@adcp/sdk 17.0.0-beta.7 → 17.0.0-beta.9

package/dist/lib/schemas-data/3.1/trusted-match/offer-price.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.29/trusted-match/offer-price.json",
+  "$id": "/schemas/3.1.31/trusted-match/offer-price.json",
   "title": "Offer Price",
   "description": "Lightweight price for a TMP offer. Used when the product supports variable pricing and the buyer specifies a price at match time.",
   "x-status": "experimental",

package/dist/lib/schemas-data/3.1/trusted-match/offer.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.29/trusted-match/offer.json",
+  "$id": "/schemas/3.1.31/trusted-match/offer.json",
   "title": "Offer",
   "description": "A buyer's response to a context match request. Generalizes package activation — a simple activation is an offer with just package_id. A rich response includes brand, price, summary, and optionally an inline creative manifest.",
   "x-status": "experimental",
@@ -11,15 +11,15 @@
       "description": "Package identifier from the media buy."
     },
     "seller_agent": {
-      "$ref": "/schemas/3.1.29/core/seller-agent-ref.json",
+      "$ref": "/schemas/3.1.31/core/seller-agent-ref.json",
       "description": "Optional echo of the package's seller agent from sync-time metadata. Provided for publisher-side observability so log pipelines can attribute offers to sellers without round-tripping to the media-buy store. Non-authoritative: the binding on the cached AvailablePackage is source of truth. When omitted, the router MAY stamp this field from its cached package→seller map."
     },
     "brand": {
-      "$ref": "/schemas/3.1.29/core/brand-ref.json",
+      "$ref": "/schemas/3.1.31/core/brand-ref.json",
       "description": "Brand for this offer. Required when the product allows dynamic brands (brand selected at match time rather than fixed on the package). For single-brand packages, the brand is already known from the media buy."
     },
     "price": {
-      "$ref": "/schemas/3.1.29/trusted-match/offer-price.json",
+      "$ref": "/schemas/3.1.31/trusted-match/offer-price.json",
       "description": "Price for this offer. Only present when the product supports variable pricing. For fixed-price packages, price is already set on the media buy."
     },
     "summary": {
@@ -27,7 +27,7 @@
       "description": "Buyer-generated description of the offer, for the publisher to judge relevance. E.g., '50% off Goldenfield mayo — recipe integration'. The publisher (or their AI assistant) uses this to decide whether the offer fits the context."
     },
     "creative_manifest": {
-      "$ref": "/schemas/3.1.29/core/creative-manifest.json",
+      "$ref": "/schemas/3.1.31/core/creative-manifest.json",
       "description": "Full creative details, inline. When present, the publisher has everything needed to render. Inline for small creatives (markdown, product card). For large creatives (VAST, video), the manifest references external assets via URLs."
     },
     "macros": {

package/dist/lib/schemas-data/3.1/trusted-match/provider-identity-match-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.29/trusted-match/provider-identity-match-response.json",
+  "$id": "/schemas/3.1.31/trusted-match/provider-identity-match-response.json",
   "title": "Identity Match Response (Provider → Router)",
   "description": "Provider-to-router shape of the Identity Match response. An identity agent returns eligibility, the per-package serve-window throttle, and — when it mints one — an ordered list of TMPX chunks. Each chunk pairs a provider-local `slot_id` (declared at registration in `tmpx_slots`) with an opaque URL-safe `value`. Publisher-local destination names (ad-server macros, GAM key-values, VAST URL macros, DOOH play-log fields) MUST NOT appear on this hop; the router keys chunks under the emitting `provider_id` and the publisher's deployment configuration resolves `(provider_id, slot_id)` to the local destination (see publisher-tmpx-config.json). Router-hop fields (`tmpx_providers`, `tmpx`) MUST NOT appear on this shape — a router receiving them from a provider MUST reject the response. Envelope extension fields (`context`, `ext`) are intentionally omitted to prevent data leakage across the identity privacy boundary; they are forbidden by this schema.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "/schemas/3.1.29/core/version-envelope.json"
+      "$ref": "/schemas/3.1.31/core/version-envelope.json"
     },
     {
-      "$ref": "/schemas/3.1.29/core/protocol-envelope.json"
+      "$ref": "/schemas/3.1.31/core/protocol-envelope.json"
     }
   ],
   "x-status": "experimental",
@@ -40,7 +40,7 @@
       "type": "array",
       "description": "Ordered TMPX chunk/value pairs this identity agent mints. Each entry names the provider-local `slot_id` the value fills (from the provider's registered `tmpx_slots` in provider-registration.json). Ordered-prefix invariant: a response that carries fewer chunks than the provider registered MUST emit an ordered prefix of the registered `tmpx_slots` — routers MUST NOT reorder or fill gaps. The router MUST validate this contract before forwarding: if the provider has no `tmpx_slots` registration, or if the chunk `slot_id` sequence is not an exact non-empty ordered prefix of the registered list (duplicate, reordered, sparse, or unregistered slot IDs), the router MUST drop that provider's chunks atomically and MUST NOT forward them into `tmpx_providers`. Cap of 2 chunks in v1 aligned with the GAM macro-slot budget; the cap MAY rise without a shape change. Omitted when this provider mints no TMPX (e.g. no eligible packages).",
       "items": {
-        "$ref": "/schemas/3.1.29/trusted-match/tmpx-chunk.json"
+        "$ref": "/schemas/3.1.31/trusted-match/tmpx-chunk.json"
       },
       "minItems": 1,
       "maxItems": 2

