@adcp/sdk 12.0.5 → 12.1.0

package/dist/lib/protocols/transportDiagnostics.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/protocols/transportDiagnostics.ts"],"sourcesContent":["import { globalAsyncLocalStorage } from '../utils/global-async-local-storage';\nimport { createHmac } from 'node:crypto';\n\nexport type TransportActivityType = 'request_started' | 'response_received' | 'request_failed';\n\nexport interface TransportActivityContext {\n  agentId: string;\n  protocol: 'mcp' | 'a2a';\n  tool?: string;\n  taskType?: string;\n  operationId?: string;\n  taskId?: string;\n  contextId?: string;\n  idempotencyKey?: string;\n}\n\nexport interface TransportActivity {\n  type: TransportActivityType;\n  agentId: string;\n  protocol: 'mcp' | 'a2a';\n  tool?: string;\n  taskType?: string;\n  operationId?: string;\n  taskId?: string;\n  contextId?: string;\n  idempotencyKeyHash?: string;\n  method: string;\n  url: string;\n  requestHeaders: Record<string, string>;\n  requestBody?: string;\n  requestBodyTruncated?: boolean;\n  startedAt: string;\n  timestamp: string;\n  durationMs?: number;\n  httpStatus?: number;\n  statusText?: string;\n  responseHeaders?: Record<string, string>;\n  responseBody?: string;\n  responseBodyTruncated?: boolean;\n  errorName?: string;\n  errorMessage?: string;\n}\n\nexport type TransportActivityHandler = (event: TransportActivity) => void | Promise<void>;\n\ninterface TransportDiagnosticsSlot extends TransportActivityContext {\n  onTransportActivity?: TransportActivityHandler;\n  pending: Promise<void>[];\n}\n\nconst BODY_SNIPPET_LIMIT = 64 * 1024;\nconst REDACTED = '[redacted]';\n\nconst SAFE_HEADER_NAMES = new Set([\n  'accept',\n  'accept-encoding',\n  'content-type',\n  'last-event-id',\n  'mcp-protocol-version',\n  'traceparent',\n  'tracestate',\n  'user-agent',\n  'x-adcp-agent-id',\n  'x-adcp-request-id',\n  'x-correlation-id',\n  'x-request-id',\n  'x-scope3-debug-id',\n]);\n\nconst SENSITIVE_HEADER_NAMES = new Set([\n  'authorization',\n  'cookie',\n  'proxy-authorization',\n  'set-cookie',\n  'x-adcp-auth',\n  'x-api-key',\n  'mcp-session-id',\n]);\n\nconst SENSITIVE_KEY_RE =\n  /(^|[_-])(authorization|cookie|credentials?|secret|signature|token|api[_-]?key|private[_-]?key|idempotency[_-]?key|password)([_-]|$)/i;\nconst SENSITIVE_TEXT_FIELD_RE =\n  /((?:\"[^\"]*(?:authorization|cookie|credentials?|secret|signature|token|api[_-]?key|private[_-]?key|idempotency[_-]?key|password)[^\"]*\"\\s*:\\s*)|(?:^|[&\\s])[^=&\\s]*(?:authorization|cookie|credentials?|secret|signature|token|api[_-]?key|private[_-]?key|idempotency[_-]?key|password)[^=&\\s]*=)(\"[^\"]*\"|[^&\\s,}]+)/gi;\nconst URL_LIKE_RE = /\\bhttps?:\\/\\/[^\\s\"'<>]+/gi;\n\nexport const transportDiagnosticsStorage = globalAsyncLocalStorage<TransportDiagnosticsSlot>('transportDiagnostics');\n\nexport function withTransportDiagnostics<T>(\n  context: TransportActivityContext & { onTransportActivity?: TransportActivityHandler },\n  fn: () => Promise<T>\n): Promise<T> {\n  if (!context.onTransportActivity) return fn();\n  const slot: TransportDiagnosticsSlot = { ...context, pending: [] };\n  return transportDiagnosticsStorage.run(slot, async () => {\n    try {\n      return await fn();\n    } finally {\n      await Promise.allSettled(slot.pending);\n    }\n  });\n}\n\nexport function sanitizeTransportUrl(value: string): string {\n  try {\n    const url = new URL(value);\n    url.username = '';\n    url.password = '';\n    url.search = '';\n    url.hash = '';\n    return url.toString();\n  } catch {\n    return 'invalid_url';\n  }\n}\n\nexport function sanitizeTransportHeaders(headers: HeadersInit | undefined): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const [key, value] of headerEntries(headers)) {\n    const lower = key.toLowerCase();\n    if (SENSITIVE_HEADER_NAMES.has(lower) || SENSITIVE_KEY_RE.test(lower)) {\n      out[lower] = REDACTED;\n    } else if (SAFE_HEADER_NAMES.has(lower) || isSafeCorrelationHeader(lower)) {\n      out[lower] = value;\n    }\n  }\n  return out;\n}\n\nexport function wrapFetchWithTransportDiagnostics(upstream: typeof fetch): typeof fetch {\n  const wrapped: typeof fetch = async (input, init) => {\n    const slot = transportDiagnosticsStorage.getStore();\n    if (!slot?.onTransportActivity) return upstream(input, init);\n\n    const startedAtMs = Date.now();\n    const startedAt = new Date(startedAtMs).toISOString();\n    const method = getMethod(input, init);\n    const url = sanitizeTransportUrl(getUrl(input));\n    const requestHeaders = sanitizeTransportHeaders(mergeRequestHeaders(input, init));\n    const requestBody = bodySnippet(init?.body);\n    const baseEvent = {\n      agentId: slot.agentId,\n      protocol: slot.protocol,\n      ...(slot.tool && { tool: slot.tool, taskType: slot.taskType ?? slot.tool }),\n      ...(slot.operationId && { operationId: slot.operationId }),\n      ...(slot.taskId && { taskId: slot.taskId }),\n      ...(slot.contextId && { contextId: slot.contextId }),\n      ...(slot.idempotencyKey && { idempotencyKeyHash: fingerprintDiagnosticValue(slot.idempotencyKey) }),\n      method,\n      url,\n      requestHeaders,\n      ...