chore: release package (rc)

.changeset/pre.json

@@ -70,6 +70,7 @@
     "fix-compact-public-types",
     "fix-k8s-cluster-local-private-url",
     "fix-maxitems-array-types",
+    "fix-per-tool-protocol-error",
     "fix-prerelease-schema-sync",
     "fresh-beta-nine",
     "fresh-beta-ten",
@@ -91,6 +92,7 @@
     "gentle-tasks-keep-account-scope",
     "grader-standalone-transport-default",
     "green-queues-preserve-context",
+    "harden-codeql-findings",
     "honest-betas-preserve",
     "live-signals-cancel",
     "quick-gap-schemas",
@@ -102,6 +104,7 @@
     "quiet-signals-migrate",
     "quiet-tasks-prove",
     "quiet-versioned-schema-advisories",
+    "quiet-versions-select",
     "reject-task-registry-settlement",
     "reporting-file-transfer-schema",
     "safe-settlement-upgrades",
@@ -114,11 +117,14 @@
     "smart-cats-verify-legacy",
     "smart-otters-repair-beta",
     "steady-bundles-generate",
+    "steady-hooks-authorize",
+    "strict-reporting-file-manifest",
     "strict-storyboards-open-scenarios",
     "strong-tasks-cut-over",
     "swift-matrices-reuse",
     "tame-products-bridge",
     "tender-foxes-grade-rejections",
+    "tidy-ants-sing",
     "tidy-banners-lint",
     "tidy-buyers-coordinate",
     "tidy-contexts-propagate",
@@ -138,6 +144,7 @@
     "warm-foxes-list-schemas",
     "warm-webhooks-converge",
     "wire-sales-dooh-specialism",
+    "wise-lemons-batch",
     "wise-macros-compile",
     "wise-renders-project"
   ]

CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 14.0.0-rc.33
+
+### Minor Changes
+
+- 5b109e7: Separate a server's default served AdCP release from its maximum supported release, and expose the immutable selected release across handler contexts.
+- 61815f4: Add a durable persistent notification subscription runtime with caller/account isolation, generation-fenced declarative replacement, exact-tuple activation proof, staged immutable write-only credential bindings, PostgreSQL storage and migrations, bounded concurrent anchor-safe fanout, timed adopter callbacks, and live authorization on every webhook attempt and recovered retry.
+
+### Patch Changes
+
+- d7c5d64: Fix self-contained per-tool declarations so protocol errors do not resolve to the JavaScript global `Error` type.
+- 2466113: Harden diagnostic parsing, Markdown escaping, OAuth logging, credential-derived MCP cache identifiers, and structured logger metadata against CodeQL-identified security risks. Logger handlers now receive credential-redacted, non-mutating metadata copies by default; custom handlers that provide equivalent protection can opt out with `redactCredentials: false`.
+- 64b4400: Reject unknown properties in the public reporting file manifest Zod schema wherever the normative manifest contract is closed.
+- 21caf2e: Sync the AAO registry OpenAPI and generated registry types for newly verified buyer and orchestrator specialisms.
+- f7d2bac: Run ordinary local Node test discovery in bounded fresh-process batches so test heap usage is reclaimed between batches while focused runs and CI shards retain their existing execution shape.
+
 ## 14.0.0-rc.32
 
 ### Major Changes

docs/TYPE-SUMMARY.md

@@ -1,7 +1,7 @@
 # AdCP Type Summary
 
-> Generated at: 2026-09-06
-> @adcp/sdk v14.0.0-rc.32
+> Generated at: 2026-09-07
+> @adcp/sdk v14.0.0-rc.33
 
 Curated reference of the types that matter for using the AdCP client. For full generated types see `src/lib/types/tools.generated.ts` and `src/lib/types/core.generated.ts`.
 

docs/llms.txt

@@ -1,7 +1,7 @@
 # Ad Context Protocol (AdCP)
 
-> Generated at: 2026-09-06
-> Library: @adcp/sdk v14.0.0-rc.32
+> Generated at: 2026-09-07
+> Library: @adcp/sdk v14.0.0-rc.33
 > AdCP major version: 3
 > Canonical URL: https://adcontextprotocol.github.io/adcp-client/llms.txt
 > Note: the `Library` stamp reflects the package.json version at doc-generation time. The narrative below describes the surface that lands on the next-published minor — including any 6.7 helpers documented here ahead of the release tag.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adcp/sdk",
-  "version": "14.0.0-rc.32",
+  "version": "14.0.0-rc.33",
   "description": "AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)",
   "workspaces": [
     ".",

packages/client-shim/package.json

@@ -106,7 +106,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@adcp/sdk": "^14.0.0-rc.32"
+    "@adcp/sdk": "^14.0.0-rc.33"
   },
   "keywords": [
     "adcp",

src/lib/version.ts

@@ -4,7 +4,7 @@
 /**
  * AdCP SDK library version
  */
-export const LIBRARY_VERSION = '14.0.0-rc.32';
+export const LIBRARY_VERSION = '14.0.0-rc.33';
 
 /**
  * AdCP specification version this library is built for
@@ -99,10 +99,10 @@ export type AdcpVersion = (typeof COMPATIBLE_ADCP_VERSIONS)[number];
  * Full version information
  */
 export const VERSION_INFO = {
-  library: '14.0.0-rc.32',
+  library: '14.0.0-rc.33',
   adcp: '3.2.0-rc.1',
   compatibleVersions: COMPATIBLE_ADCP_VERSIONS,
-  generatedAt: '2026-09-05T12:32:51.582Z',
+  generatedAt: '2026-09-07T02:06:48.151Z',
 } as const;
 
 /**