@adcp/sdk 6.8.0 → 6.9.0

package/dist/lib/version.d.ts

@@ -1,11 +1,11 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "6.8.0";
+export declare const LIBRARY_VERSION = "6.9.0";
 /**
  * AdCP specification version this library is built for
  */
-export declare const ADCP_VERSION = "3.0.5";
+export declare const ADCP_VERSION = "3.0.6";
 /**
  * AdCP major version sent with every request (adcp_major_version field).
  * Sellers validate this against their supported versions and return
@@ -15,7 +15,7 @@ export declare const ADCP_MAJOR_VERSION = 3;
 /**
  * AdCP versions this library maintains backward compatibility with
  */
-export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5"];
+export declare const COMPATIBLE_ADCP_VERSIONS: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6"];
 /**
  * String literal union of every AdCP version the SDK formally supports.
  *
@@ -29,10 +29,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "6.8.0";
-    readonly adcp: "3.0.5";
-    readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5"];
-    readonly generatedAt: "2026-05-03T17:37:43.823Z";
+    readonly library: "6.9.0";
+    readonly adcp: "3.0.6";
+    readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6"];
+    readonly generatedAt: "2026-05-03T23:14:43.151Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,eAAO,MAAM,eAAe,UAAU,CAAC;AAEvC;;GAEG;AACH,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;GAEG;AACH,eAAO,MAAM,wBAAwB,uHAY3B,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK7D"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,eAAO,MAAM,eAAe,UAAU,CAAC;AAEvC;;GAEG;AACH,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;GAEG;AACH,eAAO,MAAM,wBAAwB,gIAa3B,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK7D"}

package/dist/lib/version.js

@@ -11,11 +11,11 @@ exports.parseAdcpMajorVersion = parseAdcpMajorVersion;
 /**
  * AdCP SDK library version
  */
-exports.LIBRARY_VERSION = '6.8.0';
+exports.LIBRARY_VERSION = '6.9.0';
 /**
  * AdCP specification version this library is built for
  */
-exports.ADCP_VERSION = '3.0.5';
+exports.ADCP_VERSION = '3.0.6';
 /**
  * AdCP major version sent with every request (adcp_major_version field).
  * Sellers validate this against their supported versions and return
@@ -37,15 +37,16 @@ exports.COMPATIBLE_ADCP_VERSIONS = [
     '3.0.3',
     '3.0.4',
     '3.0.5',
+    '3.0.6',
 ];
 /**
  * Full version information
  */
 exports.VERSION_INFO = {
-    library: '6.8.0',
-    adcp: '3.0.5',
+    library: '6.9.0',
+    adcp: '3.0.6',
     compatibleVersions: exports.COMPATIBLE_ADCP_VERSIONS,
-    generatedAt: '2026-05-03T17:37:43.823Z',
+    generatedAt: '2026-05-03T23:14:43.151Z',
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,iDAAiD;;;AA2DjD,wCAEC;AAKD,8CAEC;AAKD,4CAEC;AAKD,sDAEC;AAWD,sDAKC;AAhGD;;GAEG;AACU,QAAA,eAAe,GAAG,OAAO,CAAC;AAEvC;;GAEG;AACU,QAAA,YAAY,GAAG,OAAO,CAAC;AAEpC;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;GAEG;AACU,QAAA,wBAAwB,GAAG;IACtC,MAAM;IACN,MAAM;IACN,IAAI;IACJ,cAAc;IACd,cAAc;IACd,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACC,CAAC;AAYX;;GAEG;AACU,QAAA,YAAY,GAAG;IAC1B,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,OAAO;IACb,kBAAkB,EAAE,gCAAwB;IAC5C,WAAW,EAAE,0BAA0B;CAC/B,CAAC;AAEX;;GAEG;AACH,SAAgB,cAAc;IAC5B,OAAO,oBAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,OAAO,uBAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,OAAQ,gCAA8C,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB;IACnC,OAAO,gCAAwB,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,OAAe;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,iDAAiD;;;AA4DjD,wCAEC;AAKD,8CAEC;AAKD,4CAEC;AAKD,sDAEC;AAWD,sDAKC;AAjGD;;GAEG;AACU,QAAA,eAAe,GAAG,OAAO,CAAC;AAEvC;;GAEG;AACU,QAAA,YAAY,GAAG,OAAO,CAAC;AAEpC;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;GAEG;AACU,QAAA,wBAAwB,GAAG;IACtC,MAAM;IACN,MAAM;IACN,IAAI;IACJ,cAAc;IACd,cAAc;IACd,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACC,CAAC;AAYX;;GAEG;AACU,QAAA,YAAY,GAAG;IAC1B,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,OAAO;IACb,kBAAkB,EAAE,gCAAwB;IAC5C,WAAW,EAAE,0BAA0B;CAC/B,CAAC;AAEX;;GAEG;AACH,SAAgB,cAAc;IAC5B,OAAO,oBAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,OAAO,uBAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,OAAQ,gCAA8C,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB;IACnC,OAAO,gCAAwB,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,OAAe;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC"}