(requestBody && {\n        requestBody: requestBody.body,\n        requestBodyTruncated: requestBody.truncated,\n      }),\n      startedAt,\n    };\n\n    emitTransportActivity(slot.onTransportActivity, {\n      type: 'request_started',\n      ...baseEvent,\n      timestamp: startedAt,\n    });\n\n    try {\n      const response = await upstream(input, init);\n      const durationMs = Date.now() - startedAtMs;\n      const responseHeaders = sanitizeResponseHeaders(response.headers);\n      const responseBody = await responseBodySnippet(response);\n      emitTransportActivity(slot.onTransportActivity, {\n        type: 'response_received',\n        ...baseEvent,\n        timestamp: new Date().toISOString(),\n        durationMs,\n        httpStatus: response.status,\n        statusText: response.statusText,\n        responseHeaders,\n        ...(responseBody && {\n          responseBody: responseBody.body,\n          responseBodyTruncated: responseBody.truncated,\n        }),\n      });\n      return response;\n    } catch (error) {\n      emitTransportActivity(slot.onTransportActivity, {\n        type: 'request_failed',\n        ...baseEvent,\n        timestamp: new Date().toISOString(),\n        durationMs: Date.now() - startedAtMs,\n        errorName: error instanceof Error ? error.name : typeof error,\n        errorMessage: sanitizeDiagnosticText(error instanceof Error ? error.message : String(error)),\n      });\n      throw error;\n    }\n  };\n  return wrapped;\n}\n\nfunction emitTransportActivity(handler: TransportActivityHandler, event: TransportActivity): void {\n  try {\n    const slot = transportDiagnosticsStorage.getStore();\n    const frozen = Object.freeze(structuredClone(event));\n    const pending = Promise.resolve()\n      .then(() => handler(frozen))\n      .then(\n        () => {},\n        () => {}\n      );\n    slot?.pending.push(pending);\n  } catch {\n    // Observability hooks must not change protocol behavior.\n  }\n}\n\nfunction getUrl(input: RequestInfo | URL): string {\n  return typeof input === 'string' ? input : input instanceof URL ? input.toString() : input.url;\n}\n\nfunction getMethod(input: RequestInfo | URL, init?: RequestInit): string {\n  return (init?.method ?? (input instanceof Request ? input.method : 'GET')).toUpperCase();\n}\n\nfunction mergeRequestHeaders(input: RequestInfo | URL, init?: RequestInit): Headers {\n  const headers = new Headers(input instanceof Request ? input.headers : undefined);\n  if (init?.headers) {\n    for (const [key, value] of headerEntries(init.headers)) {\n      headers.set(key, value);\n    }\n  }\n  return headers;\n}\n\nfunction sanitizeResponseHeaders(headers: Headers): Record<string, string> {\n  return sanitizeTransportHeaders(headers);\n}\n\nfunction headerEntries(headers: HeadersInit | undefined): Array<[string, string]> {\n  if (!headers) return [];\n  if (headers instanceof Headers) {\n    const entries: Array<[string, string]> = [];\n    headers.forEach((value, key) => entries.push([key, value]));\n    return entries;\n  }\n  if (Array.isArray(headers)) return headers.map(([key, value]) => [key, value]);\n  return Object.entries(headers).map(([key, value]) => [key, String(value)]);\n}\n\nfunction isSafeCorrelationHeader(lower: string): boolean {\n  if (!lower.startsWith('x-')) return false;\n  return (\n    lower.includes('correlation') || lower.includes('debug') || lower.includes('request-id') || lower.includes('trace')\n  );\n}\n\nfunction bodySnippet(body: BodyInit | null | undefined): { body: string; truncated: boolean } | undefined {\n  if (body == null) return undefined;\n  if (typeof body === 'string') return sanitizeBodyText(body, BODY_SNIPPET_LIMIT);\n  if (body instanceof URLSearchParams) return sanitizeBodyText(body.toString(), BODY_SNIPPET_LIMIT);\n  if (body instanceof Blob) return { body: `[blob ${body.size} bytes]`, truncated: false };\n  if (body instanceof ArrayBuffer) {\n    return sanitizeBodyText(Buffer.from(body).toString('utf8'), BODY_SNIPPET_LIMIT);\n  }\n  if (ArrayBuffer.isView(body)) {\n    return sanitizeBodyText(\n      Buffer.from(body.buffer, body.byteOffset, body.byteLength).toString('utf8'),\n      BODY_SNIPPET_LIMIT\n    );\n  }\n  return undefined;\n}\n\nasync function responseBodySnippet(response: Response): Promise<{ body: string; truncated: boolean } | undefined> {\n  const contentType = response.headers.get('content-type') ?? '';\n  if (!isDiagnosticTextContentType(contentType)) return undefined;\n  try {\n    const { text, truncated } = await readResponseTextBounded(response.clone(), BODY_SNIPPET_LIMIT);\n    return { body: redactSensitiveJsonOrText(text), truncated };\n  } catch {\n    return undefined;\n  }\n}\n\nfunction sanitizeBodyText(text: string, limit: number): { body: string; truncated: boolean } {\n  const truncated = text.length > limit;\n  const bounded = truncated ? text.slice(0, limit) : text;\n  return { body: redactSensitiveJsonOrText(bounded), truncated };\n}\n\nfunction redactSensitiveJsonOrText(text: string): string {\n  try {\n    return JSON.stringify(redactSensitiveValue(JSON.parse(text)));\n  } catch {\n    return sanitizeDiagnosticText(text);\n  }\n}\n\nfunction redactSensitiveValue(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(redactSensitiveValue);\n  if (typeof value === 'string') return sanitizeStringValue(value);\n  if (!value || typeof value !