package/dist/lib/schemas-data/3.1/trusted-match/provider-registration.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.29/trusted-match/provider-registration.json",
+  "$id": "/schemas/3.1.31/trusted-match/provider-registration.json",
   "title": "TMP Provider Registration",
   "description": "Declares a TMP provider's endpoint, capabilities, and operational parameters. Used in router configuration (static YAML or dynamic API) and referenced by product-level provider entries. The publisher controls which providers participate in their ad decisioning. Endpoint URLs MUST be validated against SSRF, and dynamic registration endpoints MUST authenticate callers — see docs/trusted-match/specification#provider-registration-security.",
   "x-status": "experimental",
@@ -39,7 +39,7 @@
       "type": "array",
       "description": "Identity types this provider can resolve. The router selects Identity Match providers whose uid_types overlaps with any uid_type in the request's identities array. MUST be present and non-empty when identity_match is true.",
       "items": {
-        "$ref": "/schemas/3.1.29/enums/uid-type.json"
+        "$ref": "/schemas/3.1.31/enums/uid-type.json"
       },
       "minItems": 1
     },

package/dist/lib/schemas-data/3.1/trusted-match/publisher-tmpx-config.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.29/trusted-match/publisher-tmpx-config.json",
+  "$id": "/schemas/3.1.31/trusted-match/publisher-tmpx-config.json",
   "title": "Publisher TMPX Macro Mapping",
   "description": "Publisher-owned deployment configuration that maps each identity provider's TMPX slots to the ad-server macro names (or targeting keys, VAST substitutions, DOOH play-log fields) the publisher wants those chunks fired into on this surface. Mapping is authored by the publisher — the same operator who trafficks the corresponding ad-server line items — and never travels on the wire between identity provider and router. This keeps macro naming a deployment concern rather than a protocol identifier: providers emit chunks as `{slot_id, value}` pairs (see provider-identity-match-response.json), the router preserves ordering and slot IDs under the emitting `provider_id` (see identity-match-response.json), and this configuration resolves each `(provider_id, slot_id)` to a local destination on the way to the ad server. A publisher may map the same provider to different destinations across surfaces (GAM key-values vs. VAST macros vs. DOOH play-log fields) by carrying one instance of this configuration per surface.",
   "x-status": "experimental",

package/dist/lib/schemas-data/3.1/trusted-match/tmpx-chunk.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.29/trusted-match/tmpx-chunk.json",
+  "$id": "/schemas/3.1.31/trusted-match/tmpx-chunk.json",
   "title": "TMPX Chunk",
   "description": "A single provider TMPX chunk — the provider-local `slot_id` (declared at registration in `tmpx_slots`) and its opaque URL-safe `value`. Same shape on both hops of the Identity Match response: providers emit `tmpx_chunks[]` on the provider→router shape, the router forwards them under `tmpx_providers[provider_id].chunks[]` on the router→publisher shape. Publisher-local destination names never appear here — the publisher's deployment configuration resolves `(provider_id, slot_id)` → local destination via publisher-tmpx-config.json.",
   "x-status": "experimental",

package/dist/lib/testing/compliance/comply.js

@@ -829,13 +829,14 @@ function expandScenarios(storyboards, resolveOptions = {}, skipDependencyExpansi
   }
   return expanded;
 }
-function partitionStoryboardsByRequiredTools(storyboards, discoveredTools) {
+function partitionStoryboardsByRequiredTools(storyboards, discoveredTools, options = {}) {
   const runnable = [];
   const missing = [];
   for (const sb of storyboards) {
     const required = sb.required_tools ?? [];
     const hasApplicableTool = (0, import_agent_routing.hasAnyRequiredTool)(required, discoveredTools);
-    if (!hasApplicableTool) {
+    const keepRootGate = options.preserveRootCapabilityGates === true && (0, import_runner.storyboardCapabilityPredicates)(sb).length > 0;
+    if (!hasApplicableTool && !keepRootGate) {
       missing.push({
         storyboard_id: sb.id,
         storyboard_title: sb.title,
@@ -1538,7 +1539,9 @@ async function complyImpl(agentUrl, options) {
     if (explicitStoryboards?.length) {
       runnableStoryboards = applicableStoryboards;
     } else {
-      const applicability = partitionStoryboardsByRequiredTools(applicableStoryboards, profile.tools);
+      const applicability = partitionStoryboardsByRequiredTools(applicableStoryboards, profile.tools, {
+        preserveRootCapabilityGates: true
+      });
       runnableStoryboards = applicability.runnable;
       missingToolStoryboards.push(...applicability.missing);
     }