package/docs/llms.txt

@@ -1,7 +1,7 @@
 # Ad Context Protocol (AdCP)
 
 > Generated at: 2026-05-03
-> Library: @adcp/sdk v6.7.0
+> Library: @adcp/sdk v6.8.0
 > AdCP major version: 3
 > Canonical URL: https://adcontextprotocol.github.io/adcp-client/llms.txt
 > Note: the `Library` stamp reflects the package.json version at doc-generation time. The narrative below describes the surface that lands on the next-published minor — including any 6.7 helpers documented here ahead of the release tag.
@@ -1119,8 +1119,8 @@ Agents use the `recovery` classification to decide what to do: `transient` → r
 | `CREATIVE_DEADLINE_EXCEEDED` | correctable | Creative change submitted after the package's creative_deadline. Distinct from CREATIVE_REJECTED (content policy failure). |
 | `CREATIVE_NOT_FOUND` | correctable | Referenced creative does not exist in the agent's creative library. Sellers MUST return this code uniformly for any creative_id not owned by the calling account — never distinguish 'exists in another tenant' from 'does not exist', which would enable cross-tenant enumeration. |
 | `CREATIVE_REJECTED` | correctable | Creative failed content policy review. For deadline violations, see CREATIVE_DEADLINE_EXCEEDED. |
-| `GOVERNANCE_DENIED` | correctable | A registered governance agent denied the transaction. The buyer may restructure the buy (e.g., reduce budget, split into smaller transactions), escalate to human spending authority, or contact the governance agent for details. |
-| `GOVERNANCE_UNAVAILABLE` | transient | A registered governance agent is unreachable (timeout, network error, or repeated failure) and the seller cannot obtain a governance decision for the spend-commit. Distinct from `GOVERNANCE_DENIED` (agent reachable and explicitly denied). |
+| `GOVERNANCE_DENIED` | correctable | A registered governance agent denied the transaction. Sellers MUST place the denial in the task's structured rejection arm when one exists (e.g., `acquire_rights` → `AcquireRightsRejected`, `creative_approval` → `CreativeRejected`); otherwise in `errors[]` + `adcp_error`. Buyers MUST dispatch on the response's discriminated `status` first and fall back to `errors[].code` / `adcp_error.code` only when no rejection arm exists for that task. The buyer may restructure the buy (e.g., reduce budget, split into smaller transactions), escalate to human spending authority, or contact the governance agent for details. Wire placement (full guidance). Governance denial is a structured business outcome, not a system error — the governance call SUCCEEDED and the agent returned a denial verdict. Two cases: 1. Task response defines a structured rejection arm. The arm IS the canonical denial shape. The seller populates `reason` (human-readable, propagating governance findings) and `suggestions` (optional) and does NOT additionally emit `GOVERNANCE_DENIED` in `errors[]` or `adcp_error`. The rejection arms enforce this at the schema layer: e.g., `AcquireRightsRejected` and `CreativeRejected` both declare `not: { required: [errors] }`, so dual-emission is already a schema violation. The code does not appear on the wire when the rejection arm is used. Transport-level success markers MUST NOT be flipped (HTTP 200, MCP `isError: false`, A2A `succeeded`) — the task ran successfully and produced a structured response. 2. Task response has no rejection arm (e.g., `create_media_buy` returns Success / Error / Submitted arms only). The seller populates `errors[].code: GOVERNANCE_DENIED` in the payload AND `adcp_error.code: GOVERNANCE_DENIED` on the envelope per the two-layer model in `error-handling.mdx#envelope-vs-payload-errors-the-two-layer-model`. Transport-level failure markers DO flip in this case (HTTP 4xx, MCP `isError: true`, A2A `failed`) — the task could not produce a success artifact. The rule generalizes to any current or future task whose response defines a discriminated rejection arm. In either placement, sellers SHOULD propagate governance findings verbatim — buyers' recovery decisions depend on what specifically was rejected. `GOVERNANCE_DENIED` is reserved for verdicts received from a reachable governance agent; if the governance call itself failed (timeout, network, config error), use `GOVERNANCE_UNAVAILABLE` instead. |
