopeStatusIntoResponse(response, toolName, requestRelease.validationVersion);
           injectContextIntoResponse(response, params.context);
           injectVersionIntoResponse(response, requestRelease.wireVersion);
           return response;
@@ -2840,7 +2853,7 @@ function createAdcpServer(config) {
           const offered = capabilitiesData.webhook_signing?.profiles ?? [
             "adcp/webhook-signing/v1"
           ];
-          if (typeof selectedProfile !== "string" || !offered.includes(selectedProfile) || selectedProfile === "web-bot-auth" && (!config.identity33 || !(0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")) || selectedProfile === "web-bot-auth" && registration.authentication !== void 0)
+          if (typeof selectedProfile !== "string" || !offered.includes(selectedProfile) || selectedProfile === "web-bot-auth" && (!config.identity33 || !(0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")) || selectedProfile === "web-bot-auth" && registration.authentication !== void 0)
             return finalize(
               (0, import_errors2.adcpError)("INVALID_REQUEST", {
                 message: "Unsupported or ambiguous webhook signing profile",
@@ -3028,7 +3041,7 @@ function createAdcpServer(config) {
             params,
             requestRelease.validationVersion,
             proposalRefinementCapabilities,
-            !!config.identity33 && (0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
+            !!config.identity33 && (0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
           );
           if (!outcome.valid) {
             if ("refinementError" in outcome && outcome.refinementError?.code === "UNSUPPORTED_FEATURE") {
@@ -3101,7 +3114,7 @@ function createAdcpServer(config) {
           }
         }
         let unresolvedAccountPassThrough = false;
-        const requireVerifiedAccountReferences = strictAccountReferences || (0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.validationVersion, "3.3.0-beta.0");
+        const requireVerifiedAccountReferences = strictAccountReferences || (0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.validationVersion, "3.3.0-beta.0");
         const suppliedAccountRef = hasAccount && params.account != null && !(requireVerifiedAccountReferences && toolName === "list_accounts");
         if (suppliedAccountRef && toolName === "list_accounts") {
           (0, import_account_reference_warnings.warnAccountReferenceDeprecation)(
@@ -4003,8 +4016,8 @@ function createAdcpServer(config) {
               formatted = normalizeGetProductsCacheScope(formatted, params, ctx.account, ctx.authInfo, exposeErrorDetails) ?? formatted;
             }
             if (!isErrorResponse(formatted)) {
-              normalizeMediaBuyStatusCollision(formatted, toolName);
-              injectEnvelopeStatusIntoResponse(formatted, toolName);
+              normalizeMediaBuyStatusCollision(formatted, toolName, adcpVersion);
+              injectEnvelopeStatusIntoResponse(formatted, toolName, adcpVersion);
             }
           }
           if (translatesRelease && !isErrorResponse(formatted) && formatted.structuredContent) {
@@ -4040,7 +4053,7 @@ function createAdcpServer(config) {
               payload,
               requestRelease.validationVersion,
               void 0,
-              !!config.identity33 && (0, import_adcp_version_config.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
+              !!config.identity33 && (0, import_adcp_version_config2.isAdcpVersionAtLeast)(requestRelease.wireVersion, "3.3")
             );
             if (!outcome.valid) {
               logger.warn(
@@ -4935,7 +4948,7 @@ function createAdcpServer(config) {
           delete validationPayload.media_buy.proposal_refinement;
           delete validationPayload.media_buy.lifecycle_tools;
         }
-        const responseOutcome = config.identity33 && (0, import_adcp_version_config.isAdcpVersionAtLeast)(release.wireVersion, "3.3") ? (0, import_validation.validateIdentity33Payload)(
+        const responseOutcome = config.identity33 && (0, import_adcp_version_config2.isAdcpVersionAtLeast)(release.wireVersion, "3.3") ? (0, import_validation.validateIdentity33Payload)(
           "get_adcp_capabilities",
           "response",
           validationPayload,

package/dist/lib/server/create-adcp-server.mjs

@@ -1,5 +1,11 @@
+import { isPre31AdcpVersion } from "../utils/adcp-version-config.mjs";