package/dist/lib/testing/compliance/comply.mjs

@@ -822,13 +822,14 @@ function expandScenarios(storyboards, resolveOptions = {}, skipDependencyExpansi
   }
   return expanded;
 }
-function partitionStoryboardsByRequiredTools(storyboards, discoveredTools) {
+function partitionStoryboardsByRequiredTools(storyboards, discoveredTools, options = {}) {
   const runnable = [];
   const missing = [];
   for (const sb of storyboards) {
     const required = sb.required_tools ?? [];
     const hasApplicableTool = hasAnyRequiredTool(required, discoveredTools);
-    if (!hasApplicableTool) {
+    const keepRootGate = options.preserveRootCapabilityGates === true && storyboardCapabilityPredicates(sb).length > 0;
+    if (!hasApplicableTool && !keepRootGate) {
       missing.push({
         storyboard_id: sb.id,
         storyboard_title: sb.title,
@@ -1531,7 +1532,9 @@ async function complyImpl(agentUrl, options) {
     if (explicitStoryboards?.length) {
       runnableStoryboards = applicableStoryboards;
     } else {
-      const applicability = partitionStoryboardsByRequiredTools(applicableStoryboards, profile.tools);
+      const applicability = partitionStoryboardsByRequiredTools(applicableStoryboards, profile.tools, {
+        preserveRootCapabilityGates: true
+      });
       runnableStoryboards = applicability.runnable;
       missingToolStoryboards.push(...applicability.missing);
     }

package/dist/lib/testing/storyboard/request-builder.js

@@ -30,6 +30,7 @@ var import_client = require('../client.js');
 var import_context = require('./context.js');
 var import_pricing_adapter = require('../../utils/pricing-adapter.js');
 const UNKNOWN_FORMAT_ID = Object.freeze({ agent_url: "https://unknown.example.com/", id: "unknown" });
+const AUCTION_PRICING_MODELS = /* @__PURE__ */ new Set(["cpm", "vcpm", "cpc", "cpcv", "cpv", "cpp", "flat_rate", "time"]);
 const FALLBACK_CALLER_AGENT_URL = "https://e2e-orchestrator.adcontextprotocol.org/";
 const FIXTURE_AWARE_ENRICHERS = /* @__PURE__ */ new Set([
   "create_media_buy",
@@ -252,9 +253,11 @@ const REQUEST_ENRICHERS = {
     const packages = [firstPkg, ...additionalPkgs];
     for (const pkg of packages) {
       const sentPricingOption = pkg === firstPkg && fixtureProductId === void 0 && fixturePricingOptionId === void 0 ? pricingOption : findPricingOption(context, pkg.product_id, pkg.pricing_option_id);
-      if (pkg.bid_price === void 0 && pkg.bidding === void 0 && step.sample_request?.bidding === void 0 && sentPricingOption?.pricing_model === "cpm" && !(0, import_pricing_adapter.isFixedPricing)(sentPricingOption)) {
-        const floor = Number(sentPricingOption.floor_price) || 5;
-        pkg.bid_price = Math.round(floor * 1.5 * 100) / 100;
+      if (pkg.bid_price === void 0 && pkg.bidding === void 0 && step.sample_request?.bidding === void 0 && sentPricingOption !== void 0 && AUCTION_PRICING_MODELS.has(sentPricingOption.pricing_model) && !(0, import_pricing_adapter.isFixedPricing)(sentPricingOption)) {
+        const floor = sentPricingOption.floor_price === void 0 ? 5 : sentPricingOption.floor_price;
+        if (typeof floor !== "number" || !Number.isFinite(floor) || floor < 0) continue;
+        const roundedBid = Math.round(floor * 150) / 100;
+        pkg.bid_price = Number.isFinite(roundedBid) ? Math.max(floor, roundedBid) : floor;
       }
     }
     const fixture = step.sample_request !== void 0 ? (0, import_context.injectContext)({ ...step.sample_request }, context) : {};

