@adcp/sdk 6.13.2 → 6.15.0

package/ADCP_VERSION

@@ -1 +1 @@
-3.0.6
+3.0.8

package/bin/adcp-storyboard-summary.js

@@ -0,0 +1,152 @@
+/**
+ * Markdown summary writers + soft-fail helpers for the storyboard CLI runners
+ * (issue adcp-client#1527).
+ *
+ * Extracted from bin/adcp.js so the formatting / file-write / soft-fail surfaces
+ * are unit-testable without spawning the CLI. The runner commands import these
+ * to render `--summary-file` outputs and to print the always-on
+ * "STORYBOARD FAILURES" block when `--soft-fail` swallows a failing exit code.
+ *
+ * Two markdown shapes exist because the runner has two underlying result
+ * shapes: `comply()` returns a `ComplianceResult` (with `summary.steps_passed`,
+ * `summary.steps_failed`, `failures[]`) while `runStoryboard()` returns one or
+ * more `StoryboardResult`s (with `phases[].steps[]` and per-step `passed` /
+ * `validations[]`). Each shape gets its own renderer; the column layout and
+ * cell-escape rules are shared via `escapeMarkdownCell`.
+ */
+
+const { writeFileSync } = require('node:fs');
+
+function escapeMarkdownCell(s) {
+  return String(s ?? '')
+    .replace(/\|/g, '\\|')
+    .replace(/\n/g, ' ');
+}
+
+/**
+ * Renders a `comply()` `ComplianceResult` as a Markdown summary suitable for
+ * `--summary-file` or `$GITHUB_STEP_SUMMARY`. Always emits a heading, an
+ * "Overall" line, and (when present) a per-failure table. A non-passing run
+ * with no `failures[]` array prints a placeholder so reviewers know failure
+ * details are unavailable rather than the run actually being clean.
+ */
+function buildComplianceSummaryMarkdown(result, agentUrl) {
+  const lines = [];
+  const s = result.summary || {};
+  lines.push(`# Storyboard run: ${agentUrl}`);
+  lines.push('');
+  lines.push(
+    `**Overall:** ${result.overall_status} — ` +
+      `${s.steps_passed ?? 0} passed / ${s.steps_failed ?? 0} failed / ${s.steps_skipped ?? 0} skipped`
+  );
+  const specialisms = result.agent_profile?.specialisms;
+  if (specialisms?.length) {
+    lines.push(`**Specialisms:** ${specialisms.join(', ')}`);
+  }
+  lines.push('');
+  const failures = result.failures;
+  if (failures?.length) {
+    lines.push('## Failures');
+    lines.push('');
+    lines.push('| Storyboard | Step | Reason |');
+    lines.push('|---|---|---|');
+    for (const f of failures) {
+      const reason = f.error || f.validation?.description || '';
+      lines.push(
+        `| ${escapeMarkdownCell(f.storyboard_id)} | ${escapeMarkdownCell(f.step_id)} | ${escapeMarkdownCell(reason)} |`
+      );
+    }
+    lines.push('');
+  } else if (result.overall_status !== 'passing') {
+    lines.push('_No per-step failure details available._');
+    lines.push('');
+  }
+  return lines.join('\n');
+}
+
+/**
+ * Renders one or more `StoryboardResult`s (the shape `runStoryboard()` and
+ * `runFullAssessment()` produce) as a Markdown summary. Walks every
+ * `phase.steps[]` for failed steps and emits one row per failure. Failed