 import { assertWebBotAuthSigningKey, getWebBotAuthLegacyOriginGate } from "../signing/web-bot-auth.mjs";
-import { downgradeResponse, translationSteps, upgradeRequest } from "../adapters/version/index.mjs";
+import {
+  downgradeResponse,
+  getVersionAdapter,
+  translationSteps,
+  upgradeRequest
+} from "../adapters/version/index.mjs";
 import {
   isIdentity33SchemaScope,
   withIdentity33SchemaScope,
@@ -37,7 +43,13 @@ import {
   resolveAdcpVersion
 } from "../utils/adcp-version-config.mjs";
 import { ConfigurationError } from "../errors/index.mjs";
-import { getValidator, hasSchemaBundle, resolveBundleKey, getMcpProfileInputSchema } from "../validation/schema-loader.mjs";
+import {
+  getValidator,
+  getToolSchemaDocument,
+  hasSchemaBundle,
+  resolveBundleKey,
+  getMcpProfileInputSchema
+} from "../validation/schema-loader.mjs";
 import { TOOL_INPUT_SHAPES } from "../schemas/index.mjs";
 import { TaskTypeValues } from "../types/enums.generated.mjs";
 import { bundleSupportsAdcpVersionField } from "../protocols/index.mjs";
@@ -1053,8 +1065,7 @@ function projectValueToCapabilitySchema(root, schema, value, depth = 0) {
   return projectedObject;
 }
 function projectCapabilitiesToVersion(data, version) {
-  const validator = getValidator("get_adcp_capabilities", "sync", version);
-  const schema = asProjectionSchema(validator?.schema);
+  const schema = asProjectionSchema(getToolSchemaDocument("get_adcp_capabilities", "sync", version)?.schema);
   if (!schema) return data;
   const projected = projectValueToCapabilitySchema(schema, schema, data);
   if (!isPlainObject(projected)) return data;
@@ -1483,7 +1494,9 @@ function injectContextIntoResponse(response, context) {
     syncContentJsonText(response, sc, mirrorsStructuredContent);
   }
 }
-function injectEnvelopeStatusIntoResponse(response, toolName) {
+function injectEnvelopeStatusIntoResponse(response, toolName, servedVersion) {
+  if (servedVersion && isPre31AdcpVersion(servedVersion) && MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName) && response.isError !== true)
+    return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
   if ("status" in sc) return;
@@ -1507,12 +1520,23 @@ const MEDIA_BUY_STATUS_VALUES = /* @__PURE__ */ new Set([
   "rejected",
   "canceled"
 ]);
-function normalizeMediaBuyStatusCollision(response, toolName) {
+function normalizeMediaBuyStatusCollision(response, toolName, servedVersion) {
   if (!MEDIA_BUY_RESPONSE_TOOLS_REQUIRING_STATUS_SPLIT.has(toolName)) return;
   const sc = response.structuredContent;
   if (!sc || typeof sc !== "object") return;
+  if (servedVersion && isPre31AdcpVersion(servedVersion)) {
+    const adapted = typeof sc.media_buy_status === "string" ? getVersionAdapter("3.0", toolName)?.downgradeResponse?.(sc) : void 0;
+    if (adapted && adapted.data !== sc && adapted.data && typeof adapted.data === "object") {
+      const mirrors = contentTextMirrorsStructuredContent(response, sc);
+      response.structuredContent = adapted.data;
+      syncContentJsonText(response, response.structuredContent, mirrors);
+    }
+    return;
+  }
   const status = sc.status;
   if (typeof status !== "string" || !MEDIA_BUY_STATUS_VALUES.has(status)) return;
+  if (servedVersion && sc.media_buy_status === void 0 && (status === "completed" || status === "rejected" || status === "canceled"))
+    return;
   const looksLikeMediaBuyPayload = typeof sc.media_buy_id === "string" || "media_buy_status" in sc || Array.isArray(sc.packages);
   if (!looksLikeMediaBuyPayload) return;
   const mirrorsStructuredContent = contentTextMirrorsStructuredContent(response, sc);
@@ -2521,8 +2545,8 @@ function createAdcpServer(config) {
     enrichErrorTwoLayer(response, toolName, getToolsWithErrorArm(release.validationVersion));
     if (!isErrorResponse(response)) {
       response = downgradeTaskStatusResult(toolName, response, release.validationVersion);
-      normalizeMediaBuyStatusCollision(response, toolName);
-      injectEnvelopeStatusIntoResponse(response, toolName);
+      normalizeMediaBuyStatusCollision(response, toolName, release.validationVersion);
+      injectEnvelopeStatusIntoResponse(response, toolName, release.validationVersion);
       const validationError = protocolTaskResponseValidationError(toolName, response, params);
       if (validationError) return finalizeProtocolTaskToolResponse(toolName, params, validationError, opts);
     }
@@ -2901,8 +2925,8 @@ function createAdcpServer(config) {