package/dist/lib/testing/storyboard/request-builder.mjs

@@ -4,6 +4,7 @@ import { resolveBrand, resolveAccount } from "../client.mjs";
 import { injectContext } from "./context.mjs";
 import { isFixedPricing } from "../../utils/pricing-adapter.mjs";
 const UNKNOWN_FORMAT_ID = Object.freeze({ agent_url: "https://unknown.example.com/", id: "unknown" });
+const AUCTION_PRICING_MODELS = /* @__PURE__ */ new Set(["cpm", "vcpm", "cpc", "cpcv", "cpv", "cpp", "flat_rate", "time"]);
 const FALLBACK_CALLER_AGENT_URL = "https://e2e-orchestrator.adcontextprotocol.org/";
 const FIXTURE_AWARE_ENRICHERS = /* @__PURE__ */ new Set([
   "create_media_buy",
@@ -226,9 +227,11 @@ const REQUEST_ENRICHERS = {
     const packages = [firstPkg, ...additionalPkgs];
     for (const pkg of packages) {
       const sentPricingOption = pkg === firstPkg && fixtureProductId === void 0 && fixturePricingOptionId === void 0 ? pricingOption : findPricingOption(context, pkg.product_id, pkg.pricing_option_id);
-      if (pkg.bid_price === void 0 && pkg.bidding === void 0 && step.sample_request?.bidding === void 0 && sentPricingOption?.pricing_model === "cpm" && !isFixedPricing(sentPricingOption)) {
-        const floor = Number(sentPricingOption.floor_price) || 5;
-        pkg.bid_price = Math.round(floor * 1.5 * 100) / 100;
+      if (pkg.bid_price === void 0 && pkg.bidding === void 0 && step.sample_request?.bidding === void 0 && sentPricingOption !== void 0 && AUCTION_PRICING_MODELS.has(sentPricingOption.pricing_model) && !isFixedPricing(sentPricingOption)) {
+        const floor = sentPricingOption.floor_price === void 0 ? 5 : sentPricingOption.floor_price;
+        if (typeof floor !== "number" || !Number.isFinite(floor) || floor < 0) continue;
+        const roundedBid = Math.round(floor * 150) / 100;
+        pkg.bid_price = Number.isFinite(roundedBid) ? Math.max(floor, roundedBid) : floor;
       }
     }
     const fixture = step.sample_request !== void 0 ? injectContext({ ...step.sample_request }, context) : {};

package/dist/lib/testing/storyboard/runner.js

@@ -4772,6 +4772,38 @@ async function runStoryboardStepBody(agentUrl, storyboard, stepId, options) {
       runState.fixtureBindings = (0, import_prepared_fixtures.preparedBindingRegistryFor)(prepared.state);
       runState.preparedFixtures = prepared.state;
     }
+    if (storyboard.prerequisites?.controller_seeding === true && storyboard.fixture_resolution === void 0 && options.skip_controller_seeding !== true && runState.preparedFixtures === void 0 && options.agentTools !== void 0 && !options.agentTools.includes("comply_test_controller")) {
+      const seeds = (0, import_seeding.buildSeedCalls)(storyboard.fixtures);
+      const resolvedTask = (0, import_agent_routing.resolveTaskName)(found.step, options);
+      const intrinsicSkip = found.step.requires_tool !== void 0 && !options.agentTools.includes(found.step.requires_tool) || found.step.requires_contract !== void 0 && !(options.contracts ?? []).includes(found.step.requires_contract) || resolvedTask !== void 0 && !isRunnerOwnedTask(resolvedTask) && !options.agentTools.includes(resolvedTask);
+      if (seeds.length > 0 && !seeds.some((seed) => seed.authoring_error !== void 0) && resolvedTask !== void 0 && resolvedTask !== "get_adcp_capabilities" && !intrinsicSkip) {
+        const capabilityDetail = collectPhaseCapabilitySkipDetails(
+          storyboard,
+          profile,
+          options.agentTools,
+          options.adcpVersion
+        ).get(found.phaseId);
+        const detail = capabilityDetail ?? "Standalone step requires controller-seeded fixtures, but comply_test_controller is unavailable. Run fixture preparation or explicitly opt out of controller seeding for externally prepared state.";
+        return {
+          storyboard_id: storyboard.id,
+          step_id: found.step.id,
+          phase_id: found.phaseId,
+          title: found.step.title,
+          task: found.step.task,
+          passed: true,
+          skipped: true,
+          skip_reason: capabilityDetail === void 0 ? "missing_test_controller" : "not_applicable",
+          skip: capabilityDetail === void 0 ? { reason: "missing_test_controller", requirement: "controller", detail } : { reason: "not_applicable", detail },
+          error: detail,
+          duration_ms: 0,
+          validations: [],
+          context: withoutProtectedCaptures(context),
+          next: getNextStepPreview(found.step.id, allSteps, context, runState.runnerVars),
+          extraction: { path: "none" },
+          contributions: Array.from(contributions)
+        };
+      }
+    }
     let prerequisiteFailure;
     if (storyboard.id === "media_buy_seller/acceptance_policy_discovery" && found.step.id === "get_contextual_products" && options.acceptancePolicyDiscovery?.enabled !== false) {
       const capabilityStep = allSteps.find((value) => value.step.id === "get_acceptance_policy_capability");