+ * steps with a `validations[]` array surface the concatenated validation
+ * descriptions; otherwise the renderer falls back to `step.error` and
+ * finally the literal "failed" so the column is never empty.
+ */
+function buildStoryboardSummaryMarkdown(results, agentUrl, overallPassed) {
+  const lines = [];
+  lines.push(`# Storyboard run: ${agentUrl || 'local agent'}`);
+  lines.push('');
+  const totalPassed = results.reduce((n, r) => n + (r.passed_count ?? 0), 0);
+  const totalFailed = results.reduce((n, r) => n + (r.failed_count ?? 0), 0);
+  const totalSkipped = results.reduce((n, r) => n + (r.skipped_count ?? 0), 0);
+  lines.push(
+    `**Overall:** ${overallPassed ? 'passed' : 'failed'} — ` +
+      `${totalPassed} passed / ${totalFailed} failed / ${totalSkipped} skipped`
+  );
+  lines.push('');
+  const failures = [];
+  for (const r of results) {
+    for (const phase of r.phases || []) {
+      for (const step of phase.steps || []) {
+        if (!step.skipped && !step.passed) {
+          const reason =
+            step.validations
+              ?.filter(v => !v.passed)
+              .map(v => v.error || v.description)
+              .join('; ') ||
+            step.error ||
+            'failed';
+          failures.push({ storyboard: r.storyboard_id || '', step: step.id || step.title || '', reason });
+        }
+      }
+    }
+  }
+  if (failures.length > 0) {
+    lines.push('## Failures');
+    lines.push('');
+    lines.push('| Storyboard | Step | Reason |');
+    lines.push('|---|---|---|');
+    for (const f of failures) {
+      lines.push(
+        `| ${escapeMarkdownCell(f.storyboard)} | ${escapeMarkdownCell(f.step)} | ${escapeMarkdownCell(f.reason)} |`
+      );
+    }
+    lines.push('');
+  }
+  return lines.join('\n');
+}
+
+/**
+ * Writes `content` to `summaryFile`. Failures are downgraded to a stderr
+ * warning rather than exiting the process — the markdown summary is a
+ * convenience output, never a contract surface, so a permission denied on
+ * a CI volume must not mask the underlying run's exit code.
+ */
+function writeSummaryFile(summaryFile, content) {
+  try {
+    writeFileSync(summaryFile, content, 'utf-8');
+  } catch (err) {
+    console.error(`WARNING: Could not write summary file ${summaryFile}: ${err.message}`);
+  }
+}
+
+/**
+ * Print the "STORYBOARD FAILURES" block on stderr after a soft-fail-suppressed
+ * run. Suppressed under `--json` so machine-readable stdout consumers
+ * (e.g. JUnit + JSON pipelines) don't get unexpected stderr lines mixed in
+ * with their result envelope. A zero-length list is a no-op.
+ */
+function printSoftFailBlock(failedScenarios, jsonOutput) {
+  if (!jsonOutput && failedScenarios.length > 0) {
+    console.error(`\nSTORYBOARD FAILURES (${failedScenarios.length}): ${failedScenarios.join(', ')}`);
+    console.error('  --soft-fail set: exiting 0');
+  }
+}
+
+module.exports = {
+  escapeMarkdownCell,
+  buildComplianceSummaryMarkdown,
+  buildStoryboardSummaryMarkdown,
+  writeSummaryFile,
+  printSoftFailBlock,
+};

