Release v1.2.0

.mcp.json

@@ -2,10 +2,10 @@
   "mcpServers": {
     "local": {
       "type": "http",
-      "url": "https://azerion-gaming.sales-agent.yieldpro.improvedigital.com/mcp",
+      "url": "http://0.0.0.0:8080/mcp",
       "headers": {
-        "Authorization": "Bearer tok_JQOJr84VHKMZGD7R6xJe6YIQFToBK8fKVUIJojtxOHI"
+        "Authorization": "Bearer tok_TsDB5qiLETTMCZab_UAHmUES1cI3tInHt69sxf14TWE"
       }
     }
   }
-}
+}

alembic/versions/a9b8c7d6e5f4_add_adapter_config_locked_at.py

@@ -0,0 +1,63 @@
+"""add adapter_config.config_locked_at
+
+Explicit stored lock state for the adapter-configuration lock
+(src/core/database/adapter_config_lock.py): stamped when a tenant's first
+inventory sync completes; while non-NULL the ad server configuration is
+frozen and only credentials remain editable. Cleared only by platform ops
+under super_admin_override.
+
+Backfill: tenants that already synced inventory (a terminal-success
+sync_jobs row of sync_type='inventory', or legacy gam_inventory rows from
+before sync history existed) are stamped locked at migration time, so the
+lock applies retroactively.
+
+Revision ID: a9b8c7d6e5f4
+Revises: impd02b3c4d5
+Create Date: 2026-09-04
+
+"""
+
+from collections.abc import Sequence
+
+import sqlalchemy as sa
+
+from alembic import op
+
+revision: str = "a9b8c7d6e5f4"
+down_revision: str | Sequence[str] | None = "impd02b3c4d5"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "adapter_config",
+        sa.Column(
+            "config_locked_at",
+            sa.DateTime(timezone=True),
+            nullable=True,
+            comment=(
+                "Set when the tenant's first inventory sync completed; while non-NULL "
+                "the ad server configuration is frozen (only credentials editable)."
+            ),
+        ),
+    )
+
+    op.execute(
+        """
+        UPDATE adapter_config
+        SET config_locked_at = NOW()
+        WHERE config_locked_at IS NULL
+          AND (
+            tenant_id IN (
+                SELECT DISTINCT tenant_id FROM sync_jobs
+                WHERE sync_type = 'inventory' AND status IN ('completed', 'success')
+            )
+            OR tenant_id IN (SELECT DISTINCT tenant_id FROM gam_inventory)
+          )
+        """
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("adapter_config", "config_locked_at")

alembic/versions/impd01_add_improvedigital_inventory.py

@@ -0,0 +1,77 @@
+"""add_improvedigital_inventory
+
+Local cache of Improve Digital 360Yield buy-side inventory (publishers,
+placements, reusable packages, creative sizes). Used by the Improve Digital
+adapter's product configuration UI so operators can pick placements from
+synced inventory without round-tripping to the 360Yield API on every page
+render.
+
+NOT exposed to AdCP buyers -- buyer-facing property discovery goes through
+the AAO lookup path (adagents.json + brand.json). This is a private
+adapter-side cache.
+
+Refreshed on demand via the adapter settings "Sync Inventory" button or
+the periodic AdapterSyncScheduler.
+
+Revision ID: impd01a2b3c4
+Revises: e8f1a2b3c4d5
+Create Date: 2026-07-27 19:00:00.000000
+"""
+
+from collections.abc import Sequence
+
+import sqlalchemy as sa
+
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision: str = "impd01a2b3c4"
+down_revision: str | Sequence[str] | None = "e8f1a2b3c4d5"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    """Create improvedigital_inventory table."""
+    op.create_table(
+        "improvedigital_inventory",
+        sa.Column("tenant_id", sa.String(50), nullable=False),
+        sa.Column(
+            "entity_type",
+            sa.String(40),
+            nullable=False,
+            comment="360Yield entity kind: publisher, placement, package, size",
+        ),
+        sa.Column("entity_id", sa.String(64), nullable=False),
+        sa.Column("name", sa.String(512), nullable=True),
+        sa.Column("parent_id", sa.String(64), nullable=True),
+        sa.Column(
+            "raw_json",
+            sa.JSON().with_variant(sa.dialects.postgresql.JSONB, "postgresql"),
+            nullable=False,
+        ),
+        sa.Column(
+            "last_synced_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.func.now(),
+        ),
+        sa.ForeignKeyConstraint(["tenant_id"], ["tenants.tenant_id"], ondelete="CASCADE"),
+        sa.PrimaryKeyConstraint("tenant_id", "entity_type", "entity_id"),
+    )
+    op.create_index(
+        "idx_improvedigital_inventory_tenant_type",
+        "improvedigital_inventory",
+        ["tenant_id", "entity_type"],
+    )
+    op.create_index(
+        "idx_improvedigital_inventory_parent",
+        "improvedigital_inventory",
+        ["tenant_id", "parent_id"],
+    )
+
+
+def downgrade() -> None:
+    op.drop_index("idx_improvedigital_inventory_parent", table_name="improvedigital_inventory")
+    op.drop_index("idx_improvedigital_inventory_tenant_type", table_name="improvedigital_inventory")
+    op.drop_table("improvedigital_inventory")

