@adcp/sdk 6.7.0 → 6.9.0

package/dist/lib/utils/glob.d.ts

@@ -11,12 +11,14 @@
  * different calls than the producer-side filter would — different verdict
  * on the same storyboard. One implementation, one test, no drift.
  *
- * Grammar (matches the candidate semantics filed against the spec at
- * adcontextprotocol/adcp#3845):
+ * Grammar (ratified by spec PR adcontextprotocol/adcp#3987):
  *   - `*` matches zero or more characters of any kind, including `/`.
  *   - All other characters are literal — `?`, `[`, `]`, `(`, `)` etc. are
  *     escaped to themselves so a path-component like `?cohort=1` doesn't
  *     accidentally act as a regex quantifier.
+ *   - No escape mechanism — `*` is always a wildcard. Callers needing
+ *     literal-asterisk matching omit `endpoint_pattern` and filter
+ *     response-side.
  *   - Match is anchored (full-string), not substring search.
  *
  * Defense against catastrophic-backtracking on `'**********'`-style

package/dist/lib/utils/glob.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"glob.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/glob.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMpD"}
+{"version":3,"file":"glob.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/glob.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMpD"}

package/dist/lib/utils/glob.js

@@ -14,12 +14,14 @@ exports.globToRegExp = globToRegExp;
  * different calls than the producer-side filter would — different verdict
  * on the same storyboard. One implementation, one test, no drift.
  *
- * Grammar (matches the candidate semantics filed against the spec at
- * adcontextprotocol/adcp#3845):
+ * Grammar (ratified by spec PR adcontextprotocol/adcp#3987):
  *   - `*` matches zero or more characters of any kind, including `/`.
  *   - All other characters are literal — `?`, `[`, `]`, `(`, `)` etc. are
  *     escaped to themselves so a path-component like `?cohort=1` doesn't
  *     accidentally act as a regex quantifier.
+ *   - No escape mechanism — `*` is always a wildcard. Callers needing
+ *     literal-asterisk matching omit `endpoint_pattern` and filter
+ *     response-side.
  *   - Match is anchored (full-string), not substring search.
  *
  * Defense against catastrophic-backtracking on `'**********'`-style

package/dist/lib/utils/glob.js.map

@@ -1 +1 @@
-{"version":3,"file":"glob.js","sourceRoot":"","sources":["../../../src/lib/utils/glob.ts"],"names":[],"mappings":";;AA0BA,oCAMC;AAhCD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;SACrC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"glob.js","sourceRoot":"","sources":["../../../src/lib/utils/glob.ts"],"names":[],"mappings":";;AA4BA,oCAMC;AAlCD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;SACrC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/dist/lib/version.d.ts

@@ -1,11 +1,11 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "6.7.0";
+export declare const LIBRARY_VERSION = "6.9.0";
 /**
  * AdCP specification version this library is built for
  */
-export declare const ADCP_VERSION = "3.0.5";
+export declare const ADCP_VERSION = "3.0.6";
 /**
  * AdCP major version sent with every request (adcp_major_version field).
  * Sellers validate this against their supported versions and return
@@ -15,7 +15,7 @@ export declare const ADCP_MAJOR_VERSION = 3;
 /**
  * AdCP versions this library maintains backward compatibility with
  */
-export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5"];
+export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6"];
 /**
  * String literal union of every AdCP version the SDK formally supports.
  *
@@ -29,10 +29,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "6.7.0";
-    readonly adcp: "3.0.5";
-    readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5"];
-    readonly generatedAt: "2026-05-03T10:58:20.575Z";
+    readonly library: "6.9.0";
+    readonly adcp: "3.0.6";
+    readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6"];
+    readonly generatedAt: "2026-05-03T23:14:43.151Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,eAAO,MAAM,eAAe,UAAU,CAAC;AAEvC;;GAEG;AACH,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;GAEG;AACH,eAAO,MAAM,wBAAwB,uHAY3B,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK7D"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,eAAO,MAAM,eAAe,UAAU,CAAC;AAEvC;;GAEG;AACH,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;GAEG;AACH,eAAO,MAAM,wBAAwB,gIAa3B,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK7D"}