+| `GOVERNANCE_UNAVAILABLE` | transient | A registered governance agent is unreachable. Sellers MUST place this code in `errors[]` + `adcp_error` (never a structured rejection arm) and flip transport-level failure markers (HTTP 5xx, MCP `isError: true`, A2A `failed`). Distinct from `GOVERNANCE_DENIED` (agent reachable and explicitly denied — see that code's wire-placement guidance). Wire placement (full guidance). Governance unavailability is a system error — the governance call FAILED (timeout, network, config error) and the seller could not get a verdict at all. Always populate both layers per the two-layer model in `error-handling.mdx#envelope-vs-payload-errors-the-two-layer-model`. Do NOT use a structured rejection arm for unavailability even when the task offers one — the buyer's recovery semantics differ (retry-with-backoff for unavailability vs. restructure-or-escalate for denial), and conflating them masks the system-error signal. |
 | `IDEMPOTENCY_CONFLICT` | correctable | An earlier request with the same idempotency_key was processed with a different canonical payload within the seller's replay window. Distinct from CONFLICT (concurrent write) — this indicates the client reused a key across semantically different requests. |
 | `IDEMPOTENCY_EXPIRED` | correctable | The idempotency_key was seen previously but its cached response has been evicted because it is past the seller's declared replay_ttl_seconds. Distinct from IDEMPOTENCY_CONFLICT (different payload within window) — this indicates the retry arrived too late for at-most-once guarantees. If the buyer has any evidence the prior call succeeded (partial response received before crash, entry in the buyer's own DB, a webhook fired), the buyer MUST do the natural-key check BEFORE minting a new key — minting a new key in that situation is exactly how double-creation happens. |
 | `INVALID_REQUEST` | correctable | Request is malformed, missing required fields, or violates schema constraints. |
@@ -1250,6 +1250,7 @@ These docs are available locally in the repo and hosted at https://adcontextprot
 | Full type signatures | docs/TYPE-SUMMARY.md | [link](https://adcontextprotocol.github.io/adcp-client/TYPE-SUMMARY.md) |
 | Getting started / install | docs/getting-started.md | [link](https://adcontextprotocol.github.io/adcp-client/getting-started.md) |
 | Build a server-side agent | docs/guides/BUILD-AN-AGENT.md | [link](https://adcontextprotocol.github.io/adcp-client/guides/BUILD-AN-AGENT.md) |
+| Migrating 6.7 → 6.9 (skips deprecated 6.8.0; 13 additive recipes; 2 breaking) | docs/migration-6.7-to-6.9.md | [link](https://adcontextprotocol.github.io/adcp-client/migration-6.7-to-6.9.md) |
 | Migrating 6.6 → 6.7 (15 recipes; 2 breaking) | docs/migration-6.6-to-6.7.md | [link](https://adcontextprotocol.github.io/adcp-client/migration-6.6-to-6.7.md) |
 | Migrating 5.x → 6.x | docs/migration-5.x-to-6.x.md | [link](https://adcontextprotocol.github.io/adcp-client/migration-5.x-to-6.x.md) |
 | BuyerAgentRegistry adopter migration | docs/migration-buyer-agent-registry.md | [link](https://adcontextprotocol.github.io/adcp-client/migration-buyer-agent-registry.md) |