package/bin/adcp.js

@@ -33,6 +33,12 @@ const {
 const { handleRegistryCommand } = require('./adcp-registry.js');
 const { captureStdoutLogs, writeJsonOutput } = require('./adcp-json-stdout.js');
 const { printStepHints, countHintsInResult } = require('./adcp-step-hints.js');
+const {
+  buildComplianceSummaryMarkdown,
+  buildStoryboardSummaryMarkdown,
+  writeSummaryFile,
+  printSoftFailBlock,
+} = require('./adcp-storyboard-summary.js');
 const { scheduleVersionCheck } = require('./adcp-version-check.js');
 const { formatStoryboardResultsAsJUnit } = require('../dist/lib/testing/storyboard/junit.js');
 const { LIBRARY_VERSION } = require('../dist/lib/version.js');
@@ -831,6 +837,28 @@ function parseAgentOptions(args) {
   // Auth-conflicting keys are dropped here with a warning.
   const { customHeaders, consumedTokens: headerTokens } = parseHeaderFlags(args);
 
+  // --summary-file [PATH]: write a Markdown run summary to a file after the run.
+  // If present without a value, defaults to 'storyboard-result-summary.md'.
+  // Auto-activates when $GITHUB_STEP_SUMMARY is set (GitHub Actions native job summary).
+  const summaryFileIdx = args.indexOf('--summary-file');
+  let summaryFileFlagValue = null;
+  let summaryFile = null;
+  let summaryFileExplicit = false;
+  if (summaryFileIdx !== -1) {
+    summaryFileExplicit = true;
+    if (summaryFileIdx + 1 < args.length && !args[summaryFileIdx + 1].startsWith('--')) {
+      summaryFileFlagValue = args[summaryFileIdx + 1];
+      summaryFile = summaryFileFlagValue;
+    } else {
+      summaryFile = 'storyboard-result-summary.md';
+    }
+  } else if (process.env.GITHUB_STEP_SUMMARY) {
+    summaryFile = process.env.GITHUB_STEP_SUMMARY;
+  }
+
+  // --soft-fail: exit 0 even when storyboards fail (replaces continue-on-error: true pattern).
+  const softFail = args.includes('--soft-fail');
+
   // Filter out flags and their values to find positional args. The `--file=PATH`
   // form is already removed by the `startsWith('--')` check; only the
   // space-separated value needs explicit exclusion. Use explicit nullish check
@@ -854,6 +882,7 @@ function parseAgentOptions(args) {
     formatValue,
     summaryOutputValue,
     fileIndex !== -1 ? file : null,
+    summaryFileFlagValue,
   ].filter(v => v !== null && v !== undefined);
   // `-H` short form does NOT start with `--`, so we filter it (and its KEY=VALUE
   // payload) out of positionals via the explicit `headerTokens` set.
@@ -875,6 +904,9 @@ function parseAgentOptions(args) {
     localAgent: localAgentValue,
     format: formatValue,
     customHeaders,
+    summaryFile,
+    summaryFileExplicit,
+    softFail,
   };
 }
 
@@ -1367,6 +1399,7 @@ Storyboard-driven testing
 USAGE:
   adcp storyboard list [--json]
   adcp storyboard show <id> [--json]
+  adcp storyboard show --specialism <slug> [--json]
   adcp storyboard run <agent> [id|bundle] [options]
   adcp storyboard run <agent> --file <path.yaml> [options]
   adcp storyboard run --local-agent <module> [id|bundle] [options]
@@ -1375,6 +1408,10 @@ USAGE:
 SUBCOMMANDS:
   list                Enumerate storyboards in the compliance cache
   show <id>           Show storyboard structure (phases, steps)
+  show --specialism <slug>
+                      Resolve which storyboards are graded when an agent claims
+                      a specialism (e.g. sales-guaranteed). Includes protocol
+                      baseline and universal storyboards.
   run <agent> [id]    Run storyboards. With id, run one bundle/storyboard; otherwise
                       the agent's get_adcp_capabilities drives selection.
   step <agent> <id> <step_id>  Run a single step (stateless, LLM-friendly)
@@ -1465,6 +1502,20 @@ OPTIONS:
                       runs. One of: table (default), json, junit. junit
                       emits a JUnit XML report to stdout — each storyboard
                       becomes a testsuite, each step a testcase.
+  --soft-fail         Exit 0 even when storyboards fail. Prints a
+                      STORYBOARD FAILURES (N) block to stderr so failures
+                      are visible without blocking CI. Replaces the
+                      continue-on-error: true pattern. Exit 1 (runner
+                      crash) and 2 (usage error) are not suppressed.
+                      In --json mode the stderr block is suppressed;
+                      failures are present in the JSON output.
+  --summary-file [PATH]
+                      Write a Markdown run summary to PATH after the run.
+                      If PATH is omitted, defaults to
+                      storyboard-result-summary.md in the current directory.
+                      Auto-activates when \$GITHUB_STEP_SUMMARY is set so
+                      the summary appears in the GitHub Actions job summary
+                      tab without an extra upload step.
 