package/dist/lib/version.js

@@ -11,11 +11,11 @@ exports.parseAdcpMajorVersion = parseAdcpMajorVersion;
 /**
  * AdCP SDK library version
  */
-exports.LIBRARY_VERSION = '6.7.0';
+exports.LIBRARY_VERSION = '6.9.0';
 /**
  * AdCP specification version this library is built for
  */
-exports.ADCP_VERSION = '3.0.5';
+exports.ADCP_VERSION = '3.0.6';
 /**
  * AdCP major version sent with every request (adcp_major_version field).
  * Sellers validate this against their supported versions and return
@@ -37,15 +37,16 @@ exports.COMPATIBLE_ADCP_VERSIONS = [
     '3.0.3',
     '3.0.4',
     '3.0.5',
+    '3.0.6',
 ];
 /**
  * Full version information
  */
 exports.VERSION_INFO = {
-    library: '6.7.0',
-    adcp: '3.0.5',
+    library: '6.9.0',
+    adcp: '3.0.6',
     compatibleVersions: exports.COMPATIBLE_ADCP_VERSIONS,
-    generatedAt: '2026-05-03T10:58:20.575Z',
+    generatedAt: '2026-05-03T23:14:43.151Z',
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,iDAAiD;;;AA2DjD,wCAEC;AAKD,8CAEC;AAKD,4CAEC;AAKD,sDAEC;AAWD,sDAKC;AAhGD;;GAEG;AACU,QAAA,eAAe,GAAG,OAAO,CAAC;AAEvC;;GAEG;AACU,QAAA,YAAY,GAAG,OAAO,CAAC;AAEpC;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;GAEG;AACU,QAAA,wBAAwB,GAAG;IACtC,MAAM;IACN,MAAM;IACN,IAAI;IACJ,cAAc;IACd,cAAc;IACd,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACC,CAAC;AAYX;;GAEG;AACU,QAAA,YAAY,GAAG;IAC1B,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,OAAO;IACb,kBAAkB,EAAE,gCAAwB;IAC5C,WAAW,EAAE,0BAA0B;CAC/B,CAAC;AAEX;;GAEG;AACH,SAAgB,cAAc;IAC5B,OAAO,oBAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,OAAO,uBAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,OAAQ,gCAA8C,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB;IACnC,OAAO,gCAAwB,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,OAAe;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,iDAAiD;;;AA4DjD,wCAEC;AAKD,8CAEC;AAKD,4CAEC;AAKD,sDAEC;AAWD,sDAKC;AAjGD;;GAEG;AACU,QAAA,eAAe,GAAG,OAAO,CAAC;AAEvC;;GAEG;AACU,QAAA,YAAY,GAAG,OAAO,CAAC;AAEpC;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;GAEG;AACU,QAAA,wBAAwB,GAAG;IACtC,MAAM;IACN,MAAM;IACN,IAAI;IACJ,cAAc;IACd,cAAc;IACd,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACC,CAAC;AAYX;;GAEG;AACU,QAAA,YAAY,GAAG;IAC1B,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,OAAO;IACb,kBAAkB,EAAE,gCAAwB;IAC5C,WAAW,EAAE,0BAA0B;CAC/B,CAAC;AAEX;;GAEG;AACH,SAAgB,cAAc;IAC5B,OAAO,oBAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,OAAO,uBAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,OAAQ,gCAA8C,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB;IACnC,OAAO,gCAAwB,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,OAAe;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC"}

package/docs/llms.txt

@@ -1,7 +1,7 @@
 # Ad Context Protocol (AdCP)
 
 > Generated at: 2026-05-03
-> Library: @adcp/sdk v6.6.0
+> Library: @adcp/sdk v6.8.0
 > AdCP major version: 3
 > Canonical URL: https://adcontextprotocol.github.io/adcp-client/llms.txt
 > Note: the `Library` stamp reflects the package.json version at doc-generation time. The narrative below describes the surface that lands on the next-published minor — including any 6.7 helpers documented here ahead of the release tag.
@@ -53,7 +53,7 @@ Lower-level option: `createAdcpServer({ signals: { getSignals: ... } })` from `@
 