package/dist/lib/testing/storyboard/runner.mjs

@@ -132,6 +132,7 @@ import { REQUEST_SIGNING_PROBE_TASK } from "./request-signing/synthesize.mjs";
 import { createWebhookReceiver } from "./webhook-receiver.mjs";
 import { WEBHOOK_ASSERTION_TASKS, armWebhookAssertions, executeWebhookAssertionStep } from "./webhook-assertions.mjs";
 import {
+  buildSeedCalls,
   runControllerSeeding,
   collectWholesaleProductPages
 } from "./seeding.mjs";
@@ -4815,6 +4816,38 @@ async function runStoryboardStepBody(agentUrl, storyboard, stepId, options) {
       runState.fixtureBindings = preparedBindingRegistryFor(prepared.state);
       runState.preparedFixtures = prepared.state;
     }
+    if (storyboard.prerequisites?.controller_seeding === true && storyboard.fixture_resolution === void 0 && options.skip_controller_seeding !== true && runState.preparedFixtures === void 0 && options.agentTools !== void 0 && !options.agentTools.includes("comply_test_controller")) {
+      const seeds = buildSeedCalls(storyboard.fixtures);
+      const resolvedTask = resolveTaskName(found.step, options);
+      const intrinsicSkip = found.step.requires_tool !== void 0 && !options.agentTools.includes(found.step.requires_tool) || found.step.requires_contract !== void 0 && !(options.contracts ?? []).includes(found.step.requires_contract) || resolvedTask !== void 0 && !isRunnerOwnedTask(resolvedTask) && !options.agentTools.includes(resolvedTask);
+      if (seeds.length > 0 && !seeds.some((seed) => seed.authoring_error !== void 0) && resolvedTask !== void 0 && resolvedTask !== "get_adcp_capabilities" && !intrinsicSkip) {
+        const capabilityDetail = collectPhaseCapabilitySkipDetails(
+          storyboard,
+          profile,
+          options.agentTools,
+          options.adcpVersion
+        ).get(found.phaseId);
+        const detail = capabilityDetail ?? "Standalone step requires controller-seeded fixtures, but comply_test_controller is unavailable. Run fixture preparation or explicitly opt out of controller seeding for externally prepared state.";
+        return {
+          storyboard_id: storyboard.id,
+          step_id: found.step.id,
+          phase_id: found.phaseId,
+          title: found.step.title,
+          task: found.step.task,
+          passed: true,
+          skipped: true,
+          skip_reason: capabilityDetail === void 0 ? "missing_test_controller" : "not_applicable",
+          skip: capabilityDetail === void 0 ? { reason: "missing_test_controller", requirement: "controller", detail } : { reason: "not_applicable", detail },
+          error: detail,
+          duration_ms: 0,
+          validations: [],
+          context: withoutProtectedCaptures(context),
+          next: getNextStepPreview(found.step.id, allSteps, context, runState.runnerVars),
+          extraction: { path: "none" },
+          contributions: Array.from(contributions)
+        };
+      }
+    }
     let prerequisiteFailure;
     if (storyboard.id === "media_buy_seller/acceptance_policy_discovery" && found.step.id === "get_contextual_products" && options.acceptancePolicyDiscovery?.enabled !== false) {
       const capabilityStep = allSteps.find((value) => value.step.id === "get_acceptance_policy_capability");

package/dist/lib/testing/storyboard/validations.d.mts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "17.0.0-beta.7";
+export declare const RUNNER_CAPABILITY_VERSION = "17.0.0-beta.9";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/testing/storyboard/validations.d.ts

@@ -197,7 +197,7 @@ export interface UpstreamTrafficQueryResult {
  */
 export declare function runValidations(validations: StoryboardValidation[], context: ValidationContext): ValidationResult[];
 /** Capability semver emitted in run summaries and used for advisory expiry. */
-export declare const RUNNER_CAPABILITY_VERSION = "17.0.0-beta.7";
+export declare const RUNNER_CAPABILITY_VERSION = "17.0.0-beta.9";
 /** True when a failed validation contributes to the owning step's grade. */
 export declare function validationFailsStep(result: ValidationResult): boolean;
 /**