package/examples/hello_creative_adapter_ad_server.ts

@@ -66,6 +66,7 @@ import {
   type DecisioningPlatform,
   type SyncCreativesRow,
 } from '@adcp/sdk/server';
+import { FormatAsset } from '@adcp/sdk';
 import type {
   BuildCreativeRequest,
   BuildCreativeSuccess,
@@ -269,6 +270,18 @@ const FORMAT_AGENT_URL = PUBLIC_AGENT_URL;
  *  `renders[]` per #1325. Adapter consumes `GET /v1/formats` then
  *  projects each entry. */
 function projectFormat(f: UpstreamFormat): ListCreativeFormatsResponse['formats'][number] {
+  // Output slot declared on every format so build_creative's response key
+  // (`assets['serving_tag']`) matches a declared asset_id per
+  // creative-manifest.json:14. `required: false` because the buyer doesn't
+  // supply this — buildCreative generates and returns it. asset_type: 'html'
+  // mirrors the buildCreative response (always renders to an HTML serving
+  // tag in this worked example); video/CTV adapters emitting VAST should
+  // declare `FormatAsset.vast({ asset_id: 'serving_tag', required: false })` instead.
+  // Asset_id `serving_tag` is shared with hello_creative_adapter_template.ts
+  // — keeping the same id across both worked examples teaches adopters that
+  // the asset_id is contractual (declared by the format), not platform-flavored.
+  const outputAssets = [FormatAsset.html({ asset_id: 'serving_tag', required: false })];
+
   // Display fixed formats: emit dimensions on a single 'main' render.
   if (f.render_kind === 'fixed' && f.channel === 'display' && f.width !== undefined && f.height !== undefined) {
     return {
@@ -280,6 +293,7 @@ function projectFormat(f: UpstreamFormat): ListCreativeFormatsResponse['formats'
           dimensions: { width: f.width, height: f.height, unit: 'px' as const },
         },
       ],
+      assets: outputAssets,
     };
   }
   // Video / CTV: project at 1080p baseline.
@@ -293,6 +307,7 @@ function projectFormat(f: UpstreamFormat): ListCreativeFormatsResponse['formats'
           dimensions: { width: 1920, height: 1080, unit: 'px' as const },
         },
       ],
+      assets: outputAssets,
     };
   }
   // Parameterized — placeholder dimensions for the worked example. Real
@@ -304,6 +319,7 @@ function projectFormat(f: UpstreamFormat): ListCreativeFormatsResponse['formats'
     format_id: { agent_url: FORMAT_AGENT_URL, id: f.format_id },
     name: f.name,
     renders: [{ role: 'main', dimensions: { width: 1, height: 1, unit: 'px' as const } }],
+    assets: outputAssets,
   };
 }
 
@@ -490,13 +506,16 @@ class CreativeAdServerAdapter implements DecisioningPlatform<Record<string, neve
       // `additionalProperties: false` constraint excludes `creative_id`
       // and `name` from the manifest body — only `format_id`, `assets`,
       // `rights`, `industry_identifiers`, `provenance`, `ext` are allowed.
-      // Each `assets[key]` is a discriminated AssetVariant — `asset_type`
-      // selects the matching schema (html requires `content`, etc.).
+      // The `tag` asset_id matches the output slot declared in
+      // `projectFormat` (FormatAsset.html({ asset_id: 'serving_tag', ... })),
+      // satisfying creative-manifest.json:14. Each `assets[key]` is a
+      // discriminated AssetVariant — `asset_type` selects the matching
+      // schema (html requires `content`, etc.).
       return {
         creative_manifest: {
           format_id: { agent_url: FORMAT_AGENT_URL, id: creative.format_id },
           assets: {
-            tag: { asset_type: 'html', content: rendered.tag_html },
+            serving_tag: { asset_type: 'html', content: rendered.tag_html },
           },
         },
         // CAST: oneOf-emitter — picking variant 0 (single creative_manifest)