 **`composeMethod` cookbook.** To layer `before`/`after` hooks on a single platform method — short-circuit for caching, enrichment under `ext.*`, typed-error guards — use `composeMethod(inner, { before?, after? })` from `@adcp/sdk/server`. Stacking multiple guards: nest `composeMethod` calls (outer `before` runs first). Test patterns (mocking inner, asserting short-circuit, chained hooks, typed-error propagation): see [`docs/recipes/composeMethod-testing.md`](./recipes/composeMethod-testing.md). Pre-built `accounts.resolve` guards from the same package: `requireAccountMatch(predicate, opts)`, `requireAdvertiserMatch(getRoster, opts)`, `requireOrgScope(getAccountOrg, getCtxOrg, opts)`. Default deny returns `null` (indistinguishable from "not found"; guards against principal enumeration); opt in to `onDeny: 'throw'` for typed `PermissionDeniedError`.
 
-**Three reference `AccountStore` shapes.** Pick the one whose onboarding model matches yours. **Shape A — `InMemoryImplicitAccountStore`**: `resolution: 'implicit'`, buyer-driven `sync_accounts` populates the auth-principal → accounts map. **Shape B — `createOAuthPassthroughResolver`**: `resolution: 'explicit'`, returns just the `resolve` function for adapters fronting an upstream OAuth listing endpoint (Snap, Meta, TikTok, LinkedIn — `extract bearer → GET /me/adaccounts → match by id`). **Shape C — `createRosterAccountStore`**: `resolution: 'explicit'`, returns a complete `AccountStore` for adopters who own the roster (storefront table, admin-UI-managed JSON). All three live at `@adcp/sdk/server`.
+**Four reference `AccountStore` shapes.** Pick the one whose onboarding model matches yours. **Shape A — `InMemoryImplicitAccountStore`**: `resolution: 'implicit'`, buyer-driven `sync_accounts` populates the auth-principal → accounts map. **Shape B — `createOAuthPassthroughResolver`**: `resolution: 'explicit'`, returns just the `resolve` function for adapters fronting an upstream OAuth listing endpoint (Snap, Meta, TikTok, LinkedIn — `extract bearer → GET /me/adaccounts → match by id`). **Shape C — `createRosterAccountStore`**: `resolution: 'explicit'`, returns a complete `AccountStore` for adopters who own the roster (storefront table, admin-UI-managed JSON). Supports `resolveWithoutRef` for tools that send no `account` field on the wire (`list_creative_formats`, `preview_creative`, `provide_performance_feedback`) — set it to return a synthetic publisher-wide entry instead of `null`. **Shape D — `createDerivedAccountStore`**: `resolution: 'derived'`, single-tenant agents where there is no `account_id` on the wire and the auth principal alone identifies the tenant (audiostack, flashtalking, single-namespace retail-media). Provide `toAccount(ctx)`; the factory throws `AUTH_REQUIRED` on missing-credential calls and ignores buyer-supplied `account_id` (single-tenant by definition). All four live at `@adcp/sdk/server`.
 
 **Multi-tenant.** Two helpers, pick by deployment shape. **Host-routed**: `createTenantRegistry({...})` — one server per tenant, tenant-id keyed lookup with `registry.get(tenantId)`. **Account-routed**: `createTenantStore({...})` — one server, per-entry tenant-isolation gate built in (cross-tenant entries on `upsert` / `syncGovernance` rejected with `PERMISSION_DENIED` BEFORE adopter callbacks run; fail-closed when the auth principal can't be resolved). `createTenantStore` mitigates the canonical multi-tenant write-across-tenants bug class at the SDK layer rather than relying on adopter discipline.
 
