From d71984259aec1807b5e07bf8bc9ad67c904f23d5 Mon Sep 17 00:00:00 2001 From: Brian O'Kelley Date: Mon, 11 May 2026 02:51:33 -0400 Subject: [PATCH] chore(deps): bump @adcp/sdk to ^6.19.0; drop vector-028 skipVectors workaround MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 6.18.0 added the adversarial builder for conformance vector 028 (adcp-client#1644). 6.19.0 ships the proposal-mode enricher fix (adcp-client#1649) that PR #1603's over-application surfaced — required to keep the storyboard matrix green at SDK 6.18+. Drops `028-unsigned-protocol-method-required` from skipVectors so the runner actually exercises vector 028 (the unsigned tasks/cancel JSON-RPC POST that grades `protocol_methods_required_for`). Matrix lift: +1 step per tenant from vector 028 grading. Co-Authored-By: Claude Opus 4.7 (1M context) --- .changeset/sdk-6.19-drop-vector-028-skip.md | 20 ++++++++++++++++++++ package-lock.json | 8 ++++---- package.json | 2 +- server/tests/manual/run-storyboards.ts | 5 ----- 4 files changed, 25 insertions(+), 10 deletions(-) create mode 100644 .changeset/sdk-6.19-drop-vector-028-skip.md diff --git a/.changeset/sdk-6.19-drop-vector-028-skip.md b/.changeset/sdk-6.19-drop-vector-028-skip.md new file mode 100644 index 0000000000..0beaf76618 --- /dev/null +++ b/.changeset/sdk-6.19-drop-vector-028-skip.md @@ -0,0 +1,20 @@ +--- +"adcontextprotocol": patch +--- + +chore(deps): bump `@adcp/sdk` to ^6.19.0; drop vector-028 skipVectors workaround + +`@adcp/sdk@6.18.0` added the adversarial builder for conformance vector `028-unsigned-protocol-method-required` ([adcp-client#1644](https://github.com/adcontextprotocol/adcp-client/pull/1644)), which the test-agent's storyboard matrix had been skipping via `skipVectors` since vector 028 landed in [adcp#4335](https://github.com/adcontextprotocol/adcp/pull/4335). `6.19.0` ships the proposal-mode enricher fix ([adcp-client#1649](https://github.com/adcontextprotocol/adcp-client/pull/1649)) that PR #1603's over-application surfaced — required for the storyboard matrix to stay green at SDK 6.18+. + +Vector 028 grades the `protocol_methods_required_for` namespace introduced in [adcp#4326](https://github.com/adcontextprotocol/adcp/pull/4326) — an unsigned `tasks/cancel` JSON-RPC POST against a verifier declaring `protocol_methods_required_for: ["tasks/cancel"]` MUST 401 with `request_signature_required`. The test-agent's strict route already enforces this; this PR closes the loop by removing the local skip so the runner actually exercises the vector. + +Matrix lift (+1 step per tenant from vector 028 grading): + +| Tenant | Before | After | +|-------------------|--------|-------| +| /signals | 58 | 59 | +| /sales | 258 | 260 | +| /governance | 102 | 103 | +| /creative | 118 | 119 | +| /creative-builder | 100 | 101 | +| /brand | 45 | 46 | diff --git a/package-lock.json b/package-lock.json index 7cbfd4e4a7..299b2ab953 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8,7 +8,7 @@ "name": "adcontextprotocol", "version": "3.0.3", "dependencies": { - "@adcp/sdk": "^6.13.0", + "@adcp/sdk": "^6.19.0", "@anthropic-ai/sdk": "^0.91.1", "@asteasolutions/zod-to-openapi": "^8.5.0", "@contentauth/c2pa-node": "^0.5.4", @@ -124,9 +124,9 @@ } }, "node_modules/@adcp/sdk": { - "version": "6.13.0", - "resolved": "https://registry.npmjs.org/@adcp/sdk/-/sdk-6.13.0.tgz", - "integrity": "sha512-tI20xINPCjRXnW5U6kVygfYRrn3OfxZcP3vpC2JOtIEdfXZvohjFt/woEtfbpbpG3OnnSytUsl0pp/I1R8JgTA==", + "version": "6.19.0", + "resolved": "https://registry.npmjs.org/@adcp/sdk/-/sdk-6.19.0.tgz", + "integrity": "sha512-ASp1xEEiuSeCILCJHmVr8EUjNBEyqT76m2Qyc2e4Zus5DxJrruELkEO2FeGWwi0K/1UKSXUr5IJ7fYsrBY9Gmg==", "license": "Apache-2.0", "workspaces": [ ".", diff --git a/package.json b/package.json index bcffcb0172..58001d26a5 100644 --- a/package.json +++ b/package.json @@ -91,7 +91,7 @@ "dev:docs": "node scripts/dev-docs.mjs" }, "dependencies": { - "@adcp/sdk": "^6.13.0", + "@adcp/sdk": "^6.19.0", "@anthropic-ai/sdk": "^0.91.1", "@asteasolutions/zod-to-openapi": "^8.5.0", "@contentauth/c2pa-node": "^0.5.4", diff --git a/server/tests/manual/run-storyboards.ts b/server/tests/manual/run-storyboards.ts index 0de48dd93a..1f882161e5 100644 --- a/server/tests/manual/run-storyboards.ts +++ b/server/tests/manual/run-storyboards.ts @@ -396,11 +396,6 @@ async function main() { '007-missing-content-digest', '018-digest-covered-when-forbidden', '025-jwk-alg-crv-mismatch', - // Vector 028 grades `protocol_methods_required_for` (introduced - // in adcp#4326). The SDK runner does not yet ship an adversarial - // builder for it — un-skip once `@adcp/sdk` adds the builder. - // Tracked under the runner-implementation umbrella adcp#2331. - '028-unsigned-protocol-method-required', ], skipRateAbuse: true, },