== 'object') return value;\n  const out: Record<string, unknown> = {};\n  for (const [key, child] of Object.entries(value)) {\n    out[key] = isSensitiveKey(key) ? REDACTED : redactSensitiveValue(child);\n  }\n  return out;\n}\n\nfunction sanitizeDiagnosticText(text: string): string {\n  return text\n    .replace(URL_LIKE_RE, value => sanitizeTransportUrl(value))\n    .replace(/Bearer\\s+[A-Za-z0-9._~+/=-]+/gi, 'Bearer [redacted]')\n    .replace(/Basic\\s+[A-Za-z0-9+/=-]+/gi, 'Basic [redacted]')\n    .replace(SENSITIVE_TEXT_FIELD_RE, (_match, prefix) => `${prefix}${REDACTED}`);\n}\n\nfunction sanitizeStringValue(value: string): string {\n  return sanitizeDiagnosticText(value);\n}\n\nfunction normalizedKey(key: string): string {\n  return key.replace(/([a-z0-9])([A-Z])/g, '$1_$2').toLowerCase();\n}\n\nfunction isSensitiveKey(key: string): boolean {\n  return SENSITIVE_KEY_RE.test(normalizedKey(key));\n}\n\nfunction isDiagnosticTextContentType(contentType: string): boolean {\n  const lower = contentType.toLowerCase();\n  if (!lower) return true;\n  if (lower.includes('text/event-stream')) return false;\n  return (\n    lower.startsWith('text/') ||\n    lower.includes('json') ||\n    lower.includes('xml') ||\n    lower.includes('javascript') ||\n    lower.includes('x-www-form-urlencoded')\n  );\n}\n\nasync function readResponseTextBounded(\n  response: Response,\n  limit: number\n): Promise<{ text: string; truncated: boolean }> {\n  if (!response.body) {\n    const text = await response.text();\n    return { text: text.slice(0, limit), truncated: text.length > limit };\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder();\n  let text = '';\n  let truncated = false;\n\n  try {\n    while (text.length <= limit) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      text += decoder.decode(value, { stream: true });\n      if (text.length > limit) {\n        truncated = true;\n        text = text.slice(0, limit);\n        await reader.cancel();\n        break;\n      }\n    }\n    if (!truncated) text += decoder.decode();\n  } finally {\n    reader.releaseLock();\n  }\n\n  return { text, truncated };\n}\n\nfunction fingerprintDiagnosticValue(value: string): string {\n  return createHmac('sha256', 'adcp-transport-diagnostics').update(value).digest('hex').slice(0, 16);\n}\n"],"mappings":"AAAA,SAAS,+BAA+B;AACxC,SAAS,kBAAkB;AAiD3B,MAAM,qBAAqB,KAAK;AAChC,MAAM,WAAW;AAEjB,MAAM,oBAAoB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,yBAAyB,oBAAI,IAAI;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,mBACJ;AACF,MAAM,0BACJ;AACF,MAAM,cAAc;AAEb,MAAM,8BAA8B,wBAAkD,sBAAsB;AAE5G,SAAS,yBACd,SACA,IACY;AACZ,MAAI,CAAC,QAAQ,oBAAqB,QAAO,GAAG;AAC5C,QAAM,OAAiC,EAAE,GAAG,SAAS,SAAS,CAAC,EAAE;AACjE,SAAO,4BAA4B,IAAI,MAAM,YAAY;AACvD,QAAI;AACF,aAAO,MAAM,GAAG;AAAA,IAClB,UAAE;AACA,YAAM,QAAQ,WAAW,KAAK,OAAO;AAAA,IACvC;AAAA,EACF,CAAC;AACH;AAEO,SAAS,qBAAqB,OAAuB;AAC1D,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,QAAI,WAAW;AACf,QAAI,WAAW;AACf,QAAI,SAAS;AACb,QAAI,OAAO;AACX,WAAO,IAAI,SAAS;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,yBAAyB,SAA0D;AACjG,QAAM,MAA8B,CAAC;AACrC,aAAW,CAAC,KAAK,KAAK,KAAK,cAAc,OAAO,GAAG;AACjD,UAAM,QAAQ,IAAI,YAAY;AAC9B,QAAI,uBAAuB,IAAI,KAAK,KAAK,iBAAiB,KAAK,KAAK,GAAG;AACrE,UAAI,KAAK,IAAI;AAAA,IACf,WAAW,kBAAkB,IAAI,KAAK,KAAK,wBAAwB,KAAK,GAAG;AACzE,UAAI,KAAK,IAAI;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,kCAAkC,UAAsC;AACtF,QAAM,UAAwB,OAAO,OAAO,SAAS;AACnD,UAAM,OAAO,4BAA4B,SAAS;AAClD,QAAI,CAAC,MAAM,oBAAqB,QAAO,SAAS,OAAO,IAAI;AAE3D,UAAM,cAAc,KAAK,IAAI;AAC7B,UAAM,YAAY,IAAI,KAAK,WAAW,EAAE,YAAY;AACpD,UAAM,SAAS,UAAU,OAAO,IAAI;AACpC,UAAM,MAAM,qBAAqB,OAAO,KAAK,CAAC;AAC9C,UAAM,iBAAiB,yBAAyB,oBAAoB,OAAO,IAAI,CAAC;AAChF,UAAM,cAAc,YAAY,MAAM,IAAI;AAC1C,UAAM,YAAY;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,UAAU,KAAK;AAAA,MACf,GAAI,KAAK,QAAQ,EAAE,MAAM,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,KAAK;AAAA,MACzE,GAAI,KAAK,eAAe,EAAE,aAAa,KAAK,YAAY;AAAA,MACxD,GAAI,KAAK,UAAU,EAAE,QAAQ,KAAK,OAAO;AAAA,MACzC,GAAI,KAAK,aAAa,EAAE,WAAW,KAAK,UAAU;AAAA,MAClD,GAAI,KAAK,kBAAkB,EAAE,oBAAoB,2BAA2B,KAAK,cAAc,EAAE;AAAA,MACjG;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,eAAe;AAAA,QACjB,aAAa,YAAY;AAAA,QACzB,sBAAsB,YAAY;AAAA,MACpC;AAAA,MACA;AAAA,IACF;AAEA,0BAAsB,KAAK,qBAAqB;AAAA,MAC9C,MAAM;AAAA,MACN,GAAG;AAAA,MACH,WAAW;AAAA,IACb,CAAC;AAED,QAAI;AACF,YAAM,WAAW,MAAM,SAAS,OAAO,IAAI;AAC3C,YAAM,aAAa,KAAK,IAAI,IAAI;AAChC,YAAM,kBAAkB,wBAAwB,SAAS,OAAO;AAChE,YAAM,eAAe,MAAM,oBAAoB,QAAQ;AACvD,4BAAsB,KAAK,qBAAqB;AAAA,QAC9C,MAAM;AAAA,QACN,GAAG;AAAA,QACH,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,YAAY,SAAS;AAAA,QACrB;AAAA,QACA,GAAI,gBAAgB;AAAA,UAClB,cAAc,aAAa;AAAA,UAC3B,uBAAuB,aAAa;AAAA,QACtC;AAAA,MACF,CAAC;AACD,aAAO;AAAA,IACT,SAAS,OAAO;AACd,4BAAsB,KAAK,qBAAqB;AAAA,QAC9C,MAAM;AAAA,QACN,GAAG;AAAA,QACH,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,WAAW,iBAAiB,QAAQ,MAAM,OAAO,OAAO;AAAA,QACxD,cAAc,uBAAuB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC7F,CAAC;AACD,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,SAAmC,OAAgC;AAChG,MAAI;AACF,UAAM,OAAO,4BAA4B,SAAS;AAClD,UAAM,SAAS,OAAO,OAAO,gBAAgB,KAAK,CAAC;AACnD,UAAM,UAAU,QAAQ,QAAQ,EAC7B,KAAK,MAAM,QAAQ,MAAM,CAAC,EAC1B;AAAA,MACC,MAAM;AAAA,MAAC;AAAA,MACP,MAAM;AAAA,MAAC;AAAA,IACT;AACF,UAAM,QAAQ,KAAK,OAAO;AAAA,EAC5B,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,OAAO,OAAkC;AAChD,SAAO,OAAO,UAAU,WAAW,QAAQ,iBAAiB,MAAM,MAAM,SAAS,IAAI,MAAM;AAC7F;AAEA,SAAS,UAAU,OAA0B,MAA4B;AACvE,UAAQ,MAAM,WAAW,iBAAiB,UAAU,MAAM,SAAS,QAAQ,YAAY;AACzF;AAEA,SAAS,oBAAoB,OAA0B,MAA6B;AAClF,QAAM,UAAU,IAAI,QAAQ,iBAAiB,UAAU,MAAM,UAAU,MAAS;AAChF,MAAI,MAAM,SAAS;AACjB,eAAW,CAAC,KAAK,KAAK,KAAK,cAAc,KAAK,OAAO,GAAG;AACtD,cAAQ,IAAI,KAAK,KAAK;AAAA,IACxB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,SAA0C;AACzE,SAAO,yBAAyB,OAAO;AACzC;AAEA,SAAS,cAAc,SAA2D;AAChF,MAAI,CAAC,QAAS,QAAO,CAAC;AACtB,MAAI,mBAAmB,SAAS;AAC9B,UAAM,UAAmC,CAAC;AAC1C,YAAQ,QAAQ,CAAC,OAAO,QAAQ,QAAQ,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;AAC1D,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,OAAO,EAAG,QAAO,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,KAAK,CAAC;AAC7E,SAAO,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC;AAC3E;AAEA,SAAS,wBAAwB,OAAwB;AACvD,MAAI,CAAC,MAAM,WAAW,IAAI,EAAG,QAAO;AACpC,SACE,MAAM,SAAS,aAAa,KAAK,MAAM,SAAS,OAAO,KAAK,MAAM,SAAS,YAAY,KAAK,MAAM,SAAS,OAAO;AAEtH;AAEA,SAAS,YAAY,MAAqF;AACxG,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI,OAAO,SAAS,SAAU,QAAO,iBAAiB,MAAM,kBAAkB;AAC9E,MAAI,gBAAgB,gBAAiB,QAAO,iBAAiB,KAAK,SAAS,GAAG,kBAAkB;AAChG,MAAI,gBAAgB,KAAM,QAAO,EAAE,MAAM,SAAS,KAAK,IAAI,WAAW,WAAW,MAAM;AACvF,MAAI,gBAAgB,aAAa;AAC/B,WAAO,iBAAiB,OAAO,KAAK,IAAI,EAAE,SAAS,MAAM,GAAG,kBAAkB;AAAA,EAChF;AACA,MAAI,YAAY,OAAO,IAAI,GAAG;AAC5B,WAAO;AAAA,MACL,OAAO,KAAK,KAAK,QAAQ,KAAK,YAAY,KAAK,UAAU,EAAE,SAAS,MAAM;AAAA,MAC1E;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,oBAAoB,UAA+E;AAChH,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK;AAC5D,MAAI,CAAC,4BAA4B,WAAW,EAAG,QAAO;AACtD,MAAI;AACF,UAAM,EAAE,MAAM,UAAU,IAAI,MAAM,wBAAwB,SAAS,MAAM,GAAG,kBAAkB;AAC9F,WAAO,EAAE,MAAM,0BAA0B,IAAI,GAAG,UAAU;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,MAAc,OAAqD;AAC3F,QAAM,YAAY,KAAK,SAAS;AAChC,QAAM,UAAU,YAAY,KAAK,MAAM,GAAG,KAAK,IAAI;AACnD,SAAO,EAAE,MAAM,0BAA0B,OAAO,GAAG,UAAU;AAC/D;AAEA,SAAS,0BAA0B,MAAsB;AACvD,MAAI;AACF,WAAO,KAAK,UAAU,qBAAqB,KAAK,MAAM,IAAI,CAAC,CAAC;AAAA,EAC9D,QAAQ;AACN,WAAO,uBAAuB,IAAI;AAAA,EACpC;AACF;AAEA,SAAS,qBAAqB,OAAyB;AACrD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,oBAAoB;AAC/D,MAAI,OAAO,UAAU,SAAU,QAAO,oBAAoB,KAAK;AAC/D,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,QAAI,GAAG,IAAI,eAAe,GAAG,IAAI,WAAW,qBAAqB,KAAK;AAAA,EACxE;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,MAAsB;AACpD,SAAO,KACJ,QAAQ,aAAa,WAAS,qBAAqB,KAAK,CAAC,EACzD,QAAQ,kCAAkC,mBAAmB,EAC7D,QAAQ,8BAA8B,kBAAkB,EACxD,QAAQ,yBAAyB,CAAC,QAAQ,WAAW,GAAG,MAAM,GAAG,QAAQ,EAAE;AAChF;AAEA,SAAS,oBAAoB,OAAuB;AAClD,SAAO,uBAAuB,KAAK;AACrC;AAEA,SAAS,cAAc,KAAqB;AAC1C,SAAO,IAAI,QAAQ,sBAAsB,OAAO,EAAE,YAAY;AAChE;AAEA,SAAS,eAAe,KAAsB;AAC5C,SAAO,iBAAiB,KAAK,cAAc,GAAG,CAAC;AACjD;AAEA,SAAS,4BAA4B,aAA8B;AACjE,QAAM,QAAQ,YAAY,YAAY;AACtC,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,MAAM,SAAS,mBAAmB,EAAG,QAAO;AAChD,SACE,MAAM,WAAW,OAAO,KACxB,MAAM,SAAS,MAAM,KACrB,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,YAAY,KAC3B,MAAM,SAAS,uBAAuB;AAE1C;AAEA,eAAe,wBACb,UACA,OAC+C;AAC/C,MAAI,CAAC,SAAS,MAAM;AAClB,UAAMA,QAAO,MAAM,SAAS,KAAK;AACjC,WAAO,EAAE,MAAMA,MAAK,MAAM,GAAG,KAAK,GAAG,WAAWA,MAAK,SAAS,MAAM;AAAA,EACtE;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,OAAO;AACX,MAAI,YAAY;AAEhB,MAAI;AACF,WAAO,KAAK,UAAU,OAAO;AAC3B,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,cAAQ,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAC9C,UAAI,KAAK,SAAS,OAAO;AACvB,oBAAY;AACZ,eAAO,KAAK,MAAM,GAAG,KAAK;AAC1B,cAAM,OAAO,OAAO;AACpB;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,UAAW,SAAQ,QAAQ,OAAO;AAAA,EACzC,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AAEA,SAAO,EAAE,MAAM,UAAU;AAC3B;AAEA,SAAS,2BAA2B,OAAuB;AACzD,SAAO,WAAW,UAAU,4BAA4B,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnG;","names":["text"]}
+{"version":3,"sources":["../../../src/lib/protocols/transportDiagnostics.ts"],"sourcesContent":["import { fileURLToPath as __adcpFileURLToPath } from 'node:url';\nimport { dirname as __adcpDirname } from 'node:path';\nimport { createRequire as __adcpCreateRequire } from 'node:module';\nconst __dirname = __adcpDirname(__adcpFileURLToPath(import.meta.url));\nconst require = __adcpCreateRequire(import.meta.url);\nimport { globalAsyncLocalStorage } from '../utils/global-async-local-storage';\nimport { createHmac } from 'node:crypto';\n\nexport type TransportActivityType = 'request_started' | 'response_received' | 'request_failed';\n\nexport interface TransportActivityContext {\n  agentId: string;\n  protocol: 'mcp' | 'a2a';\n  tool?: string;\n  taskType?: string;\n  operationId?: string;\n  taskId?: string;\n  contextId?: string;\n  idempotencyKey?: string;\n}\n\nexport interface TransportActivity {\n  type: TransportActivityType;\n  agentId: string;\n  protocol: 'mcp' | 'a2a';\n  tool?: string;\n  taskType?: string;\n  operationId?: string;\n  taskId?: string;\n  contextId?: string;\n  idempotencyKeyHash?: string;\n  method: string;\n  url: string;\n  requestHeaders: Record<string, string>;\n  requestBody?: string;\n  requestBodyTruncated?: boolean;\n  startedAt: string;\n  timestamp: string;\n  durationMs?: number;\n  httpStatus?: number;\n  statusText?: string;\n  responseHeaders?: Record<string, string>;\n  responseBody?: string;\n  responseBodyTruncated?: boolean;\n  errorName?: string;\n  errorMessage?: string;\n}\n\nexport type TransportActivityHandler = (event: TransportActivity) => void | Promise<void>;\n\ninterface TransportDiagnosticsSlot extends TransportActivityContext {\n  onTransportActivity?: TransportActivityHandler;\n  pending: Promise<void>[];\n}\n\nconst BODY_SNIPPET_LIMIT = 64 * 1024;\nconst REDACTED = '[redacted]';\n\nconst SAFE_HEADER_NAMES = new Set([\n  'accept',\n  'accept-encoding',\n  'content-type',\n  'last-event-id',\n  'mcp-protocol-version',\n  'traceparent',\n  'tracestate',\n  'user-agent',\n  'x-adcp-agent-id',\n  'x-adcp-request-id',\n  'x-correlation-id',\n  'x-request-id',\n  'x-scope3-debug-id',\n]);\n\nconst SENSITIVE_HEADER_NAMES = new Set([\n  'authorization',\n  'cookie',\n  'proxy-authorization',\n  'set-cookie',\n  'x-adcp-auth',\n  'x-api-key',\n  'mcp-session-id',\n]);\n\nconst SENSITIVE_KEY_RE =\n  /(^|[_-])(authorization|cookie|credentials?