@@ -1119,8 +1119,8 @@ Agents use the `recovery` classification to decide what to do: `transient` → r
 | `CREATIVE_DEADLINE_EXCEEDED` | correctable | Creative change submitted after the package's creative_deadline. Distinct from CREATIVE_REJECTED (content policy failure). |
 | `CREATIVE_NOT_FOUND` | correctable | Referenced creative does not exist in the agent's creative library. Sellers MUST return this code uniformly for any creative_id not owned by the calling account — never distinguish 'exists in another tenant' from 'does not exist', which would enable cross-tenant enumeration. |
 | `CREATIVE_REJECTED` | correctable | Creative failed content policy review. For deadline violations, see CREATIVE_DEADLINE_EXCEEDED. |
-| `GOVERNANCE_DENIED` | correctable | A registered governance agent denied the transaction. The buyer may restructure the buy (e.g., reduce budget, split into smaller transactions), escalate to human spending authority, or contact the governance agent for details. |
-| `GOVERNANCE_UNAVAILABLE` | transient | A registered governance agent is unreachable (timeout, network error, or repeated failure) and the seller cannot obtain a governance decision for the spend-commit. Distinct from `GOVERNANCE_DENIED` (agent reachable and explicitly denied). |
+| `GOVERNANCE_DENIED` | correctable | A registered governance agent denied the transaction. Sellers MUST place the denial in the task's structured rejection arm when one exists (e.g., `acquire_rights` → `AcquireRightsRejected`, `creative_approval` → `CreativeRejected`); otherwise in `errors[]` + `adcp_error`. Buyers MUST dispatch on the response's discriminated `status` first and fall back to `errors[].code` / `adcp_error.code` only when no rejection arm exists for that task. The buyer may restructure the buy (e.g., reduce budget, split into smaller transactions), escalate to human spending authority, or contact the governance agent for details. Wire placement (full guidance). Governance denial is a structured business outcome, not a system error — the governance call SUCCEEDED and the agent returned a denial verdict. Two cases: 1. Task response defines a structured rejection arm. The arm IS the canonical denial shape. The seller populates `reason` (human-readable, propagating governance findings) and `suggestions` (optional) and does NOT additionally emit `GOVERNANCE_DENIED` in `errors[]` or `adcp_error`. The rejection arms enforce this at the schema layer: e.g., `AcquireRightsRejected` and `CreativeRejected` both declare `not: { required: [errors] }`, so dual-emission is already a schema violation. The code does not appear on the wire when the rejection arm is used. Transport-level success markers MUST NOT be flipped (HTTP 200, MCP `isError: false`, A2A `succeeded`) — the task ran successfully and produced a structured response. 2. Task response has no rejection arm (e.g., `create_media_buy` returns Success / Error / Submitted arms only). The seller populates `errors[].code: GOVERNANCE_DENIED` in the payload AND `adcp_error.code: GOVERNANCE_DENIED` on the envelope per the two-layer model in `error-handling.mdx#envelope-vs-payload-errors-the-two-layer-model`. Transport-level failure markers DO flip in this case (HTTP 4xx, MCP `isError: true`, A2A `failed`) — the task could not produce a success artifact. The rule generalizes to any current or future task whose response defines a discriminated rejection arm. In either placement, sellers SHOULD propagate governance findings verbatim — buyers' recovery decisions depend on what specifically was rejected. `GOVERNANCE_DENIED` is reserved for verdicts received from a reachable governance agent; if the governance call itself failed (timeout, network, config error), use `GOVERNANCE_UNAVAILABLE` instead. |