 OUTPUT:
   If you see a \`💡 Hint: …\` line in a failing step, the runner has
@@ -1496,6 +1547,9 @@ EXAMPLES:
     --invariants ./my-invariants.js,@adcp/invariants  # register cross-step invariants
   adcp storyboard list
   adcp storyboard show media_buy_seller
+  adcp storyboard show --specialism sales-guaranteed
+  adcp storyboard run test-mcp --soft-fail              # exit 0 on failures, print summary
+  adcp storyboard run test-mcp --summary-file           # write storyboard-result-summary.md
   adcp storyboard step test-mcp media_buy_seller sync_accounts --json
 `);
     process.exit(0);
@@ -1770,14 +1824,90 @@ async function handleStoryboardList(args) {
 }
 
 async function handleStoryboardShow(args) {
-  const { resolveBundleOrStoryboard, findBundleById, listAllComplianceStoryboards } =
-    await import('../dist/lib/testing/storyboard/index.js');
+  const {
+    resolveBundleOrStoryboard,
+    findBundleById,
+    listAllComplianceStoryboards,
+    loadComplianceIndex,
+    resolveStoryboardsForCapabilities,
+    PROTOCOL_TO_PATH,
+  } = await import('../dist/lib/testing/storyboard/index.js');
   const jsonOutput = args.includes('--json');
-  const positionalArgs = args.filter(a => !a.startsWith('--'));
+
+  // --specialism <slug>: resolve which storyboards are graded for a given specialism claim.
+  const specialismIdx = args.indexOf('--specialism');
+  let specialismSlug = null;
+  if (specialismIdx !== -1 && specialismIdx + 1 < args.length && !args[specialismIdx + 1].startsWith('--')) {
+    specialismSlug = args[specialismIdx + 1];
+  }
+
+  // Exclude --specialism value from positional args to avoid treating it as a storyboard ID.
+  // Guard: only exclude index specialismIdx+1 when --specialism was actually present (specialismIdx !== -1),
+  // otherwise -1+1=0 would silently drop the first positional (the storyboard ID) on plain `show <id>` calls.
+  const positionalArgs = args.filter(
+    (a, i) => !a.startsWith('--') && (specialismSlug === null || i !== specialismIdx + 1)
+  );
   const storyboardId = positionalArgs[0];
 