package/dist/lib/version.d.mts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "17.0.0-beta.7";
+export declare const LIBRARY_VERSION = "17.0.0-beta.9";
 /**
  * AdCP specification version this library is built for
  */
@@ -19,7 +19,7 @@ export declare const ADCP_MAJOR_VERSION = 3;
  * this list by hand; bumping the AdCP pin via `npm run sync-version`
  * extends it.
  */
-export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.3.0-beta.1", "3.3-beta.1"];
+export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.1.30", "3.1.31", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.3.0-beta.1", "3.3-beta.1"];
 /**
  * String literal union of every AdCP version the SDK formally supports.
  *
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "17.0.0-beta.7";
+    readonly library: "17.0.0-beta.9";
     readonly adcp: "3.3.0-beta.1";
-    readonly compatibleVersions: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.3.0-beta.1", "3.3-beta.1"];
-    readonly generatedAt: "2026-10-30T02:12:55.702Z";
+    readonly compatibleVersions: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.1.30", "3.1.31", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.3.0-beta.1", "3.3-beta.1"];
+    readonly generatedAt: "2026-10-30T11:55:51.563Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "17.0.0-beta.7";
+export declare const LIBRARY_VERSION = "17.0.0-beta.9";
 /**
  * AdCP specification version this library is built for
  */
@@ -19,7 +19,7 @@ export declare const ADCP_MAJOR_VERSION = 3;
  * this list by hand; bumping the AdCP pin via `npm run sync-version`
  * extends it.
  */
-export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.3.0-beta.1", "3.3-beta.1"];
+export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.1.30", "3.1.31", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.3.0-beta.1", "3.3-beta.1"];
 /**
  * String literal union of every AdCP version the SDK formally supports.
  *
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "17.0.0-beta.7";
+    readonly library: "17.0.0-beta.9";
     readonly adcp: "3.3.0-beta.1";
-    readonly compatibleVersions: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.3.0-beta.1", "3.3-beta.1"];
-    readonly generatedAt: "2026-10-30T02:12:55.702Z";
+    readonly compatibleVersions: readonly ["v3", "3.0.0", "3.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12", "3.0.13", "3.0.14", "3.0.15", "3.0.16", "3.0.17", "3.0.18", "3.0.19", "3.0.20", "3.0.21", "3.0.22", "3.0.23", "3.0.24", "3.0.25", "3.1.0", "3.1", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.20", "3.1.21", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.1.30", "3.1.31", "3.2.1", "3.2", "3.2.2", "3.2.3", "3.2.4", "3.2.5", "3.2.6", "3.2.7", "3.3.0-beta.1", "3.3-beta.1"];
+    readonly generatedAt: "2026-10-30T11:55:51.563Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js

@@ -31,7 +31,7 @@ __export(version_exports, {
   toReleasePrecisionVersion: () => toReleasePrecisionVersion
 });
 module.exports = __toCommonJS(version_exports);
-const LIBRARY_VERSION = "17.0.0-beta.7";
+const LIBRARY_VERSION = "17.0.0-beta.9";
 const ADCP_VERSION = "3.3.0-beta.1";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -94,6 +94,8 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.1.27",
   "3.1.28",
   "3.1.29",
+  "3.1.30",
+  "3.1.31",
   "3.2.1",
   "3.2",
   "3.2.2",
@@ -106,10 +108,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.3-beta.1"
 ];
 const VERSION_INFO = {
-  library: "17.0.0-beta.7",
+  library: "17.0.0-beta.9",
   adcp: "3.3.0-beta.1",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-30T02:12:55.702Z"
+  generatedAt: "2026-10-30T11:55:51.563Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/dist/lib/version.mjs

@@ -1,4 +1,4 @@
-const LIBRARY_VERSION = "17.0.0-beta.7";
+const LIBRARY_VERSION = "17.0.0-beta.9";
 const ADCP_VERSION = "3.3.0-beta.1";
 const ADCP_MAJOR_VERSION = 3;
 const COMPATIBLE_ADCP_VERSIONS = [
@@ -61,6 +61,8 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.1.27",
   "3.1.28",
   "3.1.29",
+  "3.1.30",
+  "3.1.31",
   "3.2.1",
   "3.2",
   "3.2.2",
@@ -73,10 +75,10 @@ const COMPATIBLE_ADCP_VERSIONS = [
   "3.3-beta.1"
 ];
 const VERSION_INFO = {
-  library: "17.0.0-beta.7",
+  library: "17.0.0-beta.9",
   adcp: "3.3.0-beta.1",
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: "2026-10-30T02:12:55.702Z"
+  generatedAt: "2026-10-30T11:55:51.563Z"
 };
 function getAdcpVersion() {
   return ADCP_VERSION;

package/docs/CLI.md

@@ -297,7 +297,7 @@ adcp storyboard run myagent --storyboards creative-template
 adcp storyboard run myagent --tracks core,products,media_buy
 
 # Pin the compliance cache/spec line used for storyboard resolution
-adcp storyboard run myagent --compliance-version 3.0.12
+adcp storyboard run myagent --compliance-version 3.1.31
 
 # Recommended for CI: --json for machine-readable output + --strict-flags
 # so stale flags fail the build instead of passing advisory warnings.
@@ -320,7 +320,7 @@ Useful flags:
 