+| `GOVERNANCE_UNAVAILABLE` | transient | A registered governance agent is unreachable. Sellers MUST place this code in `errors[]` + `adcp_error` (never a structured rejection arm) and flip transport-level failure markers (HTTP 5xx, MCP `isError: true`, A2A `failed`). Distinct from `GOVERNANCE_DENIED` (agent reachable and explicitly denied — see that code's wire-placement guidance). Wire placement (full guidance). Governance unavailability is a system error — the governance call FAILED (timeout, network, config error) and the seller could not get a verdict at all. Always populate both layers per the two-layer model in `error-handling.mdx#envelope-vs-payload-errors-the-two-layer-model`. Do NOT use a structured rejection arm for unavailability even when the task offers one — the buyer's recovery semantics differ (retry-with-backoff for unavailability vs. restructure-or-escalate for denial), and conflating them masks the system-error signal. |
 | `IDEMPOTENCY_CONFLICT` | correctable | An earlier request with the same idempotency_key was processed with a different canonical payload within the seller's replay window. Distinct from CONFLICT (concurrent write) — this indicates the client reused a key across semantically different requests. |
 | `IDEMPOTENCY_EXPIRED` | correctable | The idempotency_key was seen previously but its cached response has been evicted because it is past the seller's declared replay_ttl_seconds. Distinct from IDEMPOTENCY_CONFLICT (different payload within window) — this indicates the retry arrived too late for at-most-once guarantees. If the buyer has any evidence the prior call succeeded (partial response received before crash, entry in the buyer's own DB, a webhook fired), the buyer MUST do the natural-key check BEFORE minting a new key — minting a new key in that situation is exactly how double-creation happens. |
 | `INVALID_REQUEST` | correctable | Request is malformed, missing required fields, or violates schema constraints. |
@@ -1250,6 +1250,7 @@ These docs are available locally in the repo and hosted at https://adcontextprot
 | Full type signatures | docs/TYPE-SUMMARY.md | [link](https://adcontextprotocol.github.io/adcp-client/TYPE-SUMMARY.md) |
 | Getting started / install | docs/getting-started.md | [link](https://adcontextprotocol.github.io/adcp-client/getting-started.md) |
 | Build a server-side agent | docs/guides/BUILD-AN-AGENT.md | [link](https://adcontextprotocol.github.io/adcp-client/guides/BUILD-AN-AGENT.md) |
+| Migrating 6.7 → 6.9 (skips deprecated 6.8.0; 13 additive recipes; 2 breaking) | docs/migration-6.7-to-6.9.md | [link](https://adcontextprotocol.github.io/adcp-client/migration-6.7-to-6.9.md) |
 | Migrating 6.6 → 6.7 (15 recipes; 2 breaking) | docs/migration-6.6-to-6.7.md | [link](https://adcontextprotocol.github.io/adcp-client/migration-6.6-to-6.7.md) |
 | Migrating 5.x → 6.x | docs/migration-5.x-to-6.x.md | [link](https://adcontextprotocol.github.io/adcp-client/migration-5.x-to-6.x.md) |
 | BuyerAgentRegistry adopter migration | docs/migration-buyer-agent-registry.md | [link](https://adcontextprotocol.github.io/adcp-client/migration-buyer-agent-registry.md) |