|secret|signature|token|api[_-]?key|private[_-]?key|idempotency[_-]?key|password)([_-]|$)/i;\nconst SENSITIVE_TEXT_FIELD_RE =\n  /((?:\"[^\"]*(?:authorization|cookie|credentials?|secret|signature|token|api[_-]?key|private[_-]?key|idempotency[_-]?key|password)[^\"]*\"\\s*:\\s*)|(?:^|[&\\s])[^=&\\s]*(?:authorization|cookie|credentials?|secret|signature|token|api[_-]?key|private[_-]?key|idempotency[_-]?key|password)[^=&\\s]*=)(\"[^\"]*\"|[^&\\s,}]+)/gi;\nconst URL_LIKE_RE = /\\bhttps?:\\/\\/[^\\s\"'<>]+/gi;\n\nexport const transportDiagnosticsStorage = globalAsyncLocalStorage<TransportDiagnosticsSlot>('transportDiagnostics');\n\nexport function withTransportDiagnostics<T>(\n  context: TransportActivityContext & { onTransportActivity?: TransportActivityHandler },\n  fn: () => Promise<T>\n): Promise<T> {\n  if (!context.onTransportActivity) return fn();\n  const slot: TransportDiagnosticsSlot = { ...context, pending: [] };\n  return transportDiagnosticsStorage.run(slot, async () => {\n    try {\n      return await fn();\n    } finally {\n      await Promise.allSettled(slot.pending);\n    }\n  });\n}\n\nexport function sanitizeTransportUrl(value: string): string {\n  try {\n    const url = new URL(value);\n    url.username = '';\n    url.password = '';\n    url.search = '';\n    url.hash = '';\n    return url.toString();\n  } catch {\n    return 'invalid_url';\n  }\n}\n\nexport function sanitizeTransportHeaders(headers: HeadersInit | undefined): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const [key, value] of headerEntries(headers)) {\n    const lower = key.toLowerCase();\n    if (SENSITIVE_HEADER_NAMES.has(lower) || SENSITIVE_KEY_RE.test(lower)) {\n      out[lower] = REDACTED;\n    } else if (SAFE_HEADER_NAMES.has(lower) || isSafeCorrelationHeader(lower)) {\n      out[lower] = value;\n    }\n  }\n  return out;\n}\n\nexport function wrapFetchWithTransportDiagnostics(upstream: typeof fetch): typeof fetch {\n  const wrapped: typeof fetch = async (input, init) => {\n    const slot = transportDiagnosticsStorage.getStore();\n    if (!slot?.onTransportActivity) return upstream(input, init);\n\n    const startedAtMs = Date.now();\n    const startedAt = new Date(startedAtMs).toISOString();\n    const method = getMethod(input, init);\n    const url = sanitizeTransportUrl(getUrl(input));\n    const requestHeaders = sanitizeTransportHeaders(mergeRequestHeaders(input, init));\n    const requestBody = bodySnippet(init?.body);\n    const baseEvent = {\n      agentId: slot.agentId,\n      protocol: slot.protocol,\n      ...(slot.tool && { tool: slot.tool, taskType: slot.taskType ?? slot.tool }),\n      ...(slot.operationId && { operationId: slot.operationId }),\n      ...(slot.taskId && { taskId: slot.taskId }),\n      ...(slot.contextId && { contextId: slot.contextId }),\n      ...(slot.idempotencyKey && { idempotencyKeyHash: fingerprintDiagnosticValue(slot.idempotencyKey) }),\n      method,\n      url,\n      requestHeaders,\n      ...(requestBody && {\n        requestBody: requestBody.body,\n        requestBodyTruncated: requestBody.truncated,\n      }),\n      startedAt,\n    };\n\n    emitTransportActivity(slot.onTransportActivity, {\n      type: 'request_started',\n      ...baseEvent,\n      timestamp: startedAt,\n    });\n\n    try {\n      const response = await upstream(input, init);\n      const durationMs = Date.now() - startedAtMs;\n      const responseHeaders = sanitizeResponseHeaders(response.headers);\n      const responseBody = await responseBodySnippet(response);\n      emitTransportActivity(slot.onTransportActivity, {\n        type: 'response_received',\n        ...baseEvent,\n        timestamp: new Date().toISOString(),\n        durationMs,\n        httpStatus: response.status,\n        statusText: response.statusText,\n        responseHeaders,\n        ...(responseBody && {\n          responseBody: responseBody.body,\n          responseBodyTruncated: responseBody.truncated,\n        }),\n      });\n      return response;\n    } catch (error) {\n      emitTransportActivity(slot.onTransportActivity, {\n        type: 'request_failed',\n        ...baseEvent,\n        timestamp: new Date().toISOString(),\n        durationMs: Date.now() - startedAtMs,\n        errorName: error instanceof Error ? error.name : typeof error,\n        errorMessage: sanitizeDiagnosticText(error instanceof Error ? error.message : String(error)),\n      });\n      throw error;\n    }\n  };\n  return wrapped;\n}\n\nfunction emitTransportActivity(handler: TransportActivityHandler, event: TransportActivity): void {\n  try {\n    const slot = transportDiagnosticsStorage.getStore();\n    const frozen = Object.freeze(structuredClone(event));\n    const pending = Promise.resolve()\n      .then(() => handler(frozen))\n      .then(\n        () => {},\n        () => {}\n      );\n    slot?.pending.push(pending);\n  } catch {\n    // Observability hooks must not change protocol behavior.