feat: probe-first idempotency/revision/delivery concurrency subsystem (rebuild for #1546) - #1689

Draft

numarasSigmaSoftware wants to merge 161 commits into

prebid:mainfrom

numarasSigmaSoftware:feat/adcp-idempotency-concurrency

Commits on Jul 6, 2026

fix: tolerate AdCP version-negotiation envelope and normalize bearer tokens (#1512)

numarasSigmaSoftware
and
claude
committed
ef120f1

Commits on Jul 7, 2026

fix: strip AdCP negotiation/envelope fields on A2A dispatch (#1512)

numarasSigmaSoftware
and
claude
committed
c2956d7
test: fix forward-compat fixture colliding with version negotiation (#1512)

numarasSigmaSoftware
and
claude
committed
fdb4b10
fix: complete version negotiation per spec and consolidate bearer parsing (#1546 review)

numarasSigmaSoftware
and
claude
committed
5ca6271
fix: align version negotiation with spec classification and cross-transport idempotency (#1546 review round 2)

numarasSigmaSoftware
and
claude
committed
691a4fc

Commits on Jul 9, 2026

Commits on Jul 13, 2026

Commits on Jul 14, 2026

Commits on Jul 15, 2026

feat: persist media_buy revision counter with atomic lock/compare

numarasSigmaSoftware
and
claude
committed
4277a67
refactor: extract backstop-agnostic idempotency-replay primitives

numarasSigmaSoftware
and
claude
committed
47fac97
feat: enforce required idempotency_key + verbatim replay on sync_accounts

numarasSigmaSoftware
and
claude
committed
d9239b1
fix: complete SSRF hardening for webhook URL validation + delivery

numarasSigmaSoftware
and
claude
committed
951539c
test: harden webhook-capture teardown with socket timeout + fail-loud

numarasSigmaSoftware
and
claude
committed
66b206e
docs: refresh stale spec-version commentary to 3.1.1 / adcp 6.6.0

numarasSigmaSoftware
and
claude
committed
7813f79
feat: enforce atomic revision optimistic-concurrency on update_media_buy (3.1.1)

numarasSigmaSoftware
and
claude
committed
75ce2b8
fix: enforce required idempotency_key on sync_creatives (3.1.1)

numarasSigmaSoftware
and
claude
committed
0867257
feat: echo context on REST get_capabilities + wire UC-010 @context scenarios (3.1.1)

numarasSigmaSoftware
and
claude
committed
084a658
test: split A2A wire-error evidence from synthesized envelope (3.1.1)

numarasSigmaSoftware
and
claude
committed
f51a37e
fix: thread capabilities protocols param into the request (3.1.1)

numarasSigmaSoftware
and
claude
committed
843d9a9
feat: forward, SSRF-validate, and register sync_accounts push callback (3.1.1)

numarasSigmaSoftware
and
claude
committed
ad65c76
test: supply required idempotency_key on sync_creatives/sync_accounts call sites (3.1.1)

numarasSigmaSoftware
and
claude
committed
228ebcc
fix: always-block 0.0.0.0/8 + AWS IPv6 metadata and stop SSRF error info-disclosure

numarasSigmaSoftware
and
claude
committed
95428f5
fix: sign and transmit the exact same webhook body bytes

numarasSigmaSoftware
and
claude
committed
cf2e230
fix: stop webhook-capture teardown from leaking a stalled handler into the next test

numarasSigmaSoftware
and
claude
committed
d540756
fix: honor the capabilities protocols filter on every transport

numarasSigmaSoftware
and
claude
committed
0309338
fix: default assets to {} in the A2A sync_creatives handler

numarasSigmaSoftware
and
claude
committed
69fe3e7
feat: durable idempotency reservation infrastructure (schema + primitives)

numarasSigmaSoftware
and
claude
committed
21266ae
feat: atomic first-insert-wins idempotency reservation for sync_accounts + A2A hash fix (3.1.1)

numarasSigmaSoftware
and
claude
committed
cc5eb33
fix: enforce single-transaction integrity for media-buy revision lock (#1546)