alembic/versions/impd02_add_improvedigital_line_item_stats.py

@@ -0,0 +1,83 @@
+"""add_improvedigital_line_item_stats
+
+Per-line-item delivery stats cache for the Improve Digital adapter.
+Populated by the periodic Report API sync (``POST /report/ext/preview``
+with dimensions campaign_id/line_item_id and metrics impressions, clicks,
+advertiser_payout, complete). Read by
+``ImproveDigitalAdapter.get_media_buy_delivery`` so AdCP delivery surfaces
+serve results without round-tripping to 360Yield on every request.
+
+Spend is stored as currency-minor-unit micros (1 EUR = 1_000_000 micros)
+to avoid floating-point precision loss when aggregating.
+
+Revision ID: impd02b3c4d5
+Revises: impd01a2b3c4
+Create Date: 2026-08-04 10:00:00.000000
+"""
+
+from collections.abc import Sequence
+
+import sqlalchemy as sa
+
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision: str = "impd02b3c4d5"
+down_revision: str | Sequence[str] | None = "impd01a2b3c4"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "improvedigital_line_item_stats",
+        sa.Column("tenant_id", sa.String(length=50), nullable=False),
+        sa.Column(
+            "line_item_id",
+            sa.String(length=64),
+            nullable=False,
+            comment="360Yield Classic line-item ID (maps to the AdCP package)",
+        ),
+        sa.Column(
+            "campaign_id",
+            sa.String(length=64),
+            nullable=True,
+            comment="360Yield Classic campaign ID (maps to the AdCP media buy)",
+        ),
+        sa.Column("impressions", sa.BigInteger(), nullable=False, server_default="0"),
+        sa.Column("clicks", sa.BigInteger(), nullable=True),
+        sa.Column(
+            "completed_views",
+            sa.BigInteger(),
+            nullable=True,
+            comment="Video completions (Report API 'complete' metric)",
+        ),
+        sa.Column(
+            "spend_micros",
+            sa.BigInteger(),
+            nullable=False,
+            server_default="0",
+            comment="Spend in currency-minor-unit micros (advertiser_payout * 1e6)",
+        ),
+        sa.Column("currency", sa.String(length=3), nullable=True),
+        sa.Column("delivery_status", sa.String(length=40), nullable=True),
+        sa.Column("as_of", sa.DateTime(timezone=True), nullable=False),
+        sa.Column(
+            "last_synced_at",
+            sa.DateTime(timezone=True),
+            nullable=False,
+            server_default=sa.text("now()"),
+        ),
+        sa.ForeignKeyConstraint(["tenant_id"], ["tenants.tenant_id"], ondelete="CASCADE"),
+        sa.PrimaryKeyConstraint("tenant_id", "line_item_id"),
+    )
+    op.create_index(
+        "idx_impd_li_stats_tenant_campaign",
+        "improvedigital_line_item_stats",
+        ["tenant_id", "campaign_id"],
+    )
+
+
+def downgrade() -> None:
+    op.drop_index("idx_impd_li_stats_tenant_campaign", table_name="improvedigital_line_item_stats")
+    op.drop_table("improvedigital_line_item_stats")