         const finalizeProtocolEnvelope = (response) => {
           sanitizeAdcpErrorEnvelope(response);
           enrichErrorTwoLayer(response, toolName, requestErrorArms);
-          normalizeMediaBuyStatusCollision(response, toolName);
-          injectEnvelopeStatusIntoResponse(response, toolName);
+          normalizeMediaBuyStatusCollision(response, toolName, requestRelease.validationVersion);
+          injectEnvelopeStatusIntoResponse(response, toolName, requestRelease.validationVersion);
           injectContextIntoResponse(response, params.context);
           injectVersionIntoResponse(response, requestRelease.wireVersion);
           return response;
@@ -4094,8 +4118,8 @@ function createAdcpServer(config) {
               formatted = normalizeGetProductsCacheScope(formatted, params, ctx.account, ctx.authInfo, exposeErrorDetails) ?? formatted;
             }
             if (!isErrorResponse(formatted)) {
-              normalizeMediaBuyStatusCollision(formatted, toolName);
-              injectEnvelopeStatusIntoResponse(formatted, toolName);
+              normalizeMediaBuyStatusCollision(formatted, toolName, adcpVersion);
+              injectEnvelopeStatusIntoResponse(formatted, toolName, adcpVersion);
             }
           }
           if (translatesRelease && !isErrorResponse(formatted) && formatted.structuredContent) {

package/dist/lib/server/decisioning/account.d.mts

@@ -633,11 +633,10 @@ export interface AccountStore<TCtxMeta = Record<string, unknown>> {
      * already run, and note the framework performs no such check for
      * `'explicit'` / `'implicit'`, where the entry key is buyer-declared.
      *
-     * **Rows must carry `brand` + `operator`** (`sync-accounts-response.json`
-     * requires them on every row, including `action: 'failed'`). Echo them from
-     * your own account record on settings-update results. If your upstream
-     * accounts have no expressible natural key, don't wire this method — see
-     * adcontextprotocol/adcp#7517.
+     * **Echo the selected release's identity anchor.** AdCP 3.2+ settings-update
+     * rows carry `account` instead of flat `brand` + `operator`; provisioning
+     * rows carry the natural key. Older releases require `brand` + `operator`
+     * on every row. Failed 3.2+ rows may omit an unknown lifecycle `status`.
      *
      * In AdCP 3.1 beta, adopters that need settings-update entries with
      * `notification_configs[]` can read the full wire body from `ctx.input`
@@ -890,18 +889,26 @@ export type AccountFilter = ListAccountsRequest;
  * returned rows — same MUST-NOT-LEAK rule the framework enforces on
  * `Account.authInfo`.
  */
-export interface SyncAccountsResultRow {
+interface SyncAccountsResultFields {
     account_id?: string;
-    brand: BrandReference;
-    operator: string;
+    /** Current canonical operator unit, distinct from the seller account ID. */
+    operator_unit?: SyncAccountsRow['operator_unit'];
+    /** Current persisted account revision, including during a dry-run preview. */
+    revision?: SyncAccountsRow['revision'];
+    /** Pending or rejected desired identity; canonical fields remain unchanged. */
+    identity_change?: SyncAccountsRow['identity_change'];
+    /** Non-persisted evaluation of an identity change requested in a dry run. */
+    identity_change_preview?: SyncAccountsRow['identity_change_preview'];
+    currency?: SyncAccountsRow['currency'];
+    timezone?: SyncAccountsRow['timezone'];
     /** Human-readable account name assigned by the seller. */
     name?: string;
-    action: 'created' | 'updated' | 'unchanged' | 'failed';
-    status: AdcpAccountStatus;
     /** Invoiced-to party. Echoes the request's `billing` after seller acceptance. */
     billing?: BillingParty;
     /** Business entity invoiced. `bank` is stripped on emit (write-only). */
     billing_entity?: BusinessEntity;
+    /** Request-only staging data. The entire field MUST NOT appear in responses. */
+    destination_billing_entity?: never;
     account_scope?: AccountScope;
     /** Setup payload for `pending_approval` accounts (URL/message/expiry). */
     setup?: WireAccount['setup'];
@@ -926,6 +933,25 @@ export interface SyncAccountsResultRow {
     warnings?: string[];
     sandbox?: boolean;
 }
+/**
+ * Provisioning results use the natural key; 3.2+ settings-update results use
+ * account instead. Only failed results can omit an unknown lifecycle status.