package/examples/README.md

@@ -6,23 +6,39 @@ This directory contains practical examples of how to use the `@adcp/sdk` library
 
 Pick the example whose AdCP role and specialism most closely match what you're building, fork the file, replace the `// SWAP:` markers, and follow the `FORK CHECKLIST` block at the top of each adapter for the unmarked but load-bearing constants. Each adapter is paired with a three-gate CI test (strict tsc / storyboard / upstream-traffic) so a regression in your fork fails CI before it ships.
 
-| If you're claiming…                | Fork                                              | Then…                                                                                                                                          |
-| ---------------------------------- | ------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
-| `signal-marketplace` / `signal-owned` | `hello_signals_adapter_marketplace.ts`         | as-is for marketplace; `signal-owned` adopters drop the marketplace-specific tax/rev-share fields                                              |
-| `creative-template`                | `hello_creative_adapter_template.ts`              | as-is — single-tenant; production adopters add per-tenant workspace binding (see SWAP markers)                                                 |
-| `creative-generative`              | `hello_creative_adapter_template.ts`              | replace template-driven `buildCreative` with brief-driven generation; keep the `previewCreative` shape                                         |
-| `creative-ad-server`               | `hello_creative_adapter_template.ts`              | promote to `CreativeAdServerPlatform`, add `syncCreatives` library + `listCreatives` query + tag-rendering on `buildCreative`                  |
-| `sales-non-guaranteed`             | `hello_seller_adapter_social.ts`                  | drop OAuth (use static Bearer or your auth), add `getProducts` + `createMediaBuy` + `updateMediaBuy` + `getMediaBuyDelivery` + `getMediaBuys`  |
-| `sales-guaranteed`                 | `hello_seller_adapter_guaranteed.ts`              | as-is — covers the HITL flow                                                                                                                   |
-| `sales-broadcast-tv`               | `hello_seller_adapter_guaranteed.ts`              | replace `audience_targeting` with broadcast-DMA targeting; replace `Product.channels` with `linear_tv`                                         |
-| `sales-streaming-tv`               | `hello_seller_adapter_guaranteed.ts`              | adjust `Product.channels` to `ctv`                                                                                                             |
-| `sales-social`                     | `hello_seller_adapter_social.ts`                  | as-is                                                                                                                                          |
-| `sales-catalog-driven`             | `hello_seller_adapter_social.ts`                  | promote `syncCatalogs` to a real catalog ingestion + `getProducts` reads from the catalog                                                      |
-| `audience-sync`                    | `hello_seller_adapter_social.ts`                  | strip everything except `syncAudiences` + `pollAudienceStatuses`; this is the standalone audience-sync seller pattern                          |
+| If you're claiming…                                              | Fork                                   | Then…                                                                                                                                                                                                                     |
+| ---------------------------------------------------------------- | -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `signal-marketplace` / `signal-owned`                            | `hello_signals_adapter_marketplace.ts` | as-is for marketplace; `signal-owned` adopters drop the marketplace-specific tax/rev-share fields                                                                                                                         |
+| `creative-template`                                              | `hello_creative_adapter_template.ts`   | as-is — single-tenant; production adopters add per-tenant workspace binding (see SWAP markers)                                                                                                                            |
+| `creative-generative`                                            | `hello_creative_adapter_template.ts`   | replace template-driven `buildCreative` with brief-driven generation; keep the `previewCreative` shape                                                                                                                    |
+| `creative-ad-server`                                             | `hello_creative_adapter_ad_server.ts`  | as-is — covers the stateful library + tag generation + macro substitution + delivery reporting flow                                                                                                                       |
+| `sales-non-guaranteed`                                           | `hello_seller_adapter_non_guaranteed.ts` | as-is — covers sync confirmation, floor pricing, spend-only forecast, pacing propagation                                                                                                                                  |
+| `sales-guaranteed`                                               | `hello_seller_adapter_guaranteed.ts`   | as-is — covers the HITL flow                                                                                                                                                                                              |
+| `sales-broadcast-tv`                                             | `hello_seller_adapter_guaranteed.ts`   | replace `audience_targeting` with broadcast-DMA targeting; replace `Product.channels` with `linear_tv`                                                                                                                    |
+| `sales-streaming-tv`                                             | `hello_seller_adapter_guaranteed.ts`   | adjust `Product.channels` to `ctv`                                                                                                                                                                                        |
+| `sales-social`                                                   | `hello_seller_adapter_social.ts`       | as-is                                                                                                                                                                                                                     |
+| `sales-catalog-driven`                                           | `hello_seller_adapter_social.ts`       | promote `syncCatalogs` to a real catalog ingestion + `getProducts` reads from the catalog                                                                                                                                 |
+| `audience-sync`                                                  | `hello_seller_adapter_social.ts`       | strip everything except `syncAudiences` + `pollAudienceStatuses`; this is the standalone audience-sync seller pattern                                                                                                     |
 | `governance-spend-authority` / `property-lists` / `brand-rights` | `hello_seller_adapter_multi_tenant.ts` | as-is — multi-specialism + multi-tenant agency / holdco shape; closes adcp-client#1332 (governance) and adcp-client#1334 (brand-rights). Single-specialism adopters fork the relevant handler block out of the same file. |
 
 Naming convention: `hello_<role>_adapter_<specialism>.ts` where `<role>` is the AdCP protocol layer (`seller` for `media-buy`, `creative` for `creative`, `signals` for `signals`, `governance` for `governance`, `brand` for `brand`). `<specialism>` strips the role-implied prefix (so `creative-template` → `_template`, `sales-guaranteed` → `_guaranteed`). The multi-tenant holdco adapter sits outside this convention because it spans multiple roles (governance + brand-rights + property-lists) — naming follows the deployment shape rather than a single role.
 