alembic/versions/impd03_add_improvedigital_inventory_trgm_index.py

@@ -0,0 +1,77 @@
+"""add trigram index for Improve Digital inventory picker search
+
+The product-form pickers page through ``improvedigital_inventory`` with a
+case-insensitive substring match on ``name`` OR ``entity_id`` (see
+``ImproveDigitalInventoryRepository.list_picker_rows`` /
+``count_picker_rows``). Without an index every keystroke is a sequential
+scan of the tenant's placement rows — hundreds of thousands in dev. A GIN
+trigram index lets PostgreSQL answer ``ILIKE '%term%'`` on both columns
+with a bitmap scan.
+
+``pg_trgm`` ships with PostgreSQL (and RDS) and is a *trusted* extension on
+PostgreSQL 13+, so the application role can install it. The migration is
+defensive anyway: if the extension is unavailable or cannot be created, it
+logs a warning and leaves the table unindexed — the search still works,
+just slower — rather than failing the boot-time migration and taking the
+service down over a performance index.
+
+Revision ID: impd03c4d5e6
+Revises: a9b8c7d6e5f4
+Create Date: 2026-09-11
+
+"""
+
+from collections.abc import Sequence
+
+import sqlalchemy as sa
+
+from alembic import op
+
+revision: str = "impd03c4d5e6"
+down_revision: str | Sequence[str] | None = "a9b8c7d6e5f4"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+INDEX_NAME = "ix_improvedigital_inventory_trgm"
+
+
+def _ensure_pg_trgm(conn: sa.Connection) -> bool:
+    """Install ``pg_trgm`` if needed. Returns False when it cannot be used."""
+    installed = conn.execute(sa.text("SELECT 1 FROM pg_extension WHERE extname = 'pg_trgm'")).scalar()
+    if installed:
+        return True
+    available = conn.execute(sa.text("SELECT 1 FROM pg_available_extensions WHERE name = 'pg_trgm'")).scalar()
+    if not available:
+        print("WARNING: pg_trgm is not available on this PostgreSQL server; skipping trigram index")
+        return False
+    # Savepoint so a permission failure does not abort the surrounding
+    # migration transaction.
+    try:
+        with conn.begin_nested():
+            conn.execute(sa.text("CREATE EXTENSION IF NOT EXISTS pg_trgm"))
+    except sa.exc.DBAPIError as exc:
+        print(f"WARNING: could not create pg_trgm extension ({exc.orig}); skipping trigram index")
+        return False
+    return True
+
+
+def upgrade() -> None:
+    conn = op.get_bind()
+    if conn.dialect.name != "postgresql":
+        return
+    if not _ensure_pg_trgm(conn):
+        return
+    conn.execute(
+        sa.text(
+            f"CREATE INDEX IF NOT EXISTS {INDEX_NAME} "
+            "ON improvedigital_inventory USING gin (name gin_trgm_ops, entity_id gin_trgm_ops)"
+        )
+    )
+
+
+def downgrade() -> None:
+    conn = op.get_bind()
+    if conn.dialect.name != "postgresql":
+        return
+    # The extension is left installed: other objects may come to rely on it.
+    conn.execute(sa.text(f"DROP INDEX IF EXISTS {INDEX_NAME}"))

core/middleware/admin_mount.py

@@ -39,10 +39,14 @@
 
 from __future__ import annotations
 
+import logging
+import time
 from typing import Any
 
 from src.core.domain_config import get_sales_agent_domain, is_admin_domain
 
+logger = logging.getLogger(__name__)
+
 # Path prefixes the Flask admin claims. Anything under one of these
 # segments dispatches to Flask; everything else falls through to A2A
 # (which serves /.well-known/agent-card.json + the A2A RPC endpoint at
@@ -118,7 +122,7 @@ async def __call__(self, scope: dict, receive: Any, send: Any) -> None:
             if self._is_admin_host(scope):
                 new_scope = dict(scope)
                 new_scope["root_path"] = scope.get("root_path", "") + "/admin"
-                await self.wsgi_app(new_scope, receive, send)
+                await self._dispatch_wsgi(new_scope, receive, send)
                 return
 
             path = scope.get("path", "")
@@ -182,12 +186,47 @@ async def __call__(self, scope: dict, receive: Any, send: Any) -> None:
                         # str length for ASCII prefixes.
                         new_scope["raw_path"] = raw[len(prefix) :] or b"/"
                         new_scope["root_path"] = scope.get("root_path", "") + prefix
-                        await self.wsgi_app(new_scope, receive, send)
+                        await self._dispatch_wsgi(new_scope, receive, send)
                         return
-                    await self.wsgi_app(scope, receive, send)
+                    await self._dispatch_wsgi(scope, receive, send)
                     return
         await self.app(scope, receive, send)
 
+    async def _dispatch_wsgi(self, scope: dict, receive: Any, send: Any) -> None:
+        """Hand an HTTP request to the Flask WSGI app with boundary logging.
+
+        Logs one START line before the request enters the WSGI bridge and one
+        DONE/FAILED line when it comes back. A START with no matching DONE means
+        the request died inside the bridge or the worker thread — the case a
+        reverse proxy reports as 502 while Flask itself never logs anything.
+        Only unsafe methods are logged at INFO to keep GET noise down.
+        """
+        method = scope.get("method", "?")
+        path = scope.get("path", "")
+        noisy = method in ("GET", "HEAD", "OPTIONS")
+        level = logging.DEBUG if noisy else logging.INFO
+        content_length = None
+        for raw_name, raw_value in scope.get("headers", ()):
+            if raw_name.lower() == b"content-length":
+                content_length = raw_value.decode("latin-1")
+        logger.log(
+            level,
+            "[admin_mount] START %s %s host=%s content_length=%s",
+            method,
+            path,
+            self._resolve_host(scope),
+            content_length,
+        )
+        started = time.monotonic()
+        try:
+            await self.wsgi_app(scope, receive, send)
+        except BaseException:
+            logger.exception(
+                "[admin_mount] FAILED %s %s after %.0f ms", method, path, (time.monotonic() - started) * 1000
+            )
+            raise
+        logger.log(level, "[admin_mount] DONE %s %s in %.0f ms", method, path, (time.monotonic() - started) * 1000)
+
     @staticmethod
     def _resolve_host(scope: dict) -> str | None:
         """Pick the externally-visible host from ASGI scope headers.