+  if (specialismSlug) {
+    const index = loadComplianceIndex();
+    const entry = index.specialisms.find(s => s.id === specialismSlug);
+    if (!entry) {
+      const known = index.specialisms.map(s => s.id).join(', ');
+      console.error(`Unknown specialism: ${specialismSlug}`);
+      console.error(`Known specialisms: ${known}`);
+      process.exit(2);
+    }
+    // entry.protocol is kebab-case (e.g. 'media-buy'); supported_protocols uses snake_case.
+    const snakeCaseProtocol = Object.entries(PROTOCOL_TO_PATH).find(([, v]) => v === entry.protocol)?.[0];
+    if (!snakeCaseProtocol) {
+      console.error(
+        `Cannot map specialism protocol "${entry.protocol}" to a supported_protocols value. Compliance cache may be stale.`
+      );
+      process.exit(2);
+    }
+    let resolved;
+    try {
+      resolved = resolveStoryboardsForCapabilities({
+        specialisms: [specialismSlug],
+        supported_protocols: [snakeCaseProtocol],
+      });
+    } catch (err) {
+      console.error(`Failed to resolve specialism "${specialismSlug}": ${err.message}`);
+      process.exit(1);
+    }
+    if (jsonOutput) {
+      await writeJsonOutput({
+        specialism: specialismSlug,
+        protocol: entry.protocol,
+        storyboards: resolved.storyboards.map(s => ({ id: s.id, title: s.title, track: s.track ?? null })),
+        not_applicable: resolved.not_applicable,
+      });
+    } else {
+      console.log(`\nSpecialism: ${specialismSlug}  (protocol: ${entry.protocol})`);
+      console.log(`Resolves to ${resolved.storyboards.length} storyboard(s):`);
+      for (const sb of resolved.storyboards) {
+        const gating = sb.requires_capability
+          ? ` (gated on ${sb.requires_capability.path} = ${sb.requires_capability.equals})`
+          : ' (always graded)';
+        const trackTag = sb.track ? ` [track: ${sb.track}]` : '';
+        console.log(`  - ${sb.id}${trackTag}${gating}`);
+      }
+      if (resolved.not_applicable.length > 0) {
+        console.log(`\n${resolved.not_applicable.length} storyboard(s) not applicable (version gated):`);
+        for (const na of resolved.not_applicable) {
+          console.log(`  ⏭️  ${na.storyboard_id} — ${na.reason}`);
+        }
+      }
+      console.log(`\nNote: also includes universal storyboards and ${entry.protocol} protocol baseline.`);
+    }
+    return;
+  }
+
   if (!storyboardId) {
-    console.error('Usage: adcp storyboard show <id>');
+    console.error(
+      'Usage: adcp storyboard show <id> [--json]\n       adcp storyboard show --specialism <slug> [--json]'
+    );
     process.exit(2);
   }
 
@@ -2065,9 +2195,14 @@ async function handleStoryboardRun(args) {
     if (restoreLogs) restoreLogs();
   }
 
+  if (opts.summaryFile) {
+    writeSummaryFile(opts.summaryFile, buildStoryboardSummaryMarkdown([result], agentUrl, result.overall_passed));
+  }
+
   if (format === 'junit') {
     process.stdout.write(formatStoryboardResultsAsJUnit([result]));
-    process.exit(result.overall_passed ? 0 : 3);
+    if (opts.softFail && !result.overall_passed) printSoftFailBlock([result.storyboard_id], jsonOutput);
+    process.exit(opts.softFail ? 0 : result.overall_passed ? 0 : 3);
   }
 
   if (jsonOutput) {
@@ -2132,7 +2267,8 @@ async function handleStoryboardRun(args) {
     printStrictSummary(result.strict_validation_summary);
   }
 
-  process.exit(result.overall_passed ? 0 : 3);
+  if (opts.softFail && !result.overall_passed) printSoftFailBlock([result.storyboard_id], jsonOutput);
+  process.exit(opts.softFail ? 0 : result.overall_passed ? 0 : 3);
 }
 
 /**
@@ -2897,13 +3033,32 @@ async function handleLocalAgentStoryboardRun(modulePath, args, opts) {
     if (restoreLogs) restoreLogs();
   }
 
+  if (opts.summaryFile) {
+    writeSummaryFile(
+      opts.summaryFile,
+      buildStoryboardSummaryMarkdown(result.results, result.agent_url, result.overall_passed)
+    );
+  }
+
   if (format === 'junit') {
     process.stdout.write(formatStoryboardResultsAsJUnit(result.results));
-    process.exit(result.overall_passed ? 0 : 3);
+    if (opts.softFail && !result.overall_passed) {
+      printSoftFailBlock(
+        result.results.filter(r => !r.overall_passed).map(r => r.storyboard_id),
+        jsonOutput
+      );
+    }
+    process.exit(opts.softFail ? 0 : result.overall_passed ? 0 : 3);
   }
   if (jsonOutput) {
     await writeJsonOutput(result);
-    process.exit(result.overall_passed ? 0 : 3);
+    if (opts.softFail && !result.overall_passed) {
+      printSoftFailBlock(
+        result.results.filter(r => !r.overall_passed).map(r => r.storyboard_id),
+        jsonOutput
+      );
+    }
+    process.exit(opts.softFail ? 0 : result.overall_passed ? 0 : 3);
   }
 