package/examples/hello_creative_adapter_template.ts

@@ -50,6 +50,7 @@ import {
   parameterizedRender,
   htmlAsset,
   javascriptAsset,
+  audioAsset,
   urlRender,
   type Format,
   type ListCreativeFormatsResponse,
@@ -82,9 +83,13 @@ interface UpstreamTemplate {
   name: string;
   description: string;
   channel: 'display' | 'video' | 'audio' | 'ctv' | 'native';
+  // SWAP: include any output_kinds your platform emits. The mock supports
+  // four (display HTML, JS, VAST, audio URL); production audio platforms
+  // (AudioStack, ElevenLabs, Resemble) typically output `audio_url` to a
+  // signed CDN endpoint.
   dimensions?: { width: number; height: number };
   duration_seconds?: { min: number; max: number };
-  output_kind: 'html_tag' | 'javascript_tag' | 'vast_xml';
+  output_kind: 'html_tag' | 'javascript_tag' | 'vast_xml' | 'audio_url';
   slots: Array<{
     slot_id: string;
     asset_type: 'image' | 'video' | 'audio' | 'text' | 'click_url';
@@ -102,6 +107,7 @@ interface UpstreamRender {
     tag_html?: string;
     tag_javascript?: string;
     vast_xml?: string;
+    audio_url?: string;
     preview_url?: string;
     assets?: Array<Record<string, unknown>>;
   };
@@ -242,6 +248,37 @@ function projectSlot(s: UpstreamTemplate['slots'][number]) {
   }
 }
 
+/** Output asset slot. The format's `assets[]` mixes input slots (image,
+ *  headline, script — what the buyer provides) with the build_creative
+ *  output slot (`serving_tag` — what the adapter returns). Per
+ *  creative-manifest.json:14 every key in `creative_manifest.assets` MUST
+ *  match a declared `assets[].asset_id`; without the output slot here, our
+ *  build_creative response's `serving_tag` would key against an undeclared
+ *  slot. `required: false` because the buyer doesn't supply this — the
+ *  adapter generates it. asset_type is driven by upstream `output_kind` so
+ *  the discriminator in the response (html / javascript / vast / audio)
+ *  matches the slot the buyer can resolve from `get_format`. */
+function outputSlot(t: UpstreamTemplate) {
+  switch (t.output_kind) {
+    case 'html_tag':
+      return FormatAsset.html({ asset_id: 'serving_tag', required: false });
+    case 'javascript_tag':
+      return FormatAsset.javascript({ asset_id: 'serving_tag', required: false });
+    case 'vast_xml':
+      return FormatAsset.vast({ asset_id: 'serving_tag', required: false });
+    case 'audio_url':
+      return FormatAsset.audio({ asset_id: 'serving_tag', required: false });
+    default: {
+      // Exhaustiveness gate. If `output_kind` grows a fifth case (image_url,
+      // daast_xml, etc.) the unreachable assertion fires at compile time so
+      // adopters extending the upstream type can't ship a silent `undefined`
+      // entry into format.assets[].
+      const exhaustive: never = t.output_kind;
+      throw new Error(`unhandled output_kind: ${exhaustive as string}`);
+    }
+  }
+}
+
 function templateToFormat(t: UpstreamTemplate): Format {
   // Each `renders[]` entry MUST be `{ role, dimensions: { width, height } }`
   // OR `{ role, parameters_from_format_id: true }`. A bare `{ role, width,
@@ -257,15 +294,25 @@ function templateToFormat(t: UpstreamTemplate): Format {
     name: t.name,
     description: t.description,
     renders,
-    assets: t.slots.map(projectSlot),
+    // Input slots (what the buyer provides) + the output slot (what the
+    // adapter generates and returns via build_creative).
+    assets: [...t.slots.map(projectSlot), outputSlot(t)],
   };
 }
 
