@adcp/sdk 12.0.0 → 12.0.1

package/dist/lib/server/decisioning/proposal/mock-manager.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 class MockProposalManager {
   capabilities;
   url;

package/dist/lib/server/decisioning/proposal/mock-manager.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../src/lib/server/decisioning/proposal/mock-manager.ts"],"sourcesContent":["/**\n * MockProposalManager — v1 default forwarder.\n *\n * Symmetric with the mock-mode dispatch pattern adopters use to point\n * `DecisioningPlatform` upstreams at a running `bin/adcp.js mock-server`.\n * Adopters who don't yet have proposal logic of their own start with this\n * class pointed at the appropriate mock-server specialism; their first\n * working seller agent runs against the mock fixtures with zero adopter\n * code on the proposal side. They implement their own\n * {@link ProposalManager} subtype incrementally as they replace\n * mock-served slices with real assembly logic.\n *\n * The mock-server lifecycle is **not** managed by the SDK. Adopters or CI\n * start it as needed (`bin/adcp.js mock-server sales-non-guaranteed`) and\n * pass the resulting URL to this class's constructor.\n *\n * Ports `adcp-client-python.src/adcp/decisioning/proposal_manager.py`'s\n * `MockProposalManager` (PR #504).\n *\n * **Runtime requirement**: uses `globalThis.fetch`, which lands as a built-in\n * on Node 20+ (the package declares `\"engines\": { \"node\": \">=20.0.0\" }`).\n * Adopters running on older Node, on Bun without the global, or in any\n * environment without a global `fetch` should pass an explicit `fetch`\n * implementation via the `fetch` constructor option.\n *\n * @public\n * @packageDocumentation\n */\n\nimport type { Account } from '../account';\nimport type { RequestContext } from '../context';\nimport type { GetProductsRequest } from '../../../types/tools.generated';\nimport type {\n  ProposalCapabilities,\n  ProposalGetProductsPayload,\n  ProposalManager,\n  ProposalSalesSpecialism,\n  Recipe,\n} from './types';\n\n/**\n * Construction options for {@link MockProposalManager}.\n *\n * @public\n */\nexport interface MockProposalManagerOptions {\n  /**\n   * URL of the running mock-server. The forwarder POSTs\n   * `GetProductsRequest` payloads to `${mockUpstreamUrl}/get_products`\n   * and (when refine is enabled) `${mockUpstreamUrl}/refine_products`.\n   *\n   * Required and non-empty.\n   */\n  mockUpstreamUrl: string;\n\n  /**\n   * Which sales specialism this mock manager serves. Defaults to\n   * `sales-non-guaranteed` (the catalog-style mock-server fixture).\n   * Adopters wiring a guaranteed mock pass `sales-guaranteed` so the\n   * framework's capability projection matches the fixtures.\n   */\n  salesSpecialism?: ProposalSalesSpecialism;\n\n  /**\n   * When true, the manager declares `refine` capability and forwards\n   * `buying_mode: 'refine'` requests to `/refine_products`. Default\n   * false — the framework falls through to `getProducts` for refine.\n   */\n  refine?: boolean;\n\n  /**\n   * Headers forwarded on every mock-server request (e.g. `X-Tenant-Id`).\n   */\n  defaultHeaders?: Readonly<Record<string, string>>;\n\n  /**\n   * Per-request timeout in milliseconds. Default 30 seconds.\n   */\n  timeoutMs?: number;\n\n  /**\n   * Optional `fetch` override for testing. Defaults to the global\n   * `fetch` (Node 18+).\n   */\n  fetch?: typeof globalThis.fetch;\n}\n\n/**\n * v1 default forwarder. Dispatches `getProducts` / `refineProducts` to\n * a running mock-server.\n *\n * @public\n */\nexport class MockProposalManager<TRecipe extends Recipe = Recipe, TCtxMeta = unknown> implements ProposalManager<\n  TRecipe,\n  TCtxMeta\n> {\n  readonly capabilities: ProposalCapabilities;\n  private readonly url: string;\n  private readonly headers: Readonly<Record<string, string>>;\n  private readonly timeoutMs: number;\n  private readonly fetchImpl: typeof globalThis.fetch;\n\n  constructor(options: MockProposalManagerOptions) {\n    if (!options.mockUpstreamUrl || typeof options.mockUpstreamUrl !== 'string') {\n      throw new Error(\n        'MockProposalManager requires a non-empty `mockUpstreamUrl` pointing at a ' +\n          'running `bin/adcp.js mock-server <specialism>` instance.'\n      );\n    }\n    this.capabilities = {\n      salesSpecialism: options.salesSpecialism ?? 'sales-non-guaranteed',\n      refine: options.refine ?? false,\n    };\n    // Strip trailing slashes (loop-based, not regex) so we keep\n    // `${url}/get_products` clean without a quantifier-and-anchor\n    // pattern CodeQL flags as polynomial-ReDoS-adjacent.\n    let trimmed = options.mockUpstreamUrl;\n    while (trimmed.endsWith('/')) trimmed = trimmed.slice(0, -1);\n    this.url = trimmed;\n    this.headers = options.defaultHeaders ?? {};\n    this.timeoutMs = options.timeoutMs ?? 30_000;\n    this.fetchImpl = options.fetch ?? globalThis.fetch;\n  }\n\n  /** The configured mock-server URL — useful for diagnostics. */\n  get mockUpstreamUrl(): string {\n    return this.url;\n  }\n\n  async getProducts(\n    req: GetProductsRequest,\n    _ctx: RequestContext<Account<TCtxMeta>>\n  ): Promise<ProposalGetProductsPayload> {\n    return this.forward('/get_products', req);\n  }\n\n  async refineProducts(\n    req: GetProductsRequest,\n    _ctx: RequestContext<Account<TCtxMeta>>\n  ): Promise<ProposalGetProductsPayload> {\n    if (!this.capabilities.refine) {\n      // Adopter wired the manager without refine but the framework\n      // dispatched here anyway — surface the inconsistency rather than\n      // silently forwarding.\n      throw new Error(\n        'MockProposalManager.refineProducts called but capabilities.refine is false. ' +\n          'Pass `refine: true` to the constructor to enable refine forwarding.'\n      );\n    }\n    return this.forward('/refine_products', req);\n  }\n\n  private async forward(path: string, body: unknown): Promise<ProposalGetProductsPayload> {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), this.timeoutMs);\n    try {\n      const response = await this.fetchImpl(`${this.url}${path}`, {\n        method: 'POST',\n        headers: {\n          'content-type': 'application/json',\n          accept: 'application/json',\n          ...this.headers,\n        },\n        body: JSON.stringify(body),\n        signal: controller.signal,\n      });\n      if (!response.ok) {\n        const text = await response.text().catch(() => '');\n        throw new Error(\n          `MockProposalManager: mock-server returned ${response.status} for ${path}` +\n            (text ? `: ${text.slice(0, 500)}` : '')\n        );\n      }\n      const json = (await response.json()) as ProposalGetProductsPayload;\n      return json;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n}\n"],"mappings":";;;;;;AA6FO,MAAM,oBAGX;AAAA,EACS;AAAA,EACQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAqC;AAC/C,QAAI,CAAC,QAAQ,mBAAmB,OAAO,QAAQ,oBAAoB,UAAU;AAC3E,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,SAAK,eAAe;AAAA,MAClB,iBAAiB,QAAQ,mBAAmB;AAAA,MAC5C,QAAQ,QAAQ,UAAU;AAAA,IAC5B;AAIA,QAAI,UAAU,QAAQ;AACtB,WAAO,QAAQ,SAAS,GAAG,EAAG,WAAU,QAAQ,MAAM,GAAG,EAAE;AAC3D,SAAK,MAAM;AACX,SAAK,UAAU,QAAQ,kBAAkB,CAAC;AAC1C,SAAK,YAAY,QAAQ,aAAa;AACtC,SAAK,YAAY,QAAQ,SAAS,WAAW;AAAA,EAC/C;AAAA;AAAA,EAGA,IAAI,kBAA0B;AAC5B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,YACJ,KACA,MACqC;AACrC,WAAO,KAAK,QAAQ,iBAAiB,GAAG;AAAA,EAC1C;AAAA,EAEA,MAAM,eACJ,KACA,MACqC;AACrC,QAAI,CAAC,KAAK,aAAa,QAAQ;AAI7B,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,WAAO,KAAK,QAAQ,oBAAoB,GAAG;AAAA,EAC7C;AAAA,EAEA,MAAc,QAAQ,MAAc,MAAoD;AACtF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,SAAS;AACjE,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,UAAU,GAAG,KAAK,GAAG,GAAG,IAAI,IAAI;AAAA,QAC1D,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,QAAQ;AAAA,UACR,GAAG,KAAK;AAAA,QACV;AAAA,QACA,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,QAAQ,WAAW;AAAA,MACrB,CAAC;AACD,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,OAAO,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACjD,cAAM,IAAI;AAAA,UACR,6CAA6C,SAAS,MAAM,QAAQ,IAAI,MACrE,OAAO,KAAK,KAAK,MAAM,GAAG,GAAG,CAAC,KAAK;AAAA,QACxC;AAAA,MACF;AACA,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,aAAO;AAAA,IACT,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../../../src/lib/server/decisioning/proposal/mock-manager.ts"],"sourcesContent":["/**\n * MockProposalManager — v1 default forwarder.\n *\n * Symmetric with the mock-mode dispatch pattern adopters use to point\n * `DecisioningPlatform` upstreams at a running `bin/adcp.js mock-server`.\n * Adopters who don't yet have proposal logic of their own start with this\n * class pointed at the appropriate mock-server specialism; their first\n * working seller agent runs against the mock fixtures with zero adopter\n * code on the proposal side. They implement their own\n * {@link ProposalManager} subtype incrementally as they replace\n * mock-served slices with real assembly logic.\n *\n * The mock-server lifecycle is **not** managed by the SDK. Adopters or CI\n * start it as needed (`bin/adcp.js mock-server sales-non-guaranteed`) and\n * pass the resulting URL to this class's constructor.\n *\n * Ports `adcp-client-python.src/adcp/decisioning/proposal_manager.py`'s\n * `MockProposalManager` (PR #504).\n *\n * **Runtime requirement**: uses `globalThis.fetch`, which lands as a built-in\n * on Node 20+ (the package declares `\"engines\": { \"node\": \">=20.0.0\" }`).\n * Adopters running on older Node, on Bun without the global, or in any\n * environment without a global `fetch` should pass an explicit `fetch`\n * implementation via the `fetch` constructor option.\n *\n * @public\n * @packageDocumentation\n */\n\nimport type { Account } from '../account';\nimport type { RequestContext } from '../context';\nimport type { GetProductsRequest } from '../../../types/tools.generated';\nimport type {\n  ProposalCapabilities,\n  ProposalGetProductsPayload,\n  ProposalManager,\n  ProposalSalesSpecialism,\n  Recipe,\n} from './types';\n\n/**\n * Construction options for {@link MockProposalManager}.\n *\n * @public\n */\nexport interface MockProposalManagerOptions {\n  /**\n   * URL of the running mock-server. The forwarder POSTs\n   * `GetProductsRequest` payloads to `${mockUpstreamUrl}/get_products`\n   * and (when refine is enabled) `${mockUpstreamUrl}/refine_products`.\n   *\n   * Required and non-empty.\n   */\n  mockUpstreamUrl: string;\n\n  /**\n   * Which sales specialism this mock manager serves. Defaults to\n   * `sales-non-guaranteed` (the catalog-style mock-server fixture).\n   * Adopters wiring a guaranteed mock pass `sales-guaranteed` so the\n   * framework's capability projection matches the fixtures.\n   */\n  salesSpecialism?: ProposalSalesSpecialism;\n\n  /**\n   * When true, the manager declares `refine` capability and forwards\n   * `buying_mode: 'refine'` requests to `/refine_products`. Default\n   * false — the framework falls through to `getProducts` for refine.\n   */\n  refine?: boolean;\n\n  /**\n   * Headers forwarded on every mock-server request (e.g. `X-Tenant-Id`).\n   */\n  defaultHeaders?: Readonly<Record<string, string>>;\n\n  /**\n   * Per-request timeout in milliseconds. Default 30 seconds.\n   */\n  timeoutMs?: number;\n\n  /**\n   * Optional `fetch` override for testing. Defaults to the global\n   * `fetch` (Node 18+).\n   */\n  fetch?: typeof globalThis.fetch;\n}\n\n/**\n * v1 default forwarder. Dispatches `getProducts` / `refineProducts` to\n * a running mock-server.\n *\n * @public\n */\nexport class MockProposalManager<TRecipe extends Recipe = Recipe, TCtxMeta = unknown> implements ProposalManager<\n  TRecipe,\n  TCtxMeta\n> {\n  readonly capabilities: ProposalCapabilities;\n  private readonly url: string;\n  private readonly headers: Readonly<Record<string, string>>;\n  private readonly timeoutMs: number;\n  private readonly fetchImpl: typeof globalThis.fetch;\n\n  constructor(options: MockProposalManagerOptions) {\n    if (!options.mockUpstreamUrl || typeof options.mockUpstreamUrl !== 'string') {\n      throw new Error(\n        'MockProposalManager requires a non-empty `mockUpstreamUrl` pointing at a ' +\n          'running `bin/adcp.js mock-server <specialism>` instance.'\n      );\n    }\n    this.capabilities = {\n      salesSpecialism: options.salesSpecialism ?? 'sales-non-guaranteed',\n      refine: options.refine ?? false,\n    };\n    // Strip trailing slashes (loop-based, not regex) so we keep\n    // `${url}/get_products` clean without a quantifier-and-anchor\n    // pattern CodeQL flags as polynomial-ReDoS-adjacent.\n    let trimmed = options.mockUpstreamUrl;\n    while (trimmed.endsWith('/')) trimmed = trimmed.slice(0, -1);\n    this.url = trimmed;\n    this.headers = options.defaultHeaders ?? {};\n    this.timeoutMs = options.timeoutMs ?? 30_000;\n    this.fetchImpl = options.fetch ?? globalThis.fetch;\n  }\n\n  /** The configured mock-server URL — useful for diagnostics. */\n  get mockUpstreamUrl(): string {\n    return this.url;\n  }\n\n  async getProducts(\n    req: GetProductsRequest,\n    _ctx: RequestContext<Account<TCtxMeta>>\n  ): Promise<ProposalGetProductsPayload> {\n    return this.forward('/get_products', req);\n  }\n\n  async refineProducts(\n    req: GetProductsRequest,\n    _ctx: RequestContext<Account<TCtxMeta>>\n  ): Promise<ProposalGetProductsPayload> {\n    if (!this.capabilities.refine) {\n      // Adopter wired the manager without refine but the framework\n      // dispatched here anyway — surface the inconsistency rather than\n      // silently forwarding.\n      throw new Error(\n        'MockProposalManager.refineProducts called but capabilities.refine is false. ' +\n          'Pass `refine: true` to the constructor to enable refine forwarding.'\n      );\n    }\n    return this.forward('/refine_products', req);\n  }\n\n  private async forward(path: string, body: unknown): Promise<ProposalGetProductsPayload> {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), this.timeoutMs);\n    try {\n      const response = await this.fetchImpl(`${this.url}${path}`, {\n        method: 'POST',\n        headers: {\n          'content-type': 'application/json',\n          accept: 'application/json',\n          ...this.headers,\n        },\n        body: JSON.stringify(body),\n        signal: controller.signal,\n      });\n      if (!response.ok) {\n        const text = await response.text().catch(() => '');\n        throw new Error(\n          `MockProposalManager: mock-server returned ${response.status} for ${path}` +\n            (text ? `: ${text.slice(0, 500)}` : '')\n        );\n      }\n      const json = (await response.json()) as ProposalGetProductsPayload;\n      return json;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n}\n"],"mappings":"AA6FO,MAAM,oBAGX;AAAA,EACS;AAAA,EACQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAqC;AAC/C,QAAI,CAAC,QAAQ,mBAAmB,OAAO,QAAQ,oBAAoB,UAAU;AAC3E,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,SAAK,eAAe;AAAA,MAClB,iBAAiB,QAAQ,mBAAmB;AAAA,MAC5C,QAAQ,QAAQ,UAAU;AAAA,IAC5B;AAIA,QAAI,UAAU,QAAQ;AACtB,WAAO,QAAQ,SAAS,GAAG,EAAG,WAAU,QAAQ,MAAM,GAAG,EAAE;AAC3D,SAAK,MAAM;AACX,SAAK,UAAU,QAAQ,kBAAkB,CAAC;AAC1C,SAAK,YAAY,QAAQ,aAAa;AACtC,SAAK,YAAY,QAAQ,SAAS,WAAW;AAAA,EAC/C;AAAA;AAAA,EAGA,IAAI,kBAA0B;AAC5B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,YACJ,KACA,MACqC;AACrC,WAAO,KAAK,QAAQ,iBAAiB,GAAG;AAAA,EAC1C;AAAA,EAEA,MAAM,eACJ,KACA,MACqC;AACrC,QAAI,CAAC,KAAK,aAAa,QAAQ;AAI7B,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,WAAO,KAAK,QAAQ,oBAAoB,GAAG;AAAA,EAC7C;AAAA,EAEA,MAAc,QAAQ,MAAc,MAAoD;AACtF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,SAAS;AACjE,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,UAAU,GAAG,KAAK,GAAG,GAAG,IAAI,IAAI;AAAA,QAC1D,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,QAAQ;AAAA,UACR,GAAG,KAAK;AAAA,QACV;AAAA,QACA,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,QAAQ,WAAW;AAAA,MACrB,CAAC;AACD,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,OAAO,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACjD,cAAM,IAAI;AAAA,UACR,6CAA6C,SAAS,MAAM,QAAQ,IAAI,MACrE,OAAO,KAAK,KAAK,MAAM,GAAG,GAAG,CAAC,KAAK;AAAA,QACxC;AAAA,MACF;AACA,YAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,aAAO;AAAA,IACT,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF;AACF;","names":[]}

package/dist/lib/server/decisioning/proposal/store.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 import { AdcpError } from "../async-outcome.mjs";
 const DEFAULT_DRAFT_TTL_MS = 24 * 60 * 60 * 1e3;
 const DEFAULT_COMMITTED_GRACE_MS = 7 * 24 * 60 * 60 * 1e3;

package/dist/lib/server/decisioning/proposal/store.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../src/lib/server/decisioning/proposal/store.ts"],"sourcesContent":["/**\n * ProposalStore — per-tenant proposal lifecycle persistence.\n *\n * The single ledger for proposal recipes across the entire lifecycle:\n * draft (in-flight refine iterations) → committed (post-finalize, with\n * `expires_at` hold window) → consumed (post-`create_media_buy`).\n *\n * Ports `adcp-client-python.src/adcp/decisioning/proposal_store.py`.\n *\n * State machine the framework drives:\n *\n * ```\n *                              ┌──── releaseConsumption ────┐\n *                              ▼                            │\n *  putDraft ─► DRAFT ─► commit ─► COMMITTED ─► tryReserveConsumption ─► CONSUMING\n *                ▲                                                          │\n *                │                                                          │\n *             (refine                                              finalizeConsumption\n *              iteration)                                                   │\n *                │                                                          ▼\n *                └─ putDraft (overwrite while DRAFT) ─┘                CONSUMED\n *                                                                       (terminal)\n * ```\n *\n * The `COMMITTED → CONSUMING → CONSUMED` two-phase transition prevents the\n * inventory double-spend race that a check-then-act sequence on `COMMITTED`\n * would expose. Two parallel `create_media_buy(proposal_id=X)` calls cannot\n * both reserve the proposal — the second `tryReserveConsumption` raises\n * `PROPOSAL_NOT_COMMITTED` once the first transitions the record. Adapter\n * dispatch runs against the reservation; on success the framework calls\n * `finalizeConsumption`; on failure `releaseConsumption` rolls back to\n * COMMITTED so the buyer can retry.\n *\n * Transitions outside this graph (commit-from-COMMITTED with mismatched\n * payload, finalize-from-DRAFT, etc.) throw `AdcpError` with `INTERNAL_ERROR`\n * — those are framework / adopter bugs, not buyer-facing rejections.\n *\n * @public\n * @packageDocumentation\n */\n\nimport type { MaybePromise } from '../../create-adcp-server';\nimport { AdcpError } from '../async-outcome';\nimport type { Recipe } from './types';\n\n/**\n * Lifecycle states for a stored proposal.\n *\n * No `EXPIRED` member: the framework computes expiry from\n * {@link ProposalRecord.expiresAt} + the current clock + the adopter's\n * grace window. Storing expiry as a state would create a clock-driven\n * write the framework doesn't actually need.\n *\n * @public\n */\nexport type ProposalState = 'draft' | 'committed' | 'consuming' | 'consumed';\n\n/**\n * The framework's per-proposal storage row.\n *\n * @public\n */\nexport interface ProposalRecord<TRecipe extends Recipe = Recipe> {\n  /** Stable identifier the buyer receives in the `proposals[]` wire array. */\n  proposalId: string;\n  /** Account that owns the proposal. Drives the cross-tenant check on `get`. */\n  accountId: string;\n  /** Current lifecycle state. */\n  state: ProposalState;\n  /**\n   * `productId -> Recipe` mapping. The {@link ProposalManager} returned these\n   * alongside products on `getProducts` / `refineProducts`; the framework\n   * persists them so `DecisioningPlatform.createMediaBuy` can hydrate\n   * `ctx.recipes` from this same record.\n   */\n  recipes: ReadonlyMap<string, TRecipe>;\n  /**\n   * The wire `Proposal` shape. Stored so the framework can re-emit it on\n   * refine iterations or replay it post-finalize without round-tripping\n   * through the manager again.\n   */\n  proposalPayload: Record<string, unknown>;\n  /**\n   * Set on `commit`. The inventory hold window; framework rejects\n   * `create_media_buy` calls past this deadline (plus the adopter's grace).\n   */\n  expiresAt?: Date;\n  /**\n   * Set on `finalizeConsumption`. The accepted proposal's terminal binding\n   * to a media buy; reverse-index lookups via `getByMediaBuyId` use this.\n   */\n  mediaBuyId?: string;\n  /**\n   * Captured at `putDraft` time. Adopters whose Recipe subtypes add required\n   * fields later bump the schema and write a migration (or evict pre-bump\n   * records). Framework reads but does not enforce.\n   */\n  recipeSchemaVersion?: number;\n}\n\n/**\n * Per-tenant proposal lifecycle persistence.\n *\n * Methods may return `T` or `Promise<T>` — the framework awaits at call time.\n * Mirrors the in-tree `MediaBuyStore` posture.\n *\n * @public\n */\nexport interface ProposalStore<TRecipe extends Recipe = Recipe> {\n  /**\n   * Drives the production-mode gate. `false` for {@link InMemoryProposalStore};\n   * `true` for adopter-supplied durable backings (Postgres / Redis).\n   */\n  readonly isDurable: boolean;\n\n  /**\n   * Store / replace a draft proposal.\n   *\n   * Refine iterations call this with the same `proposalId` to overwrite.\n   * Calling on a record currently in COMMITTED, CONSUMING, or CONSUMED is\n   * rejected.\n   */\n  putDraft(args: {\n    proposalId: string;\n    accountId: string;\n    recipes: ReadonlyMap<string, TRecipe>;\n    proposalPayload: Record<string, unknown>;\n  }): MaybePromise<void>;\n\n  /**\n   * Look up a proposal record. Cross-tenant probes return `null` rather\n   * than the raw record — required to defeat principal-enumeration via\n   * `proposalId` probing. The dispatch path always passes the\n   * authenticated principal's `accountId`.\n   *\n   * **`expectedAccountId` is required.** Earlier preview made it optional\n   * for \"framework-internal raw read\" callers, but every call site that\n   * loads a record into a buyer-visible response path needs the tenant\n   * gate. Direct-debug callers that legitimately want a raw record across\n   * tenants should reach for a separate operator-tool surface, not bypass\n   * this gate. Closes a sharp edge an adopter would silently miss.\n   */\n  get(proposalId: string, args: { expectedAccountId: string }): MaybePromise<ProposalRecord<TRecipe> | null>;\n\n  /**\n   * Promote DRAFT → COMMITTED. Idempotent on re-call with equal `expiresAt`\n   * + `proposalPayload`. A second commit with different values raises\n   * `INTERNAL_ERROR`.\n   */\n  commit(proposalId: string, args: { expiresAt: Date; proposalPayload: Record<string, unknown> }): MaybePromise<void>;\n\n  /**\n   * Atomic CAS: COMMITTED → CONSUMING.\n   *\n   * The framework calls this BEFORE dispatching `createMediaBuy`. Holds\n   * the reservation until `finalizeConsumption` (success) or\n   * `releaseConsumption` (rollback). Two parallel callers cannot both\n   * reserve; the loser raises `PROPOSAL_NOT_COMMITTED`. SQL-backed\n   * implementations use `SELECT … FOR UPDATE` or equivalent.\n   *\n   * @throws AdcpError `PROPOSAL_NOT_FOUND` when no record exists,\n   *   `PROPOSAL_NOT_COMMITTED` when state is not COMMITTED.\n   */\n  tryReserveConsumption(proposalId: string, args: { expectedAccountId: string }): MaybePromise<ProposalRecord<TRecipe>>;\n\n  /**\n   * Promote CONSUMING → CONSUMED and record the `mediaBuyId` back-reference\n   * for `getByMediaBuyId` lookups.\n   */\n  finalizeConsumption(proposalId: string, args: { mediaBuyId: string; expectedAccountId: string }): MaybePromise<void>;\n\n  /**\n   * Rollback path: CONSUMING → COMMITTED. Idempotent on a record already\n   * in COMMITTED. Called when the adapter's `createMediaBuy` raises so\n   * the buyer can retry without `PROPOSAL_NOT_COMMITTED`.\n   */\n  releaseConsumption(proposalId: string, args: { expectedAccountId: string }): MaybePromise<void>;\n\n  /**\n   * Discard a proposal record. Idempotent — discarding an unknown id is\n   * a no-op (no throw).\n   */\n  discard(proposalId: string): MaybePromise<void>;\n\n  /**\n   * Reverse-index lookup. Hydrate the (consumed) proposal that produced\n   * this `mediaBuyId` for the given tenant.\n   *\n   * `expectedAccountId` is required (no default) because `mediaBuyId` is\n   * adopter-controlled and can collide across tenants. SQL-backed impls\n   * add a uniqueness constraint on `(accountId, mediaBuyId)` where\n   * `mediaBuyId IS NOT NULL`.\n   */\n  getByMediaBuyId(\n    mediaBuyId: string,\n    args: { expectedAccountId: string }\n  ): MaybePromise<ProposalRecord<TRecipe> | null>;\n}\n\n// ---------------------------------------------------------------------------\n// In-memory reference implementation\n// ---------------------------------------------------------------------------\n\nconst DEFAULT_DRAFT_TTL_MS = 24 * 60 * 60 * 1000; // 24h\nconst DEFAULT_COMMITTED_GRACE_MS = 7 * 24 * 60 * 60 * 1000; // 7 days\n\n/**\n * Construction options for {@link InMemoryProposalStore}.\n *\n * @public\n */\nexport interface InMemoryProposalStoreOptions {\n  /**\n   * How long a draft proposal lives without a commit before being evicted.\n   * Default 24h. Pass as milliseconds.\n   */\n  draftTtlMs?: number;\n  /**\n   * How long a committed (or consumed) proposal lives past its `expiresAt`\n   * before eviction. Default 7 days. Pass as milliseconds.\n   */\n  committedGraceMs?: number;\n  /**\n   * Test-injectable clock. Defaults to `() => new Date()`.\n   */\n  clock?: () => Date;\n}\n\n/**\n * Process-local {@link ProposalStore} reference implementation.\n *\n * Storage is a plain `Map` — JS event-loop atomicity covers the critical\n * sections (no preemption between awaits within a method body since there\n * are no awaits). Adequate for local dev, CI, and tests; production\n * deployments wire a durable backing implementing the same interface.\n *\n * Eviction:\n *\n *   - Drafts older than `draftTtlMs` (default 24h) are evicted on every\n *     read / write.\n *   - Committed proposals more than `committedGraceMs` past `expiresAt`\n *     (default 7 days) are evicted.\n *\n * Eviction runs lazily — no background timer thread.\n *\n * Cross-tenant safety: `get` and `getByMediaBuyId` honor `expectedAccountId`\n * — cross-tenant probes return `null`, not the raw record.\n *\n * @public\n */\nexport class InMemoryProposalStore<TRecipe extends Recipe = Recipe> implements ProposalStore<TRecipe> {\n  readonly isDurable = false;\n\n  private readonly records: Map<string, ProposalRecord<TRecipe>> = new Map();\n  // Reverse index keyed by `${accountId}::${mediaBuyId}`. Tenant scoping in\n  // the key prevents collisions when adopter media_buy_ids overlap across\n  // tenants (sequential IDs, deterministic test fixtures).\n  private readonly mediaBuyIndex: Map<string, string> = new Map();\n  private readonly creationTimes: Map<string, Date> = new Map();\n  private readonly draftTtlMs: number;\n  private readonly committedGraceMs: number;\n  private readonly clock: () => Date;\n\n  constructor(options: InMemoryProposalStoreOptions = {}) {\n    this.draftTtlMs = options.draftTtlMs ?? DEFAULT_DRAFT_TTL_MS;\n    this.committedGraceMs = options.committedGraceMs ?? DEFAULT_COMMITTED_GRACE_MS;\n    this.clock = options.clock ?? (() => new Date());\n  }\n\n  private mediaBuyKey(accountId: string, mediaBuyId: string): string {\n    return `${accountId}::${mediaBuyId}`;\n  }\n\n  private evictExpired(): void {\n    const now = this.clock().getTime();\n    const toRemove: string[] = [];\n    for (const [proposalId, record] of this.records) {\n      const created = this.creationTimes.get(proposalId)?.getTime() ?? now;\n      if (record.state === 'draft') {\n        if (now - created > this.draftTtlMs) toRemove.push(proposalId);\n      } else if (record.expiresAt) {\n        const deadline = record.expiresAt.getTime() + this.committedGraceMs;\n        if (now > deadline) toRemove.push(proposalId);\n      }\n    }\n    for (const proposalId of toRemove) {\n      const removed = this.records.get(proposalId);\n      this.records.delete(proposalId);\n      this.creationTimes.delete(proposalId);\n      if (removed?.mediaBuyId) {\n        this.mediaBuyIndex.delete(this.mediaBuyKey(removed.accountId, removed.mediaBuyId));\n      }\n    }\n  }\n\n  putDraft(args: {\n    proposalId: string;\n    accountId: string;\n    recipes: ReadonlyMap<string, TRecipe>;\n    proposalPayload: Record<string, unknown>;\n  }): void {\n    this.evictExpired();\n    const existing = this.records.get(args.proposalId);\n    if (existing && existing.state !== 'draft') {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Cannot putDraft on proposal ${JSON.stringify(args.proposalId)} in state ` +\n          `${JSON.stringify(existing.state)}; refine iterations are only valid on draft ` +\n          `proposals. Once committed or consumed, a proposal_id is immutable.`,\n      });\n    }\n    const record: ProposalRecord<TRecipe> = {\n      proposalId: args.proposalId,\n      accountId: args.accountId,\n      state: 'draft',\n      recipes: new Map(args.recipes),\n      proposalPayload: { ...args.proposalPayload },\n    };\n    this.records.set(args.proposalId, record);\n    // Refine iterations preserve the original creation time so the 24h\n    // draft TTL is anchored to the start of the buyer's session, not the\n    // most recent iteration.\n    if (!this.creationTimes.has(args.proposalId)) {\n      this.creationTimes.set(args.proposalId, this.clock());\n    }\n  }\n\n  get(proposalId: string, args: { expectedAccountId: string }): ProposalRecord<TRecipe> | null {\n    this.evictExpired();\n    const record = this.records.get(proposalId);\n    if (!record) return null;\n    if (record.accountId !== args.expectedAccountId) {\n      // Cross-tenant probe — return null, not raw record.\n      return null;\n    }\n    return record;\n  }\n\n  commit(proposalId: string, args: { expiresAt: Date; proposalPayload: Record<string, unknown> }): void {\n    this.evictExpired();\n    const record = this.records.get(proposalId);\n    if (!record) {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Cannot commit proposal ${JSON.stringify(proposalId)}: not in store. The ` +\n          `framework's finalize dispatch must putDraft before commit.`,\n      });\n    }\n    const payload = { ...args.proposalPayload };\n    if (record.state === 'committed') {\n      const sameDeadline = record.expiresAt?.getTime() === args.expiresAt.getTime();\n      const samePayload = JSON.stringify(record.proposalPayload) === JSON.stringify(payload);\n      if (sameDeadline && samePayload) return;\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Proposal ${JSON.stringify(proposalId)} already committed with a different ` +\n          `expires_at or payload — re-commit with different values is a developer bug.`,\n      });\n    }\n    if (record.state !== 'draft') {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Cannot commit proposal ${JSON.stringify(proposalId)} from state ` +\n          `${JSON.stringify(record.state)}; commit requires DRAFT.`,\n      });\n    }\n    this.records.set(proposalId, {\n      ...record,\n      state: 'committed',\n      expiresAt: args.expiresAt,\n      proposalPayload: payload,\n    });\n  }\n\n  tryReserveConsumption(proposalId: string, args: { expectedAccountId: string }): ProposalRecord<TRecipe> {\n    this.evictExpired();\n    const record = this.records.get(proposalId);\n    // Cross-tenant probe collapses to PROPOSAL_NOT_FOUND — same\n    // principal-enumeration defense as `get`.\n    if (!record || record.accountId !== args.expectedAccountId) {\n      throw new AdcpError('PROPOSAL_NOT_FOUND', {\n        recovery: 'correctable',\n        message: `Proposal ${JSON.stringify(proposalId)} not found.`,\n        field: 'proposal_id',\n      });\n    }\n    if (record.state !== 'committed') {\n      throw new AdcpError('PROPOSAL_NOT_COMMITTED', {\n        recovery: 'correctable',\n        message:\n          `Proposal ${JSON.stringify(proposalId)} is in state ${JSON.stringify(record.state)}; ` +\n          `create_media_buy requires a committed proposal that hasn't been accepted or ` +\n          `reserved by another request.`,\n        field: 'proposal_id',\n      });\n    }\n    const reserved: ProposalRecord<TRecipe> = { ...record, state: 'consuming' };\n    this.records.set(proposalId, reserved);\n    return reserved;\n  }\n\n  finalizeConsumption(proposalId: string, args: { mediaBuyId: string; expectedAccountId: string }): void {\n    const record = this.records.get(proposalId);\n    if (!record || record.accountId !== args.expectedAccountId) {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message: `finalizeConsumption: proposal ${JSON.stringify(proposalId)} not found for ` + `the expected tenant.`,\n      });\n    }\n    if (record.state === 'consumed') {\n      // Idempotent on already-CONSUMED with the same mediaBuyId.\n      if (record.mediaBuyId === args.mediaBuyId) return;\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Proposal ${JSON.stringify(proposalId)} already consumed by ` +\n          `media_buy_id=${JSON.stringify(record.mediaBuyId)}; cannot re-consume as ` +\n          `${JSON.stringify(args.mediaBuyId)}.`,\n      });\n    }\n    if (record.state !== 'consuming') {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `finalizeConsumption requires CONSUMING; proposal ${JSON.stringify(proposalId)} ` +\n          `is in ${JSON.stringify(record.state)}. Framework must call ` +\n          `tryReserveConsumption first.`,\n      });\n    }\n    this.records.set(proposalId, {\n      ...record,\n      state: 'consumed',\n      mediaBuyId: args.mediaBuyId,\n    });\n    this.mediaBuyIndex.set(this.mediaBuyKey(record.accountId, args.mediaBuyId), proposalId);\n  }\n\n  releaseConsumption(proposalId: string, args: { expectedAccountId: string }): void {\n    const record = this.records.get(proposalId);\n    if (!record || record.accountId !== args.expectedAccountId) {\n      // Idempotent — releasing an unknown id is a no-op so the\n      // adapter-failure rollback path can be unconditional.\n      return;\n    }\n    if (record.state === 'committed') {\n      // Already rolled back.\n      return;\n    }\n    if (record.state !== 'consuming') {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `releaseConsumption requires CONSUMING; proposal ${JSON.stringify(proposalId)} ` +\n          `is in ${JSON.stringify(record.state)}.`,\n      });\n    }\n    this.records.set(proposalId, { ...record, state: 'committed' });\n  }\n\n  discard(proposalId: string): void {\n    const record = this.records.get(proposalId);\n    this.records.delete(proposalId);\n    this.creationTimes.delete(proposalId);\n    if (record?.mediaBuyId) {\n      this.mediaBuyIndex.delete(this.mediaBuyKey(record.accountId, record.mediaBuyId));\n    }\n  }\n\n  getByMediaBuyId(mediaBuyId: string, args: { expectedAccountId: string }): ProposalRecord<TRecipe> | null {\n    this.evictExpired();\n    const key = this.mediaBuyKey(args.expectedAccountId, mediaBuyId);\n    const proposalId = this.mediaBuyIndex.get(key);\n    if (!proposalId) return null;\n    const record = this.records.get(proposalId);\n    if (!record) {\n      // Index drift — clean up.\n      this.mediaBuyIndex.delete(key);\n      return null;\n    }\n    return record;\n  }\n}\n"],"mappings":";;;;;;AA0CA,SAAS,iBAAiB;AAiK1B,MAAM,uBAAuB,KAAK,KAAK,KAAK;AAC5C,MAAM,6BAA6B,IAAI,KAAK,KAAK,KAAK;AA8C/C,MAAM,sBAAyF;AAAA,EAC3F,YAAY;AAAA,EAEJ,UAAgD,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA,EAIxD,gBAAqC,oBAAI,IAAI;AAAA,EAC7C,gBAAmC,oBAAI,IAAI;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAAwC,CAAC,GAAG;AACtD,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,mBAAmB,QAAQ,oBAAoB;AACpD,SAAK,QAAQ,QAAQ,UAAU,MAAM,oBAAI,KAAK;AAAA,EAChD;AAAA,EAEQ,YAAY,WAAmB,YAA4B;AACjE,WAAO,GAAG,SAAS,KAAK,UAAU;AAAA,EACpC;AAAA,EAEQ,eAAqB;AAC3B,UAAM,MAAM,KAAK,MAAM,EAAE,QAAQ;AACjC,UAAM,WAAqB,CAAC;AAC5B,eAAW,CAAC,YAAY,MAAM,KAAK,KAAK,SAAS;AAC/C,YAAM,UAAU,KAAK,cAAc,IAAI,UAAU,GAAG,QAAQ,KAAK;AACjE,UAAI,OAAO,UAAU,SAAS;AAC5B,YAAI,MAAM,UAAU,KAAK,WAAY,UAAS,KAAK,UAAU;AAAA,MAC/D,WAAW,OAAO,WAAW;AAC3B,cAAM,WAAW,OAAO,UAAU,QAAQ,IAAI,KAAK;AACnD,YAAI,MAAM,SAAU,UAAS,KAAK,UAAU;AAAA,MAC9C;AAAA,IACF;AACA,eAAW,cAAc,UAAU;AACjC,YAAM,UAAU,KAAK,QAAQ,IAAI,UAAU;AAC3C,WAAK,QAAQ,OAAO,UAAU;AAC9B,WAAK,cAAc,OAAO,UAAU;AACpC,UAAI,SAAS,YAAY;AACvB,aAAK,cAAc,OAAO,KAAK,YAAY,QAAQ,WAAW,QAAQ,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,SAAS,MAKA;AACP,SAAK,aAAa;AAClB,UAAM,WAAW,KAAK,QAAQ,IAAI,KAAK,UAAU;AACjD,QAAI,YAAY,SAAS,UAAU,SAAS;AAC1C,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,+BAA+B,KAAK,UAAU,KAAK,UAAU,CAAC,aAC3D,KAAK,UAAU,SAAS,KAAK,CAAC;AAAA,MAErC,CAAC;AAAA,IACH;AACA,UAAM,SAAkC;AAAA,MACtC,YAAY,KAAK;AAAA,MACjB,WAAW,KAAK;AAAA,MAChB,OAAO;AAAA,MACP,SAAS,IAAI,IAAI,KAAK,OAAO;AAAA,MAC7B,iBAAiB,EAAE,GAAG,KAAK,gBAAgB;AAAA,IAC7C;AACA,SAAK,QAAQ,IAAI,KAAK,YAAY,MAAM;AAIxC,QAAI,CAAC,KAAK,cAAc,IAAI,KAAK,UAAU,GAAG;AAC5C,WAAK,cAAc,IAAI,KAAK,YAAY,KAAK,MAAM,CAAC;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,IAAI,YAAoB,MAAqE;AAC3F,SAAK,aAAa;AAClB,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,OAAQ,QAAO;AACpB,QAAI,OAAO,cAAc,KAAK,mBAAmB;AAE/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,YAAoB,MAA2E;AACpG,SAAK,aAAa;AAClB,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,0BAA0B,KAAK,UAAU,UAAU,CAAC;AAAA,MAExD,CAAC;AAAA,IACH;AACA,UAAM,UAAU,EAAE,GAAG,KAAK,gBAAgB;AAC1C,QAAI,OAAO,UAAU,aAAa;AAChC,YAAM,eAAe,OAAO,WAAW,QAAQ,MAAM,KAAK,UAAU,QAAQ;AAC5E,YAAM,cAAc,KAAK,UAAU,OAAO,eAAe,MAAM,KAAK,UAAU,OAAO;AACrF,UAAI,gBAAgB,YAAa;AACjC,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,YAAY,KAAK,UAAU,UAAU,CAAC;AAAA,MAE1C,CAAC;AAAA,IACH;AACA,QAAI,OAAO,UAAU,SAAS;AAC5B,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,0BAA0B,KAAK,UAAU,UAAU,CAAC,eACjD,KAAK,UAAU,OAAO,KAAK,CAAC;AAAA,MACnC,CAAC;AAAA,IACH;AACA,SAAK,QAAQ,IAAI,YAAY;AAAA,MAC3B,GAAG;AAAA,MACH,OAAO;AAAA,MACP,WAAW,KAAK;AAAA,MAChB,iBAAiB;AAAA,IACnB,CAAC;AAAA,EACH;AAAA,EAEA,sBAAsB,YAAoB,MAA8D;AACtG,SAAK,aAAa;AAClB,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAG1C,QAAI,CAAC,UAAU,OAAO,cAAc,KAAK,mBAAmB;AAC1D,YAAM,IAAI,UAAU,sBAAsB;AAAA,QACxC,UAAU;AAAA,QACV,SAAS,YAAY,KAAK,UAAU,UAAU,CAAC;AAAA,QAC/C,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,QAAI,OAAO,UAAU,aAAa;AAChC,YAAM,IAAI,UAAU,0BAA0B;AAAA,QAC5C,UAAU;AAAA,QACV,SACE,YAAY,KAAK,UAAU,UAAU,CAAC,gBAAgB,KAAK,UAAU,OAAO,KAAK,CAAC;AAAA,QAGpF,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM,WAAoC,EAAE,GAAG,QAAQ,OAAO,YAAY;AAC1E,SAAK,QAAQ,IAAI,YAAY,QAAQ;AACrC,WAAO;AAAA,EACT;AAAA,EAEA,oBAAoB,YAAoB,MAA+D;AACrG,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,UAAU,OAAO,cAAc,KAAK,mBAAmB;AAC1D,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SAAS,iCAAiC,KAAK,UAAU,UAAU,CAAC;AAAA,MACtE,CAAC;AAAA,IACH;AACA,QAAI,OAAO,UAAU,YAAY;AAE/B,UAAI,OAAO,eAAe,KAAK,WAAY;AAC3C,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,YAAY,KAAK,UAAU,UAAU,CAAC,qCACtB,KAAK,UAAU,OAAO,UAAU,CAAC,0BAC9C,KAAK,UAAU,KAAK,UAAU,CAAC;AAAA,MACtC,CAAC;AAAA,IACH;AACA,QAAI,OAAO,UAAU,aAAa;AAChC,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,oDAAoD,KAAK,UAAU,UAAU,CAAC,UACrE,KAAK,UAAU,OAAO,KAAK,CAAC;AAAA,MAEzC,CAAC;AAAA,IACH;AACA,SAAK,QAAQ,IAAI,YAAY;AAAA,MAC3B,GAAG;AAAA,MACH,OAAO;AAAA,MACP,YAAY,KAAK;AAAA,IACnB,CAAC;AACD,SAAK,cAAc,IAAI,KAAK,YAAY,OAAO,WAAW,KAAK,UAAU,GAAG,UAAU;AAAA,EACxF;AAAA,EAEA,mBAAmB,YAAoB,MAA2C;AAChF,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,UAAU,OAAO,cAAc,KAAK,mBAAmB;AAG1D;AAAA,IACF;AACA,QAAI,OAAO,UAAU,aAAa;AAEhC;AAAA,IACF;AACA,QAAI,OAAO,UAAU,aAAa;AAChC,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,mDAAmD,KAAK,UAAU,UAAU,CAAC,UACpE,KAAK,UAAU,OAAO,KAAK,CAAC;AAAA,MACzC,CAAC;AAAA,IACH;AACA,SAAK,QAAQ,IAAI,YAAY,EAAE,GAAG,QAAQ,OAAO,YAAY,CAAC;AAAA,EAChE;AAAA,EAEA,QAAQ,YAA0B;AAChC,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,SAAK,QAAQ,OAAO,UAAU;AAC9B,SAAK,cAAc,OAAO,UAAU;AACpC,QAAI,QAAQ,YAAY;AACtB,WAAK,cAAc,OAAO,KAAK,YAAY,OAAO,WAAW,OAAO,UAAU,CAAC;AAAA,IACjF;AAAA,EACF;AAAA,EAEA,gBAAgB,YAAoB,MAAqE;AACvG,SAAK,aAAa;AAClB,UAAM,MAAM,KAAK,YAAY,KAAK,mBAAmB,UAAU;AAC/D,UAAM,aAAa,KAAK,cAAc,IAAI,GAAG;AAC7C,QAAI,CAAC,WAAY,QAAO;AACxB,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,QAAQ;AAEX,WAAK,cAAc,OAAO,GAAG;AAC7B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../../../../src/lib/server/decisioning/proposal/store.ts"],"sourcesContent":["/**\n * ProposalStore — per-tenant proposal lifecycle persistence.\n *\n * The single ledger for proposal recipes across the entire lifecycle:\n * draft (in-flight refine iterations) → committed (post-finalize, with\n * `expires_at` hold window) → consumed (post-`create_media_buy`).\n *\n * Ports `adcp-client-python.src/adcp/decisioning/proposal_store.py`.\n *\n * State machine the framework drives:\n *\n * ```\n *                              ┌──── releaseConsumption ────┐\n *                              ▼                            │\n *  putDraft ─► DRAFT ─► commit ─► COMMITTED ─► tryReserveConsumption ─► CONSUMING\n *                ▲                                                          │\n *                │                                                          │\n *             (refine                                              finalizeConsumption\n *              iteration)                                                   │\n *                │                                                          ▼\n *                └─ putDraft (overwrite while DRAFT) ─┘                CONSUMED\n *                                                                       (terminal)\n * ```\n *\n * The `COMMITTED → CONSUMING → CONSUMED` two-phase transition prevents the\n * inventory double-spend race that a check-then-act sequence on `COMMITTED`\n * would expose. Two parallel `create_media_buy(proposal_id=X)` calls cannot\n * both reserve the proposal — the second `tryReserveConsumption` raises\n * `PROPOSAL_NOT_COMMITTED` once the first transitions the record. Adapter\n * dispatch runs against the reservation; on success the framework calls\n * `finalizeConsumption`; on failure `releaseConsumption` rolls back to\n * COMMITTED so the buyer can retry.\n *\n * Transitions outside this graph (commit-from-COMMITTED with mismatched\n * payload, finalize-from-DRAFT, etc.) throw `AdcpError` with `INTERNAL_ERROR`\n * — those are framework / adopter bugs, not buyer-facing rejections.\n *\n * @public\n * @packageDocumentation\n */\n\nimport type { MaybePromise } from '../../create-adcp-server';\nimport { AdcpError } from '../async-outcome';\nimport type { Recipe } from './types';\n\n/**\n * Lifecycle states for a stored proposal.\n *\n * No `EXPIRED` member: the framework computes expiry from\n * {@link ProposalRecord.expiresAt} + the current clock + the adopter's\n * grace window. Storing expiry as a state would create a clock-driven\n * write the framework doesn't actually need.\n *\n * @public\n */\nexport type ProposalState = 'draft' | 'committed' | 'consuming' | 'consumed';\n\n/**\n * The framework's per-proposal storage row.\n *\n * @public\n */\nexport interface ProposalRecord<TRecipe extends Recipe = Recipe> {\n  /** Stable identifier the buyer receives in the `proposals[]` wire array. */\n  proposalId: string;\n  /** Account that owns the proposal. Drives the cross-tenant check on `get`. */\n  accountId: string;\n  /** Current lifecycle state. */\n  state: ProposalState;\n  /**\n   * `productId -> Recipe` mapping. The {@link ProposalManager} returned these\n   * alongside products on `getProducts` / `refineProducts`; the framework\n   * persists them so `DecisioningPlatform.createMediaBuy` can hydrate\n   * `ctx.recipes` from this same record.\n   */\n  recipes: ReadonlyMap<string, TRecipe>;\n  /**\n   * The wire `Proposal` shape. Stored so the framework can re-emit it on\n   * refine iterations or replay it post-finalize without round-tripping\n   * through the manager again.\n   */\n  proposalPayload: Record<string, unknown>;\n  /**\n   * Set on `commit`. The inventory hold window; framework rejects\n   * `create_media_buy` calls past this deadline (plus the adopter's grace).\n   */\n  expiresAt?: Date;\n  /**\n   * Set on `finalizeConsumption`. The accepted proposal's terminal binding\n   * to a media buy; reverse-index lookups via `getByMediaBuyId` use this.\n   */\n  mediaBuyId?: string;\n  /**\n   * Captured at `putDraft` time. Adopters whose Recipe subtypes add required\n   * fields later bump the schema and write a migration (or evict pre-bump\n   * records). Framework reads but does not enforce.\n   */\n  recipeSchemaVersion?: number;\n}\n\n/**\n * Per-tenant proposal lifecycle persistence.\n *\n * Methods may return `T` or `Promise<T>` — the framework awaits at call time.\n * Mirrors the in-tree `MediaBuyStore` posture.\n *\n * @public\n */\nexport interface ProposalStore<TRecipe extends Recipe = Recipe> {\n  /**\n   * Drives the production-mode gate. `false` for {@link InMemoryProposalStore};\n   * `true` for adopter-supplied durable backings (Postgres / Redis).\n   */\n  readonly isDurable: boolean;\n\n  /**\n   * Store / replace a draft proposal.\n   *\n   * Refine iterations call this with the same `proposalId` to overwrite.\n   * Calling on a record currently in COMMITTED, CONSUMING, or CONSUMED is\n   * rejected.\n   */\n  putDraft(args: {\n    proposalId: string;\n    accountId: string;\n    recipes: ReadonlyMap<string, TRecipe>;\n    proposalPayload: Record<string, unknown>;\n  }): MaybePromise<void>;\n\n  /**\n   * Look up a proposal record. Cross-tenant probes return `null` rather\n   * than the raw record — required to defeat principal-enumeration via\n   * `proposalId` probing. The dispatch path always passes the\n   * authenticated principal's `accountId`.\n   *\n   * **`expectedAccountId` is required.** Earlier preview made it optional\n   * for \"framework-internal raw read\" callers, but every call site that\n   * loads a record into a buyer-visible response path needs the tenant\n   * gate. Direct-debug callers that legitimately want a raw record across\n   * tenants should reach for a separate operator-tool surface, not bypass\n   * this gate. Closes a sharp edge an adopter would silently miss.\n   */\n  get(proposalId: string, args: { expectedAccountId: string }): MaybePromise<ProposalRecord<TRecipe> | null>;\n\n  /**\n   * Promote DRAFT → COMMITTED. Idempotent on re-call with equal `expiresAt`\n   * + `proposalPayload`. A second commit with different values raises\n   * `INTERNAL_ERROR`.\n   */\n  commit(proposalId: string, args: { expiresAt: Date; proposalPayload: Record<string, unknown> }): MaybePromise<void>;\n\n  /**\n   * Atomic CAS: COMMITTED → CONSUMING.\n   *\n   * The framework calls this BEFORE dispatching `createMediaBuy`. Holds\n   * the reservation until `finalizeConsumption` (success) or\n   * `releaseConsumption` (rollback). Two parallel callers cannot both\n   * reserve; the loser raises `PROPOSAL_NOT_COMMITTED`. SQL-backed\n   * implementations use `SELECT … FOR UPDATE` or equivalent.\n   *\n   * @throws AdcpError `PROPOSAL_NOT_FOUND` when no record exists,\n   *   `PROPOSAL_NOT_COMMITTED` when state is not COMMITTED.\n   */\n  tryReserveConsumption(proposalId: string, args: { expectedAccountId: string }): MaybePromise<ProposalRecord<TRecipe>>;\n\n  /**\n   * Promote CONSUMING → CONSUMED and record the `mediaBuyId` back-reference\n   * for `getByMediaBuyId` lookups.\n   */\n  finalizeConsumption(proposalId: string, args: { mediaBuyId: string; expectedAccountId: string }): MaybePromise<void>;\n\n  /**\n   * Rollback path: CONSUMING → COMMITTED. Idempotent on a record already\n   * in COMMITTED. Called when the adapter's `createMediaBuy` raises so\n   * the buyer can retry without `PROPOSAL_NOT_COMMITTED`.\n   */\n  releaseConsumption(proposalId: string, args: { expectedAccountId: string }): MaybePromise<void>;\n\n  /**\n   * Discard a proposal record. Idempotent — discarding an unknown id is\n   * a no-op (no throw).\n   */\n  discard(proposalId: string): MaybePromise<void>;\n\n  /**\n   * Reverse-index lookup. Hydrate the (consumed) proposal that produced\n   * this `mediaBuyId` for the given tenant.\n   *\n   * `expectedAccountId` is required (no default) because `mediaBuyId` is\n   * adopter-controlled and can collide across tenants. SQL-backed impls\n   * add a uniqueness constraint on `(accountId, mediaBuyId)` where\n   * `mediaBuyId IS NOT NULL`.\n   */\n  getByMediaBuyId(\n    mediaBuyId: string,\n    args: { expectedAccountId: string }\n  ): MaybePromise<ProposalRecord<TRecipe> | null>;\n}\n\n// ---------------------------------------------------------------------------\n// In-memory reference implementation\n// ---------------------------------------------------------------------------\n\nconst DEFAULT_DRAFT_TTL_MS = 24 * 60 * 60 * 1000; // 24h\nconst DEFAULT_COMMITTED_GRACE_MS = 7 * 24 * 60 * 60 * 1000; // 7 days\n\n/**\n * Construction options for {@link InMemoryProposalStore}.\n *\n * @public\n */\nexport interface InMemoryProposalStoreOptions {\n  /**\n   * How long a draft proposal lives without a commit before being evicted.\n   * Default 24h. Pass as milliseconds.\n   */\n  draftTtlMs?: number;\n  /**\n   * How long a committed (or consumed) proposal lives past its `expiresAt`\n   * before eviction. Default 7 days. Pass as milliseconds.\n   */\n  committedGraceMs?: number;\n  /**\n   * Test-injectable clock. Defaults to `() => new Date()`.\n   */\n  clock?: () => Date;\n}\n\n/**\n * Process-local {@link ProposalStore} reference implementation.\n *\n * Storage is a plain `Map` — JS event-loop atomicity covers the critical\n * sections (no preemption between awaits within a method body since there\n * are no awaits). Adequate for local dev, CI, and tests; production\n * deployments wire a durable backing implementing the same interface.\n *\n * Eviction:\n *\n *   - Drafts older than `draftTtlMs` (default 24h) are evicted on every\n *     read / write.\n *   - Committed proposals more than `committedGraceMs` past `expiresAt`\n *     (default 7 days) are evicted.\n *\n * Eviction runs lazily — no background timer thread.\n *\n * Cross-tenant safety: `get` and `getByMediaBuyId` honor `expectedAccountId`\n * — cross-tenant probes return `null`, not the raw record.\n *\n * @public\n */\nexport class InMemoryProposalStore<TRecipe extends Recipe = Recipe> implements ProposalStore<TRecipe> {\n  readonly isDurable = false;\n\n  private readonly records: Map<string, ProposalRecord<TRecipe>> = new Map();\n  // Reverse index keyed by `${accountId}::${mediaBuyId}`. Tenant scoping in\n  // the key prevents collisions when adopter media_buy_ids overlap across\n  // tenants (sequential IDs, deterministic test fixtures).\n  private readonly mediaBuyIndex: Map<string, string> = new Map();\n  private readonly creationTimes: Map<string, Date> = new Map();\n  private readonly draftTtlMs: number;\n  private readonly committedGraceMs: number;\n  private readonly clock: () => Date;\n\n  constructor(options: InMemoryProposalStoreOptions = {}) {\n    this.draftTtlMs = options.draftTtlMs ?? DEFAULT_DRAFT_TTL_MS;\n    this.committedGraceMs = options.committedGraceMs ?? DEFAULT_COMMITTED_GRACE_MS;\n    this.clock = options.clock ?? (() => new Date());\n  }\n\n  private mediaBuyKey(accountId: string, mediaBuyId: string): string {\n    return `${accountId}::${mediaBuyId}`;\n  }\n\n  private evictExpired(): void {\n    const now = this.clock().getTime();\n    const toRemove: string[] = [];\n    for (const [proposalId, record] of this.records) {\n      const created = this.creationTimes.get(proposalId)?.getTime() ?? now;\n      if (record.state === 'draft') {\n        if (now - created > this.draftTtlMs) toRemove.push(proposalId);\n      } else if (record.expiresAt) {\n        const deadline = record.expiresAt.getTime() + this.committedGraceMs;\n        if (now > deadline) toRemove.push(proposalId);\n      }\n    }\n    for (const proposalId of toRemove) {\n      const removed = this.records.get(proposalId);\n      this.records.delete(proposalId);\n      this.creationTimes.delete(proposalId);\n      if (removed?.mediaBuyId) {\n        this.mediaBuyIndex.delete(this.mediaBuyKey(removed.accountId, removed.mediaBuyId));\n      }\n    }\n  }\n\n  putDraft(args: {\n    proposalId: string;\n    accountId: string;\n    recipes: ReadonlyMap<string, TRecipe>;\n    proposalPayload: Record<string, unknown>;\n  }): void {\n    this.evictExpired();\n    const existing = this.records.get(args.proposalId);\n    if (existing && existing.state !== 'draft') {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Cannot putDraft on proposal ${JSON.stringify(args.proposalId)} in state ` +\n          `${JSON.stringify(existing.state)}; refine iterations are only valid on draft ` +\n          `proposals. Once committed or consumed, a proposal_id is immutable.`,\n      });\n    }\n    const record: ProposalRecord<TRecipe> = {\n      proposalId: args.proposalId,\n      accountId: args.accountId,\n      state: 'draft',\n      recipes: new Map(args.recipes),\n      proposalPayload: { ...args.proposalPayload },\n    };\n    this.records.set(args.proposalId, record);\n    // Refine iterations preserve the original creation time so the 24h\n    // draft TTL is anchored to the start of the buyer's session, not the\n    // most recent iteration.\n    if (!this.creationTimes.has(args.proposalId)) {\n      this.creationTimes.set(args.proposalId, this.clock());\n    }\n  }\n\n  get(proposalId: string, args: { expectedAccountId: string }): ProposalRecord<TRecipe> | null {\n    this.evictExpired();\n    const record = this.records.get(proposalId);\n    if (!record) return null;\n    if (record.accountId !== args.expectedAccountId) {\n      // Cross-tenant probe — return null, not raw record.\n      return null;\n    }\n    return record;\n  }\n\n  commit(proposalId: string, args: { expiresAt: Date; proposalPayload: Record<string, unknown> }): void {\n    this.evictExpired();\n    const record = this.records.get(proposalId);\n    if (!record) {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Cannot commit proposal ${JSON.stringify(proposalId)}: not in store. The ` +\n          `framework's finalize dispatch must putDraft before commit.`,\n      });\n    }\n    const payload = { ...args.proposalPayload };\n    if (record.state === 'committed') {\n      const sameDeadline = record.expiresAt?.getTime() === args.expiresAt.getTime();\n      const samePayload = JSON.stringify(record.proposalPayload) === JSON.stringify(payload);\n      if (sameDeadline && samePayload) return;\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Proposal ${JSON.stringify(proposalId)} already committed with a different ` +\n          `expires_at or payload — re-commit with different values is a developer bug.`,\n      });\n    }\n    if (record.state !== 'draft') {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Cannot commit proposal ${JSON.stringify(proposalId)} from state ` +\n          `${JSON.stringify(record.state)}; commit requires DRAFT.`,\n      });\n    }\n    this.records.set(proposalId, {\n      ...record,\n      state: 'committed',\n      expiresAt: args.expiresAt,\n      proposalPayload: payload,\n    });\n  }\n\n  tryReserveConsumption(proposalId: string, args: { expectedAccountId: string }): ProposalRecord<TRecipe> {\n    this.evictExpired();\n    const record = this.records.get(proposalId);\n    // Cross-tenant probe collapses to PROPOSAL_NOT_FOUND — same\n    // principal-enumeration defense as `get`.\n    if (!record || record.accountId !== args.expectedAccountId) {\n      throw new AdcpError('PROPOSAL_NOT_FOUND', {\n        recovery: 'correctable',\n        message: `Proposal ${JSON.stringify(proposalId)} not found.`,\n        field: 'proposal_id',\n      });\n    }\n    if (record.state !== 'committed') {\n      throw new AdcpError('PROPOSAL_NOT_COMMITTED', {\n        recovery: 'correctable',\n        message:\n          `Proposal ${JSON.stringify(proposalId)} is in state ${JSON.stringify(record.state)}; ` +\n          `create_media_buy requires a committed proposal that hasn't been accepted or ` +\n          `reserved by another request.`,\n        field: 'proposal_id',\n      });\n    }\n    const reserved: ProposalRecord<TRecipe> = { ...record, state: 'consuming' };\n    this.records.set(proposalId, reserved);\n    return reserved;\n  }\n\n  finalizeConsumption(proposalId: string, args: { mediaBuyId: string; expectedAccountId: string }): void {\n    const record = this.records.get(proposalId);\n    if (!record || record.accountId !== args.expectedAccountId) {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message: `finalizeConsumption: proposal ${JSON.stringify(proposalId)} not found for ` + `the expected tenant.`,\n      });\n    }\n    if (record.state === 'consumed') {\n      // Idempotent on already-CONSUMED with the same mediaBuyId.\n      if (record.mediaBuyId === args.mediaBuyId) return;\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `Proposal ${JSON.stringify(proposalId)} already consumed by ` +\n          `media_buy_id=${JSON.stringify(record.mediaBuyId)}; cannot re-consume as ` +\n          `${JSON.stringify(args.mediaBuyId)}.`,\n      });\n    }\n    if (record.state !== 'consuming') {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `finalizeConsumption requires CONSUMING; proposal ${JSON.stringify(proposalId)} ` +\n          `is in ${JSON.stringify(record.state)}. Framework must call ` +\n          `tryReserveConsumption first.`,\n      });\n    }\n    this.records.set(proposalId, {\n      ...record,\n      state: 'consumed',\n      mediaBuyId: args.mediaBuyId,\n    });\n    this.mediaBuyIndex.set(this.mediaBuyKey(record.accountId, args.mediaBuyId), proposalId);\n  }\n\n  releaseConsumption(proposalId: string, args: { expectedAccountId: string }): void {\n    const record = this.records.get(proposalId);\n    if (!record || record.accountId !== args.expectedAccountId) {\n      // Idempotent — releasing an unknown id is a no-op so the\n      // adapter-failure rollback path can be unconditional.\n      return;\n    }\n    if (record.state === 'committed') {\n      // Already rolled back.\n      return;\n    }\n    if (record.state !== 'consuming') {\n      throw new AdcpError('INTERNAL_ERROR', {\n        recovery: 'terminal',\n        message:\n          `releaseConsumption requires CONSUMING; proposal ${JSON.stringify(proposalId)} ` +\n          `is in ${JSON.stringify(record.state)}.`,\n      });\n    }\n    this.records.set(proposalId, { ...record, state: 'committed' });\n  }\n\n  discard(proposalId: string): void {\n    const record = this.records.get(proposalId);\n    this.records.delete(proposalId);\n    this.creationTimes.delete(proposalId);\n    if (record?.mediaBuyId) {\n      this.mediaBuyIndex.delete(this.mediaBuyKey(record.accountId, record.mediaBuyId));\n    }\n  }\n\n  getByMediaBuyId(mediaBuyId: string, args: { expectedAccountId: string }): ProposalRecord<TRecipe> | null {\n    this.evictExpired();\n    const key = this.mediaBuyKey(args.expectedAccountId, mediaBuyId);\n    const proposalId = this.mediaBuyIndex.get(key);\n    if (!proposalId) return null;\n    const record = this.records.get(proposalId);\n    if (!record) {\n      // Index drift — clean up.\n      this.mediaBuyIndex.delete(key);\n      return null;\n    }\n    return record;\n  }\n}\n"],"mappings":"AA0CA,SAAS,iBAAiB;AAiK1B,MAAM,uBAAuB,KAAK,KAAK,KAAK;AAC5C,MAAM,6BAA6B,IAAI,KAAK,KAAK,KAAK;AA8C/C,MAAM,sBAAyF;AAAA,EAC3F,YAAY;AAAA,EAEJ,UAAgD,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA,EAIxD,gBAAqC,oBAAI,IAAI;AAAA,EAC7C,gBAAmC,oBAAI,IAAI;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAAwC,CAAC,GAAG;AACtD,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,mBAAmB,QAAQ,oBAAoB;AACpD,SAAK,QAAQ,QAAQ,UAAU,MAAM,oBAAI,KAAK;AAAA,EAChD;AAAA,EAEQ,YAAY,WAAmB,YAA4B;AACjE,WAAO,GAAG,SAAS,KAAK,UAAU;AAAA,EACpC;AAAA,EAEQ,eAAqB;AAC3B,UAAM,MAAM,KAAK,MAAM,EAAE,QAAQ;AACjC,UAAM,WAAqB,CAAC;AAC5B,eAAW,CAAC,YAAY,MAAM,KAAK,KAAK,SAAS;AAC/C,YAAM,UAAU,KAAK,cAAc,IAAI,UAAU,GAAG,QAAQ,KAAK;AACjE,UAAI,OAAO,UAAU,SAAS;AAC5B,YAAI,MAAM,UAAU,KAAK,WAAY,UAAS,KAAK,UAAU;AAAA,MAC/D,WAAW,OAAO,WAAW;AAC3B,cAAM,WAAW,OAAO,UAAU,QAAQ,IAAI,KAAK;AACnD,YAAI,MAAM,SAAU,UAAS,KAAK,UAAU;AAAA,MAC9C;AAAA,IACF;AACA,eAAW,cAAc,UAAU;AACjC,YAAM,UAAU,KAAK,QAAQ,IAAI,UAAU;AAC3C,WAAK,QAAQ,OAAO,UAAU;AAC9B,WAAK,cAAc,OAAO,UAAU;AACpC,UAAI,SAAS,YAAY;AACvB,aAAK,cAAc,OAAO,KAAK,YAAY,QAAQ,WAAW,QAAQ,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,SAAS,MAKA;AACP,SAAK,aAAa;AAClB,UAAM,WAAW,KAAK,QAAQ,IAAI,KAAK,UAAU;AACjD,QAAI,YAAY,SAAS,UAAU,SAAS;AAC1C,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,+BAA+B,KAAK,UAAU,KAAK,UAAU,CAAC,aAC3D,KAAK,UAAU,SAAS,KAAK,CAAC;AAAA,MAErC,CAAC;AAAA,IACH;AACA,UAAM,SAAkC;AAAA,MACtC,YAAY,KAAK;AAAA,MACjB,WAAW,KAAK;AAAA,MAChB,OAAO;AAAA,MACP,SAAS,IAAI,IAAI,KAAK,OAAO;AAAA,MAC7B,iBAAiB,EAAE,GAAG,KAAK,gBAAgB;AAAA,IAC7C;AACA,SAAK,QAAQ,IAAI,KAAK,YAAY,MAAM;AAIxC,QAAI,CAAC,KAAK,cAAc,IAAI,KAAK,UAAU,GAAG;AAC5C,WAAK,cAAc,IAAI,KAAK,YAAY,KAAK,MAAM,CAAC;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,IAAI,YAAoB,MAAqE;AAC3F,SAAK,aAAa;AAClB,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,OAAQ,QAAO;AACpB,QAAI,OAAO,cAAc,KAAK,mBAAmB;AAE/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,YAAoB,MAA2E;AACpG,SAAK,aAAa;AAClB,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,0BAA0B,KAAK,UAAU,UAAU,CAAC;AAAA,MAExD,CAAC;AAAA,IACH;AACA,UAAM,UAAU,EAAE,GAAG,KAAK,gBAAgB;AAC1C,QAAI,OAAO,UAAU,aAAa;AAChC,YAAM,eAAe,OAAO,WAAW,QAAQ,MAAM,KAAK,UAAU,QAAQ;AAC5E,YAAM,cAAc,KAAK,UAAU,OAAO,eAAe,MAAM,KAAK,UAAU,OAAO;AACrF,UAAI,gBAAgB,YAAa;AACjC,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,YAAY,KAAK,UAAU,UAAU,CAAC;AAAA,MAE1C,CAAC;AAAA,IACH;AACA,QAAI,OAAO,UAAU,SAAS;AAC5B,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,0BAA0B,KAAK,UAAU,UAAU,CAAC,eACjD,KAAK,UAAU,OAAO,KAAK,CAAC;AAAA,MACnC,CAAC;AAAA,IACH;AACA,SAAK,QAAQ,IAAI,YAAY;AAAA,MAC3B,GAAG;AAAA,MACH,OAAO;AAAA,MACP,WAAW,KAAK;AAAA,MAChB,iBAAiB;AAAA,IACnB,CAAC;AAAA,EACH;AAAA,EAEA,sBAAsB,YAAoB,MAA8D;AACtG,SAAK,aAAa;AAClB,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAG1C,QAAI,CAAC,UAAU,OAAO,cAAc,KAAK,mBAAmB;AAC1D,YAAM,IAAI,UAAU,sBAAsB;AAAA,QACxC,UAAU;AAAA,QACV,SAAS,YAAY,KAAK,UAAU,UAAU,CAAC;AAAA,QAC/C,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,QAAI,OAAO,UAAU,aAAa;AAChC,YAAM,IAAI,UAAU,0BAA0B;AAAA,QAC5C,UAAU;AAAA,QACV,SACE,YAAY,KAAK,UAAU,UAAU,CAAC,gBAAgB,KAAK,UAAU,OAAO,KAAK,CAAC;AAAA,QAGpF,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM,WAAoC,EAAE,GAAG,QAAQ,OAAO,YAAY;AAC1E,SAAK,QAAQ,IAAI,YAAY,QAAQ;AACrC,WAAO;AAAA,EACT;AAAA,EAEA,oBAAoB,YAAoB,MAA+D;AACrG,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,UAAU,OAAO,cAAc,KAAK,mBAAmB;AAC1D,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SAAS,iCAAiC,KAAK,UAAU,UAAU,CAAC;AAAA,MACtE,CAAC;AAAA,IACH;AACA,QAAI,OAAO,UAAU,YAAY;AAE/B,UAAI,OAAO,eAAe,KAAK,WAAY;AAC3C,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,YAAY,KAAK,UAAU,UAAU,CAAC,qCACtB,KAAK,UAAU,OAAO,UAAU,CAAC,0BAC9C,KAAK,UAAU,KAAK,UAAU,CAAC;AAAA,MACtC,CAAC;AAAA,IACH;AACA,QAAI,OAAO,UAAU,aAAa;AAChC,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,oDAAoD,KAAK,UAAU,UAAU,CAAC,UACrE,KAAK,UAAU,OAAO,KAAK,CAAC;AAAA,MAEzC,CAAC;AAAA,IACH;AACA,SAAK,QAAQ,IAAI,YAAY;AAAA,MAC3B,GAAG;AAAA,MACH,OAAO;AAAA,MACP,YAAY,KAAK;AAAA,IACnB,CAAC;AACD,SAAK,cAAc,IAAI,KAAK,YAAY,OAAO,WAAW,KAAK,UAAU,GAAG,UAAU;AAAA,EACxF;AAAA,EAEA,mBAAmB,YAAoB,MAA2C;AAChF,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,UAAU,OAAO,cAAc,KAAK,mBAAmB;AAG1D;AAAA,IACF;AACA,QAAI,OAAO,UAAU,aAAa;AAEhC;AAAA,IACF;AACA,QAAI,OAAO,UAAU,aAAa;AAChC,YAAM,IAAI,UAAU,kBAAkB;AAAA,QACpC,UAAU;AAAA,QACV,SACE,mDAAmD,KAAK,UAAU,UAAU,CAAC,UACpE,KAAK,UAAU,OAAO,KAAK,CAAC;AAAA,MACzC,CAAC;AAAA,IACH;AACA,SAAK,QAAQ,IAAI,YAAY,EAAE,GAAG,QAAQ,OAAO,YAAY,CAAC;AAAA,EAChE;AAAA,EAEA,QAAQ,YAA0B;AAChC,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,SAAK,QAAQ,OAAO,UAAU;AAC9B,SAAK,cAAc,OAAO,UAAU;AACpC,QAAI,QAAQ,YAAY;AACtB,WAAK,cAAc,OAAO,KAAK,YAAY,OAAO,WAAW,OAAO,UAAU,CAAC;AAAA,IACjF;AAAA,EACF;AAAA,EAEA,gBAAgB,YAAoB,MAAqE;AACvG,SAAK,aAAa;AAClB,UAAM,MAAM,KAAK,YAAY,KAAK,mBAAmB,UAAU;AAC/D,UAAM,aAAa,KAAK,cAAc,IAAI,GAAG;AAC7C,QAAI,CAAC,WAAY,QAAO;AACxB,UAAM,SAAS,KAAK,QAAQ,IAAI,UAAU;AAC1C,QAAI,CAAC,QAAQ;AAEX,WAAK,cAAc,OAAO,GAAG;AAC7B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/lib/server/decisioning/proposal/types.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 function validateProposalCapabilities(caps) {
   const valid = ["sales-guaranteed", "sales-non-guaranteed"];
   if (!valid.includes(caps.salesSpecialism)) {

package/dist/lib/server/decisioning/proposal/types.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../src/lib/server/decisioning/proposal/types.ts"],"sourcesContent":["/**\n * ProposalManager — primitives for the two-platform composition.\n *\n * The existing `DecisioningPlatform` conflates two concerns: assembling\n * proposals from briefs (`get_products`, refine) vs. executing media buys\n * against an upstream (`create_media_buy`, `update_media_buy`,\n * `get_media_buy_delivery`). The two-platform composition splits them: a\n * separate {@link ProposalManager} handles the proposal side; the\n * `DecisioningPlatform` keeps the execution side. Either platform can be\n * mock-backed independently.\n *\n * Ports the Python primitives shipped in `adcp-client-python` PRs #504\n * (v1) and #550 (v1.5):\n *\n *   - {@link ProposalManager} — interface with `getProducts` (required)\n *     plus optional `refineProducts` and `finalizeProposal`.\n *   - {@link ProposalCapabilities} — sales-axis-scoped capability flags.\n *   - {@link Recipe} — typed `recipe_kind`-discriminated base; adopters\n *     subclass with their internal-config schema. Rides on\n *     `Product.implementation_config` (opaque to the buyer).\n *   - {@link CapabilityOverlap} — typed declaration of which wire\n *     capabilities the buyer can configure on a product. The framework\n *     validates buyer requests against the overlap pre-adapter.\n *   - {@link FinalizeProposalRequest} / {@link FinalizeProposalSuccess} —\n *     framework-internal shapes for the finalize lifecycle (wired in the\n *     v1.5 dispatch helpers).\n *\n * @public\n * @packageDocumentation\n */\n\nimport type { MaybePromise } from '../../create-adcp-server';\nimport type { Account } from '../account';\nimport type { RequestContext } from '../context';\nimport type { GetProductsRequest, GetProductsResponse } from '../../../types/tools.generated';\nimport type { RequireCacheScopeWhenProducts, ServerPayload } from '../../../types/server-payload';\nimport type { TaskHandoff } from '../async-outcome';\n\nexport type ProposalGetProductsPayload = RequireCacheScopeWhenProducts<ServerPayload<GetProductsResponse>>;\n\n// ---------------------------------------------------------------------------\n// Capabilities\n// ---------------------------------------------------------------------------\n\n/**\n * Sales specialisms a {@link ProposalManager} can serve. Mirrors the\n * `sales-*` slugs in the spec's specialism enum.\n *\n * v1 scopes to the two `ProposalManager`-relevant flavours; broader\n * coverage (broadcast-tv, social, proposal-mode, catalog-driven) lands\n * as adopter signal grows.\n *\n * @public\n */\nexport type ProposalSalesSpecialism = 'sales-guaranteed' | 'sales-non-guaranteed';\n\n/**\n * Capability declaration for a {@link ProposalManager}.\n *\n * Sales-axis-scoped: proposal handling is a sales-specialism concern,\n * not a generic platform-wide concept. The `salesSpecialism` field\n * declares which AdCP sales specialism this manager serves; capability\n * flags declare which optional behaviours it supports.\n *\n * The framework reads this declaration at server-construction time to\n * decide which dispatch paths apply (e.g. `refineProducts` is only\n * invoked when `refine` is true; `finalizeProposal` is only invoked\n * when `finalize` is true).\n *\n * @public\n */\nexport interface ProposalCapabilities {\n  /**\n   * Which AdCP sales specialism this manager serves.\n   *\n   * `sales-guaranteed` for guaranteed-direct flows with proposal\n   * lifecycle (finalize → committed proposal → media buy).\n   *\n   * `sales-non-guaranteed` for catalog-style flows where `getProducts`\n   * returns a static catalog and buyers reference products directly at\n   * `create_media_buy`.\n   */\n  salesSpecialism: ProposalSalesSpecialism;\n\n  /**\n   * When true, the manager implements {@link ProposalManager.refineProducts}\n   * and the framework routes `get_products` requests with\n   * `buying_mode: 'refine'` to that method. When false, refine requests\n   * fall through to `getProducts` (or surface `UNSUPPORTED_FEATURE` if\n   * the manager rejects them).\n   */\n  refine?: boolean;\n\n  /**\n   * When true, the manager implements {@link ProposalManager.finalizeProposal}\n   * and the framework intercepts `refine[i].action: 'finalize'` entries to\n   * commit drafts via the lifecycle helpers. When false, finalize entries\n   * pass through to the underlying `getProducts` / `refineProducts` method\n   * unchanged.\n   */\n  finalize?: boolean;\n\n  /**\n   * Grace window (in seconds) added to a committed proposal's `expires_at`\n   * before the framework rejects `create_media_buy` calls referencing the\n   * proposal with `PROPOSAL_EXPIRED`. Default 0 (strict).\n   */\n  expiresAtGraceSeconds?: number;\n\n  /**\n   * Signal-driven product assembly — the manager constructs products from\n   * buyer signals at request time rather than enumerating a static\n   * catalogue. Informational in v1.5; future PRs may validate that\n   * inventory / signal stores are wired when this flag is set.\n   */\n  dynamicProducts?: boolean;\n\n  /**\n   * The manager consults rate cards (per buyer relationship per product)\n   * when emitting prices. Informational in v1.5.\n   */\n  rateCardPricing?: boolean;\n\n  /**\n   * The manager reserves capacity at proposal time (typical for\n   * guaranteed). Informational in v1.5; the `finalize` transition that\n   * drives the actual hold is wired via the lifecycle helpers.\n   */\n  availabilityReservations?: boolean;\n}\n\n/**\n * Validate a {@link ProposalCapabilities} object. Throws when the declaration\n * is malformed (unknown `salesSpecialism`, negative `expiresAtGraceSeconds`).\n * The framework calls this at boot; adopters can call it from their own\n * config-validation code paths to fail fast on misconfiguration.\n *\n * Kept as a plain function rather than a class constructor to match the\n * codebase's preference for plain TS interfaces over runtime classes\n * for adopter-facing types.\n *\n * @public\n */\nexport function validateProposalCapabilities(caps: ProposalCapabilities): void {\n  const valid: readonly ProposalSalesSpecialism[] = ['sales-guaranteed', 'sales-non-guaranteed'];\n  if (!valid.includes(caps.salesSpecialism)) {\n    throw new Error(\n      `ProposalCapabilities.salesSpecialism must be one of ${JSON.stringify(valid)}. ` +\n        `Got ${JSON.stringify(caps.salesSpecialism)}. v1.5 scopes ProposalManager to the two ` +\n        `core sales specialisms; broader specialism support lands in subsequent releases.`\n    );\n  }\n  if (caps.expiresAtGraceSeconds != null && caps.expiresAtGraceSeconds < 0) {\n    throw new Error(\n      `ProposalCapabilities.expiresAtGraceSeconds must be >= 0; got ${caps.expiresAtGraceSeconds}. ` +\n        `The grace window extends the inventory hold past expires_at; negative values would shrink it.`\n    );\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Recipe + CapabilityOverlap\n// ---------------------------------------------------------------------------\n\n/**\n * Per-product subset of wire capability flags that the buyer can\n * configure on this product.\n *\n * Buyer requests asking for capabilities outside this overlap are\n * rejected by the framework before the adapter sees them (validated by\n * the lifecycle helpers — see `proposal/lifecycle.ts`).\n *\n * Each field is `ReadonlySet<string> | undefined`:\n *\n *   - `undefined` → framework does not gate this axis (open).\n *   - `ReadonlySet` → buyer choices must be subsets of this set.\n *     An empty set means deny-all on this axis.\n *\n * The undefined vs. empty-set distinction matches set intuition:\n * \"no constraint\" is `undefined`; \"allowed set is empty\" is `new Set()`.\n *\n * **Why no extras dict?** v1.5 deliberately omits an `extras` escape\n * hatch (per Python design § D4). Adopters with novel gating needs\n * extend the interface with typed fields; a dict bag leaves no paper\n * trail. If a new axis turns out to be widely useful, it lands as a\n * typed field on `CapabilityOverlap` upstream.\n *\n * @public\n */\nexport interface CapabilityOverlap {\n  /**\n   * Subset of wire `pricing_models` the buyer can choose. Validated\n   * against the matching `PricingOption.pricing_model` on the buyer's\n   * package.\n   */\n  pricingModels?: ReadonlySet<string>;\n\n  /**\n   * Subset of wire targeting dimensions (`geo`, `device_type`,\n   * `language`, etc.). Validated against the keys present on the\n   * buyer's `targeting_overlay`.\n   */\n  targetingDimensions?: ReadonlySet<string>;\n\n  /**\n   * Subset of `{ guaranteed, non_guaranteed }` the product offers.\n   */\n  deliveryTypes?: ReadonlySet<string>;\n\n  /**\n   * If the seller integrates signals, which signal types this product\n   * accepts. An empty set means the seller explicitly refuses all\n   * signals on this product; `undefined` means no framework gate.\n   */\n  signalTypes?: ReadonlySet<string>;\n}\n\n/**\n * Base type for typed product `implementation_config` payloads.\n *\n * Adopters declare a discriminated subtype with a literal `recipe_kind`:\n *\n * ```ts\n * interface GAMRecipe extends Recipe {\n *   recipe_kind: 'gam';\n *   line_item_template_id: string;\n *   ad_unit_ids: readonly string[];\n *   capability_overlap?: CapabilityOverlap;\n * }\n * ```\n *\n * The kind tag enables router-by-recipe-kind dispatch in the\n * multi-decisioning case (one ProposalManager + many DecisioningPlatforms,\n * each handling a subset of recipe kinds). v1.5 doesn't yet wire that\n * routing — adopters using a single DecisioningPlatform attach recipes\n * freely without registry validation.\n *\n * **The recipe is never on the buyer's wire surface.** It rides inside\n * `Product.implementation_config` (an opaque-to-buyer dict). Buyers treat\n * it as a black box; the framework persists it through the proposal\n * lifecycle so the executing DecisioningPlatform sees a stable view.\n *\n * `capability_overlap` is optional. When present, the framework activates\n * the v1.5 buyer-request validation seam against the declared subsets.\n *\n * @public\n */\nexport interface Recipe {\n  /** Adapter-family discriminator. Subtypes narrow with a literal type. */\n  recipe_kind: string;\n\n  /**\n   * Optional typed declaration of which wire capabilities the buyer can\n   * configure on this product. `undefined` means no framework gating.\n   * An explicit {@link CapabilityOverlap} activates the v1.5 validation.\n   */\n  capability_overlap?: CapabilityOverlap;\n}\n\n// ---------------------------------------------------------------------------\n// Finalize lifecycle shapes\n// ---------------------------------------------------------------------------\n\n/**\n * Framework-internal request shape passed to {@link ProposalManager.finalizeProposal}.\n *\n * Constructed by the framework dispatcher when a buyer's `get_products`\n * request with `buying_mode: 'refine'` carries a `refine[i].action: 'finalize'`\n * entry. Adopters don't parse the wire envelope; the framework projects.\n *\n * @public\n */\nexport interface FinalizeProposalRequest<TRecipe extends Recipe = Recipe> {\n  /**\n   * The draft proposal the buyer is asking to finalize. Hydrated from\n   * the wire's `refine[i].proposal_id` field.\n   */\n  proposalId: string;\n\n  /**\n   * `product_id -> Recipe` mapping pulled from the {@link ProposalStore}\n   * draft. The adopter's finalize logic typically lock-prices these and\n   * emits the committed proposal.\n   */\n  recipes: ReadonlyMap<string, TRecipe>;\n\n  /**\n   * The draft's wire `Proposal` shape (the same payload the adopter\n   * returned on the prior `getProducts` / `refineProducts` call).\n   * Adopter typically modifies this with locked pricing and returns it\n   * on {@link FinalizeProposalSuccess}.\n   */\n  proposalPayload: Record<string, unknown>;\n\n  /**\n   * The buyer's per-entry refine `ask` text — what they want finalized.\n   * Free-form; adopter consumes.\n   */\n  ask?: string;\n\n  /**\n   * The parent {@link GetProductsRequest} so the adopter sees the full\n   * envelope (account, etc.) without the framework projecting fields\n   * one-by-one.\n   */\n  parentRequest: GetProductsRequest;\n}\n\n/**\n * Adopter-returned shape from {@link ProposalManager.finalizeProposal} —\n * inline commit.\n *\n * Framework calls `ProposalStore.commit` with these fields before\n * projecting the wire response. The buyer sees the committed `Proposal`\n * with `proposal_status: 'committed'` + `expires_at` populated on the\n * next `get_products` response payload.\n *\n * @public\n */\nexport interface FinalizeProposalSuccess<TRecipe extends Recipe = Recipe> {\n  /**\n   * The wire `Proposal` shape with locked pricing and\n   * `proposal_status: 'committed'`. Adopter typically derives this from\n   * {@link FinalizeProposalRequest.proposalPayload} with modifications.\n   *\n   * **Must be JSON-serializable end-to-end** — non-JSON values won't\n   * survive a process restart through a durable {@link ProposalStore}.\n   */\n  proposal: Record<string, unknown>;\n\n  /**\n   * Inventory hold deadline. After this (plus the adopter's\n   * {@link ProposalCapabilities.expiresAtGraceSeconds} window), the\n   * framework rejects `create_media_buy` calls referencing the proposal\n   * with `PROPOSAL_EXPIRED`.\n   */\n  expiresAt: Date;\n\n  /**\n   * Optional refreshed recipe mapping. Omitting preserves the draft's\n   * recipes verbatim. Adopters whose finalize logic mutates recipe\n   * fields (e.g. locking a line-item template id) supply a fresh\n   * mapping.\n   */\n  recipes?: ReadonlyMap<string, TRecipe>;\n}\n\n// ---------------------------------------------------------------------------\n// ProposalManager interface\n// ---------------------------------------------------------------------------\n\ntype Ctx<TCtxMeta> = RequestContext<Account<TCtxMeta>>;\n\n/**\n * Assembles proposals from buyer briefs.\n *\n * Reads inventory, signals, rate cards, availability. Produces proposals\n * where each `Product` carries a typed `implementation_config` (a recipe;\n * see {@link Recipe}) that the bound `DecisioningPlatform` consumes at\n * `create_media_buy` time.\n *\n * Methods may be sync or async; the framework awaits whatever is\n * returned. Same convention as `SalesPlatform`.\n *\n * **Required surface:** {@link getProducts}.\n *\n * **Optional surfaces (capability-gated):**\n *\n *   - {@link refineProducts} — only invoked when\n *     {@link ProposalCapabilities.refine} is true.\n *   - {@link finalizeProposal} — only invoked when\n *     {@link ProposalCapabilities.finalize} is true. Wired by the\n *     framework's lifecycle helpers; intercepts `refine[i].action: 'finalize'`\n *     entries before the underlying `getProducts` / `refineProducts` runs.\n *\n * Throw `AdcpError` for buyer-fixable rejection (`BUDGET_TOO_LOW`,\n * `POLICY_VIOLATION`, `UNSUPPORTED_FEATURE`); the framework projects to\n * the wire structured-error envelope.\n *\n * Adopter typing tip: parameterize on your concrete `Recipe` subtype to\n * get end-to-end recipe typing through `ctx.recipes` in the bound\n * `DecisioningPlatform`'s methods:\n *\n * ```ts\n * type MyRecipe = GAMRecipe | KevelRecipe;\n * const manager: ProposalManager<MyRecipe, MyTenantMeta> = { ... };\n * ```\n *\n * @public\n */\nexport interface ProposalManager<TRecipe extends Recipe = Recipe, TCtxMeta = unknown> {\n  /**\n   * What this ProposalManager can do — sales specialism + capability flags.\n   */\n  capabilities: ProposalCapabilities;\n\n  /**\n   * Initial product discovery from a buyer brief.\n   *\n   * Each returned `Product` SHOULD carry an `implementation_config`\n   * matching the bound `DecisioningPlatform`'s recipe schema (see\n   * {@link Recipe}). The framework treats `implementation_config` as\n   * opaque on the wire; recipe typing is enforced through the\n   * `TRecipe` type parameter on the adopter side.\n   *\n   * For non-guaranteed flows: typically a static catalogue, possibly\n   * filtered by buyer brief / signals.\n   *\n   * For guaranteed flows: typically a brief-driven assembly consulting\n   * rate cards + availability. Adopters return draft proposals; the\n   * buyer drives the finalize transition via subsequent refine calls\n   * with `action: 'finalize'`.\n   */\n  getProducts(req: GetProductsRequest, ctx: Ctx<TCtxMeta>): MaybePromise<ProposalGetProductsPayload>;\n\n  /**\n   * Refine-mode iteration on a previous `getProducts` response.\n   *\n   * Per the spec, refine is a `buying_mode` value on `get_products` —\n   * the wire envelope is the same. The framework routes refine requests\n   * to this method when:\n   *\n   * 1. The wired ProposalManager declares `capabilities.refine` = true,\n   * 2. The request has `buying_mode === 'refine'`, AND\n   * 3. The manager implements this method.\n   *\n   * Otherwise refine requests fall through to {@link getProducts}.\n   *\n   * Adopters implementing `refineProducts` without `finalize` support\n   * should treat `action: 'finalize'` entries as `UNSUPPORTED_FEATURE`\n   * and return a structured error. Adopters with `finalize` support\n   * see those entries intercepted by the framework before this method\n   * is called.\n   */\n  refineProducts?(req: GetProductsRequest, ctx: Ctx<TCtxMeta>): MaybePromise<ProposalGetProductsPayload>;\n\n  /**\n   * Commit a draft proposal to firm pricing + inventory hold.\n   *\n   * Wired by the framework's lifecycle helpers when:\n   *\n   * 1. `capabilities.finalize === true`,\n   * 2. The buyer's request has `buying_mode === 'refine'` with a\n   *    `refine[i]` entry of `{ scope: 'proposal', action: 'finalize',\n   *    proposal_id }`, AND\n   * 3. The proposal_id resolves to a DRAFT entry in the\n   *    {@link ProposalStore}.\n   *\n   * Return a {@link FinalizeProposalSuccess} for inline commit (the\n   * spec-default route), or a `TaskHandoff<FinalizeProposalSuccess>` to\n   * promote to a HITL background task. The HITL commit hook is wired\n   * in v1.6+; v1.5 inline-only.\n   */\n  finalizeProposal?(\n    req: FinalizeProposalRequest<TRecipe>,\n    ctx: Ctx<TCtxMeta>\n  ): MaybePromise<FinalizeProposalSuccess<TRecipe> | TaskHandoff<FinalizeProposalSuccess<TRecipe>>>;\n}\n"],"mappings":";;;;;;AA+IO,SAAS,6BAA6B,MAAkC;AAC7E,QAAM,QAA4C,CAAC,oBAAoB,sBAAsB;AAC7F,MAAI,CAAC,MAAM,SAAS,KAAK,eAAe,GAAG;AACzC,UAAM,IAAI;AAAA,MACR,uDAAuD,KAAK,UAAU,KAAK,CAAC,SACnE,KAAK,UAAU,KAAK,eAAe,CAAC;AAAA,IAE/C;AAAA,EACF;AACA,MAAI,KAAK,yBAAyB,QAAQ,KAAK,wBAAwB,GAAG;AACxE,UAAM,IAAI;AAAA,MACR,gEAAgE,KAAK,qBAAqB;AAAA,IAE5F;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../../../src/lib/server/decisioning/proposal/types.ts"],"sourcesContent":["/**\n * ProposalManager — primitives for the two-platform composition.\n *\n * The existing `DecisioningPlatform` conflates two concerns: assembling\n * proposals from briefs (`get_products`, refine) vs. executing media buys\n * against an upstream (`create_media_buy`, `update_media_buy`,\n * `get_media_buy_delivery`). The two-platform composition splits them: a\n * separate {@link ProposalManager} handles the proposal side; the\n * `DecisioningPlatform` keeps the execution side. Either platform can be\n * mock-backed independently.\n *\n * Ports the Python primitives shipped in `adcp-client-python` PRs #504\n * (v1) and #550 (v1.5):\n *\n *   - {@link ProposalManager} — interface with `getProducts` (required)\n *     plus optional `refineProducts` and `finalizeProposal`.\n *   - {@link ProposalCapabilities} — sales-axis-scoped capability flags.\n *   - {@link Recipe} — typed `recipe_kind`-discriminated base; adopters\n *     subclass with their internal-config schema. Rides on\n *     `Product.implementation_config` (opaque to the buyer).\n *   - {@link CapabilityOverlap} — typed declaration of which wire\n *     capabilities the buyer can configure on a product. The framework\n *     validates buyer requests against the overlap pre-adapter.\n *   - {@link FinalizeProposalRequest} / {@link FinalizeProposalSuccess} —\n *     framework-internal shapes for the finalize lifecycle (wired in the\n *     v1.5 dispatch helpers).\n *\n * @public\n * @packageDocumentation\n */\n\nimport type { MaybePromise } from '../../create-adcp-server';\nimport type { Account } from '../account';\nimport type { RequestContext } from '../context';\nimport type { GetProductsRequest, GetProductsResponse } from '../../../types/tools.generated';\nimport type { RequireCacheScopeWhenProducts, ServerPayload } from '../../../types/server-payload';\nimport type { TaskHandoff } from '../async-outcome';\n\nexport type ProposalGetProductsPayload = RequireCacheScopeWhenProducts<ServerPayload<GetProductsResponse>>;\n\n// ---------------------------------------------------------------------------\n// Capabilities\n// ---------------------------------------------------------------------------\n\n/**\n * Sales specialisms a {@link ProposalManager} can serve. Mirrors the\n * `sales-*` slugs in the spec's specialism enum.\n *\n * v1 scopes to the two `ProposalManager`-relevant flavours; broader\n * coverage (broadcast-tv, social, proposal-mode, catalog-driven) lands\n * as adopter signal grows.\n *\n * @public\n */\nexport type ProposalSalesSpecialism = 'sales-guaranteed' | 'sales-non-guaranteed';\n\n/**\n * Capability declaration for a {@link ProposalManager}.\n *\n * Sales-axis-scoped: proposal handling is a sales-specialism concern,\n * not a generic platform-wide concept. The `salesSpecialism` field\n * declares which AdCP sales specialism this manager serves; capability\n * flags declare which optional behaviours it supports.\n *\n * The framework reads this declaration at server-construction time to\n * decide which dispatch paths apply (e.g. `refineProducts` is only\n * invoked when `refine` is true; `finalizeProposal` is only invoked\n * when `finalize` is true).\n *\n * @public\n */\nexport interface ProposalCapabilities {\n  /**\n   * Which AdCP sales specialism this manager serves.\n   *\n   * `sales-guaranteed` for guaranteed-direct flows with proposal\n   * lifecycle (finalize → committed proposal → media buy).\n   *\n   * `sales-non-guaranteed` for catalog-style flows where `getProducts`\n   * returns a static catalog and buyers reference products directly at\n   * `create_media_buy`.\n   */\n  salesSpecialism: ProposalSalesSpecialism;\n\n  /**\n   * When true, the manager implements {@link ProposalManager.refineProducts}\n   * and the framework routes `get_products` requests with\n   * `buying_mode: 'refine'` to that method. When false, refine requests\n   * fall through to `getProducts` (or surface `UNSUPPORTED_FEATURE` if\n   * the manager rejects them).\n   */\n  refine?: boolean;\n\n  /**\n   * When true, the manager implements {@link ProposalManager.finalizeProposal}\n   * and the framework intercepts `refine[i].action: 'finalize'` entries to\n   * commit drafts via the lifecycle helpers. When false, finalize entries\n   * pass through to the underlying `getProducts` / `refineProducts` method\n   * unchanged.\n   */\n  finalize?: boolean;\n\n  /**\n   * Grace window (in seconds) added to a committed proposal's `expires_at`\n   * before the framework rejects `create_media_buy` calls referencing the\n   * proposal with `PROPOSAL_EXPIRED`. Default 0 (strict).\n   */\n  expiresAtGraceSeconds?: number;\n\n  /**\n   * Signal-driven product assembly — the manager constructs products from\n   * buyer signals at request time rather than enumerating a static\n   * catalogue. Informational in v1.5; future PRs may validate that\n   * inventory / signal stores are wired when this flag is set.\n   */\n  dynamicProducts?: boolean;\n\n  /**\n   * The manager consults rate cards (per buyer relationship per product)\n   * when emitting prices. Informational in v1.5.\n   */\n  rateCardPricing?: boolean;\n\n  /**\n   * The manager reserves capacity at proposal time (typical for\n   * guaranteed). Informational in v1.5; the `finalize` transition that\n   * drives the actual hold is wired via the lifecycle helpers.\n   */\n  availabilityReservations?: boolean;\n}\n\n/**\n * Validate a {@link ProposalCapabilities} object. Throws when the declaration\n * is malformed (unknown `salesSpecialism`, negative `expiresAtGraceSeconds`).\n * The framework calls this at boot; adopters can call it from their own\n * config-validation code paths to fail fast on misconfiguration.\n *\n * Kept as a plain function rather than a class constructor to match the\n * codebase's preference for plain TS interfaces over runtime classes\n * for adopter-facing types.\n *\n * @public\n */\nexport function validateProposalCapabilities(caps: ProposalCapabilities): void {\n  const valid: readonly ProposalSalesSpecialism[] = ['sales-guaranteed', 'sales-non-guaranteed'];\n  if (!valid.includes(caps.salesSpecialism)) {\n    throw new Error(\n      `ProposalCapabilities.salesSpecialism must be one of ${JSON.stringify(valid)}. ` +\n        `Got ${JSON.stringify(caps.salesSpecialism)}. v1.5 scopes ProposalManager to the two ` +\n        `core sales specialisms; broader specialism support lands in subsequent releases.`\n    );\n  }\n  if (caps.expiresAtGraceSeconds != null && caps.expiresAtGraceSeconds < 0) {\n    throw new Error(\n      `ProposalCapabilities.expiresAtGraceSeconds must be >= 0; got ${caps.expiresAtGraceSeconds}. ` +\n        `The grace window extends the inventory hold past expires_at; negative values would shrink it.`\n    );\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Recipe + CapabilityOverlap\n// ---------------------------------------------------------------------------\n\n/**\n * Per-product subset of wire capability flags that the buyer can\n * configure on this product.\n *\n * Buyer requests asking for capabilities outside this overlap are\n * rejected by the framework before the adapter sees them (validated by\n * the lifecycle helpers — see `proposal/lifecycle.ts`).\n *\n * Each field is `ReadonlySet<string> | undefined`:\n *\n *   - `undefined` → framework does not gate this axis (open).\n *   - `ReadonlySet` → buyer choices must be subsets of this set.\n *     An empty set means deny-all on this axis.\n *\n * The undefined vs. empty-set distinction matches set intuition:\n * \"no constraint\" is `undefined`; \"allowed set is empty\" is `new Set()`.\n *\n * **Why no extras dict?** v1.5 deliberately omits an `extras` escape\n * hatch (per Python design § D4). Adopters with novel gating needs\n * extend the interface with typed fields; a dict bag leaves no paper\n * trail. If a new axis turns out to be widely useful, it lands as a\n * typed field on `CapabilityOverlap` upstream.\n *\n * @public\n */\nexport interface CapabilityOverlap {\n  /**\n   * Subset of wire `pricing_models` the buyer can choose. Validated\n   * against the matching `PricingOption.pricing_model` on the buyer's\n   * package.\n   */\n  pricingModels?: ReadonlySet<string>;\n\n  /**\n   * Subset of wire targeting dimensions (`geo`, `device_type`,\n   * `language`, etc.). Validated against the keys present on the\n   * buyer's `targeting_overlay`.\n   */\n  targetingDimensions?: ReadonlySet<string>;\n\n  /**\n   * Subset of `{ guaranteed, non_guaranteed }` the product offers.\n   */\n  deliveryTypes?: ReadonlySet<string>;\n\n  /**\n   * If the seller integrates signals, which signal types this product\n   * accepts. An empty set means the seller explicitly refuses all\n   * signals on this product; `undefined` means no framework gate.\n   */\n  signalTypes?: ReadonlySet<string>;\n}\n\n/**\n * Base type for typed product `implementation_config` payloads.\n *\n * Adopters declare a discriminated subtype with a literal `recipe_kind`:\n *\n * ```ts\n * interface GAMRecipe extends Recipe {\n *   recipe_kind: 'gam';\n *   line_item_template_id: string;\n *   ad_unit_ids: readonly string[];\n *   capability_overlap?: CapabilityOverlap;\n * }\n * ```\n *\n * The kind tag enables router-by-recipe-kind dispatch in the\n * multi-decisioning case (one ProposalManager + many DecisioningPlatforms,\n * each handling a subset of recipe kinds). v1.5 doesn't yet wire that\n * routing — adopters using a single DecisioningPlatform attach recipes\n * freely without registry validation.\n *\n * **The recipe is never on the buyer's wire surface.** It rides inside\n * `Product.implementation_config` (an opaque-to-buyer dict). Buyers treat\n * it as a black box; the framework persists it through the proposal\n * lifecycle so the executing DecisioningPlatform sees a stable view.\n *\n * `capability_overlap` is optional. When present, the framework activates\n * the v1.5 buyer-request validation seam against the declared subsets.\n *\n * @public\n */\nexport interface Recipe {\n  /** Adapter-family discriminator. Subtypes narrow with a literal type. */\n  recipe_kind: string;\n\n  /**\n   * Optional typed declaration of which wire capabilities the buyer can\n   * configure on this product. `undefined` means no framework gating.\n   * An explicit {@link CapabilityOverlap} activates the v1.5 validation.\n   */\n  capability_overlap?: CapabilityOverlap;\n}\n\n// ---------------------------------------------------------------------------\n// Finalize lifecycle shapes\n// ---------------------------------------------------------------------------\n\n/**\n * Framework-internal request shape passed to {@link ProposalManager.finalizeProposal}.\n *\n * Constructed by the framework dispatcher when a buyer's `get_products`\n * request with `buying_mode: 'refine'` carries a `refine[i].action: 'finalize'`\n * entry. Adopters don't parse the wire envelope; the framework projects.\n *\n * @public\n */\nexport interface FinalizeProposalRequest<TRecipe extends Recipe = Recipe> {\n  /**\n   * The draft proposal the buyer is asking to finalize. Hydrated from\n   * the wire's `refine[i].proposal_id` field.\n   */\n  proposalId: string;\n\n  /**\n   * `product_id -> Recipe` mapping pulled from the {@link ProposalStore}\n   * draft. The adopter's finalize logic typically lock-prices these and\n   * emits the committed proposal.\n   */\n  recipes: ReadonlyMap<string, TRecipe>;\n\n  /**\n   * The draft's wire `Proposal` shape (the same payload the adopter\n   * returned on the prior `getProducts` / `refineProducts` call).\n   * Adopter typically modifies this with locked pricing and returns it\n   * on {@link FinalizeProposalSuccess}.\n   */\n  proposalPayload: Record<string, unknown>;\n\n  /**\n   * The buyer's per-entry refine `ask` text — what they want finalized.\n   * Free-form; adopter consumes.\n   */\n  ask?: string;\n\n  /**\n   * The parent {@link GetProductsRequest} so the adopter sees the full\n   * envelope (account, etc.) without the framework projecting fields\n   * one-by-one.\n   */\n  parentRequest: GetProductsRequest;\n}\n\n/**\n * Adopter-returned shape from {@link ProposalManager.finalizeProposal} —\n * inline commit.\n *\n * Framework calls `ProposalStore.commit` with these fields before\n * projecting the wire response. The buyer sees the committed `Proposal`\n * with `proposal_status: 'committed'` + `expires_at` populated on the\n * next `get_products` response payload.\n *\n * @public\n */\nexport interface FinalizeProposalSuccess<TRecipe extends Recipe = Recipe> {\n  /**\n   * The wire `Proposal` shape with locked pricing and\n   * `proposal_status: 'committed'`. Adopter typically derives this from\n   * {@link FinalizeProposalRequest.proposalPayload} with modifications.\n   *\n   * **Must be JSON-serializable end-to-end** — non-JSON values won't\n   * survive a process restart through a durable {@link ProposalStore}.\n   */\n  proposal: Record<string, unknown>;\n\n  /**\n   * Inventory hold deadline. After this (plus the adopter's\n   * {@link ProposalCapabilities.expiresAtGraceSeconds} window), the\n   * framework rejects `create_media_buy` calls referencing the proposal\n   * with `PROPOSAL_EXPIRED`.\n   */\n  expiresAt: Date;\n\n  /**\n   * Optional refreshed recipe mapping. Omitting preserves the draft's\n   * recipes verbatim. Adopters whose finalize logic mutates recipe\n   * fields (e.g. locking a line-item template id) supply a fresh\n   * mapping.\n   */\n  recipes?: ReadonlyMap<string, TRecipe>;\n}\n\n// ---------------------------------------------------------------------------\n// ProposalManager interface\n// ---------------------------------------------------------------------------\n\ntype Ctx<TCtxMeta> = RequestContext<Account<TCtxMeta>>;\n\n/**\n * Assembles proposals from buyer briefs.\n *\n * Reads inventory, signals, rate cards, availability. Produces proposals\n * where each `Product` carries a typed `implementation_config` (a recipe;\n * see {@link Recipe}) that the bound `DecisioningPlatform` consumes at\n * `create_media_buy` time.\n *\n * Methods may be sync or async; the framework awaits whatever is\n * returned. Same convention as `SalesPlatform`.\n *\n * **Required surface:** {@link getProducts}.\n *\n * **Optional surfaces (capability-gated):**\n *\n *   - {@link refineProducts} — only invoked when\n *     {@link ProposalCapabilities.refine} is true.\n *   - {@link finalizeProposal} — only invoked when\n *     {@link ProposalCapabilities.finalize} is true. Wired by the\n *     framework's lifecycle helpers; intercepts `refine[i].action: 'finalize'`\n *     entries before the underlying `getProducts` / `refineProducts` runs.\n *\n * Throw `AdcpError` for buyer-fixable rejection (`BUDGET_TOO_LOW`,\n * `POLICY_VIOLATION`, `UNSUPPORTED_FEATURE`); the framework projects to\n * the wire structured-error envelope.\n *\n * Adopter typing tip: parameterize on your concrete `Recipe` subtype to\n * get end-to-end recipe typing through `ctx.recipes` in the bound\n * `DecisioningPlatform`'s methods:\n *\n * ```ts\n * type MyRecipe = GAMRecipe | KevelRecipe;\n * const manager: ProposalManager<MyRecipe, MyTenantMeta> = { ... };\n * ```\n *\n * @public\n */\nexport interface ProposalManager<TRecipe extends Recipe = Recipe, TCtxMeta = unknown> {\n  /**\n   * What this ProposalManager can do — sales specialism + capability flags.\n   */\n  capabilities: ProposalCapabilities;\n\n  /**\n   * Initial product discovery from a buyer brief.\n   *\n   * Each returned `Product` SHOULD carry an `implementation_config`\n   * matching the bound `DecisioningPlatform`'s recipe schema (see\n   * {@link Recipe}). The framework treats `implementation_config` as\n   * opaque on the wire; recipe typing is enforced through the\n   * `TRecipe` type parameter on the adopter side.\n   *\n   * For non-guaranteed flows: typically a static catalogue, possibly\n   * filtered by buyer brief / signals.\n   *\n   * For guaranteed flows: typically a brief-driven assembly consulting\n   * rate cards + availability. Adopters return draft proposals; the\n   * buyer drives the finalize transition via subsequent refine calls\n   * with `action: 'finalize'`.\n   */\n  getProducts(req: GetProductsRequest, ctx: Ctx<TCtxMeta>): MaybePromise<ProposalGetProductsPayload>;\n\n  /**\n   * Refine-mode iteration on a previous `getProducts` response.\n   *\n   * Per the spec, refine is a `buying_mode` value on `get_products` —\n   * the wire envelope is the same. The framework routes refine requests\n   * to this method when:\n   *\n   * 1. The wired ProposalManager declares `capabilities.refine` = true,\n   * 2. The request has `buying_mode === 'refine'`, AND\n   * 3. The manager implements this method.\n   *\n   * Otherwise refine requests fall through to {@link getProducts}.\n   *\n   * Adopters implementing `refineProducts` without `finalize` support\n   * should treat `action: 'finalize'` entries as `UNSUPPORTED_FEATURE`\n   * and return a structured error. Adopters with `finalize` support\n   * see those entries intercepted by the framework before this method\n   * is called.\n   */\n  refineProducts?(req: GetProductsRequest, ctx: Ctx<TCtxMeta>): MaybePromise<ProposalGetProductsPayload>;\n\n  /**\n   * Commit a draft proposal to firm pricing + inventory hold.\n   *\n   * Wired by the framework's lifecycle helpers when:\n   *\n   * 1. `capabilities.finalize === true`,\n   * 2. The buyer's request has `buying_mode === 'refine'` with a\n   *    `refine[i]` entry of `{ scope: 'proposal', action: 'finalize',\n   *    proposal_id }`, AND\n   * 3. The proposal_id resolves to a DRAFT entry in the\n   *    {@link ProposalStore}.\n   *\n   * Return a {@link FinalizeProposalSuccess} for inline commit (the\n   * spec-default route), or a `TaskHandoff<FinalizeProposalSuccess>` to\n   * promote to a HITL background task. The HITL commit hook is wired\n   * in v1.6+; v1.5 inline-only.\n   */\n  finalizeProposal?(\n    req: FinalizeProposalRequest<TRecipe>,\n    ctx: Ctx<TCtxMeta>\n  ): MaybePromise<FinalizeProposalSuccess<TRecipe> | TaskHandoff<FinalizeProposalSuccess<TRecipe>>>;\n}\n"],"mappings":"AA+IO,SAAS,6BAA6B,MAAkC;AAC7E,QAAM,QAA4C,CAAC,oBAAoB,sBAAsB;AAC7F,MAAI,CAAC,MAAM,SAAS,KAAK,eAAe,GAAG;AACzC,UAAM,IAAI;AAAA,MACR,uDAAuD,KAAK,UAAU,KAAK,CAAC,SACnE,KAAK,UAAU,KAAK,eAAe,CAAC;AAAA,IAE/C;AAAA,EACF;AACA,MAAI,KAAK,yBAAyB,QAAQ,KAAK,wBAAwB,GAAG;AACxE,UAAM,IAAI;AAAA,MACR,gEAAgE,KAAK,qBAAqB;AAAA,IAE5F;AAAA,EACF;AACF;","names":[]}

package/dist/lib/server/decisioning/resolve-presets.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 import { PermissionDeniedError } from "./errors-typed.mjs";
 function requireAccountMatch(predicate, options = {}) {
   const onDeny = options.onDeny ?? "null";

package/dist/lib/server/decisioning/resolve-presets.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/server/decisioning/resolve-presets.ts"],"sourcesContent":["/**\n * `composeMethod` presets for `accounts.resolve`. Standardize the security\n * pattern multi-tenant adopters reach for: \"the inner resolver found the\n * account, but is the calling principal authorized for it?\"\n *\n * Hooks here run as `after` on a `composeMethod`-wrapped `accounts.resolve`.\n * When `inner` returns `null` they propagate `null` (no predicate runs);\n * otherwise they call the predicate, and on deny return `null` (default —\n * indistinguishable from \"not found\", guards against principal enumeration)\n * or throw {@link PermissionDeniedError} (typed wire error; use only when\n * the principal already knows the account exists).\n *\n * Closes adcp-client#1339.\n *\n * @public\n */\n\nimport type { AccountReference } from '../../types/tools.generated';\nimport type { Account, ResolveContext } from './account';\nimport type { ComposeHooks } from './compose';\nimport { PermissionDeniedError } from './errors-typed';\n\n/**\n * Hook shape for `composeMethod` over `accounts.resolve`. Exported for\n * adopters writing their own helpers atop these presets.\n *\n * @public\n */\nexport type ResolveAccountHooks<TCtxMeta = Record<string, unknown>> = ComposeHooks<\n  AccountReference | undefined,\n  ResolveContext | undefined,\n  Account<TCtxMeta> | null\n>;\n\n/**\n * Common options for resolve-time guards.\n *\n * @public\n */\nexport interface ResolveGuardOptions {\n  /**\n   * Behavior when the predicate denies.\n   *  - `'null'` (default) — return `null`. Buyer sees `ACCOUNT_NOT_FOUND`,\n   *    same as a genuinely-unknown account. Avoids principal enumeration.\n   *  - `'throw'` — throw {@link PermissionDeniedError}. Surfaces a typed\n   *    error to the buyer; use only when the principal is already known\n   *    to be allowed to know the account exists.\n   */\n  onDeny?: 'null' | 'throw';\n\n  /**\n   * Action label attached to {@link PermissionDeniedError} when\n   * `onDeny: 'throw'`. Defaults to `'accounts.resolve'`.\n   */\n  action?: string;\n}\n\n/**\n * General-purpose post-resolve guard. After the wrapped `accounts.resolve`\n * runs, calls `predicate(account, ctx)`; on `false` denies per `onDeny`.\n *\n * Building block for the specialized presets below; reach for it directly\n * when your authorization rule needs custom logic.\n *\n * @example\n * ```ts\n * import { composeMethod, requireAccountMatch } from '@adcp/sdk/server';\n *\n * accounts: {\n *   resolve: composeMethod(\n *     baseResolve,\n *     requireAccountMatch((account, ctx) =>\n *       account.account_scope === 'brand' && ctx?.agent?.id === account.brand?.id\n *     )\n *   ),\n * }\n * ```\n *\n * @public\n */\nexport function requireAccountMatch<TCtxMeta = Record<string, unknown>>(\n  predicate: (account: Account<TCtxMeta>, ctx: ResolveContext | undefined) => boolean | Promise<boolean>,\n  options: ResolveGuardOptions = {}\n): ResolveAccountHooks<TCtxMeta> {\n  const onDeny = options.onDeny ?? 'null';\n  const action = options.action ?? 'accounts.resolve';\n  return {\n    after: async (result, _params, ctx) => {\n      if (result === null) return null;\n      const ok = await predicate(result, ctx);\n      if (ok) return result;\n      if (onDeny === 'throw') {\n        throw new PermissionDeniedError(action);\n      }\n      return null;\n    },\n  };\n}\n\n/**\n * Gate resolved accounts on `account.advertiser` ∈ roster. Canonical\n * multi-tenant pattern: each calling principal is configured with a list\n * of advertisers it may transact for; the inner resolver finds the\n * account by reference, this preset rejects when the resolved\n * advertiser isn't in the roster.\n *\n * `getRoster` receives the `ResolveContext` and returns the principal's\n * allowed advertisers (any iterable of strings — array, Set, async lookup).\n * Accounts whose `advertiser` is undefined are denied.\n *\n * Equivalent to {@link requireAccountMatch} with an advertiser-extraction\n * predicate; sugar for the canonical shape.\n *\n * @example\n * ```ts\n * import { composeMethod, requireAdvertiserMatch } from '@adcp/sdk/server';\n *\n * accounts: {\n *   resolve: composeMethod(\n *     baseResolve,\n *     requireAdvertiserMatch(async (ctx) => tenantRoster.for(ctx?.agent))\n *   ),\n * }\n * ```\n *\n * @public\n */\nexport function requireAdvertiserMatch<TCtxMeta = Record<string, unknown>>(\n  getRoster: (ctx: ResolveContext | undefined) => Iterable<string> | Promise<Iterable<string>>,\n  options: ResolveGuardOptions = {}\n): ResolveAccountHooks<TCtxMeta> {\n  return requireAccountMatch<TCtxMeta>(async (account, ctx) => {\n    const advertiser = account.advertiser;\n    if (advertiser === undefined) return false;\n    const roster = await getRoster(ctx);\n    for (const allowed of roster) {\n      if (allowed === advertiser) return true;\n    }\n    return false;\n  }, options);\n}\n\n/**\n * Gate resolved accounts on org scope: account-side org extractor + ctx-side\n * org extractor + equality. Use when \"is this principal in the same org as\n * this account?\" is the authorization rule.\n *\n * Both extractors must return a defined string for the check to pass; either\n * returning `undefined` denies. Caller is responsible for whatever\n * normalization (case-folding, trim, alias resolution) is appropriate for\n * the org identifier shape — the preset compares with strict equality.\n *\n * @example\n * ```ts\n * import { composeMethod, requireOrgScope } from '@adcp/sdk/server';\n *\n * accounts: {\n *   resolve: composeMethod(\n *     baseResolve,\n *     requireOrgScope(\n *       (account) => account.ctx_metadata.orgId,\n *       (ctx) => ctx?.authInfo?.extra?.orgId as string | undefined\n *     )\n *   ),\n * }\n * ```\n *\n * @public\n */\nexport function requireOrgScope<TCtxMeta = Record<string, unknown>>(\n  getAccountOrg: (account: Account<TCtxMeta>) => string | undefined,\n  getCtxOrg: (ctx: ResolveContext | undefined) => string | undefined,\n  options: ResolveGuardOptions = {}\n): ResolveAccountHooks<TCtxMeta> {\n  return requireAccountMatch<TCtxMeta>((account, ctx) => {\n    const accountOrg = getAccountOrg(account);\n    if (accountOrg === undefined) return false;\n    const ctxOrg = getCtxOrg(ctx);\n    if (ctxOrg === undefined) return false;\n    return accountOrg === ctxOrg;\n  }, options);\n}\n"],"mappings":";;;;;;AAoBA,SAAS,6BAA6B;AA4D/B,SAAS,oBACd,WACA,UAA+B,CAAC,GACD;AAC/B,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,SAAS,QAAQ,UAAU;AACjC,SAAO;AAAA,IACL,OAAO,OAAO,QAAQ,SAAS,QAAQ;AACrC,UAAI,WAAW,KAAM,QAAO;AAC5B,YAAM,KAAK,MAAM,UAAU,QAAQ,GAAG;AACtC,UAAI,GAAI,QAAO;AACf,UAAI,WAAW,SAAS;AACtB,cAAM,IAAI,sBAAsB,MAAM;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AA8BO,SAAS,uBACd,WACA,UAA+B,CAAC,GACD;AAC/B,SAAO,oBAA8B,OAAO,SAAS,QAAQ;AAC3D,UAAM,aAAa,QAAQ;AAC3B,QAAI,eAAe,OAAW,QAAO;AACrC,UAAM,SAAS,MAAM,UAAU,GAAG;AAClC,eAAW,WAAW,QAAQ;AAC5B,UAAI,YAAY,WAAY,QAAO;AAAA,IACrC;AACA,WAAO;AAAA,EACT,GAAG,OAAO;AACZ;AA6BO,SAAS,gBACd,eACA,WACA,UAA+B,CAAC,GACD;AAC/B,SAAO,oBAA8B,CAAC,SAAS,QAAQ;AACrD,UAAM,aAAa,cAAc,OAAO;AACxC,QAAI,eAAe,OAAW,QAAO;AACrC,UAAM,SAAS,UAAU,GAAG;AAC5B,QAAI,WAAW,OAAW,QAAO;AACjC,WAAO,eAAe;AAAA,EACxB,GAAG,OAAO;AACZ;","names":[]}
+{"version":3,"sources":["../../../../src/lib/server/decisioning/resolve-presets.ts"],"sourcesContent":["/**\n * `composeMethod` presets for `accounts.resolve`. Standardize the security\n * pattern multi-tenant adopters reach for: \"the inner resolver found the\n * account, but is the calling principal authorized for it?\"\n *\n * Hooks here run as `after` on a `composeMethod`-wrapped `accounts.resolve`.\n * When `inner` returns `null` they propagate `null` (no predicate runs);\n * otherwise they call the predicate, and on deny return `null` (default —\n * indistinguishable from \"not found\", guards against principal enumeration)\n * or throw {@link PermissionDeniedError} (typed wire error; use only when\n * the principal already knows the account exists).\n *\n * Closes adcp-client#1339.\n *\n * @public\n */\n\nimport type { AccountReference } from '../../types/tools.generated';\nimport type { Account, ResolveContext } from './account';\nimport type { ComposeHooks } from './compose';\nimport { PermissionDeniedError } from './errors-typed';\n\n/**\n * Hook shape for `composeMethod` over `accounts.resolve`. Exported for\n * adopters writing their own helpers atop these presets.\n *\n * @public\n */\nexport type ResolveAccountHooks<TCtxMeta = Record<string, unknown>> = ComposeHooks<\n  AccountReference | undefined,\n  ResolveContext | undefined,\n  Account<TCtxMeta> | null\n>;\n\n/**\n * Common options for resolve-time guards.\n *\n * @public\n */\nexport interface ResolveGuardOptions {\n  /**\n   * Behavior when the predicate denies.\n   *  - `'null'` (default) — return `null`. Buyer sees `ACCOUNT_NOT_FOUND`,\n   *    same as a genuinely-unknown account. Avoids principal enumeration.\n   *  - `'throw'` — throw {@link PermissionDeniedError}. Surfaces a typed\n   *    error to the buyer; use only when the principal is already known\n   *    to be allowed to know the account exists.\n   */\n  onDeny?: 'null' | 'throw';\n\n  /**\n   * Action label attached to {@link PermissionDeniedError} when\n   * `onDeny: 'throw'`. Defaults to `'accounts.resolve'`.\n   */\n  action?: string;\n}\n\n/**\n * General-purpose post-resolve guard. After the wrapped `accounts.resolve`\n * runs, calls `predicate(account, ctx)`; on `false` denies per `onDeny`.\n *\n * Building block for the specialized presets below; reach for it directly\n * when your authorization rule needs custom logic.\n *\n * @example\n * ```ts\n * import { composeMethod, requireAccountMatch } from '@adcp/sdk/server';\n *\n * accounts: {\n *   resolve: composeMethod(\n *     baseResolve,\n *     requireAccountMatch((account, ctx) =>\n *       account.account_scope === 'brand' && ctx?.agent?.id === account.brand?.id\n *     )\n *   ),\n * }\n * ```\n *\n * @public\n */\nexport function requireAccountMatch<TCtxMeta = Record<string, unknown>>(\n  predicate: (account: Account<TCtxMeta>, ctx: ResolveContext | undefined) => boolean | Promise<boolean>,\n  options: ResolveGuardOptions = {}\n): ResolveAccountHooks<TCtxMeta> {\n  const onDeny = options.onDeny ?? 'null';\n  const action = options.action ?? 'accounts.resolve';\n  return {\n    after: async (result, _params, ctx) => {\n      if (result === null) return null;\n      const ok = await predicate(result, ctx);\n      if (ok) return result;\n      if (onDeny === 'throw') {\n        throw new PermissionDeniedError(action);\n      }\n      return null;\n    },\n  };\n}\n\n/**\n * Gate resolved accounts on `account.advertiser` ∈ roster. Canonical\n * multi-tenant pattern: each calling principal is configured with a list\n * of advertisers it may transact for; the inner resolver finds the\n * account by reference, this preset rejects when the resolved\n * advertiser isn't in the roster.\n *\n * `getRoster` receives the `ResolveContext` and returns the principal's\n * allowed advertisers (any iterable of strings — array, Set, async lookup).\n * Accounts whose `advertiser` is undefined are denied.\n *\n * Equivalent to {@link requireAccountMatch} with an advertiser-extraction\n * predicate; sugar for the canonical shape.\n *\n * @example\n * ```ts\n * import { composeMethod, requireAdvertiserMatch } from '@adcp/sdk/server';\n *\n * accounts: {\n *   resolve: composeMethod(\n *     baseResolve,\n *     requireAdvertiserMatch(async (ctx) => tenantRoster.for(ctx?.agent))\n *   ),\n * }\n * ```\n *\n * @public\n */\nexport function requireAdvertiserMatch<TCtxMeta = Record<string, unknown>>(\n  getRoster: (ctx: ResolveContext | undefined) => Iterable<string> | Promise<Iterable<string>>,\n  options: ResolveGuardOptions = {}\n): ResolveAccountHooks<TCtxMeta> {\n  return requireAccountMatch<TCtxMeta>(async (account, ctx) => {\n    const advertiser = account.advertiser;\n    if (advertiser === undefined) return false;\n    const roster = await getRoster(ctx);\n    for (const allowed of roster) {\n      if (allowed === advertiser) return true;\n    }\n    return false;\n  }, options);\n}\n\n/**\n * Gate resolved accounts on org scope: account-side org extractor + ctx-side\n * org extractor + equality. Use when \"is this principal in the same org as\n * this account?\" is the authorization rule.\n *\n * Both extractors must return a defined string for the check to pass; either\n * returning `undefined` denies. Caller is responsible for whatever\n * normalization (case-folding, trim, alias resolution) is appropriate for\n * the org identifier shape — the preset compares with strict equality.\n *\n * @example\n * ```ts\n * import { composeMethod, requireOrgScope } from '@adcp/sdk/server';\n *\n * accounts: {\n *   resolve: composeMethod(\n *     baseResolve,\n *     requireOrgScope(\n *       (account) => account.ctx_metadata.orgId,\n *       (ctx) => ctx?.authInfo?.extra?.orgId as string | undefined\n *     )\n *   ),\n * }\n * ```\n *\n * @public\n */\nexport function requireOrgScope<TCtxMeta = Record<string, unknown>>(\n  getAccountOrg: (account: Account<TCtxMeta>) => string | undefined,\n  getCtxOrg: (ctx: ResolveContext | undefined) => string | undefined,\n  options: ResolveGuardOptions = {}\n): ResolveAccountHooks<TCtxMeta> {\n  return requireAccountMatch<TCtxMeta>((account, ctx) => {\n    const accountOrg = getAccountOrg(account);\n    if (accountOrg === undefined) return false;\n    const ctxOrg = getCtxOrg(ctx);\n    if (ctxOrg === undefined) return false;\n    return accountOrg === ctxOrg;\n  }, options);\n}\n"],"mappings":"AAoBA,SAAS,6BAA6B;AA4D/B,SAAS,oBACd,WACA,UAA+B,CAAC,GACD;AAC/B,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,SAAS,QAAQ,UAAU;AACjC,SAAO;AAAA,IACL,OAAO,OAAO,QAAQ,SAAS,QAAQ;AACrC,UAAI,WAAW,KAAM,QAAO;AAC5B,YAAM,KAAK,MAAM,UAAU,QAAQ,GAAG;AACtC,UAAI,GAAI,QAAO;AACf,UAAI,WAAW,SAAS;AACtB,cAAM,IAAI,sBAAsB,MAAM;AAAA,MACxC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AA8BO,SAAS,uBACd,WACA,UAA+B,CAAC,GACD;AAC/B,SAAO,oBAA8B,OAAO,SAAS,QAAQ;AAC3D,UAAM,aAAa,QAAQ;AAC3B,QAAI,eAAe,OAAW,QAAO;AACrC,UAAM,SAAS,MAAM,UAAU,GAAG;AAClC,eAAW,WAAW,QAAQ;AAC5B,UAAI,YAAY,WAAY,QAAO;AAAA,IACrC;AACA,WAAO;AAAA,EACT,GAAG,OAAO;AACZ;AA6BO,SAAS,gBACd,eACA,WACA,UAA+B,CAAC,GACD;AAC/B,SAAO,oBAA8B,CAAC,SAAS,QAAQ;AACrD,UAAM,aAAa,cAAc,OAAO;AACxC,QAAI,eAAe,OAAW,QAAO;AACrC,UAAM,SAAS,UAAU,GAAG;AAC5B,QAAI,WAAW,OAAW,QAAO;AACjC,WAAO,eAAe;AAAA,EACxB,GAAG,OAAO;AACZ;","names":[]}

package/dist/lib/server/decisioning/runtime/entity-hydration.generated.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 const TOOL_ENTITY_FIELDS = {
   acquire_rights: [
     { field: "pricing_option_id", xEntity: "vendor_pricing_option" },

package/dist/lib/server/decisioning/runtime/entity-hydration.generated.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../src/lib/server/decisioning/runtime/entity-hydration.generated.ts"],"sourcesContent":["// Generated entity-hydration field map — do NOT edit by hand\n//\n// Source: `schemas/cache/3.1.2/manifest.json` + per-tool request\n// schemas. Every top-level `x-entity`-tagged string field on a request\n// schema lands here. The runtime hydrator (`from-platform.ts` →\n// `hydrateForTool`) walks this map plus the hand-curated\n// `ENTITY_TO_RESOURCE_KIND` table to drive auto-hydration without\n// re-walking schemas at startup.\n//\n// Renaming-firewall: if the spec renames `media_buy_id` → `mediabuy_id`,\n// the `x-entity` tag travels with it; the next codegen run picks up\n// the new field name automatically.\n//\n// Regenerate with: npm run generate-entity-hydration\n\nexport interface EntityHydrationField {\n  /** Top-level property on the wire request object. */\n  readonly field: string;\n  /** Spec `x-entity` annotation — maps to `ResourceKind` at runtime. */\n  readonly xEntity: string;\n}\n\nexport const TOOL_ENTITY_FIELDS: Readonly<Record<string, ReadonlyArray<EntityHydrationField>>> = {\n  acquire_rights: [\n    { field: \"pricing_option_id\", xEntity: \"vendor_pricing_option\" },\n    { field: \"rights_id\", xEntity: \"rights_grant\" },\n  ],\n  activate_signal: [\n    { field: \"pricing_option_id\", xEntity: \"vendor_pricing_option\" },\n    { field: \"signal_agent_segment_id\", xEntity: \"signal_activation_id\" },\n  ],\n  build_creative: [\n    { field: \"creative_id\", xEntity: \"creative\" },\n    { field: \"media_buy_id\", xEntity: \"media_buy\" },\n    { field: \"package_id\", xEntity: \"package\" },\n    { field: \"refine_from_build_variant_id\", xEntity: \"build_variant\" },\n    { field: \"transformer_id\", xEntity: \"transformer\" },\n  ],\n  check_governance: [\n    { field: \"plan_id\", xEntity: \"governance_plan\" },\n  ],\n  create_media_buy: [\n    { field: \"plan_id\", xEntity: \"governance_plan\" },\n  ],\n  delete_collection_list: [\n    { field: \"list_id\", xEntity: \"collection_list\" },\n  ],\n  delete_property_list: [\n    { field: \"list_id\", xEntity: \"property_list\" },\n  ],\n  get_brand_identity: [\n    { field: \"brand_id\", xEntity: \"advertiser_brand\" },\n  ],\n  get_collection_list: [\n    { field: \"list_id\", xEntity: \"collection_list\" },\n  ],\n  get_property_list: [\n    { field: \"list_id\", xEntity: \"property_list\" },\n  ],\n  get_rights: [\n    { field: \"brand_id\", xEntity: \"rights_holder_brand\" },\n  ],\n  get_task_status: [\n    { field: \"task_id\", xEntity: \"task\" },\n  ],\n  log_event: [\n    { field: \"event_source_id\", xEntity: \"event_source\" },\n  ],\n  preview_creative: [\n    { field: \"creative_id\", xEntity: \"creative\" },\n  ],\n  provide_performance_feedback: [\n    { field: \"creative_id\", xEntity: \"creative\" },\n    { field: \"media_buy_id\", xEntity: \"media_buy\" },\n    { field: \"package_id\", xEntity: \"package\" },\n  ],\n  report_plan_outcome: [\n    { field: \"check_id\", xEntity: \"governance_check\" },\n    { field: \"plan_id\", xEntity: \"governance_plan\" },\n  ],\n  si_get_offering: [\n    { field: \"offering_id\", xEntity: \"offering\" },\n  ],\n  si_initiate_session: [\n    { field: \"media_buy_id\", xEntity: \"media_buy\" },\n    { field: \"offering_id\", xEntity: \"offering\" },\n  ],\n  si_send_message: [\n    { field: \"session_id\", xEntity: \"si_session\" },\n  ],\n  si_terminate_session: [\n    { field: \"session_id\", xEntity: \"si_session\" },\n  ],\n  update_collection_list: [\n    { field: \"list_id\", xEntity: \"collection_list\" },\n  ],\n  update_media_buy: [\n    { field: \"media_buy_id\", xEntity: \"media_buy\" },\n  ],\n  update_property_list: [\n    { field: \"list_id\", xEntity: \"property_list\" },\n  ],\n  update_rights: [\n    { field: \"pricing_option_id\", xEntity: \"vendor_pricing_option\" },\n    { field: \"rights_id\", xEntity: \"rights_grant\" },\n  ],\n  validate_property_delivery: [\n    { field: \"list_id\", xEntity: \"property_list\" },\n  ],\n};\n"],"mappings":";;;;;;AAsBO,MAAM,qBAAoF;AAAA,EAC/F,gBAAgB;AAAA,IACd,EAAE,OAAO,qBAAqB,SAAS,wBAAwB;AAAA,IAC/D,EAAE,OAAO,aAAa,SAAS,eAAe;AAAA,EAChD;AAAA,EACA,iBAAiB;AAAA,IACf,EAAE,OAAO,qBAAqB,SAAS,wBAAwB;AAAA,IAC/D,EAAE,OAAO,2BAA2B,SAAS,uBAAuB;AAAA,EACtE;AAAA,EACA,gBAAgB;AAAA,IACd,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,IAC5C,EAAE,OAAO,gBAAgB,SAAS,YAAY;AAAA,IAC9C,EAAE,OAAO,cAAc,SAAS,UAAU;AAAA,IAC1C,EAAE,OAAO,gCAAgC,SAAS,gBAAgB;AAAA,IAClE,EAAE,OAAO,kBAAkB,SAAS,cAAc;AAAA,EACpD;AAAA,EACA,kBAAkB;AAAA,IAChB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,kBAAkB;AAAA,IAChB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,wBAAwB;AAAA,IACtB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,sBAAsB;AAAA,IACpB,EAAE,OAAO,WAAW,SAAS,gBAAgB;AAAA,EAC/C;AAAA,EACA,oBAAoB;AAAA,IAClB,EAAE,OAAO,YAAY,SAAS,mBAAmB;AAAA,EACnD;AAAA,EACA,qBAAqB;AAAA,IACnB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,mBAAmB;AAAA,IACjB,EAAE,OAAO,WAAW,SAAS,gBAAgB;AAAA,EAC/C;AAAA,EACA,YAAY;AAAA,IACV,EAAE,OAAO,YAAY,SAAS,sBAAsB;AAAA,EACtD;AAAA,EACA,iBAAiB;AAAA,IACf,EAAE,OAAO,WAAW,SAAS,OAAO;AAAA,EACtC;AAAA,EACA,WAAW;AAAA,IACT,EAAE,OAAO,mBAAmB,SAAS,eAAe;AAAA,EACtD;AAAA,EACA,kBAAkB;AAAA,IAChB,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,EAC9C;AAAA,EACA,8BAA8B;AAAA,IAC5B,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,IAC5C,EAAE,OAAO,gBAAgB,SAAS,YAAY;AAAA,IAC9C,EAAE,OAAO,cAAc,SAAS,UAAU;AAAA,EAC5C;AAAA,EACA,qBAAqB;AAAA,IACnB,EAAE,OAAO,YAAY,SAAS,mBAAmB;AAAA,IACjD,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,iBAAiB;AAAA,IACf,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,EAC9C;AAAA,EACA,qBAAqB;AAAA,IACnB,EAAE,OAAO,gBAAgB,SAAS,YAAY;AAAA,IAC9C,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,EAC9C;AAAA,EACA,iBAAiB;AAAA,IACf,EAAE,OAAO,cAAc,SAAS,aAAa;AAAA,EAC/C;AAAA,EACA,sBAAsB;AAAA,IACpB,EAAE,OAAO,cAAc,SAAS,aAAa;AAAA,EAC/C;AAAA,EACA,wBAAwB;AAAA,IACtB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,kBAAkB;AAAA,IAChB,EAAE,OAAO,gBAAgB,SAAS,YAAY;AAAA,EAChD;AAAA,EACA,sBAAsB;AAAA,IACpB,EAAE,OAAO,WAAW,SAAS,gBAAgB;AAAA,EAC/C;AAAA,EACA,eAAe;AAAA,IACb,EAAE,OAAO,qBAAqB,SAAS,wBAAwB;AAAA,IAC/D,EAAE,OAAO,aAAa,SAAS,eAAe;AAAA,EAChD;AAAA,EACA,4BAA4B;AAAA,IAC1B,EAAE,OAAO,WAAW,SAAS,gBAAgB;AAAA,EAC/C;AACF;","names":[]}
+{"version":3,"sources":["../../../../../src/lib/server/decisioning/runtime/entity-hydration.generated.ts"],"sourcesContent":["// Generated entity-hydration field map — do NOT edit by hand\n//\n// Source: `schemas/cache/3.1.2/manifest.json` + per-tool request\n// schemas. Every top-level `x-entity`-tagged string field on a request\n// schema lands here. The runtime hydrator (`from-platform.ts` →\n// `hydrateForTool`) walks this map plus the hand-curated\n// `ENTITY_TO_RESOURCE_KIND` table to drive auto-hydration without\n// re-walking schemas at startup.\n//\n// Renaming-firewall: if the spec renames `media_buy_id` → `mediabuy_id`,\n// the `x-entity` tag travels with it; the next codegen run picks up\n// the new field name automatically.\n//\n// Regenerate with: npm run generate-entity-hydration\n\nexport interface EntityHydrationField {\n  /** Top-level property on the wire request object. */\n  readonly field: string;\n  /** Spec `x-entity` annotation — maps to `ResourceKind` at runtime. */\n  readonly xEntity: string;\n}\n\nexport const TOOL_ENTITY_FIELDS: Readonly<Record<string, ReadonlyArray<EntityHydrationField>>> = {\n  acquire_rights: [\n    { field: \"pricing_option_id\", xEntity: \"vendor_pricing_option\" },\n    { field: \"rights_id\", xEntity: \"rights_grant\" },\n  ],\n  activate_signal: [\n    { field: \"pricing_option_id\", xEntity: \"vendor_pricing_option\" },\n    { field: \"signal_agent_segment_id\", xEntity: \"signal_activation_id\" },\n  ],\n  build_creative: [\n    { field: \"creative_id\", xEntity: \"creative\" },\n    { field: \"media_buy_id\", xEntity: \"media_buy\" },\n    { field: \"package_id\", xEntity: \"package\" },\n    { field: \"refine_from_build_variant_id\", xEntity: \"build_variant\" },\n    { field: \"transformer_id\", xEntity: \"transformer\" },\n  ],\n  check_governance: [\n    { field: \"plan_id\", xEntity: \"governance_plan\" },\n  ],\n  create_media_buy: [\n    { field: \"plan_id\", xEntity: \"governance_plan\" },\n  ],\n  delete_collection_list: [\n    { field: \"list_id\", xEntity: \"collection_list\" },\n  ],\n  delete_property_list: [\n    { field: \"list_id\", xEntity: \"property_list\" },\n  ],\n  get_brand_identity: [\n    { field: \"brand_id\", xEntity: \"advertiser_brand\" },\n  ],\n  get_collection_list: [\n    { field: \"list_id\", xEntity: \"collection_list\" },\n  ],\n  get_property_list: [\n    { field: \"list_id\", xEntity: \"property_list\" },\n  ],\n  get_rights: [\n    { field: \"brand_id\", xEntity: \"rights_holder_brand\" },\n  ],\n  get_task_status: [\n    { field: \"task_id\", xEntity: \"task\" },\n  ],\n  log_event: [\n    { field: \"event_source_id\", xEntity: \"event_source\" },\n  ],\n  preview_creative: [\n    { field: \"creative_id\", xEntity: \"creative\" },\n  ],\n  provide_performance_feedback: [\n    { field: \"creative_id\", xEntity: \"creative\" },\n    { field: \"media_buy_id\", xEntity: \"media_buy\" },\n    { field: \"package_id\", xEntity: \"package\" },\n  ],\n  report_plan_outcome: [\n    { field: \"check_id\", xEntity: \"governance_check\" },\n    { field: \"plan_id\", xEntity: \"governance_plan\" },\n  ],\n  si_get_offering: [\n    { field: \"offering_id\", xEntity: \"offering\" },\n  ],\n  si_initiate_session: [\n    { field: \"media_buy_id\", xEntity: \"media_buy\" },\n    { field: \"offering_id\", xEntity: \"offering\" },\n  ],\n  si_send_message: [\n    { field: \"session_id\", xEntity: \"si_session\" },\n  ],\n  si_terminate_session: [\n    { field: \"session_id\", xEntity: \"si_session\" },\n  ],\n  update_collection_list: [\n    { field: \"list_id\", xEntity: \"collection_list\" },\n  ],\n  update_media_buy: [\n    { field: \"media_buy_id\", xEntity: \"media_buy\" },\n  ],\n  update_property_list: [\n    { field: \"list_id\", xEntity: \"property_list\" },\n  ],\n  update_rights: [\n    { field: \"pricing_option_id\", xEntity: \"vendor_pricing_option\" },\n    { field: \"rights_id\", xEntity: \"rights_grant\" },\n  ],\n  validate_property_delivery: [\n    { field: \"list_id\", xEntity: \"property_list\" },\n  ],\n};\n"],"mappings":"AAsBO,MAAM,qBAAoF;AAAA,EAC/F,gBAAgB;AAAA,IACd,EAAE,OAAO,qBAAqB,SAAS,wBAAwB;AAAA,IAC/D,EAAE,OAAO,aAAa,SAAS,eAAe;AAAA,EAChD;AAAA,EACA,iBAAiB;AAAA,IACf,EAAE,OAAO,qBAAqB,SAAS,wBAAwB;AAAA,IAC/D,EAAE,OAAO,2BAA2B,SAAS,uBAAuB;AAAA,EACtE;AAAA,EACA,gBAAgB;AAAA,IACd,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,IAC5C,EAAE,OAAO,gBAAgB,SAAS,YAAY;AAAA,IAC9C,EAAE,OAAO,cAAc,SAAS,UAAU;AAAA,IAC1C,EAAE,OAAO,gCAAgC,SAAS,gBAAgB;AAAA,IAClE,EAAE,OAAO,kBAAkB,SAAS,cAAc;AAAA,EACpD;AAAA,EACA,kBAAkB;AAAA,IAChB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,kBAAkB;AAAA,IAChB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,wBAAwB;AAAA,IACtB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,sBAAsB;AAAA,IACpB,EAAE,OAAO,WAAW,SAAS,gBAAgB;AAAA,EAC/C;AAAA,EACA,oBAAoB;AAAA,IAClB,EAAE,OAAO,YAAY,SAAS,mBAAmB;AAAA,EACnD;AAAA,EACA,qBAAqB;AAAA,IACnB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,mBAAmB;AAAA,IACjB,EAAE,OAAO,WAAW,SAAS,gBAAgB;AAAA,EAC/C;AAAA,EACA,YAAY;AAAA,IACV,EAAE,OAAO,YAAY,SAAS,sBAAsB;AAAA,EACtD;AAAA,EACA,iBAAiB;AAAA,IACf,EAAE,OAAO,WAAW,SAAS,OAAO;AAAA,EACtC;AAAA,EACA,WAAW;AAAA,IACT,EAAE,OAAO,mBAAmB,SAAS,eAAe;AAAA,EACtD;AAAA,EACA,kBAAkB;AAAA,IAChB,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,EAC9C;AAAA,EACA,8BAA8B;AAAA,IAC5B,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,IAC5C,EAAE,OAAO,gBAAgB,SAAS,YAAY;AAAA,IAC9C,EAAE,OAAO,cAAc,SAAS,UAAU;AAAA,EAC5C;AAAA,EACA,qBAAqB;AAAA,IACnB,EAAE,OAAO,YAAY,SAAS,mBAAmB;AAAA,IACjD,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,iBAAiB;AAAA,IACf,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,EAC9C;AAAA,EACA,qBAAqB;AAAA,IACnB,EAAE,OAAO,gBAAgB,SAAS,YAAY;AAAA,IAC9C,EAAE,OAAO,eAAe,SAAS,WAAW;AAAA,EAC9C;AAAA,EACA,iBAAiB;AAAA,IACf,EAAE,OAAO,cAAc,SAAS,aAAa;AAAA,EAC/C;AAAA,EACA,sBAAsB;AAAA,IACpB,EAAE,OAAO,cAAc,SAAS,aAAa;AAAA,EAC/C;AAAA,EACA,wBAAwB;AAAA,IACtB,EAAE,OAAO,WAAW,SAAS,kBAAkB;AAAA,EACjD;AAAA,EACA,kBAAkB;AAAA,IAChB,EAAE,OAAO,gBAAgB,SAAS,YAAY;AAAA,EAChD;AAAA,EACA,sBAAsB;AAAA,IACpB,EAAE,OAAO,WAAW,SAAS,gBAAgB;AAAA,EAC/C;AAAA,EACA,eAAe;AAAA,IACb,EAAE,OAAO,qBAAqB,SAAS,wBAAwB;AAAA,IAC/D,EAAE,OAAO,aAAa,SAAS,eAAe;AAAA,EAChD;AAAA,EACA,4BAA4B;AAAA,IAC1B,EAAE,OAAO,WAAW,SAAS,gBAAgB;AAAA,EAC/C;AACF;","names":[]}

package/dist/lib/server/decisioning/runtime/from-platform.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 import { randomUUID } from "node:crypto";
 import { ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
 import {