@adcp/sdk 7.8.0 → 7.9.0

package/dist/lib/utils/redis-default-prefix-warn.js

@@ -0,0 +1,95 @@
+"use strict";
+/**
+ * Shared default-prefix-on-db-0 warning helper for Redis backends.
+ *
+ * Every Redis-backed SDK store (idempotency, ctx-metadata, replay)
+ * prefixes its keys (`"adcp:idem:"`, `"adcp:ctx_meta:"`, `"adcp:replay:"`)
+ * so a shared Redis instance can host multiple AdCP servers — or AdCP
+ * alongside other apps — without collision. But two AdCP deployments
+ * sharing the *same* db with the *same* default prefix collide on any
+ * overlapping principal/account/keyid namespace.
+ *
+ * This helper emits a one-time `console.warn` at backend construction
+ * when the default prefix meets a node-redis client we can confidently
+ * identify as being on db 0 (the most likely signal of a shared,
+ * non-dedicated Redis). Once per process across every backend that uses
+ * it — operators standing up multiple Redis backends shouldn't see N
+ * identical warnings.
+ *
+ * Best-effort: stays silent for escape-hatch clients (ioredis, Upstash,
+ * test doubles) where we can't introspect the db index. Prefer
+ * false-negative over a noisy false-positive warning.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectNodeRedisDbIndex = detectNodeRedisDbIndex;
+exports.maybeWarnOnSharedRedisPrefix = maybeWarnOnSharedRedisPrefix;
+exports.__resetDefaultPrefixWarningForTests = __resetDefaultPrefixWarningForTests;
+let hasWarnedAboutDefaultPrefix = false;
+/**
+ * Detect the Redis db index when the client is a node-redis v4/v5
+ * `RedisClientType`. Returns `null` for clients we can't introspect.
+ *
+ * Reads `client.options.database` (numeric, present when the client was
+ * constructed with `createClient({ database: N })`) or parses the path
+ * component of `client.options.url`. Escape-hatch clients (no `options`
+ * object of the canonical shape) return `null` and skip the warn.
+ */
+function detectNodeRedisDbIndex(client) {
+    if (!client || typeof client !== 'object')
+        return null;
+    const opts = client.options;
+    if (!opts || typeof opts !== 'object')
+        return null;
+    if (typeof opts.database === 'number')
+        return opts.database;
+    if (typeof opts.url === 'string') {
+        try {
+            const u = new URL(opts.url);
+            if (u.protocol !== 'redis:' && u.protocol !== 'rediss:')
+                return null;
+            const path = u.pathname.replace(/^\//, '');
+            if (path === '')
+                return 0;
+            const n = Number(path);
+            return Number.isInteger(n) && n >= 0 ? n : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * Emit the one-time warn if (a) the caller used the default `keyPrefix`,
+ * (b) didn't pass `suppress`, (c) we can confidently see db 0 from the
+ * client. Otherwise silent.
+ *
+ * **Once per process.** All Redis backends share the warn flag — an
+ * adopter who configures three Redis-backed stores against the same
+ * misconfigured Redis sees one warning total, not three.
+ */
+function maybeWarnOnSharedRedisPrefix(options) {
+    if (options.callerKeyPrefix !== undefined)
+        return;
+    if (options.suppress)
+        return;
+    if (hasWarnedAboutDefaultPrefix)
+        return;
+    if (detectNodeRedisDbIndex(options.client) !== 0)
+        return;
+    hasWarnedAboutDefaultPrefix = true;
+    console.warn(`${options.backendName}: using the default keyPrefix "${options.defaultKeyPrefix}" against Redis db 0. ` +
+        `If this Redis db is shared with another AdCP deployment (or other apps), the per-tenant scope ` +
+        `segment alone is not enough to prevent cross-deployment collision. Set a deployment-unique ` +
+        `keyPrefix (e.g., "${options.defaultKeyPrefix}prod-eu:") or use a dedicated Redis db. ` +
+        `Pass { suppressDefaultPrefixWarning: true } to silence this once you've confirmed isolation.`);
+}
+/**
+ * Test-only escape hatch to reset the once-warn flag between test runs.
+ * Not exported through any public index — adopters can't reach it from
+ * outside the SDK.
+ */
+function __resetDefaultPrefixWarningForTests() {
+    hasWarnedAboutDefaultPrefix = false;
+}
+//# sourceMappingURL=redis-default-prefix-warn.js.map