   // Human-readable summary
@@ -2928,7 +3083,13 @@ async function handleLocalAgentStoryboardRun(modulePath, args, opts) {
     `\n${overallIcon} ${result.passed_count} passed, ${result.failed_count} failed, ${result.skipped_count} skipped across ${result.results.length} storyboard(s)${hintTail}`
   );
   printStrictSummary(aggregateStrictSummaries(result.results.map(r => r.strict_validation_summary)));
-  process.exit(result.overall_passed ? 0 : 3);
+  if (opts.softFail && !result.overall_passed) {
+    printSoftFailBlock(
+      result.results.filter(r => !r.overall_passed).map(r => r.storyboard_id),
+      jsonOutput
+    );
+  }
+  process.exit(opts.softFail ? 0 : result.overall_passed ? 0 : 3);
 }
 
 /**
@@ -3271,7 +3432,16 @@ async function handleMultiInstanceStoryboardRun(args, opts, urls) {
     );
   }
 
-  process.exit(hadFailure ? 3 : 0);
+  if (opts.summaryFile && opts.summaryFileExplicit) {
+    console.error(`WARNING: --summary-file is not supported for multi-instance runs; skipping.`);
+  }
+  if (opts.softFail && hadFailure) {
+    printSoftFailBlock(
+      results.filter(r => !r.overall_passed).map(r => r.storyboard_id),
+      jsonOutput
+    );
+  }
+  process.exit(opts.softFail ? 0 : hadFailure ? 3 : 0);
 }
 
 /**
@@ -3456,7 +3626,13 @@ async function handleAgentsRoutedStoryboardRun(args, opts, routing) {
 
   if (format === 'junit') {
     process.stdout.write(formatStoryboardResultsAsJUnit(results));
-    process.exit(hadFailure ? 3 : 0);
+    if (opts.softFail && hadFailure) {
+      printSoftFailBlock(
+        results.filter(r => !r.overall_passed).map(r => r.storyboard_id),
+        jsonOutput
+      );
+    }
+    process.exit(opts.softFail ? 0 : hadFailure ? 3 : 0);
   }
 
   if (jsonOutput) {
@@ -3533,7 +3709,16 @@ async function handleAgentsRoutedStoryboardRun(args, opts, routing) {
     );
   }
 
-  process.exit(hadFailure ? 3 : 0);
+  if (opts.summaryFile && opts.summaryFileExplicit) {
+    console.error(`WARNING: --summary-file is not supported for agents-map runs; skipping.`);
+  }
+  if (opts.softFail && hadFailure) {
+    printSoftFailBlock(
+      results.filter(r => !r.overall_passed).map(r => r.storyboard_id),
+      jsonOutput
+    );
+  }
+  process.exit(opts.softFail ? 0 : hadFailure ? 3 : 0);
 }
 
 // Shared implementation: run all matching storyboards against an agent
@@ -3698,6 +3883,10 @@ async function runFullAssessment(agentArg, rawArgs, parsedOpts) {
 
     const result = await comply(agentUrl, testOptions);
 