numarasSigmaSoftware
and
claude
committed
90bd405
test: prove sync_accounts idempotency reservation under real concurrency (#1546)

numarasSigmaSoftware
and
claude
committed
ee8a0f0
fix: wire the sync_creatives idempotency_key to the reservation (#1546)

numarasSigmaSoftware
and
claude
committed
4bd88b5
test: mock idempotency reservation in sync_creatives A2A transport-gap test

numarasSigmaSoftware
and
claude
committed
bb23dbc
Merge remote-tracking branch 'upstream/main' into pr/adcp-version-negotiation
numarasSigmaSoftware
committed
3ed696f

Commits on Jul 16, 2026

Commits on Jul 17, 2026

Commits on Jul 19, 2026

fix: align AdCP 3.1.1 protocol semantics
numarasSigmaSoftware
committed
9f6f3c7

Commits on Jul 20, 2026

Commits on Jul 21, 2026

Commits on Jul 22, 2026

Commits on Jul 24, 2026

Commits on Jul 30, 2026

Commits on Jul 31, 2026

fix: reconcile the #1697 SSRF merge with the branch's pinned-delivery architecture

numarasSigmaSoftware
and
claude
committed
949ab2f
refactor: classify webhook POST attempts via a named outcome enum

numarasSigmaSoftware
and
claude
committed
05205d5
test: stub the send-time SSRF gate in the signing byte-pinning module

numarasSigmaSoftware
and
claude
committed
50b2a5a
test: pin the enveloped A2A push-config rejection message

numarasSigmaSoftware
and
claude
committed
882baab
fix: scrub the shared SSRF-rejection log helper's buyer-controlled args

numarasSigmaSoftware
and
claude
committed
ab37156
test: share one send-time-SSRF-gate stub for delivery-mechanics modules

numarasSigmaSoftware
and
claude
committed
fec6130
style: sort the signing-module imports after the fixture refactor

numarasSigmaSoftware
and
claude
committed
2c9c308
fix: complete AdCP idempotency guarantees
numarasSigmaSoftware
committed
04d878f
fix: complete durable idempotency guarantees
numarasSigmaSoftware
committed
ea56fcf
fix: close durable idempotency review gaps
numarasSigmaSoftware
committed
32f55e1
fix: reconcile the Layer B port with the trimmed #1546 base

numarasSigmaSoftware
and
claude
committed
780291e
chore: regenerate ratchet baselines for the ported tree

numarasSigmaSoftware
and
claude
committed
e9bc28c
test: assert the signed default-profile POST on the public-URL path

numarasSigmaSoftware
and
claude
committed
7e3bb7d
test: rebase the two SSRF delivery tests onto the durable-claims harness

numarasSigmaSoftware
and
claude
committed
cf366f2

Commits on Aug 11, 2026

Merge upstream/main into pr/adcp-version-negotiation

numarasSigmaSoftware
and
claude
committed
6fe4488

Commits on Aug 12, 2026

Commits on Aug 13, 2026

Commits on Aug 17, 2026

Merge #1546 head (b71b66f62), and scrub the log sites that left the guard's reach

numarasSigmaSoftware
and
claude
committed
efdba9f
fix: refuse an idempotency_key the caller has no scope to replay within

numarasSigmaSoftware
and
claude
committed
6e43e7e
Merge upstream/main (eccc45a76) to restore CI, and keep escaping over stripping

numarasSigmaSoftware
and
claude
committed
fb6d8eb
chore: re-trigger CI after the GitHub archive-download outage

numarasSigmaSoftware
and
claude
committed
a87a833

Commits on Aug 18, 2026

chore: re-run the two checks stranded by the GitHub outage

numarasSigmaSoftware
and
claude
committed
5696a96
chore: re-run CI to settle the in-network 500 signature

numarasSigmaSoftware
and
claude
committed
44e18f9
ci: capture server logs on in-network BDD failure

numarasSigmaSoftware
and
claude
committed
5618cc5