\n  }\n}\n\nfunction getUrl(input: RequestInfo | URL): string {\n  return typeof input === 'string' ? input : input instanceof URL ? input.toString() : input.url;\n}\n\nfunction getMethod(input: RequestInfo | URL, init?: RequestInit): string {\n  return (init?.method ?? (input instanceof Request ? input.method : 'GET')).toUpperCase();\n}\n\nfunction mergeRequestHeaders(input: RequestInfo | URL, init?: RequestInit): Headers {\n  const headers = new Headers(input instanceof Request ? input.headers : undefined);\n  if (init?.headers) {\n    for (const [key, value] of headerEntries(init.headers)) {\n      headers.set(key, value);\n    }\n  }\n  return headers;\n}\n\nfunction sanitizeResponseHeaders(headers: Headers): Record<string, string> {\n  return sanitizeTransportHeaders(headers);\n}\n\nfunction headerEntries(headers: HeadersInit | undefined): Array<[string, string]> {\n  if (!headers) return [];\n  if (headers instanceof Headers) {\n    const entries: Array<[string, string]> = [];\n    headers.forEach((value, key) => entries.push([key, value]));\n    return entries;\n  }\n  if (Array.isArray(headers)) return headers.map(([key, value]) => [key, value]);\n  return Object.entries(headers).map(([key, value]) => [key, String(value)]);\n}\n\nfunction isSafeCorrelationHeader(lower: string): boolean {\n  if (!lower.startsWith('x-')) return false;\n  return (\n    lower.includes('correlation') || lower.includes('debug') || lower.includes('request-id') || lower.includes('trace')\n  );\n}\n\nfunction bodySnippet(body: BodyInit | null | undefined): { body: string; truncated: boolean } | undefined {\n  if (body == null) return undefined;\n  if (typeof body === 'string') return sanitizeBodyText(body, BODY_SNIPPET_LIMIT);\n  if (body instanceof URLSearchParams) return sanitizeBodyText(body.toString(), BODY_SNIPPET_LIMIT);\n  if (body instanceof Blob) return { body: `[blob ${body.size} bytes]`, truncated: false };\n  if (body instanceof ArrayBuffer) {\n    return sanitizeBodyText(Buffer.from(body).toString('utf8'), BODY_SNIPPET_LIMIT);\n  }\n  if (ArrayBuffer.isView(body)) {\n    return sanitizeBodyText(\n      Buffer.from(body.buffer, body.byteOffset, body.byteLength).toString('utf8'),\n      BODY_SNIPPET_LIMIT\n    );\n  }\n  return undefined;\n}\n\nasync function responseBodySnippet(response: Response): Promise<{ body: string; truncated: boolean } | undefined> {\n  const contentType = response.headers.get('content-type') ?? '';\n  if (!isDiagnosticTextContentType(contentType)) return undefined;\n  try {\n    const { text, truncated } = await readResponseTextBounded(response.clone(), BODY_SNIPPET_LIMIT);\n    return { body: redactSensitiveJsonOrText(text), truncated };\n  } catch {\n    return undefined;\n  }\n}\n\nfunction sanitizeBodyText(text: string, limit: number): { body: string; truncated: boolean } {\n  const truncated = text.length > limit;\n  const bounded = truncated ? text.slice(0, limit) : text;\n  return { body: redactSensitiveJsonOrText(bounded), truncated };\n}\n\nfunction redactSensitiveJsonOrText(text: string): string {\n  try {\n    return JSON.stringify(redactSensitiveValue(JSON.parse(text)));\n  } catch {\n    return sanitizeDiagnosticText(text);\n  }\n}\n\nfunction redactSensitiveValue(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(redactSensitiveValue);\n  if (typeof value === 'string') return sanitizeStringValue(value);\n  if (!value || typeof value !== 'object') return value;\n  const out: Record<string, unknown> = {};\n  for (const [key, child] of Object.entries(value)) {\n    out[key] = isSensitiveKey(key) ? REDACTED : redactSensitiveValue(child);\n  }\n  return out;\n}\n\nfunction sanitizeDiagnosticText(text: string): string {\n  return text\n    .replace(URL_LIKE_RE, value => sanitizeTransportUrl(value))\n    .replace(/Bearer\\s+[A-Za-z0-9._~+/=-]+/gi, 'Bearer [redacted]')\n    .replace(/Basic\\s+[A-Za-z0-9+/=-]+/gi, 'Basic [redacted]')\n    .replace(SENSITIVE_TEXT_FIELD_RE, (_match, prefix) => `${prefix}${REDACTED}`);\n}\n\nfunction sanitizeStringValue(value: string): string {\n  return sanitizeDiagnosticText(value);\n}\n\nfunction normalizedKey(key: string): string {\n  return key.replace(/([a-z0-9])([A-Z])/g, '$1_$2').toLowerCase();\n}\n\nfunction isSensitiveKey(key: string): boolean {\n  return SENSITIVE_KEY_RE.test(normalizedKey(key));\n}\n\nfunction isDiagnosticTextContentType(contentType: string): boolean {\n  const lower = contentType.toLowerCase();\n  if (!lower) return true;\n  if (lower.includes('text/event-stream')) return false;\n  return (\n    lower.startsWith('text/') ||\n    lower.includes('json') ||\n    lower.includes('xml') ||\n    lower.includes('javascript') ||\n    lower.includes('x-www-form-urlencoded')\n  );\n}\n\nasync function readResponseTextBounded(\n  response: Response,\n  limit: number\n): Promise<{ text: string; truncated: boolean }> {\n  if (!response.body) {\n    const text = await response.text();\n    return { text: text.slice(0, limit), truncated: text.length > limit };\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder();\n  let text = '';\n  let truncated = false;\n\n  try {\n    while (text.length <= limit) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      text += decoder.decode(value, { stream: true });\n      if (text.length > limit) {\n        truncated = true;\n        text = text.slice(0, limit);\n        await reader.cancel();\n        break;\n      }\n    }\n    if (!truncated) text += decoder.decode();\n  } finally {\n    reader.releaseLock();\n  }\n\n  return { text, truncated };\n}\n\nfunction fingerprintDiagnosticValue(value: string): string {\n  return createHmac('sha256', 'adcp-transport-diagnostics').update(value).digest('hex').slice(0, 16);\n}\n"],"mappings":"AAAA,SAAS,iBAAiB,2BAA2B;AACrD,SAAS,WAAW,qBAAqB;AACzC,SAAS,iBAAiB,2BAA2B;AACrD,MAAM,YAAY,cAAc,oBAAoB,YAAY,GAAG,CAAC;AACpE,MAAMA,WAAU,oBAAoB,YAAY,GAAG;AACnD,SAAS,+BAA+B;AACxC,SAAS,kBAAkB;AAiD3B,MAAM,qBAAqB,KAAK;AAChC,MAAM,WAAW;AAEjB,MAAM,oBAAoB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,yBAAyB,oBAAI,IAAI;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,mBACJ;AACF,MAAM,0BACJ;AACF,MAAM,cAAc;AAEb,MAAM,8BAA8B,wBAAkD,sBAAsB;AAE5G,SAAS,yBACd,SACA,IACY;AACZ,MAAI,CAAC,QAAQ,oBAAqB,QAAO,GAAG;AAC5C,QAAM,OAAiC,EAAE,GAAG,SAAS,SAAS,CAAC,EAAE;AACjE,SAAO,4BAA4B,IAAI,MAAM,YAAY;AACvD,QAAI;AACF,aAAO,MAAM,GAAG;AAAA,IAClB,UAAE;AACA,YAAM,QAAQ,WAAW,KAAK,OAAO;AAAA,IACvC;AAAA,EACF,CAAC;AACH;AAEO,SAAS,qBAAqB,OAAuB;AAC1D,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,QAAI,WAAW;AACf,QAAI,WAAW;AACf,QAAI,SAAS;AACb,QAAI,OAAO;AACX,WAAO,IAAI,SAAS;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,yBAAyB,SAA0D;AACjG,QAAM,MAA8B,CAAC;AACrC,aAAW,CAAC,KAAK,KAAK,KAAK,cAAc,OAAO,GAAG;AACjD,UAAM,QAAQ,IAAI,YAAY;AAC9B,QAAI,uBAAuB,IAAI,KAAK,KAAK,iBAAiB,KAAK,KAAK,GAAG;AACrE,UAAI,KAAK,IAAI;AAAA,IACf,WAAW,kBAAkB,IAAI,KAAK,KAAK,wBAAwB,KAAK,GAAG;AACzE,UAAI,KAAK,IAAI;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,kCAAkC,UAAsC;AACtF,QAAM,UAAwB,OAAO,OAAO,SAAS;AACnD,UAAM,OAAO,4BAA4B,SAAS;AAClD,QAAI,CAAC,MAAM,oBAAqB,QAAO,SAAS,OAAO,IAAI;AAE3D,UAAM,cAAc,KAAK,IAAI;AAC7B,UAAM,YAAY,IAAI,KAAK,WAAW,EAAE,YAAY;AACpD,UAAM,SAAS,UAAU,OAAO,IAAI;AACpC,UAAM,MAAM,qBAAqB,OAAO,KAAK,CAAC;AAC9C,UAAM,iBAAiB,yBAAyB,oBAAoB,OAAO,IAAI,CAAC;AAChF,UAAM,cAAc,YAAY,MAAM,IAAI;AAC1C,UAAM,YAAY;AAAA,MAChB,SAAS,KAAK;AAAA,MACd,UAAU,KAAK;AAAA,MACf,GAAI,KAAK,QAAQ,EAAE,MAAM,KAAK,MAAM,UAAU,KAAK,YAAY,KAAK,KAAK;AAAA,MACzE,GAAI,KAAK,eAAe,EAAE,aAAa,KAAK,YAAY;AAAA,MACxD,GAAI,KAAK,UAAU,EAAE,QAAQ,KAAK,OAAO;AAAA,MACzC,GAAI,KAAK,aAAa,EAAE,WAAW,KAAK,UAAU;AAAA,MAClD,GAAI,KAAK,kBAAkB,EAAE,oBAAoB,2BAA2B,KAAK,cAAc,EAAE;AAAA,MACjG;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,eAAe;AAAA,QACjB,aAAa,YAAY;AAAA,QACzB,sBAAsB,YAAY;AAAA,MACpC;AAAA,MACA;AAAA,IACF;AAEA,0BAAsB,KAAK,qBAAqB;AAAA,MAC9C,MAAM;AAAA,MACN,GAAG;AAAA,MACH,WAAW;AAAA,IACb,CAAC;AAED,QAAI;AACF,YAAM,WAAW,MAAM,SAAS,OAAO,IAAI;AAC3C,YAAM,aAAa,KAAK,IAAI,IAAI;AAChC,YAAM,kBAAkB,wBAAwB,SAAS,OAAO;AAChE,YAAM,eAAe,MAAM,oBAAoB,QAAQ;AACvD,4BAAsB,KAAK,qBAAqB;AAAA,QAC9C,MAAM;AAAA,QACN,GAAG;AAAA,QACH,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,YAAY,SAAS;AAAA,QACrB;AAAA,QACA,GAAI,gBAAgB;AAAA,UAClB,cAAc,aAAa;AAAA,UAC3B,uBAAuB,aAAa;AAAA,QACtC;AAAA,MACF,CAAC;AACD,aAAO;AAAA,IACT,SAAS,OAAO;AACd,4BAAsB,KAAK,qBAAqB;AAAA,QAC9C,MAAM;AAAA,QACN,GAAG;AAAA,QACH,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,WAAW,iBAAiB,QAAQ,MAAM,OAAO,OAAO;AAAA,QACxD,cAAc,uBAAuB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC7F,CAAC;AACD,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,SAAmC,OAAgC;AAChG,MAAI;AACF,UAAM,OAAO,4BAA4B,SAAS;AAClD,UAAM,SAAS,OAAO,OAAO,gBAAgB,KAAK,CAAC;AACnD,UAAM,UAAU,QAAQ,QAAQ,EAC7B,KAAK,MAAM,QAAQ,MAAM,CAAC,EAC1B;AAAA,MACC,MAAM;AAAA,MAAC;AAAA,MACP,MAAM;AAAA,MAAC;AAAA,IACT;AACF,UAAM,QAAQ,KAAK,OAAO;AAAA,EAC5B,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,OAAO,OAAkC;AAChD,SAAO,OAAO,UAAU,WAAW,QAAQ,iBAAiB,MAAM,MAAM,SAAS,IAAI,MAAM;AAC7F;AAEA,SAAS,UAAU,OAA0B,MAA4B;AACvE,UAAQ,MAAM,WAAW,iBAAiB,UAAU,MAAM,SAAS,QAAQ,YAAY;AACzF;AAEA,SAAS,oBAAoB,OAA0B,MAA6B;AAClF,QAAM,UAAU,IAAI,QAAQ,iBAAiB,UAAU,MAAM,UAAU,MAAS;AAChF,MAAI,MAAM,SAAS;AACjB,eAAW,CAAC,KAAK,KAAK,KAAK,cAAc,KAAK,OAAO,GAAG;AACtD,cAAQ,IAAI,KAAK,KAAK;AAAA,IACxB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,SAA0C;AACzE,SAAO,yBAAyB,OAAO;AACzC;AAEA,SAAS,cAAc,SAA2D;AAChF,MAAI,CAAC,QAAS,QAAO,CAAC;AACtB,MAAI,mBAAmB,SAAS;AAC9B,UAAM,UAAmC,CAAC;AAC1C,YAAQ,QAAQ,CAAC,OAAO,QAAQ,QAAQ,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;AAC1D,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,OAAO,EAAG,QAAO,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,KAAK,CAAC;AAC7E,SAAO,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC;AAC3E;AAEA,SAAS,wBAAwB,OAAwB;AACvD,MAAI,CAAC,MAAM,WAAW,IAAI,EAAG,QAAO;AACpC,SACE,MAAM,SAAS,aAAa,KAAK,MAAM,SAAS,OAAO,KAAK,MAAM,SAAS,YAAY,KAAK,MAAM,SAAS,OAAO;AAEtH;AAEA,SAAS,YAAY,MAAqF;AACxG,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI,OAAO,SAAS,SAAU,QAAO,iBAAiB,MAAM,kBAAkB;AAC9E,MAAI,gBAAgB,gBAAiB,QAAO,iBAAiB,KAAK,SAAS,GAAG,kBAAkB;AAChG,MAAI,gBAAgB,KAAM,QAAO,EAAE,MAAM,SAAS,KAAK,IAAI,WAAW,WAAW,MAAM;AACvF,MAAI,gBAAgB,aAAa;AAC/B,WAAO,iBAAiB,OAAO,KAAK,IAAI,EAAE,SAAS,MAAM,GAAG,kBAAkB;AAAA,EAChF;AACA,MAAI,YAAY,OAAO,IAAI,GAAG;AAC5B,WAAO;AAAA,MACL,OAAO,KAAK,KAAK,QAAQ,KAAK,YAAY,KAAK,UAAU,EAAE,SAAS,MAAM;AAAA,MAC1E;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