 /** Project an upstream `render.output` onto AdCP `creative_manifest.assets`.
- *  The mock returns one of three output shapes (HTML tag, JS tag, VAST);
- *  AdCP creative-manifest assets are keyed by asset_id and discriminated by
- *  asset_type. Use the `htmlAsset`/`javascriptAsset` builders to inject the
- *  discriminator — a bare `{ content }` fails the asset-union oneOf. */
+ *  The mock returns one of four output shapes (HTML tag, JS tag, VAST, audio
+ *  URL); AdCP creative-manifest assets are keyed by asset_id and discriminated
+ *  by asset_type. Use the `htmlAsset` / `javascriptAsset` / `audioAsset`
+ *  builders to inject the discriminator — a bare `{ content }` or `{ url }`
+ *  fails the asset-union oneOf.
+ *
+ *  The `serving_tag` asset_id matches the output slot declared by
+ *  `outputSlot(t)` in `templateToFormat`, satisfying creative-manifest.json:14
+ *  ("each key MUST match an asset_id from the format's assets array"). All
+ *  four output kinds (HTML / JS / VAST / audio) key under the same id; the
+ *  asset_type discriminator on the value picks the matching slot's typed
+ *  branch. */
 function projectRenderToManifest(
   render: UpstreamRender,
   formatId: { agent_url: string; id: string }
@@ -284,6 +331,14 @@ function projectRenderToManifest(
     // creative-template storyboard's build step asserts `assets` presence
     // rather than a specific asset_type.
     assets['serving_tag'] = htmlAsset({ content: out.vast_xml });
+  } else if (out.audio_url) {
+    // Audio templates render to a hosted MP3. Real audio platforms return
+    // signed CDN URLs with TTL — the buyer must fetch within the lifetime.
+    // The `audioAsset` builder injects the `asset_type: 'audio'` discriminator
+    // that the AdCP creative-manifest oneOf requires. Reuses the same
+    // `serving_tag` asset_id as the HTML / JS / VAST branches — the asset_type
+    // discriminator is what the buyer keys on, not the asset_id.
+    assets['serving_tag'] = audioAsset({ url: out.audio_url });
   }
   return { format_id: formatId, assets };
 }

package/examples/hello_seller_adapter_guaranteed.ts

@@ -48,6 +48,7 @@
 import {
   createAdcpServerFromPlatform,
   createMediaBuyStore,
+  createInMemoryTaskRegistry,
   InMemoryStateStore,
   serve,
   verifyApiKey,
@@ -483,8 +484,56 @@ class SalesGuaranteedAdapter implements DecisioningPlatform<Record<string, never
      *  uses brand.domain, mapped 1:1 onto the mock's `adcp_publisher` field.
      *  Production may use account.publisher or a separate auth-derived
      *  binding. */
-    resolve: async ref => {
-      if (!ref) return null;
+    resolve: async (ref, ctx) => {
+      // ─── TEST-ONLY: auth-derived sandbox fallback ────────────────────
+      // DELETE THIS BLOCK BEFORE DEPLOYING. The framework calls
+      // `accounts.resolve(undefined, ctx)` for tools whose wire request
+      // doesn't carry an account ref — most importantly `tasks/get`, which
+      // the runner's `pollTaskCompletion` uses to follow HITL completions.
+      // Without resolving from `ctx.authInfo` alone, the framework's tenant
+      // boundary on tasks/get refuses every poll (record.accountId set,
+      // resolvedAccountId undefined → REFERENCE_NOT_FOUND fail-closed).
+      //
+      // This worked example accepts a single API key (the test-only token
+      // wired below in `verifyApiKey`), so any authenticated `undefined`
+      // ref is the compliance runner. Synthesize the sandbox singleton.
+      // Production sellers handle this via a real tenant store keyed by
+      // `ctx.authInfo.credential.key_id` (api_key) or
+      // `ctx.authInfo.credential.client_id` (oauth) — they never
+      // synthesize accounts.
+      if (!ref) {
+        if (!ctx?.authInfo) return null;
+        // Mirror whichever account was used at the original
+        // tool-dispatch site so the framework's tenant boundary on
+        // tasks/get treats the auth-derived poll as the same tenant.
+        // The Hello adapter has two account-construction paths:
+        //   (1) the cascade-scenario sandbox arm below, keyed by
+        //       `ref.sandbox === true` and stamped with `mode: 'sandbox'`
+        //       and a `${SANDBOX_ID_PREFIX}${network_code}` id.
+        //   (2) the production path below, keyed by `ref.brand.domain`
+        //       and stamped with the bare `network_code` id (no mode).
+        // The compliance runner exercises path (2) for the
+        // sales_guaranteed HITL flow (no `sandbox: true` on the create
+        // step's account), so the auth-derived ref-less fallback
+        // returns the matching production account here. Production
+        // sellers key this off `ctx.authInfo.credential.key_id` /
+        // `client_id` against a real tenant store.
+        const publisherDomain = 'acmeoutdoor.example';
+        const network = await upstream.lookupNetwork(publisherDomain);
+        if (!network) return null;
+        return {
+          id: network.network_code,
+          name: network.display_name,
+          status: 'active',
+          brand: { domain: network.adcp_publisher },
+          ctx_metadata: {
+            network_code: network.network_code,
+            publisher_domain: network.adcp_publisher,
+          },
+        };
+      }
+      // ─── /TEST-ONLY (auth-derived fallback) ──────────────────────────
+
       // AccountReference discriminated union — see the worked-example notes
       // on the same pattern in hello_seller_adapter_social. The mock has no
       // account_id → network_code index, so the account_id arm is
@@ -808,7 +857,7 @@ class SalesGuaranteedAdapter implements DecisioningPlatform<Record<string, never
         };
       };
 