+    if (opts.summaryFile) {
+      writeSummaryFile(opts.summaryFile, buildComplianceSummaryMarkdown(result, agentUrl));
+    }
+
     if (opts.jsonOutput) {
       restoreLogs();
       await writeJsonOutput(formatComplianceResultsJSON(result));
@@ -3718,13 +3907,16 @@ async function runFullAssessment(agentArg, rawArgs, parsedOpts) {
     // exercised its tracks and they passed" is a CI failure. `partial`
     // is preserved as exit 0 because some tracks were silent (wired but
     // unexercised) — that's a reportable observation, not a hard failure.
-    const exitCode =
+    const isFailingExit =
       result.overall_status === 'failing' ||
       result.overall_status === 'unreachable' ||
-      result.overall_status === 'auth_required'
-        ? 3
-        : 0;
-    process.exit(exitCode);
+      result.overall_status === 'auth_required';
+
+    if (opts.softFail && isFailingExit) {
+      const failedNames = result.failures?.map(f => f.storyboard_id).filter((v, i, a) => a.indexOf(v) === i) ?? [];
+      printSoftFailBlock(failedNames, opts.jsonOutput);
+    }
+    process.exit(opts.softFail ? 0 : isFailingExit ? 3 : 0);
   } catch (error) {
     if (restoreLogs) restoreLogs();
     console.error(`\nAssessment failed: ${error.message}`);

package/compliance/cache/{3.0.6.previous/protocols → 3.0.8/domains}/media-buy/scenarios/creative_fate_after_cancellation.yaml

@@ -114,7 +114,7 @@ phases:
             brand:
               domain: "acmeoutdoor.example"
             operator: "pinnacle-agency.example"
-          idempotency_key: "creative-fate-setup-create-buy-v1"
+          idempotency_key: "$generate:uuid_v4#creative_fate_after_cancellation_create_buy"
           start_time: "2026-09-01T00:00:00Z"
           end_time: "2026-09-30T23:59:59Z"
           packages:
@@ -175,7 +175,7 @@ phases:
           assignments:
             - creative_id: "acme_reuse_banner_001"
               package_id: "$context.package_id"
-          idempotency_key: "creative-fate-setup-sync-v1"
+          idempotency_key: "$generate:uuid_v4#creative_fate_after_cancellation_sync_creative_with_assignment"
           context:
             correlation_id: "creative_fate--sync_creative_with_assignment"
         context_outputs:
@@ -257,7 +257,7 @@ phases:
           media_buy_id: "$context.media_buy_id"
           canceled: true
           cancellation_reason: "Creative-fate scenario: releasing assignment to verify library persistence."
-          idempotency_key: "creative-fate-cancel-v1"
+          idempotency_key: "$generate:uuid_v4#creative_fate_after_cancellation_update_media_buy_canceled"
           context:
             correlation_id: "creative_fate--update_media_buy_canceled"
         validations:
@@ -340,7 +340,7 @@ phases:
             brand:
               domain: "acmeoutdoor.example"
             operator: "pinnacle-agency.example"
-          idempotency_key: "creative-fate-second-buy-v1"
+          idempotency_key: "$generate:uuid_v4#creative_fate_after_cancellation_create_second_buy"
           start_time: "2026-10-01T00:00:00Z"
           end_time: "2026-10-31T23:59:59Z"
           packages:
@@ -406,7 +406,7 @@ phases:
           assignments:
             - creative_id: "acme_reuse_banner_001"
               package_id: "$context.second_package_id"
-          idempotency_key: "creative-fate-reassign-v1"
+          idempotency_key: "$generate:uuid_v4#creative_fate_after_cancellation_reassign_creative"
           context:
             correlation_id: "creative_fate--reassign_creative"
         validations:

package/compliance/cache/{3.0.6.previous/protocols → 3.0.8/domains}/media-buy/scenarios/governance_approved.yaml

@@ -80,7 +80,7 @@ phases:
         expected: |
           The governance agent acknowledges the plan with a plan_id.
         sample_request:
-          idempotency_key: "comply-gov-approved-sync-plans-v1"
+          idempotency_key: "$generate:uuid_v4#governance_approved_sync_plans"
           plans:
             - plan_id: "comply-gov-approved-plan"
               brand:

package/compliance/cache/{3.0.6/protocols → 3.0.8/domains}/media-buy/scenarios/governance_conditions.yaml