 - `--storyboards ID,...`: Run specific storyboard or bundle IDs instead of capability-driven selection
 - `--tracks core,products,...`: Restrict the run to specific tracks
-- `--compliance-version VERSION`: Select a packaged compliance cache/spec line, for example `3.1.29` or `3.2.5`; use the same flag with `storyboard list`, `show`, and `step` when reproducing a pinned run
+- `--compliance-version VERSION`: Select a packaged compliance cache/spec line, for example `3.1.31` or `3.2.7`; use the same flag with `storyboard list`, `show`, and `step` when reproducing a pinned run
 - `--compliance-dir PATH`: Use a specific compliance cache directory, mainly for local protocol/cache development
 - `--brief TEXT`: Override the default sample discovery brief
 - `--dry-run`: Preview steps without executing

package/docs/TYPE-SUMMARY.md

@@ -1,7 +1,7 @@
 # AdCP Type Summary
 
 > Generated at: 2026-10-30
-> @adcp/sdk v17.0.0-beta.7
+> @adcp/sdk v17.0.0-beta.9
 
 Curated reference of the types that matter for using the AdCP client. For full generated types see `src/lib/types/tools.generated.ts` and `src/lib/types/core.generated.ts`.
 

package/docs/guides/VALIDATE-YOUR-AGENT.md

@@ -32,7 +32,7 @@ If all five pass and your skill's specialism-specific checks below pass, you're
 
 **Working on the agent locally?** Before you reach for the remote-agent commands above, see [`VALIDATE-LOCALLY.md`](./VALIDATE-LOCALLY.md) — the same storyboards, zero tunnel setup, ten lines of code. Point `--local-agent <module>` at your handlers or call `runAgainstLocalAgent` directly from a test file.
 
-**Why `@15.9` in every `npx` command?** This selects the stable SDK 15.9 maintenance line, which bundles the current AdCP 3.2 and maintained 3.1 compliance corpora. Select the exact maintained 3.1 cache with `--compliance-version 3.1.29`. For reproducible CI, pin an exact published SDK version and verify its `ADCP_VERSION` and packaged compliance versions. The older `adcp-3.2` npm tag selects SDK 14 and does not supply the refreshed caches shown here.
+**Why `@15.9` in every `npx` command?** This selects the stable SDK 15.9 maintenance line, which bundles the current AdCP 3.2 and maintained 3.1 compliance corpora. Select the exact maintained 3.1 cache with `--compliance-version 3.1.31`. For reproducible CI, pin an exact published SDK version and verify its `ADCP_VERSION` and packaged compliance versions. The older `adcp-3.2` npm tag selects SDK 14 and does not supply the refreshed caches shown here.
 
 ---
 
@@ -69,7 +69,7 @@ npx @adcp/sdk@15.9 storyboard run http://localhost:3001/mcp sales-guaranteed --a
 npx @adcp/sdk@15.9 storyboard run http://localhost:3001/mcp --tracks core,products --auth $TOKEN
 
 # Pin a specific compliance cache/spec line
-npx @adcp/sdk@15.9 storyboard run http://localhost:3001/mcp --compliance-version 3.1.29 --auth $TOKEN
+npx @adcp/sdk@15.9 storyboard run http://localhost:3001/mcp --compliance-version 3.1.31 --auth $TOKEN
 
 # Ad-hoc YAML (new storyboards under development)
 npx @adcp/sdk@15.9 storyboard run http://localhost:3001/mcp --file ./my-wip.yaml --auth $TOKEN

package/docs/llms.txt

@@ -1,7 +1,7 @@
 # Ad Context Protocol (AdCP)
 
 > Generated at: 2026-10-30
-> Library: @adcp/sdk v17.0.0-beta.7
+> Library: @adcp/sdk v17.0.0-beta.9
 > AdCP major version: 3
 > Canonical URL: https://adcontextprotocol.github.io/adcp-client/llms.txt
 > Note: the `Library` stamp reflects the package.json version at doc-generation time. The narrative below describes the surface that lands on the next-published minor — including any 6.7 helpers documented here ahead of the release tag.

package/docs/migration-14.x-rc-worksheet.md

@@ -16,18 +16,18 @@ pin using `ADCP_VERSION` inside that tarball.
 