+## Common multi-specialism bundles
+
+Real platforms typically claim more than one specialism. Claim a specialism only if (a) you implement its required tools **and** (b) you are prepared to receive and service requests for that flow in production. Stub-throw or empty-array implementations are a smell — drop the claim instead.
+
+| Adopter shape                                              | Canonical specialism bundle                                                                  | Skills                                                                                                                                                            |
+| ---------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Retail-media network (Amazon Ads, Walmart Connect, Citrus) | `sales-catalog-driven` + `audience-sync` + `creative-template`                               | [retail-media](../skills/build-retail-media-agent/SKILL.md), [seller](../skills/build-seller-agent/SKILL.md), [creative](../skills/build-creative-agent/SKILL.md) |
+| Hybrid creative platform (Celtra, Bannerflow)              | `creative-template` + `creative-generative`                                                  | [creative](../skills/build-creative-agent/SKILL.md), [generative-seller](../skills/build-generative-seller-agent/SKILL.md)                                        |
+| Walled-garden social network (Meta, Snap, TikTok)          | `sales-social` + `audience-sync`                                                             | [seller](../skills/build-seller-agent/SKILL.md)                                                                                                                   |
+| Premium broadcaster (Paramount, Disney)                    | `sales-broadcast-tv` + `sales-streaming-tv` _(preview)_                                      | [seller](../skills/build-seller-agent/SKILL.md)                                                                                                                   |
+| DSP-side seller (Scope3, Trade Desk)                       | `sales-non-guaranteed` + `signal-marketplace`                                                | [seller](../skills/build-seller-agent/SKILL.md), [signals](../skills/build-signals-agent/SKILL.md)                                                                |
+| Identity provider (LiveRamp, ID5)                          | `signal-owned` + `audience-sync`                                                             | [signals](../skills/build-signals-agent/SKILL.md), [seller](../skills/build-seller-agent/SKILL.md)                                                                |
+| Governance vendor (IAS, DV)                                | `governance-delivery-monitor` + `measurement-verification` _(preview)_ + `content-standards` | [governance](../skills/build-governance-agent/SKILL.md)                                                                                                           |
+
+> Each specialism runs its own compliance storyboard independently — no joint multi-specialism storyboard exists yet. For cross-protocol bundles (e.g. DSP-side seller spans `media-buy` + `signals`), run each protocol's storyboard separately.
+
 ## Examples
 
 ### Basic Usage

package/examples/hello-cluster.ts

@@ -74,55 +74,94 @@ const HEALTH_TIMEOUT_MS = 5_000;
 const SHUTDOWN_GRACE_MS = 3_000;
 const REPO_ROOT = resolvePath(__dirname, '..');
 