package/dist/lib/utils/redis-default-prefix-warn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-default-prefix-warn.js","sourceRoot":"","sources":["../../../src/lib/utils/redis-default-prefix-warn.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAaH,wDAkBC;AAwBD,oEAcC;AAOD,kFAEC;AA5ED,IAAI,2BAA2B,GAAG,KAAK,CAAC;AAExC;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,MAAe;IACpD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAI,MAAgD,CAAC,OAAO,CAAC;IACvE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;IAC5D,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACrE,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,CAAC,CAAC;YAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAeD;;;;;;;;GAQG;AACH,SAAgB,4BAA4B,CAAC,OAAuC;IAClF,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO;IAClD,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO;IAC7B,IAAI,2BAA2B;QAAE,OAAO;IACxC,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO;IAEzD,2BAA2B,GAAG,IAAI,CAAC;IACnC,OAAO,CAAC,IAAI,CACV,GAAG,OAAO,CAAC,WAAW,kCAAkC,OAAO,CAAC,gBAAgB,wBAAwB;QACtG,gGAAgG;QAChG,6FAA6F;QAC7F,qBAAqB,OAAO,CAAC,gBAAgB,0CAA0C;QACvF,8FAA8F,CACjG,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,mCAAmC;IACjD,2BAA2B,GAAG,KAAK,CAAC;AACtC,CAAC"}

package/dist/lib/version.d.ts

@@ -1,7 +1,7 @@
 /**
  * AdCP SDK library version
  */
-export declare const LIBRARY_VERSION = "7.8.0";
+export declare const LIBRARY_VERSION = "7.9.0";
 /**
  * AdCP specification version this library is built for
  */
@@ -33,10 +33,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export declare const VERSION_INFO: {
-    readonly library: "7.8.0";
+    readonly library: "7.9.0";
     readonly adcp: "3.0.12";
     readonly compatibleVersions: readonly ["v2.5", "v2.6", "v3", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.0.10", "3.0.11", "3.0.12"];
-    readonly generatedAt: "2026-05-19T14:15:41.473Z";
+    readonly generatedAt: "2026-05-19T21:56:04.707Z";
 };
 /**
  * Get the AdCP specification version this library is built for

package/dist/lib/version.js

@@ -11,7 +11,7 @@ exports.parseAdcpMajorVersion = parseAdcpMajorVersion;
 /**
  * AdCP SDK library version
  */
-exports.LIBRARY_VERSION = '7.8.0';
+exports.LIBRARY_VERSION = '7.9.0';
 /**
  * AdCP specification version this library is built for
  */
@@ -53,10 +53,10 @@ exports.COMPATIBLE_ADCP_VERSIONS = [
  * Full version information
  */
 exports.VERSION_INFO = {
-    library: '7.8.0',
+    library: '7.9.0',
     adcp: '3.0.12',
     compatibleVersions: exports.COMPATIBLE_ADCP_VERSIONS,
-    generatedAt: '2026-05-19T14:15:41.473Z',
+    generatedAt: '2026-05-19T21:56:04.707Z',
 };
 /**
  * Get the AdCP specification version this library is built for

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adcp/sdk",
-  "version": "7.8.0",
+  "version": "7.9.0",
   "description": "AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)",
   "workspaces": [
     ".",
@@ -270,7 +270,8 @@
     "registry:validate-pending": "tsx src/registry/cron.ts --pending",
     "registry:mcp": "tsx src/registry/mcp-server.ts",
     "format": "prettier --write \"./**/*.{css,html,js,ts,tsx,json}\"",
-    "format:check": "prettier --check \"./**/*.{css,html,js,ts,tsx,json}\""
+    "format:check": "prettier --check \"./**/*.{css,html,js,ts,tsx,json}\"",
+    "review:codex": "bash scripts/codex-review.sh"
   },
   "keywords": [
     "adcp",
@@ -315,6 +316,7 @@
     "@modelcontextprotocol/sdk": "^1.17.5",
     "@opentelemetry/api": "^1.0.0",
     "pg": "^8.0.0",
+    "redis": "^4.6.0 || ^5.0.0",
     "zod": "^4.1.5"
   },
   "peerDependenciesMeta": {
@@ -323,6 +325,9 @@
     },
     "pg": {
       "optional": true
+    },
+    "redis": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -342,6 +347,7 @@
     "openapi-typescript": "^7.13.0",
     "pg": "^8.20.0",
     "prettier": "^3.6.2",
+    "redis": "^4.7.0",
     "tar": "^7.5.13",
     "ts-to-zod": "^5.0.1",
     "tsx": "^4.6.0",