 | Fact | Value |
 | --- | --- |
-| Checkout `package.json` version | `@adcp/sdk@17.0.0-beta.7` |
-| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@17.0.0-beta.7 dist.integrity` |
+| Checkout `package.json` version | `@adcp/sdk@17.0.0-beta.9` |
+| npm integrity | registry-derived after publication; run `npm view @adcp/sdk@17.0.0-beta.9 dist.integrity` |
 | Node.js runtime | `^20.19.0 || >=22.12.0` |
 | Default AdCP wire release | `3.3.0-beta.1` |
-| Maintained wire releases | `v3`, `3.0.0`, `3.0`, `3.0.1`, `3.0.2`, `3.0.3`, `3.0.4`, `3.0.5`, `3.0.6`, `3.0.7`, `3.0.8`, `3.0.9`, `3.0.10`, `3.0.11`, `3.0.12`, `3.0.13`, `3.0.14`, `3.0.15`, `3.0.16`, `3.0.17`, `3.0.18`, `3.0.19`, `3.0.20`, `3.0.21`, `3.0.22`, `3.0.23`, `3.0.24`, `3.0.25`, `3.1.0`, `3.1`, `3.1.1`, `3.1.2`, `3.1.3`, `3.1.4`, `3.1.5`, `3.1.6`, `3.1.7`, `3.1.8`, `3.1.9`, `3.1.10`, `3.1.11`, `3.1.12`, `3.1.13`, `3.1.14`, `3.1.15`, `3.1.16`, `3.1.17`, `3.1.18`, `3.1.19`, `3.1.20`, `3.1.21`, `3.1.22`, `3.1.23`, `3.1.24`, `3.1.25`, `3.1.26`, `3.1.27`, `3.1.28`, `3.1.29`, `3.2.1`, `3.2`, `3.2.2`, `3.2.3`, `3.2.4`, `3.2.5`, `3.2.6`, `3.2.7`, `3.3.0-beta.1`, `3.3-beta.1` |
+| Maintained wire releases | `v3`, `3.0.0`, `3.0`, `3.0.1`, `3.0.2`, `3.0.3`, `3.0.4`, `3.0.5`, `3.0.6`, `3.0.7`, `3.0.8`, `3.0.9`, `3.0.10`, `3.0.11`, `3.0.12`, `3.0.13`, `3.0.14`, `3.0.15`, `3.0.16`, `3.0.17`, `3.0.18`, `3.0.19`, `3.0.20`, `3.0.21`, `3.0.22`, `3.0.23`, `3.0.24`, `3.0.25`, `3.1.0`, `3.1`, `3.1.1`, `3.1.2`, `3.1.3`, `3.1.4`, `3.1.5`, `3.1.6`, `3.1.7`, `3.1.8`, `3.1.9`, `3.1.10`, `3.1.11`, `3.1.12`, `3.1.13`, `3.1.14`, `3.1.15`, `3.1.16`, `3.1.17`, `3.1.18`, `3.1.19`, `3.1.20`, `3.1.21`, `3.1.22`, `3.1.23`, `3.1.24`, `3.1.25`, `3.1.26`, `3.1.27`, `3.1.28`, `3.1.29`, `3.1.30`, `3.1.31`, `3.2.1`, `3.2`, `3.2.2`, `3.2.3`, `3.2.4`, `3.2.5`, `3.2.6`, `3.2.7`, `3.3.0-beta.1`, `3.3-beta.1` |
 | Canonical migration notes | [SDK 15 OAuth](./migration-oauth-issuer-bindings.md), [issuer-binding and storage](./guides/OAUTH-ISSUER-BINDING.md); historical [13.x → 14](./migration-13-to-14.md) |
 
 For a checkout at the published release commit, install the exact package version:
 
 ```bash
-npm install --save-exact '@adcp/sdk@17.0.0-beta.7'
-npm view '@adcp/sdk@17.0.0-beta.7' dist.integrity
+npm install --save-exact '@adcp/sdk@17.0.0-beta.9'
+npm view '@adcp/sdk@17.0.0-beta.9' dist.integrity
 ```
 
 ### Required and optional peers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adcp/sdk",
-  "version": "17.0.0-beta.7",
+  "version": "17.0.0-beta.9",
   "description": "AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)",
   "workspaces": [
     ".",
@@ -570,7 +570,7 @@
     "!skills/*.previous/**/*",
     ".claude-plugin/**/*",
     "compliance/cache/3.0.25/**/*",
-    "compliance/cache/3.1.29/**/*",
+    "compliance/cache/3.1.31/**/*",
     "compliance/cache/3.2.7/**/*",
     "compliance/cache/3.3.0-beta.1/**/*",
     "ADCP_VERSION",
@@ -653,7 +653,7 @@
     "test:protocol-comparison": "node test/utils/comprehensive-protocol-comparison.js",
     "test:status-report": "node test/utils/final-status-report.js",
     "sync-schemas": "tsx scripts/sync-schemas.ts",
-    "sync-schemas:all": "npm run sync-schemas && npm run sync-schemas -- 3.2.7 && npm run sync-schemas -- 3.1.29 && npm run sync-schemas -- 3.0.25",
+    "sync-schemas:all": "npm run sync-schemas && npm run sync-schemas -- 3.2.7 && npm run sync-schemas -- 3.1.31 && npm run sync-schemas -- 3.0.25",
     "sync:canonical-storyboard-fixtures": "tsx scripts/sync-canonical-storyboard-fixtures.ts --update",
     "check:canonical-storyboard-fixtures": "tsx scripts/sync-canonical-storyboard-fixtures.ts --check",
     "sync-registry-schemas": "tsx scripts/generate-registry-types.ts --sync",