+ */
+export type SyncAccountsResultRow = SyncAccountsResultFields & ({
+    account: NonNullable<SyncAccountsRow['account']>;
+    brand?: never;
+    operator?: never;
+} | {
+    account?: never;
+    brand: BrandReference;
+    operator: string;
+}) & ({
+    action: 'failed';
+    status?: AdcpAccountStatus;
+} | {
+    action: 'created' | 'updated' | 'unchanged';
+    status: AdcpAccountStatus;
+});
 export type AdcpAccountStatus = 'active' | 'pending_approval' | 'rejected' | 'payment_required' | 'suspended' | 'closed';
 /**
  * Project a framework `Account<TCtxMeta>` to the wire `Account` shape.

package/dist/lib/server/decisioning/account.d.ts

@@ -633,11 +633,10 @@ export interface AccountStore<TCtxMeta = Record<string, unknown>> {
      * already run, and note the framework performs no such check for
      * `'explicit'` / `'implicit'`, where the entry key is buyer-declared.
      *
-     * **Rows must carry `brand` + `operator`** (`sync-accounts-response.json`
-     * requires them on every row, including `action: 'failed'`). Echo them from
-     * your own account record on settings-update results. If your upstream
-     * accounts have no expressible natural key, don't wire this method — see
-     * adcontextprotocol/adcp#7517.
+     * **Echo the selected release's identity anchor.** AdCP 3.2+ settings-update
+     * rows carry `account` instead of flat `brand` + `operator`; provisioning
+     * rows carry the natural key. Older releases require `brand` + `operator`
+     * on every row. Failed 3.2+ rows may omit an unknown lifecycle `status`.
      *
      * In AdCP 3.1 beta, adopters that need settings-update entries with
      * `notification_configs[]` can read the full wire body from `ctx.input`
@@ -890,18 +889,26 @@ export type AccountFilter = ListAccountsRequest;
  * returned rows — same MUST-NOT-LEAK rule the framework enforces on
  * `Account.authInfo`.
  */
-export interface SyncAccountsResultRow {
+interface SyncAccountsResultFields {
     account_id?: string;
-    brand: BrandReference;
-    operator: string;
+    /** Current canonical operator unit, distinct from the seller account ID. */
+    operator_unit?: SyncAccountsRow['operator_unit'];
+    /** Current persisted account revision, including during a dry-run preview. */
+    revision?: SyncAccountsRow['revision'];
+    /** Pending or rejected desired identity; canonical fields remain unchanged. */
+    identity_change?: SyncAccountsRow['identity_change'];
+    /** Non-persisted evaluation of an identity change requested in a dry run. */
+    identity_change_preview?: SyncAccountsRow['identity_change_preview'];
+    currency?: SyncAccountsRow['currency'];
+    timezone?: SyncAccountsRow['timezone'];
     /** Human-readable account name assigned by the seller. */
     name?: string;
-    action: 'created' | 'updated' | 'unchanged' | 'failed';
-    status: AdcpAccountStatus;
     /** Invoiced-to party. Echoes the request's `billing` after seller acceptance. */
     billing?: BillingParty;
     /** Business entity invoiced. `bank` is stripped on emit (write-only). */
     billing_entity?: BusinessEntity;
+    /** Request-only staging data. The entire field MUST NOT appear in responses. */
+    destination_billing_entity?: never;
     account_scope?: AccountScope;
     /** Setup payload for `pending_approval` accounts (URL/message/expiry). */
     setup?: WireAccount['setup'];
@@ -926,6 +933,25 @@ export interface SyncAccountsResultRow {
     warnings?: string[];
     sandbox?: boolean;
 }
+/**
+ * Provisioning results use the natural key; 3.2+ settings-update results use
+ * account instead. Only failed results can omit an unknown lifecycle status.
+ */
+export type SyncAccountsResultRow = SyncAccountsResultFields & ({
+    account: NonNullable<SyncAccountsRow['account']>;
+    brand?: never;
+    operator?: never;
+} | {
+    account?: never;
+    brand: BrandReference;
+    operator: string;
+}) & ({
+    action: 'failed';
+    status?: AdcpAccountStatus;
+} | {
+    action: 'created' | 'updated' | 'unchanged';
+    status: AdcpAccountStatus;
+});
 export type AdcpAccountStatus = 'active' | 'pending_approval' | 'rejected' | 'payment_required' | 'suspended' | 'closed';
 /**
  * Project a framework `Account<TCtxMeta>` to the wire `Account` shape.

package/dist/lib/server/decisioning/account.js

@@ -30,6 +30,7 @@ __export(account_exports, {
 });
 module.exports = __toCommonJS(account_exports);
 var import_reporting_delivery_config = require('../reporting-delivery-config.js');
+var import_account_response_identity = require('../account-response-identity.js');
 const ACCOUNT_AUTHORIZATION_WIRE_KEYS = [
   "allowed_tasks",
   "field_scopes",
@@ -50,6 +51,30 @@ class AccountNotFoundError extends Error {
     super(message);
   }
 }
+const SYNC_ACCOUNT_PASSTHROUGH_KEYS = [
+  "account_id",
+  "brand",
+  "operator",
+  "revision",
+  "currency",
+  "timezone",
+  "name",
+  "action",
+  "status",
+  "billing",
+  "account_scope",
+  "setup",
+  "rate_card",
+  "payment_terms",
+  "credit_limit",
+  "errors",
+  "warnings",
+  "sandbox"
+];
+const SYNC_ACCOUNTS_RESULT_KEY_COVERAGE = {};
+void SYNC_ACCOUNTS_RESULT_KEY_COVERAGE;
+const SYNC_ACCOUNTS_PROJECTION_KEY_COVERAGE = {};
+void SYNC_ACCOUNTS_PROJECTION_KEY_COVERAGE;
 function toWireAccount(account) {
   const wire = {
     account_id: account.id,
@@ -107,22 +132,19 @@ function projectAccountAuthorization(authorization) {
   return projected;
 }
 function toWireSyncAccountRow(row) {
+  const identity = (0, import_account_response_identity.projectAccountResponseIdentityFields)(row);
   const wire = {
-    brand: row.brand,
-    operator: row.operator,
     action: row.action,
-    status: row.status
+    ...identity
   };
-  if (row.account_id !== void 0) wire.account_id = row.account_id;
-  if (row.name !== void 0) wire.name = row.name;
-  if (row.billing !== void 0) wire.billing = row.billing;
+  const source = row;
+  function copyField(key) {
+    const value = source[key];
+    if (value !== void 0) wire[key] = value;
+  }
+  for (const key of SYNC_ACCOUNT_PASSTHROUGH_KEYS) copyField(key);
   const projectedEntity = projectBillingEntity(row.billing_entity);
   if (projectedEntity !== void 0) wire.billing_entity = projectedEntity;
-  if (row.account_scope !== void 0) wire.account_scope = row.account_scope;
-  if (row.setup !== void 0) wire.setup = row.setup;
-  if (row.rate_card !== void 0) wire.rate_card = row.rate_card;
-  if (row.payment_terms !== void 0) wire.payment_terms = row.payment_terms;
-  if (row.credit_limit !== void 0) wire.credit_limit = row.credit_limit;
   if (row.notification_configs !== void 0) {
     wire.notification_configs = row.notification_configs.map(projectNotificationConfig);
   }
@@ -134,9 +156,6 @@ function toWireSyncAccountRow(row) {
       row.authorization
     );
   }
-  if (row.errors !== void 0) wire.errors = row.errors;
-  if (row.warnings !== void 0) wire.warnings = row.warnings;
-  if (row.sandbox !== void 0) wire.sandbox = row.sandbox;
   return wire;
 }
 function projectNotificationConfig(config) {