@@ -57,7 +57,7 @@ phases:
         expected: |
           The governance agent acknowledges the plan with a plan_id.
         sample_request:
-          idempotency_key: "comply-gov-conditions-sync-plans-v1"
+          idempotency_key: "$generate:uuid_v4#governance_conditions_sync_plans"
           plans:
             - plan_id: "comply-gov-conditions-plan"
               brand:

package/compliance/cache/{3.0.6/protocols → 3.0.8/domains}/media-buy/scenarios/governance_denied.yaml

@@ -57,7 +57,7 @@ phases:
         expected: |
           The governance agent acknowledges the plan with a plan_id.
         sample_request:
-          idempotency_key: "comply-gov-denied-sync-plans-v1"
+          idempotency_key: "$generate:uuid_v4#governance_denied_sync_plans"
           plans:
             - plan_id: "comply-gov-denied-plan"
               brand:

package/compliance/cache/{3.0.6/protocols → 3.0.8/domains}/media-buy/scenarios/governance_denied_recovery.yaml

@@ -57,7 +57,7 @@ phases:
         expected: |
           The governance agent acknowledges the plan.
         sample_request:
-          idempotency_key: "comply-gov-recovery-sync-plans-v1"
+          idempotency_key: "$generate:uuid_v4#governance_denied_recovery_sync_plans"
           plans:
             - plan_id: "comply-gov-recovery-plan"
               brand:
@@ -181,7 +181,7 @@ phases:
             brand:
               domain: "acmeoutdoor.example"
             operator: "pinnacle-agency.example"
-          idempotency_key: "gov-recovery-initial-denied-v1"
+          idempotency_key: "$generate:uuid_v4#governance_denied_recovery_create_media_buy_denied"
           start_time: "2026-04-01T00:00:00Z"
           end_time: "2026-06-30T23:59:59Z"
           packages:
@@ -226,7 +226,7 @@ phases:
             brand:
               domain: "acmeoutdoor.example"
             operator: "pinnacle-agency.example"
-          idempotency_key: "gov-recovery-retry-approved-v1"
+          idempotency_key: "$generate:uuid_v4#governance_denied_recovery_create_media_buy_retry"
           start_time: "2026-04-01T00:00:00Z"
           end_time: "2026-06-30T23:59:59Z"
           packages:

package/compliance/cache/{3.0.6.previous → 3.0.8}/domains/media-buy/scenarios/invalid_transitions.yaml

@@ -140,7 +140,7 @@ phases:
             brand:
               domain: "acmeoutdoor.example"
             operator: "pinnacle-agency.example"
-          idempotency_key: "invalid-transitions-setup-v1"
+          idempotency_key: "$generate:uuid_v4#invalid_transitions_create_buy"
           start_time: "2026-08-01T00:00:00Z"
           end_time: "2026-08-31T23:59:59Z"
           packages:

package/compliance/cache/{3.0.6.previous/protocols → 3.0.8/domains}/media-buy/scenarios/inventory_list_no_match.yaml

@@ -116,7 +116,7 @@ phases:
             brand:
               domain: "acmeoutdoor.example"
             operator: "pinnacle-agency.example"
-          idempotency_key: "inventory-list-no-match-v1"
+          idempotency_key: "$generate:uuid_v4#inventory_list_no_match_create_buy"
           start_time: "2026-07-01T00:00:00Z"
           end_time: "2026-09-30T23:59:59Z"
           packages:

package/compliance/cache/{3.0.6 → 3.0.8}/domains/media-buy/scenarios/inventory_list_targeting.yaml

@@ -114,7 +114,7 @@ phases:
               domain: "acmeoutdoor.example"
             operator: "pinnacle-agency.example"
             sandbox: true
-          idempotency_key: "inventory-list-targeting-create-v1"
+          idempotency_key: "$generate:uuid_v4#inventory_list_targeting_create_buy"
           start_time: "2026-07-01T00:00:00Z"
           end_time: "2026-09-30T23:59:59Z"
           packages: