@adcp/sdk 12.0.0 → 12.0.2

package/dist/lib/testing/storyboard/task-map.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/testing/storyboard/task-map.ts"],"sourcesContent":["/**\n * Maps AdCP task names (from storyboard YAML) to SingleAgentClient method names.\n *\n * Each storyboard step has a `task` field like \"sync_accounts\" or \"get_products\".\n * This map resolves those to the camelCase method on SingleAgentClient.\n *\n * Tasks without a dedicated method fall through to `executeTask()`.\n */\n\nimport type { TaskResult } from '../types';\nimport type { AdcpErrorInfo } from '../../core/ConversationTypes';\nimport { isTerminalAdcpError, readExtractionPath } from '../../utils/response-unwrapper';\n\n/**\n * Map of AdCP task names to SingleAgentClient method names.\n * Only includes tasks that have dedicated typed methods.\n */\nexport const TASK_TO_METHOD: Record<string, string> = {\n  // Account & audience\n  sync_accounts: 'syncAccounts',\n  list_accounts: 'listAccounts',\n  sync_audiences: 'syncAudiences',\n\n  // Product discovery & media buy\n  get_products: 'getProducts',\n  create_media_buy: 'createMediaBuy',\n  update_media_buy: 'updateMediaBuy',\n  get_media_buys: 'getMediaBuys',\n  get_media_buy_delivery: 'getMediaBuyDelivery',\n  provide_performance_feedback: 'providePerformanceFeedback',\n\n  // Creative\n  list_creative_formats: 'listCreativeFormats',\n  build_creative: 'buildCreative',\n  preview_creative: 'previewCreative',\n  sync_creatives: 'syncCreatives',\n  list_creatives: 'listCreatives',\n\n  // Signals\n  get_signals: 'getSignals',\n  activate_signal: 'activateSignal',\n\n  // Capabilities\n  get_adcp_capabilities: 'getAdcpCapabilities',\n\n  // Governance\n  sync_plans: 'syncPlans',\n  check_governance: 'checkGovernance',\n  get_plan_audit_logs: 'getPlanAuditLogs',\n  create_property_list: 'createPropertyList',\n  get_property_list: 'getPropertyList',\n  update_property_list: 'updatePropertyList',\n  list_property_lists: 'listPropertyLists',\n  delete_property_list: 'deletePropertyList',\n  list_collection_lists: 'listCollectionLists',\n  list_content_standards: 'listContentStandards',\n  get_content_standards: 'getContentStandards',\n  create_content_standards: 'createContentStandards',\n  update_content_standards: 'updateContentStandards',\n  calibrate_content: 'calibrateContent',\n  validate_content_delivery: 'validateContentDelivery',\n\n  // Account\n  get_account_financials: 'getAccountFinancials',\n  log_event: 'logEvent',\n\n  // Sponsored Intelligence\n  si_get_offering: 'siGetOffering',\n  si_initiate_session: 'siInitiateSession',\n  si_send_message: 'siSendMessage',\n  si_terminate_session: 'siTerminateSession',\n};\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction readAdcpError(value: unknown): AdcpErrorInfo | undefined {\n  if (!isRecord(value)) return undefined;\n  const error = value.adcp_error;\n  if (!isRecord(error) || typeof error.code !== 'string') return undefined;\n  return error as unknown as AdcpErrorInfo;\n}\n\nfunction readFirstError(value: unknown): AdcpErrorInfo | undefined {\n  if (!isRecord(value) || !Array.isArray(value.errors)) return undefined;\n  const first = value.errors[0];\n  if (!isRecord(first) || typeof first.code !== 'string') return undefined;\n  return {\n    code: first.code,\n    message: typeof first.message === 'string' ? first.message : String(first.code),\n    ...(typeof first.recovery === 'string' && { recovery: first.recovery as AdcpErrorInfo['recovery'] }),\n    ...(typeof first.field === 'string' && { field: first.field }),\n    ...(typeof first.suggestion === 'string' && { suggestion: first.suggestion }),\n    ...(typeof first.retry_after === 'number' && { retry_after: first.retry_after }),\n    ...(isRecord(first.details) && { details: first.details }),\n  };\n}\n\nfunction errorMessageFrom(error: AdcpErrorInfo | undefined, fallback: unknown): string | undefined {\n  if (typeof error?.message === 'string' && error.message.length > 0) return error.message;\n  if (typeof error?.code === 'string') return error.code;\n  return typeof fallback === 'string' && fallback.length > 0 ? fallback : undefined;\n}\n\nfunction normalizeStoryboardTaskSuccess(\n  result: unknown,\n  taskName: string,\n  terminalDataError?: boolean,\n  adcpError?: AdcpErrorInfo\n): boolean {\n  if (!isRecord(result)) return true;\n  if (typeof result.success === 'boolean') return result.success;\n  if (result.status === 'failed' || result.status === 'rejected') return false;\n  if (adcpError || result.adcpError || result.adcp_error) return false;\n  if (terminalDataError ?? isTerminalAdcpError(result.data, taskName)) return false;\n  return true;\n}\n\n/**\n * Execute a storyboard task against a SingleAgentClient.\n *\n * Uses the typed method if one exists, otherwise falls back to executeTask().\n * When the agent returns an async status (working/submitted), waits for\n * completion before returning — storyboard steps expect final results.\n */\nexport async function executeStoryboardTask(\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- dynamic dispatch requires any\n  client: any,\n  taskName: string,\n  params: Record<string, unknown>,\n  opts: { skipIdempotencyAutoInject?: boolean; skipAccountValidation?: boolean; signal?: AbortSignal } = {}\n): Promise<TaskResult> {\n  const methodName = Object.hasOwn(TASK_TO_METHOD, taskName) ? TASK_TO_METHOD[taskName] : undefined;\n\n  // Only pass TaskOptions when a flag is actually set — avoids changing\n  // behavior for the common path that relies on method defaults.\n  const taskOptions =\n    opts.skipIdempotencyAutoInject || opts.skipAccountValidation\n      ? {\n          ...(opts.skipIdempotencyAutoInject && { skipIdempotencyAutoInject: true }),\n          ...(opts.skipAccountValidation && { skipAccountValidation: true }),\n        }\n      : undefined;\n\n  let result;\n  const invoke = async () => {\n    if (methodName && typeof client[methodName] === 'function') {\n      // Typed methods take (params, inputHandler?, options?). Pass options\n      // only when set, otherwise they take their defaults.\n      return taskOptions ? client[methodName](params, undefined, taskOptions) : client[methodName](params);\n    }\n    return client.executeTask(taskName, params, undefined, taskOptions);\n  };\n\n  // Retry with exponential backoff on rate limit errors\n  const MAX_RETRIES = 3;\n  const BASE_DELAY_MS = 2000;\n  for (let attempt = 0; ; attempt++) {\n    try {\n      result = await raceWithSignal(invoke(), opts.signal);\n      break;\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      const isRateLimit =\n        /rate limit/i.test(msg) || (/\"code\":\\s*-32000/.test(msg) && /rate.?limit|too many|throttl/i.test(msg));\n      if (isRateLimit && attempt < MAX_RETRIES) {\n        const jitter = Math.random() * 1000;\n        const delay = BASE_DELAY_MS * 2 ** attempt + jitter;\n        await raceWithSignal(new Promise(resolve => setTimeout(resolve, delay)), opts.signal);\n        continue;\n      }\n      throw err;\n    }\n  }\n\n  // If the agent returned an async status but included data in the initial\n  // response (common for agents that process synchronously but report as\n  // submitted), use that data. Only poll when there's no data at all.\n  const hasData = result.data !== undefined && result.data !== null;\n  const isAsync = result.status === 'submitted' || result.status === 'working';\n  const prePollingDebugLogs = Array.isArray(result.debug_logs) ? [...result.debug_logs] : [];\n  let replacedByPolling = false;\n  if (!hasData && isAsync && result.submitted?.waitForCompletion) {\n    try {\n      const timeout = new Promise<never>((_, reject) =>\n        setTimeout(() => reject(new Error('Task polling timeout')), 30_000)\n      );\n      result = await raceWithSignal(\n        Promise.race([result.submitted.waitForCompletion(2000, opts.signal), timeout]),\n        opts.signal\n      );\n      replacedByPolling = true;\n    } catch (err) {\n      if (opts.signal?.aborted) throw err;\n      // Polling failed or timed out — return the intermediate result as-is\n    }\n  }\n\n  const terminalDataError = isTerminalAdcpError(result.data, taskName);\n  const adcpError =\n    result.adcpError ??\n    result.adcp_error ??\n    readAdcpError(result.data) ??\n    (terminalDataError ? readFirstError(result.data) : undefined);\n  const data = result.data ?? (adcpError ? { adcp_error: adcpError } : undefined);\n  const success = normalizeStoryboardTaskSuccess(result, taskName, terminalDataError, adcpError);\n  const error = result.error ?? (!success ? errorMessageFrom(adcpError, undefined) : undefined);\n  const extractionPath = readExtractionPath(data);\n  const debugLogs = Array.isArray(result.debug_logs) ? result.debug_logs : [];\n  const mergedDebugLogs = replacedByPolling ? [...prePollingDebugLogs, ...debugLogs] : debugLogs;\n  return {\n    success,\n    data,\n    error,\n    ...(adcpError && { adcp_error: adcpError }),\n    ...(extractionPath !== undefined && { _extraction_path: extractionPath }),\n    ...(mergedDebugLogs.length > 0 && { debug_logs: mergedDebugLogs }),\n  };\n}\n\nfunction raceWithSignal<T>(promise: Promise<T>, signal?: AbortSignal): Promise<T> {\n  if (!signal) return promise;\n  if (signal.aborted) return Promise.reject(signal.reason ?? new Error('aborted'));\n\n  return new Promise<T>((resolve, reject) => {\n    const onAbort = () => reject(signal.reason ?? new Error('aborted'));\n    signal.addEventListener('abort', onAbort, { once: true });\n    promise.then(\n      value => {\n        signal.removeEventListener('abort', onAbort);\n        resolve(value);\n      },\n      err => {\n        signal.removeEventListener('abort', onAbort);\n        reject(err);\n      }\n    );\n  });\n}\n"],"mappings":";;;;;;AAWA,SAAS,qBAAqB,0BAA0B;AAMjD,MAAM,iBAAyC;AAAA;AAAA,EAEpD,eAAe;AAAA,EACf,eAAe;AAAA,EACf,gBAAgB;AAAA;AAAA,EAGhB,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,wBAAwB;AAAA,EACxB,8BAA8B;AAAA;AAAA,EAG9B,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,gBAAgB;AAAA;AAAA,EAGhB,aAAa;AAAA,EACb,iBAAiB;AAAA;AAAA,EAGjB,uBAAuB;AAAA;AAAA,EAGvB,YAAY;AAAA,EACZ,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,uBAAuB;AAAA,EACvB,wBAAwB;AAAA,EACxB,uBAAuB;AAAA,EACvB,0BAA0B;AAAA,EAC1B,0BAA0B;AAAA,EAC1B,mBAAmB;AAAA,EACnB,2BAA2B;AAAA;AAAA,EAG3B,wBAAwB;AAAA,EACxB,WAAW;AAAA;AAAA,EAGX,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,iBAAiB;AAAA,EACjB,sBAAsB;AACxB;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,cAAc,OAA2C;AAChE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,QAAM,QAAQ,MAAM;AACpB,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,SAAU,QAAO;AAC/D,SAAO;AACT;AAEA,SAAS,eAAe,OAA2C;AACjE,MAAI,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,MAAM,EAAG,QAAO;AAC7D,QAAM,QAAQ,MAAM,OAAO,CAAC;AAC5B,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,SAAU,QAAO;AAC/D,SAAO;AAAA,IACL,MAAM,MAAM;AAAA,IACZ,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,OAAO,MAAM,IAAI;AAAA,IAC9E,GAAI,OAAO,MAAM,aAAa,YAAY,EAAE,UAAU,MAAM,SAAsC;AAAA,IAClG,GAAI,OAAO,MAAM,UAAU,YAAY,EAAE,OAAO,MAAM,MAAM;AAAA,IAC5D,GAAI,OAAO,MAAM,eAAe,YAAY,EAAE,YAAY,MAAM,WAAW;AAAA,IAC3E,GAAI,OAAO,MAAM,gBAAgB,YAAY,EAAE,aAAa,MAAM,YAAY;AAAA,IAC9E,GAAI,SAAS,MAAM,OAAO,KAAK,EAAE,SAAS,MAAM,QAAQ;AAAA,EAC1D;AACF;AAEA,SAAS,iBAAiB,OAAkC,UAAuC;AACjG,MAAI,OAAO,OAAO,YAAY,YAAY,MAAM,QAAQ,SAAS,EAAG,QAAO,MAAM;AACjF,MAAI,OAAO,OAAO,SAAS,SAAU,QAAO,MAAM;AAClD,SAAO,OAAO,aAAa,YAAY,SAAS,SAAS,IAAI,WAAW;AAC1E;AAEA,SAAS,+BACP,QACA,UACA,mBACA,WACS;AACT,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,MAAI,OAAO,OAAO,YAAY,UAAW,QAAO,OAAO;AACvD,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,WAAY,QAAO;AACvE,MAAI,aAAa,OAAO,aAAa,OAAO,WAAY,QAAO;AAC/D,MAAI,qBAAqB,oBAAoB,OAAO,MAAM,QAAQ,EAAG,QAAO;AAC5E,SAAO;AACT;AASA,eAAsB,sBAEpB,QACA,UACA,QACA,OAAuG,CAAC,GACnF;AACrB,QAAM,aAAa,OAAO,OAAO,gBAAgB,QAAQ,IAAI,eAAe,QAAQ,IAAI;AAIxF,QAAM,cACJ,KAAK,6BAA6B,KAAK,wBACnC;AAAA,IACE,GAAI,KAAK,6BAA6B,EAAE,2BAA2B,KAAK;AAAA,IACxE,GAAI,KAAK,yBAAyB,EAAE,uBAAuB,KAAK;AAAA,EAClE,IACA;AAEN,MAAI;AACJ,QAAM,SAAS,YAAY;AACzB,QAAI,cAAc,OAAO,OAAO,UAAU,MAAM,YAAY;AAG1D,aAAO,cAAc,OAAO,UAAU,EAAE,QAAQ,QAAW,WAAW,IAAI,OAAO,UAAU,EAAE,MAAM;AAAA,IACrG;AACA,WAAO,OAAO,YAAY,UAAU,QAAQ,QAAW,WAAW;AAAA,EACpE;AAGA,QAAM,cAAc;AACpB,QAAM,gBAAgB;AACtB,WAAS,UAAU,KAAK,WAAW;AACjC,QAAI;AACF,eAAS,MAAM,eAAe,OAAO,GAAG,KAAK,MAAM;AACnD;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAM,cACJ,cAAc,KAAK,GAAG,KAAM,mBAAmB,KAAK,GAAG,KAAK,gCAAgC,KAAK,GAAG;AACtG,UAAI,eAAe,UAAU,aAAa;AACxC,cAAM,SAAS,KAAK,OAAO,IAAI;AAC/B,cAAM,QAAQ,gBAAgB,KAAK,UAAU;AAC7C,cAAM,eAAe,IAAI,QAAQ,aAAW,WAAW,SAAS,KAAK,CAAC,GAAG,KAAK,MAAM;AACpF;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAKA,QAAM,UAAU,OAAO,SAAS,UAAa,OAAO,SAAS;AAC7D,QAAM,UAAU,OAAO,WAAW,eAAe,OAAO,WAAW;AACnE,QAAM,sBAAsB,MAAM,QAAQ,OAAO,UAAU,IAAI,CAAC,GAAG,OAAO,UAAU,IAAI,CAAC;AACzF,MAAI,oBAAoB;AACxB,MAAI,CAAC,WAAW,WAAW,OAAO,WAAW,mBAAmB;AAC9D,QAAI;AACF,YAAM,UAAU,IAAI;AAAA,QAAe,CAAC,GAAG,WACrC,WAAW,MAAM,OAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,GAAM;AAAA,MACpE;AACA,eAAS,MAAM;AAAA,QACb,QAAQ,KAAK,CAAC,OAAO,UAAU,kBAAkB,KAAM,KAAK,MAAM,GAAG,OAAO,CAAC;AAAA,QAC7E,KAAK;AAAA,MACP;AACA,0BAAoB;AAAA,IACtB,SAAS,KAAK;AACZ,UAAI,KAAK,QAAQ,QAAS,OAAM;AAAA,IAElC;AAAA,EACF;AAEA,QAAM,oBAAoB,oBAAoB,OAAO,MAAM,QAAQ;AACnE,QAAM,YACJ,OAAO,aACP,OAAO,cACP,cAAc,OAAO,IAAI,MACxB,oBAAoB,eAAe,OAAO,IAAI,IAAI;AACrD,QAAM,OAAO,OAAO,SAAS,YAAY,EAAE,YAAY,UAAU,IAAI;AACrE,QAAM,UAAU,+BAA+B,QAAQ,UAAU,mBAAmB,SAAS;AAC7F,QAAM,QAAQ,OAAO,UAAU,CAAC,UAAU,iBAAiB,WAAW,MAAS,IAAI;AACnF,QAAM,iBAAiB,mBAAmB,IAAI;AAC9C,QAAM,YAAY,MAAM,QAAQ,OAAO,UAAU,IAAI,OAAO,aAAa,CAAC;AAC1E,QAAM,kBAAkB,oBAAoB,CAAC,GAAG,qBAAqB,GAAG,SAAS,IAAI;AACrF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,aAAa,EAAE,YAAY,UAAU;AAAA,IACzC,GAAI,mBAAmB,UAAa,EAAE,kBAAkB,eAAe;AAAA,IACvE,GAAI,gBAAgB,SAAS,KAAK,EAAE,YAAY,gBAAgB;AAAA,EAClE;AACF;AAEA,SAAS,eAAkB,SAAqB,QAAkC;AAChF,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,OAAO,QAAS,QAAO,QAAQ,OAAO,OAAO,UAAU,IAAI,MAAM,SAAS,CAAC;AAE/E,SAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,UAAM,UAAU,MAAM,OAAO,OAAO,UAAU,IAAI,MAAM,SAAS,CAAC;AAClE,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACxD,YAAQ;AAAA,MACN,WAAS;AACP,eAAO,oBAAoB,SAAS,OAAO;AAC3C,gBAAQ,KAAK;AAAA,MACf;AAAA,MACA,SAAO;AACL,eAAO,oBAAoB,SAAS,OAAO;AAC3C,eAAO,GAAG;AAAA,MACZ;AAAA,IACF;AAAA,EACF,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../../../src/lib/testing/storyboard/task-map.ts"],"sourcesContent":["/**\n * Maps AdCP task names (from storyboard YAML) to SingleAgentClient method names.\n *\n * Each storyboard step has a `task` field like \"sync_accounts\" or \"get_products\".\n * This map resolves those to the camelCase method on SingleAgentClient.\n *\n * Tasks without a dedicated method fall through to `executeTask()`.\n */\n\nimport type { TaskResult } from '../types';\nimport type { AdcpErrorInfo } from '../../core/ConversationTypes';\nimport { isTerminalAdcpError, readExtractionPath } from '../../utils/response-unwrapper';\n\n/**\n * Map of AdCP task names to SingleAgentClient method names.\n * Only includes tasks that have dedicated typed methods.\n */\nexport const TASK_TO_METHOD: Record<string, string> = {\n  // Account & audience\n  sync_accounts: 'syncAccounts',\n  list_accounts: 'listAccounts',\n  sync_audiences: 'syncAudiences',\n\n  // Product discovery & media buy\n  get_products: 'getProducts',\n  create_media_buy: 'createMediaBuy',\n  update_media_buy: 'updateMediaBuy',\n  get_media_buys: 'getMediaBuys',\n  get_media_buy_delivery: 'getMediaBuyDelivery',\n  provide_performance_feedback: 'providePerformanceFeedback',\n\n  // Creative\n  list_creative_formats: 'listCreativeFormats',\n  build_creative: 'buildCreative',\n  preview_creative: 'previewCreative',\n  sync_creatives: 'syncCreatives',\n  list_creatives: 'listCreatives',\n\n  // Signals\n  get_signals: 'getSignals',\n  activate_signal: 'activateSignal',\n\n  // Capabilities\n  get_adcp_capabilities: 'getAdcpCapabilities',\n\n  // Governance\n  sync_plans: 'syncPlans',\n  check_governance: 'checkGovernance',\n  get_plan_audit_logs: 'getPlanAuditLogs',\n  create_property_list: 'createPropertyList',\n  get_property_list: 'getPropertyList',\n  update_property_list: 'updatePropertyList',\n  list_property_lists: 'listPropertyLists',\n  delete_property_list: 'deletePropertyList',\n  list_collection_lists: 'listCollectionLists',\n  list_content_standards: 'listContentStandards',\n  get_content_standards: 'getContentStandards',\n  create_content_standards: 'createContentStandards',\n  update_content_standards: 'updateContentStandards',\n  calibrate_content: 'calibrateContent',\n  validate_content_delivery: 'validateContentDelivery',\n\n  // Account\n  get_account_financials: 'getAccountFinancials',\n  log_event: 'logEvent',\n\n  // Sponsored Intelligence\n  si_get_offering: 'siGetOffering',\n  si_initiate_session: 'siInitiateSession',\n  si_send_message: 'siSendMessage',\n  si_terminate_session: 'siTerminateSession',\n};\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction readAdcpError(value: unknown): AdcpErrorInfo | undefined {\n  if (!isRecord(value)) return undefined;\n  const error = value.adcp_error;\n  if (!isRecord(error) || typeof error.code !== 'string') return undefined;\n  return error as unknown as AdcpErrorInfo;\n}\n\nfunction readFirstError(value: unknown): AdcpErrorInfo | undefined {\n  if (!isRecord(value) || !Array.isArray(value.errors)) return undefined;\n  const first = value.errors[0];\n  if (!isRecord(first) || typeof first.code !== 'string') return undefined;\n  return {\n    code: first.code,\n    message: typeof first.message === 'string' ? first.message : String(first.code),\n    ...(typeof first.recovery === 'string' && { recovery: first.recovery as AdcpErrorInfo['recovery'] }),\n    ...(typeof first.field === 'string' && { field: first.field }),\n    ...(typeof first.suggestion === 'string' && { suggestion: first.suggestion }),\n    ...(typeof first.retry_after === 'number' && { retry_after: first.retry_after }),\n    ...(isRecord(first.details) && { details: first.details }),\n  };\n}\n\nfunction errorMessageFrom(error: AdcpErrorInfo | undefined, fallback: unknown): string | undefined {\n  if (typeof error?.message === 'string' && error.message.length > 0) return error.message;\n  if (typeof error?.code === 'string') return error.code;\n  return typeof fallback === 'string' && fallback.length > 0 ? fallback : undefined;\n}\n\nfunction normalizeStoryboardTaskSuccess(\n  result: unknown,\n  taskName: string,\n  terminalDataError?: boolean,\n  adcpError?: AdcpErrorInfo\n): boolean {\n  if (!isRecord(result)) return true;\n  if (typeof result.success === 'boolean') return result.success;\n  if (result.status === 'failed' || result.status === 'rejected') return false;\n  if (adcpError || result.adcpError || result.adcp_error) return false;\n  if (terminalDataError ?? isTerminalAdcpError(result.data, taskName)) return false;\n  return true;\n}\n\n/**\n * Execute a storyboard task against a SingleAgentClient.\n *\n * Uses the typed method if one exists, otherwise falls back to executeTask().\n * When the agent returns an async status (working/submitted), waits for\n * completion before returning — storyboard steps expect final results.\n */\nexport async function executeStoryboardTask(\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- dynamic dispatch requires any\n  client: any,\n  taskName: string,\n  params: Record<string, unknown>,\n  opts: { skipIdempotencyAutoInject?: boolean; skipAccountValidation?: boolean; signal?: AbortSignal } = {}\n): Promise<TaskResult> {\n  const methodName = Object.hasOwn(TASK_TO_METHOD, taskName) ? TASK_TO_METHOD[taskName] : undefined;\n\n  // Only pass TaskOptions when a flag is actually set — avoids changing\n  // behavior for the common path that relies on method defaults.\n  const taskOptions =\n    opts.skipIdempotencyAutoInject || opts.skipAccountValidation\n      ? {\n          ...(opts.skipIdempotencyAutoInject && { skipIdempotencyAutoInject: true }),\n          ...(opts.skipAccountValidation && { skipAccountValidation: true }),\n        }\n      : undefined;\n\n  let result;\n  const invoke = async () => {\n    if (methodName && typeof client[methodName] === 'function') {\n      // Typed methods take (params, inputHandler?, options?). Pass options\n      // only when set, otherwise they take their defaults.\n      return taskOptions ? client[methodName](params, undefined, taskOptions) : client[methodName](params);\n    }\n    return client.executeTask(taskName, params, undefined, taskOptions);\n  };\n\n  // Retry with exponential backoff on rate limit errors\n  const MAX_RETRIES = 3;\n  const BASE_DELAY_MS = 2000;\n  for (let attempt = 0; ; attempt++) {\n    try {\n      result = await raceWithSignal(invoke(), opts.signal);\n      break;\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      const isRateLimit =\n        /rate limit/i.test(msg) || (/\"code\":\\s*-32000/.test(msg) && /rate.?limit|too many|throttl/i.test(msg));\n      if (isRateLimit && attempt < MAX_RETRIES) {\n        const jitter = Math.random() * 1000;\n        const delay = BASE_DELAY_MS * 2 ** attempt + jitter;\n        await raceWithSignal(new Promise(resolve => setTimeout(resolve, delay)), opts.signal);\n        continue;\n      }\n      throw err;\n    }\n  }\n\n  // If the agent returned an async status but included data in the initial\n  // response (common for agents that process synchronously but report as\n  // submitted), use that data. Only poll when there's no data at all.\n  const hasData = result.data !== undefined && result.data !== null;\n  const isAsync = result.status === 'submitted' || result.status === 'working';\n  const prePollingDebugLogs = Array.isArray(result.debug_logs) ? [...result.debug_logs] : [];\n  let replacedByPolling = false;\n  if (!hasData && isAsync && result.submitted?.waitForCompletion) {\n    try {\n      const timeout = new Promise<never>((_, reject) =>\n        setTimeout(() => reject(new Error('Task polling timeout')), 30_000)\n      );\n      result = await raceWithSignal(\n        Promise.race([result.submitted.waitForCompletion(2000, opts.signal), timeout]),\n        opts.signal\n      );\n      replacedByPolling = true;\n    } catch (err) {\n      if (opts.signal?.aborted) throw err;\n      // Polling failed or timed out — return the intermediate result as-is\n    }\n  }\n\n  const terminalDataError = isTerminalAdcpError(result.data, taskName);\n  const adcpError =\n    result.adcpError ??\n    result.adcp_error ??\n    readAdcpError(result.data) ??\n    (terminalDataError ? readFirstError(result.data) : undefined);\n  const data = result.data ?? (adcpError ? { adcp_error: adcpError } : undefined);\n  const success = normalizeStoryboardTaskSuccess(result, taskName, terminalDataError, adcpError);\n  const error = result.error ?? (!success ? errorMessageFrom(adcpError, undefined) : undefined);\n  const extractionPath = readExtractionPath(data);\n  const debugLogs = Array.isArray(result.debug_logs) ? result.debug_logs : [];\n  const mergedDebugLogs = replacedByPolling ? [...prePollingDebugLogs, ...debugLogs] : debugLogs;\n  return {\n    success,\n    data,\n    error,\n    ...(adcpError && { adcp_error: adcpError }),\n    ...(extractionPath !== undefined && { _extraction_path: extractionPath }),\n    ...(mergedDebugLogs.length > 0 && { debug_logs: mergedDebugLogs }),\n  };\n}\n\nfunction raceWithSignal<T>(promise: Promise<T>, signal?: AbortSignal): Promise<T> {\n  if (!signal) return promise;\n  if (signal.aborted) return Promise.reject(signal.reason ?? new Error('aborted'));\n\n  return new Promise<T>((resolve, reject) => {\n    const onAbort = () => reject(signal.reason ?? new Error('aborted'));\n    signal.addEventListener('abort', onAbort, { once: true });\n    promise.then(\n      value => {\n        signal.removeEventListener('abort', onAbort);\n        resolve(value);\n      },\n      err => {\n        signal.removeEventListener('abort', onAbort);\n        reject(err);\n      }\n    );\n  });\n}\n"],"mappings":"AAWA,SAAS,qBAAqB,0BAA0B;AAMjD,MAAM,iBAAyC;AAAA;AAAA,EAEpD,eAAe;AAAA,EACf,eAAe;AAAA,EACf,gBAAgB;AAAA;AAAA,EAGhB,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,wBAAwB;AAAA,EACxB,8BAA8B;AAAA;AAAA,EAG9B,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,gBAAgB;AAAA;AAAA,EAGhB,aAAa;AAAA,EACb,iBAAiB;AAAA;AAAA,EAGjB,uBAAuB;AAAA;AAAA,EAGvB,YAAY;AAAA,EACZ,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,uBAAuB;AAAA,EACvB,wBAAwB;AAAA,EACxB,uBAAuB;AAAA,EACvB,0BAA0B;AAAA,EAC1B,0BAA0B;AAAA,EAC1B,mBAAmB;AAAA,EACnB,2BAA2B;AAAA;AAAA,EAG3B,wBAAwB;AAAA,EACxB,WAAW;AAAA;AAAA,EAGX,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,iBAAiB;AAAA,EACjB,sBAAsB;AACxB;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,cAAc,OAA2C;AAChE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,QAAM,QAAQ,MAAM;AACpB,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,SAAU,QAAO;AAC/D,SAAO;AACT;AAEA,SAAS,eAAe,OAA2C;AACjE,MAAI,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,MAAM,EAAG,QAAO;AAC7D,QAAM,QAAQ,MAAM,OAAO,CAAC;AAC5B,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,SAAU,QAAO;AAC/D,SAAO;AAAA,IACL,MAAM,MAAM;AAAA,IACZ,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,OAAO,MAAM,IAAI;AAAA,IAC9E,GAAI,OAAO,MAAM,aAAa,YAAY,EAAE,UAAU,MAAM,SAAsC;AAAA,IAClG,GAAI,OAAO,MAAM,UAAU,YAAY,EAAE,OAAO,MAAM,MAAM;AAAA,IAC5D,GAAI,OAAO,MAAM,eAAe,YAAY,EAAE,YAAY,MAAM,WAAW;AAAA,IAC3E,GAAI,OAAO,MAAM,gBAAgB,YAAY,EAAE,aAAa,MAAM,YAAY;AAAA,IAC9E,GAAI,SAAS,MAAM,OAAO,KAAK,EAAE,SAAS,MAAM,QAAQ;AAAA,EAC1D;AACF;AAEA,SAAS,iBAAiB,OAAkC,UAAuC;AACjG,MAAI,OAAO,OAAO,YAAY,YAAY,MAAM,QAAQ,SAAS,EAAG,QAAO,MAAM;AACjF,MAAI,OAAO,OAAO,SAAS,SAAU,QAAO,MAAM;AAClD,SAAO,OAAO,aAAa,YAAY,SAAS,SAAS,IAAI,WAAW;AAC1E;AAEA,SAAS,+BACP,QACA,UACA,mBACA,WACS;AACT,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,MAAI,OAAO,OAAO,YAAY,UAAW,QAAO,OAAO;AACvD,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,WAAY,QAAO;AACvE,MAAI,aAAa,OAAO,aAAa,OAAO,WAAY,QAAO;AAC/D,MAAI,qBAAqB,oBAAoB,OAAO,MAAM,QAAQ,EAAG,QAAO;AAC5E,SAAO;AACT;AASA,eAAsB,sBAEpB,QACA,UACA,QACA,OAAuG,CAAC,GACnF;AACrB,QAAM,aAAa,OAAO,OAAO,gBAAgB,QAAQ,IAAI,eAAe,QAAQ,IAAI;AAIxF,QAAM,cACJ,KAAK,6BAA6B,KAAK,wBACnC;AAAA,IACE,GAAI,KAAK,6BAA6B,EAAE,2BAA2B,KAAK;AAAA,IACxE,GAAI,KAAK,yBAAyB,EAAE,uBAAuB,KAAK;AAAA,EAClE,IACA;AAEN,MAAI;AACJ,QAAM,SAAS,YAAY;AACzB,QAAI,cAAc,OAAO,OAAO,UAAU,MAAM,YAAY;AAG1D,aAAO,cAAc,OAAO,UAAU,EAAE,QAAQ,QAAW,WAAW,IAAI,OAAO,UAAU,EAAE,MAAM;AAAA,IACrG;AACA,WAAO,OAAO,YAAY,UAAU,QAAQ,QAAW,WAAW;AAAA,EACpE;AAGA,QAAM,cAAc;AACpB,QAAM,gBAAgB;AACtB,WAAS,UAAU,KAAK,WAAW;AACjC,QAAI;AACF,eAAS,MAAM,eAAe,OAAO,GAAG,KAAK,MAAM;AACnD;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,YAAM,cACJ,cAAc,KAAK,GAAG,KAAM,mBAAmB,KAAK,GAAG,KAAK,gCAAgC,KAAK,GAAG;AACtG,UAAI,eAAe,UAAU,aAAa;AACxC,cAAM,SAAS,KAAK,OAAO,IAAI;AAC/B,cAAM,QAAQ,gBAAgB,KAAK,UAAU;AAC7C,cAAM,eAAe,IAAI,QAAQ,aAAW,WAAW,SAAS,KAAK,CAAC,GAAG,KAAK,MAAM;AACpF;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAKA,QAAM,UAAU,OAAO,SAAS,UAAa,OAAO,SAAS;AAC7D,QAAM,UAAU,OAAO,WAAW,eAAe,OAAO,WAAW;AACnE,QAAM,sBAAsB,MAAM,QAAQ,OAAO,UAAU,IAAI,CAAC,GAAG,OAAO,UAAU,IAAI,CAAC;AACzF,MAAI,oBAAoB;AACxB,MAAI,CAAC,WAAW,WAAW,OAAO,WAAW,mBAAmB;AAC9D,QAAI;AACF,YAAM,UAAU,IAAI;AAAA,QAAe,CAAC,GAAG,WACrC,WAAW,MAAM,OAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,GAAM;AAAA,MACpE;AACA,eAAS,MAAM;AAAA,QACb,QAAQ,KAAK,CAAC,OAAO,UAAU,kBAAkB,KAAM,KAAK,MAAM,GAAG,OAAO,CAAC;AAAA,QAC7E,KAAK;AAAA,MACP;AACA,0BAAoB;AAAA,IACtB,SAAS,KAAK;AACZ,UAAI,KAAK,QAAQ,QAAS,OAAM;AAAA,IAElC;AAAA,EACF;AAEA,QAAM,oBAAoB,oBAAoB,OAAO,MAAM,QAAQ;AACnE,QAAM,YACJ,OAAO,aACP,OAAO,cACP,cAAc,OAAO,IAAI,MACxB,oBAAoB,eAAe,OAAO,IAAI,IAAI;AACrD,QAAM,OAAO,OAAO,SAAS,YAAY,EAAE,YAAY,UAAU,IAAI;AACrE,QAAM,UAAU,+BAA+B,QAAQ,UAAU,mBAAmB,SAAS;AAC7F,QAAM,QAAQ,OAAO,UAAU,CAAC,UAAU,iBAAiB,WAAW,MAAS,IAAI;AACnF,QAAM,iBAAiB,mBAAmB,IAAI;AAC9C,QAAM,YAAY,MAAM,QAAQ,OAAO,UAAU,IAAI,OAAO,aAAa,CAAC;AAC1E,QAAM,kBAAkB,oBAAoB,CAAC,GAAG,qBAAqB,GAAG,SAAS,IAAI;AACrF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,aAAa,EAAE,YAAY,UAAU;AAAA,IACzC,GAAI,mBAAmB,UAAa,EAAE,kBAAkB,eAAe;AAAA,IACvE,GAAI,gBAAgB,SAAS,KAAK,EAAE,YAAY,gBAAgB;AAAA,EAClE;AACF;AAEA,SAAS,eAAkB,SAAqB,QAAkC;AAChF,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,OAAO,QAAS,QAAO,QAAQ,OAAO,OAAO,UAAU,IAAI,MAAM,SAAS,CAAC;AAE/E,SAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,UAAM,UAAU,MAAM,OAAO,OAAO,UAAU,IAAI,MAAM,SAAS,CAAC;AAClE,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACxD,YAAQ;AAAA,MACN,WAAS;AACP,eAAO,oBAAoB,SAAS,OAAO;AAC3C,gBAAQ,KAAK;AAAA,MACf;AAAA,MACA,SAAO;AACL,eAAO,oBAAoB,SAAS,OAAO;AAC3C,eAAO,GAAG;AAAA,MACZ;AAAA,IACF;AAAA,EACF,CAAC;AACH;","names":[]}

package/dist/lib/testing/storyboard/test-kit.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 const PROBE_TASK_ALLOWLIST = Object.freeze([
   "list_creatives",
   "get_media_buy_delivery",

package/dist/lib/testing/storyboard/test-kit.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/testing/storyboard/test-kit.ts"],"sourcesContent":["/**\n * Test-kit schema validation.\n *\n * The test-kit YAML format has no formal schema today — the runner accepts\n * `options.test_kit` as a loose bag the security_baseline storyboard reads\n * via `$test_kit.<path>` references. This module enforces two invariants:\n *\n *   1. If a kit declares an `auth` block, `auth.probe_task` is required\n *      (no default). A missing probe_task fails kit-load rather than\n *      silently defaulting, so a kit that hasn't been explicitly migrated\n *      to declare the field can't green-light storyboards by accident.\n *\n *   2. `probe_task` must be one of an allowlist of auth-required, read-only\n *      AdCP tasks that accept an empty request body. Pointing probe_task at\n *      a task with required parameters would make the security_baseline\n *      runner misreport \"agent failed auth\" when the root cause is that\n *      schema validation rejected the probe before the auth layer ran.\n */\n\nimport type { TestOptions } from '../types';\n\n/**\n * AdCP tasks safe to call with unauth / invalid-key credentials during the\n * security_baseline probes:\n *\n *   - authenticated (so unauth yields 401/403, not 200)\n *   - read-only (no side effects across retries)\n *   - accept an empty request body (so auth failures fire before schema\n *     validation — otherwise a 400 would mask a 401)\n *\n * If a future task qualifies, add it here AND update the allowlist in the\n * upstream adcp storyboard narrative so this repo stays the single source\n * of runner truth.\n */\nexport const PROBE_TASK_ALLOWLIST: readonly string[] = Object.freeze([\n  'list_creatives',\n  'get_media_buy_delivery',\n  'list_authorized_properties',\n  'get_signals',\n  'list_si_sessions',\n  // governance specialism tools — all fields optional, auth-required, read-only\n  'list_property_lists',\n  'list_collection_lists',\n  'list_content_standards',\n]);\n\n/**\n * Raised when a test kit violates the schema invariants above. Carries the\n * field name so upstream loaders can render a YAML-friendly error.\n */\nexport class TestKitValidationError extends Error {\n  readonly field: string;\n\n  constructor(field: string, message: string) {\n    super(message);\n    this.name = 'TestKitValidationError';\n    this.field = field;\n  }\n}\n\n/**\n * Validate `options.test_kit`. No-op when `test_kit` or `test_kit.auth` is\n * absent — kits without an auth block are valid and the storyboard will\n * skip auth probes via `skip_if: \"!test_kit.auth.api_key\"`.\n *\n * Throws {@link TestKitValidationError} on the first violation. Intended for\n * eager use at comply/runStoryboard entry; upstream YAML loaders can also\n * import this directly to reject malformed kits at file-load time.\n */\nexport function validateTestKit(testKit: TestOptions['test_kit']): void {\n  if (!testKit) return;\n  const auth = testKit.auth;\n  if (!auth || typeof auth !== 'object') return;\n\n  const probeTask = auth.probe_task;\n  if (probeTask === undefined) {\n    throw new TestKitValidationError(\n      'test_kit.auth.probe_task',\n      `test_kit.auth.probe_task is required when test_kit.auth is declared. ` +\n        `Set it to one of: ${PROBE_TASK_ALLOWLIST.join(', ')}. ` +\n        `The runner uses this task for the security_baseline unauth + invalid-key probes.`\n    );\n  }\n  if (typeof probeTask !== 'string' || probeTask.length === 0) {\n    throw new TestKitValidationError(\n      'test_kit.auth.probe_task',\n      `test_kit.auth.probe_task must be a non-empty string; got ${JSON.stringify(probeTask)}.`\n    );\n  }\n  if (!PROBE_TASK_ALLOWLIST.includes(probeTask)) {\n    // Truncate + JSON-escape the echoed value so a hostile kit can't poison\n    // the rendered compliance report with control chars, ANSI escapes, or\n    // megabyte strings. Kits are operator-supplied, so this is defensive,\n    // not adversarial — but the error message ends up in shareable reports.\n    const safe = JSON.stringify(probeTask.slice(0, 120));\n    throw new TestKitValidationError(\n      'test_kit.auth.probe_task',\n      `test_kit.auth.probe_task ${safe} is not in the allowlist. ` +\n        `Allowed tasks (auth-required, read-only, accept empty body): ` +\n        `${PROBE_TASK_ALLOWLIST.join(', ')}. ` +\n        `Tasks outside this list can 400 on schema validation before auth is evaluated, ` +\n        `which would misreport as an agent auth failure.`\n    );\n  }\n}\n"],"mappings":";;;;;;AAkCO,MAAM,uBAA0C,OAAO,OAAO;AAAA,EACnE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,MAAM,+BAA+B,MAAM;AAAA,EACvC;AAAA,EAET,YAAY,OAAe,SAAiB;AAC1C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,QAAQ;AAAA,EACf;AACF;AAWO,SAAS,gBAAgB,SAAwC;AACtE,MAAI,CAAC,QAAS;AACd,QAAM,OAAO,QAAQ;AACrB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AAEvC,QAAM,YAAY,KAAK;AACvB,MAAI,cAAc,QAAW;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,MACA,0FACuB,qBAAqB,KAAK,IAAI,CAAC;AAAA,IAExD;AAAA,EACF;AACA,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,GAAG;AAC3D,UAAM,IAAI;AAAA,MACR;AAAA,MACA,4DAA4D,KAAK,UAAU,SAAS,CAAC;AAAA,IACvF;AAAA,EACF;AACA,MAAI,CAAC,qBAAqB,SAAS,SAAS,GAAG;AAK7C,UAAM,OAAO,KAAK,UAAU,UAAU,MAAM,GAAG,GAAG,CAAC;AACnD,UAAM,IAAI;AAAA,MACR;AAAA,MACA,4BAA4B,IAAI,0FAE3B,qBAAqB,KAAK,IAAI,CAAC;AAAA,IAGtC;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/lib/testing/storyboard/test-kit.ts"],"sourcesContent":["/**\n * Test-kit schema validation.\n *\n * The test-kit YAML format has no formal schema today — the runner accepts\n * `options.test_kit` as a loose bag the security_baseline storyboard reads\n * via `$test_kit.<path>` references. This module enforces two invariants:\n *\n *   1. If a kit declares an `auth` block, `auth.probe_task` is required\n *      (no default). A missing probe_task fails kit-load rather than\n *      silently defaulting, so a kit that hasn't been explicitly migrated\n *      to declare the field can't green-light storyboards by accident.\n *\n *   2. `probe_task` must be one of an allowlist of auth-required, read-only\n *      AdCP tasks that accept an empty request body. Pointing probe_task at\n *      a task with required parameters would make the security_baseline\n *      runner misreport \"agent failed auth\" when the root cause is that\n *      schema validation rejected the probe before the auth layer ran.\n */\n\nimport type { TestOptions } from '../types';\n\n/**\n * AdCP tasks safe to call with unauth / invalid-key credentials during the\n * security_baseline probes:\n *\n *   - authenticated (so unauth yields 401/403, not 200)\n *   - read-only (no side effects across retries)\n *   - accept an empty request body (so auth failures fire before schema\n *     validation — otherwise a 400 would mask a 401)\n *\n * If a future task qualifies, add it here AND update the allowlist in the\n * upstream adcp storyboard narrative so this repo stays the single source\n * of runner truth.\n */\nexport const PROBE_TASK_ALLOWLIST: readonly string[] = Object.freeze([\n  'list_creatives',\n  'get_media_buy_delivery',\n  'list_authorized_properties',\n  'get_signals',\n  'list_si_sessions',\n  // governance specialism tools — all fields optional, auth-required, read-only\n  'list_property_lists',\n  'list_collection_lists',\n  'list_content_standards',\n]);\n\n/**\n * Raised when a test kit violates the schema invariants above. Carries the\n * field name so upstream loaders can render a YAML-friendly error.\n */\nexport class TestKitValidationError extends Error {\n  readonly field: string;\n\n  constructor(field: string, message: string) {\n    super(message);\n    this.name = 'TestKitValidationError';\n    this.field = field;\n  }\n}\n\n/**\n * Validate `options.test_kit`. No-op when `test_kit` or `test_kit.auth` is\n * absent — kits without an auth block are valid and the storyboard will\n * skip auth probes via `skip_if: \"!test_kit.auth.api_key\"`.\n *\n * Throws {@link TestKitValidationError} on the first violation. Intended for\n * eager use at comply/runStoryboard entry; upstream YAML loaders can also\n * import this directly to reject malformed kits at file-load time.\n */\nexport function validateTestKit(testKit: TestOptions['test_kit']): void {\n  if (!testKit) return;\n  const auth = testKit.auth;\n  if (!auth || typeof auth !== 'object') return;\n\n  const probeTask = auth.probe_task;\n  if (probeTask === undefined) {\n    throw new TestKitValidationError(\n      'test_kit.auth.probe_task',\n      `test_kit.auth.probe_task is required when test_kit.auth is declared. ` +\n        `Set it to one of: ${PROBE_TASK_ALLOWLIST.join(', ')}. ` +\n        `The runner uses this task for the security_baseline unauth + invalid-key probes.`\n    );\n  }\n  if (typeof probeTask !== 'string' || probeTask.length === 0) {\n    throw new TestKitValidationError(\n      'test_kit.auth.probe_task',\n      `test_kit.auth.probe_task must be a non-empty string; got ${JSON.stringify(probeTask)}.`\n    );\n  }\n  if (!PROBE_TASK_ALLOWLIST.includes(probeTask)) {\n    // Truncate + JSON-escape the echoed value so a hostile kit can't poison\n    // the rendered compliance report with control chars, ANSI escapes, or\n    // megabyte strings. Kits are operator-supplied, so this is defensive,\n    // not adversarial — but the error message ends up in shareable reports.\n    const safe = JSON.stringify(probeTask.slice(0, 120));\n    throw new TestKitValidationError(\n      'test_kit.auth.probe_task',\n      `test_kit.auth.probe_task ${safe} is not in the allowlist. ` +\n        `Allowed tasks (auth-required, read-only, accept empty body): ` +\n        `${PROBE_TASK_ALLOWLIST.join(', ')}. ` +\n        `Tasks outside this list can 400 on schema validation before auth is evaluated, ` +\n        `which would misreport as an agent auth failure.`\n    );\n  }\n}\n"],"mappings":"AAkCO,MAAM,uBAA0C,OAAO,OAAO;AAAA,EACnE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,MAAM,+BAA+B,MAAM;AAAA,EACvC;AAAA,EAET,YAAY,OAAe,SAAiB;AAC1C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,QAAQ;AAAA,EACf;AACF;AAWO,SAAS,gBAAgB,SAAwC;AACtE,MAAI,CAAC,QAAS;AACd,QAAM,OAAO,QAAQ;AACrB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AAEvC,QAAM,YAAY,KAAK;AACvB,MAAI,cAAc,QAAW;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,MACA,0FACuB,qBAAqB,KAAK,IAAI,CAAC;AAAA,IAExD;AAAA,EACF;AACA,MAAI,OAAO,cAAc,YAAY,UAAU,WAAW,GAAG;AAC3D,UAAM,IAAI;AAAA,MACR;AAAA,MACA,4DAA4D,KAAK,UAAU,SAAS,CAAC;AAAA,IACvF;AAAA,EACF;AACA,MAAI,CAAC,qBAAqB,SAAS,SAAS,GAAG;AAK7C,UAAM,OAAO,KAAK,UAAU,UAAU,MAAM,GAAG,GAAG,CAAC;AACnD,UAAM,IAAI;AAAA,MACR;AAAA,MACA,4BAA4B,IAAI,0FAE3B,qBAAqB,KAAK,IAAI,CAAC;AAAA,IAGtC;AAAA,EACF;AACF;","names":[]}

package/dist/lib/testing/storyboard/types.mjs

@@ -1,9 +1,3 @@
-import { fileURLToPath as __adcpFileURLToPath } from 'node:url';
-import { dirname as __adcpDirname } from 'node:path';
-import { createRequire as __adcpCreateRequire } from 'node:module';
-const __filename = __adcpFileURLToPath(import.meta.url);
-const __dirname = __adcpDirname(__filename);
-const require = __adcpCreateRequire(import.meta.url);
 const WEBHOOK_IDEMPOTENCY_KEY_PATTERN = /^[A-Za-z0-9_.:-]{16,255}$/;
 const DETAILED_SKIP_TO_CANONICAL = {
   probe_skipped: "not_applicable",