+/** Every mock-server exposes auth-free `GET /_debug/traffic` returning a
+ *  JSON object — used as the universal liveness probe across the cluster.
+ *  Matches what the mock-servers ship today; if a future mock drops this
+ *  surface, swap to a specialism-specific lookup path here. */
+const UNIVERSAL_PROBE_PATH = '/_debug/traffic';
+
 const ADAPTERS: AdapterConfig[] = [
   {
     name: 'signals',
     specialism: 'signal-marketplace',
     port: 3001,
     entrypoint: 'examples/hello_signals_adapter_marketplace.ts',
-    upstream: {
-      envVar: 'UPSTREAM_URL',
-      defaultUrl: 'http://127.0.0.1:4150',
-      // /_lookup/operator answers 200 with `{}` when the operator is unknown,
-      // so any HTTP response means the mock-server's listener is up.
-      probePath: '/_lookup/operator?adcp_operator=preflight',
-    },
+    upstream: { envVar: 'UPSTREAM_URL', defaultUrl: 'http://127.0.0.1:4150', probePath: UNIVERSAL_PROBE_PATH },
   },
   {
-    name: 'sales',
-    specialism: 'sales-non-guaranteed',
+    name: 'creative-template',
+    specialism: 'creative-template',
     port: 3002,
-    entrypoint: 'examples/hello_seller_adapter_non_guaranteed.ts',
+    entrypoint: 'examples/hello_creative_adapter_template.ts',
+    upstream: { envVar: 'UPSTREAM_URL', defaultUrl: 'http://127.0.0.1:4250', probePath: UNIVERSAL_PROBE_PATH },
   },
   {
-    name: 'governance',
-    specialism: 'governance-spend-authority',
+    name: 'sales-social',
+    specialism: 'sales-social',
     port: 3003,
-    entrypoint: 'examples/hello_governance_adapter_spend_authority.ts',
-    tracking: '#1332',
+    entrypoint: 'examples/hello_seller_adapter_social.ts',
+    upstream: { envVar: 'UPSTREAM_URL', defaultUrl: 'http://127.0.0.1:4350', probePath: UNIVERSAL_PROBE_PATH },
   },
   {
-    name: 'creative',
-    specialism: 'creative-ad-server',
+    name: 'sales-guaranteed',
+    specialism: 'sales-guaranteed',
     port: 3004,
+    entrypoint: 'examples/hello_seller_adapter_guaranteed.ts',
+    upstream: { envVar: 'UPSTREAM_URL', defaultUrl: 'http://127.0.0.1:4450', probePath: UNIVERSAL_PROBE_PATH },
+  },
+  {
+    name: 'sales-non-guaranteed',
+    specialism: 'sales-non-guaranteed',
+    port: 3005,
+    entrypoint: 'examples/hello_seller_adapter_non_guaranteed.ts',
+    upstream: { envVar: 'UPSTREAM_URL', defaultUrl: 'http://127.0.0.1:4451', probePath: UNIVERSAL_PROBE_PATH },
+  },
+  {
+    name: 'creative-ad-server',
+    specialism: 'creative-ad-server',
+    port: 3006,
     entrypoint: 'examples/hello_creative_adapter_ad_server.ts',
-    tracking: '#1333',
+    upstream: { envVar: 'UPSTREAM_URL', defaultUrl: 'http://127.0.0.1:4452', probePath: UNIVERSAL_PROBE_PATH },
+  },
+  {
+    name: 'sponsored-intelligence',
+    specialism: 'sponsored-intelligence',
+    port: 3007,
+    entrypoint: 'examples/hello_si_adapter_brand.ts',
+    upstream: { envVar: 'UPSTREAM_URL', defaultUrl: 'http://127.0.0.1:4504', probePath: UNIVERSAL_PROBE_PATH },
+  },
+  {
+    // The multi-tenant adapter claims governance-spend-authority +
+    // property-lists + brand-rights against in-memory state — no upstream
+    // mock to probe. Useful as the agency / holdco worked example.
+    name: 'multi-tenant',
+    specialism: 'governance-spend-authority+property-lists+brand-rights',
+    port: 3008,
+    entrypoint: 'examples/hello_seller_adapter_multi_tenant.ts',
   },
+  // ─── Pending-tracking entries — auto-skip until the example file lands.
+  // The `pending:` block in the manifest surfaces them so adopters know
+  // what's coming.
   {
-    name: 'brand',
+    name: 'governance',
+    specialism: 'governance-spend-authority',
+    port: 3010,
+    entrypoint: 'examples/hello_governance_adapter_spend_authority.ts',
+    tracking: '#1332',
+  },
+  {
+    name: 'brand-rights',
     specialism: 'brand-rights',
-    port: 3005,
+    port: 3011,
     entrypoint: 'examples/hello_brand_adapter_rights.ts',
     tracking: '#1334',
   },
   {
     // `sales-retail-media` is a preview specialism in 3.0 — claiming it
-    // advertises intent; no storyboard backs it yet. A real retail-media
-    // adapter would also claim `sales-catalog-driven`; the manifest's
-    // single-specialism slot is a forced fit at the hello tier.
+    // advertises intent; no storyboard backs it yet.
     name: 'retail-media',
     specialism: 'sales-retail-media',
-    port: 3006,
+    port: 3012,
     entrypoint: 'examples/hello_seller_adapter_retail_media.ts',
   },
 ];