-      // ─── TEST-ONLY: HITL bypass for sandbox accounts ─────────────────
+      // ─── TEST-ONLY: HITL bypass for sandbox cascade scenarios ────────
       // DELETE THIS BLOCK BEFORE DEPLOYING. The compliance runner expects
       // synchronous `media_buy_id` for `media_buy_seller/*` cascade
       // scenarios (pending_creatives_to_start / inventory_list_* /
@@ -818,13 +867,19 @@ class SalesGuaranteedAdapter implements DecisioningPlatform<Record<string, never
       // either always-HITL or always-sync, never both based on a runtime
       // flag.
       //
-      // Trust signal is the resolver-stamped `mode: 'sandbox'` on the
-      // resolved account (per `Account.mode`, AdCP 6.7+). The synthesis
-      // branch in `accounts.resolve` is the only path that stamps it, so
-      // a production account whose id happens to share the sandbox prefix
-      // would still flow through the HITL path because its mode would be
-      // unset (defaults to `'live'`).
-      if (getAccountMode(ctx.account) === 'sandbox') {
+      // Bypass conditions, both required:
+      //   1. Resolver stamped `mode: 'sandbox'` (per `Account.mode`, AdCP
+      //      6.7+). Production accounts default to `'live'` and never hit
+      //      this branch.
+      //   2. Buyer did NOT supply `push_notification_config`. That field is
+      //      the buyer's explicit "I expect HITL / async; webhook me on
+      //      task completion" signal — honoring it is non-negotiable per
+      //      the spec narrative on `sales_guaranteed`. When present, the
+      //      bypass yields to the HITL handoff so the runner's
+      //      `task_completion.<path>` context_outputs resolve from the
+      //      terminal artifact.
+      const buyerWantsHitl = req.push_notification_config != null;
+      if (!buyerWantsHitl && getAccountMode(ctx.account) === 'sandbox') {
         return completeIoAndCreateLineItems();
       }
       // ─── /TEST-ONLY ──────────────────────────────────────────────────
@@ -1001,10 +1056,21 @@ class SalesGuaranteedAdapter implements DecisioningPlatform<Record<string, never
           // breakdown from upstream — include an empty array OR project
           // the line-item-level rows the mock returns. Mock's
           // line_item_breakdown carries impressions+spend per LI.
+          //
+          // Required per `media-buy/get-media-buy-delivery-response.json`
+          // (3.0.6): package_id, spend, pricing_model, rate, currency.
+          // The mock doesn't return per-package pricing breakdown, so
+          // the worked example uses the buy-level currency and
+          // 'cpm_guaranteed_fixed' as the pricing model. Production
+          // sellers SWAP for the real per-package pricing record
+          // (look up by package_id against the original buy).
           by_package: (d.line_item_breakdown ?? []).map(li => ({
             package_id: li.line_item_id,
             impressions: li.impressions,
             spend: li.spend,
+            pricing_model: 'cpm' as const,
+            rate: li.impressions > 0 ? (li.spend / li.impressions) * 1000 : 0,
+            currency: d.currency,
           })),
         })),
       };
@@ -1063,12 +1129,21 @@ const localBuyStatus = new Map<string, MediaBuyStatus>();
 const stateStore = new InMemoryStateStore();
 const mediaBuyStore = createMediaBuyStore({ store: stateStore });
 
+// HITL task registry. Hoisted OUTSIDE the `serve()` factory so the
+// instance persists across requests — a fresh registry per request would
+// lose every submitted task between create_media_buy and the buyer's
+// first tasks_get poll. SWAP `createInMemoryTaskRegistry()` for
+// `createPostgresTaskRegistry({ pool })` in production; in-memory
+// in-flight tasks are lost on process restart.
+const taskRegistry = createInMemoryTaskRegistry();
+
 serve(
   ({ taskStore }) =>
     createAdcpServerFromPlatform(platform, {
       name: 'hello-seller-adapter-guaranteed',
       version: '1.0.0',
       taskStore,
+      taskRegistry,
       idempotency: idempotencyStore,
       mediaBuyStore,
       resolveSessionKey: ctx => {

package/examples/hello_seller_adapter_multi_tenant.ts

@@ -99,8 +99,6 @@ import type {
   DeletePropertyListRequest,
   DeletePropertyListResponse,
   PropertyList,
-} from '@adcp/sdk/types';
-import type {
   GetBrandIdentityRequest,
   GetBrandIdentitySuccess,
   GetRightsRequest,
@@ -108,9 +106,15 @@ import type {
   AcquireRightsRequest,
   AcquireRightsAcquired,
   AcquireRightsRejected,
+  UpdateRightsRequest,
+  UpdateRightsSuccess,
+  CreativeApprovalRequest,
+  CreativeApproved,
+  CreativeRejected,
+  CreativePendingReview,
   RightUse,
   RightType,
-} from '@adcp/sdk/types/core.generated';
+} from '@adcp/sdk/types';
 import { createHash, randomUUID } from 'node:crypto';
 
 const PORT = Number(process.env['PORT'] ?? 3003);
@@ -541,7 +545,7 @@ class MultiTenantAdapter implements DecisioningPlatform<Record<string, never>, T
           // SWAP: row-level write under tenant transaction.
           tenant.governanceBindings.set(brandDomain, {
             governance_agent_url: govUrl,
-            active_plan_id: tenant.active_plan_id,
+            ...(tenant.active_plan_id !== undefined && { active_plan_id: tenant.active_plan_id }),
           });
         } else {
           tenant.governanceBindings.delete(brandDomain);
@@ -665,7 +669,7 @@ class MultiTenantAdapter implements DecisioningPlatform<Record<string, never>, T
       plan.audit.push({
         timestamp: new Date().toISOString(),
         kind: 'outcome',
-        check_id: req.check_id,
+        ...(req.check_id !== undefined && { check_id: req.check_id }),
         detail: { outcome: req.outcome, purchase_type: req.purchase_type, committed_budget: committed },
       });
       return {
@@ -907,6 +911,36 @@ class MultiTenantAdapter implements DecisioningPlatform<Record<string, never>, T
         },
       };
     },
+
+    updateRights: async (req: UpdateRightsRequest, _ctx): Promise<UpdateRightsSuccess> => {
+      // Hello adapter doesn't persist a grant ledger; production adopters
+      // hydrate by `req.rights_id`, apply the patch (extend dates, adjust
+      // impression cap, change pricing, pause/resume), and re-issue
+      // `generation_credentials` + `rights_constraint`. UNSUPPORTED_FEATURE
+      // is the spec-canonical code (manifest.json:702) for "operation supported
+      // by the protocol but not by this implementation" — buyers consult
+      // get_adcp_capabilities to discover supported operations.
+      throw new AdcpError('UNSUPPORTED_FEATURE', {
+        message:
+          'update_rights is not supported by the hello multi-tenant adapter — fork and persist a grant ledger to enable.',
+        details: { rights_id: req.rights_id },
+      });
+    },
+
+    reviewCreativeApproval: async (
+      req: CreativeApprovalRequest,
+      _ctx
+    ): Promise<CreativeApproved | CreativeRejected | CreativePendingReview> => {
+      // Webhook handler dispatched from the adopter's HTTP route at
+      // `acquire_rights.approval_webhook`. Hello adapter auto-approves; real
+      // adopters validate brand-guideline compliance, queue for human review,
+      // or reject with structured `reason` + `suggestions[]`.
+      return {
+        status: 'approved',
+        rights_id: req.rights_id,
+        ...(req.creative_id !== undefined && { creative_id: req.creative_id }),
+      };
+    },
   });
 
   /**