,oBAAoB,UAA+E;AAChH,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK;AAC5D,MAAI,CAAC,4BAA4B,WAAW,EAAG,QAAO;AACtD,MAAI;AACF,UAAM,EAAE,MAAM,UAAU,IAAI,MAAM,wBAAwB,SAAS,MAAM,GAAG,kBAAkB;AAC9F,WAAO,EAAE,MAAM,0BAA0B,IAAI,GAAG,UAAU;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,MAAc,OAAqD;AAC3F,QAAM,YAAY,KAAK,SAAS;AAChC,QAAM,UAAU,YAAY,KAAK,MAAM,GAAG,KAAK,IAAI;AACnD,SAAO,EAAE,MAAM,0BAA0B,OAAO,GAAG,UAAU;AAC/D;AAEA,SAAS,0BAA0B,MAAsB;AACvD,MAAI;AACF,WAAO,KAAK,UAAU,qBAAqB,KAAK,MAAM,IAAI,CAAC,CAAC;AAAA,EAC9D,QAAQ;AACN,WAAO,uBAAuB,IAAI;AAAA,EACpC;AACF;AAEA,SAAS,qBAAqB,OAAyB;AACrD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,oBAAoB;AAC/D,MAAI,OAAO,UAAU,SAAU,QAAO,oBAAoB,KAAK;AAC/D,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,QAAI,GAAG,IAAI,eAAe,GAAG,IAAI,WAAW,qBAAqB,KAAK;AAAA,EACxE;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,MAAsB;AACpD,SAAO,KACJ,QAAQ,aAAa,WAAS,qBAAqB,KAAK,CAAC,EACzD,QAAQ,kCAAkC,mBAAmB,EAC7D,QAAQ,8BAA8B,kBAAkB,EACxD,QAAQ,yBAAyB,CAAC,QAAQ,WAAW,GAAG,MAAM,GAAG,QAAQ,EAAE;AAChF;AAEA,SAAS,oBAAoB,OAAuB;AAClD,SAAO,uBAAuB,KAAK;AACrC;AAEA,SAAS,cAAc,KAAqB;AAC1C,SAAO,IAAI,QAAQ,sBAAsB,OAAO,EAAE,YAAY;AAChE;AAEA,SAAS,eAAe,KAAsB;AAC5C,SAAO,iBAAiB,KAAK,cAAc,GAAG,CAAC;AACjD;AAEA,SAAS,4BAA4B,aAA8B;AACjE,QAAM,QAAQ,YAAY,YAAY;AACtC,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,MAAM,SAAS,mBAAmB,EAAG,QAAO;AAChD,SACE,MAAM,WAAW,OAAO,KACxB,MAAM,SAAS,MAAM,KACrB,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,YAAY,KAC3B,MAAM,SAAS,uBAAuB;AAE1C;AAEA,eAAe,wBACb,UACA,OAC+C;AAC/C,MAAI,CAAC,SAAS,MAAM;AAClB,UAAMC,QAAO,MAAM,SAAS,KAAK;AACjC,WAAO,EAAE,MAAMA,MAAK,MAAM,GAAG,KAAK,GAAG,WAAWA,MAAK,SAAS,MAAM;AAAA,EACtE;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,OAAO;AACX,MAAI,YAAY;AAEhB,MAAI;AACF,WAAO,KAAK,UAAU,OAAO;AAC3B,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,cAAQ,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAC9C,UAAI,KAAK,SAAS,OAAO;AACvB,oBAAY;AACZ,eAAO,KAAK,MAAM,GAAG,KAAK;AAC1B,cAAM,OAAO,OAAO;AACpB;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,UAAW,SAAQ,QAAQ,OAAO;AAAA,EACzC,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AAEA,SAAO,EAAE,MAAM,UAAU;AAC3B;AAEA,SAAS,2BAA2B,OAAuB;AACzD,SAAO,WAAW,UAAU,4BAA4B,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnG;","names":["require","text"]}

package/dist/lib/schemas-data/3.1/a2ui/bound-value.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/a2ui/bound-value.json",
+  "$id": "/schemas/3.1.5/a2ui/bound-value.json",
   "title": "A2UI Bound Value",
   "description": "A value that can be a literal or bound to a path in the data model",
   "oneOf": [

package/dist/lib/schemas-data/3.1/a2ui/component.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/a2ui/component.json",
+  "$id": "/schemas/3.1.5/a2ui/component.json",
   "title": "A2UI Component",
   "description": "A component in an A2UI surface",
   "type": "object",

package/dist/lib/schemas-data/3.1/a2ui/si-catalog.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/a2ui/si-catalog.json",
+  "$id": "/schemas/3.1.5/a2ui/si-catalog.json",
   "title": "SI Component Catalog",
   "description": "A2UI component catalog for Sponsored Intelligence",
   "definitions": {
@@ -9,7 +9,7 @@
       "description": "Text display component",
       "properties": {
         "text": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Text content to display"
         },
         "variant": {
@@ -32,7 +32,7 @@
       "description": "Interactive button component",
       "properties": {
         "label": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Button label text"
         },
         "action": {
@@ -47,7 +47,7 @@
               "type": "object",
               "description": "Context data to include with action",
               "additionalProperties": {
-                "$ref": "/schemas/3.1.2/a2ui/bound-value.json"
+                "$ref": "/schemas/3.1.5/a2ui/bound-value.json"
               }
             }
           },
@@ -65,7 +65,7 @@
           "default": "primary"
         },
         "disabled": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json"
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json"
         }
       },
       "required": [
@@ -78,11 +78,11 @@
       "description": "Hyperlink component",
       "properties": {
         "label": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Link text"
         },
         "url": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "URL to navigate to"
         },
         "external": {
@@ -101,11 +101,11 @@
       "description": "Image display component",
       "properties": {
         "src": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Image source URL"
         },
         "alt": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Alt text for accessibility"
         },
         "width": {
@@ -127,19 +127,19 @@
       "description": "Card container for grouped content",
       "properties": {
         "title": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Card title"
         },
         "subtitle": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Card subtitle"
         },
         "image": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Card image URL"
         },
         "badge": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Badge text (e.g., 'New', 'Sale')"
         },
         "action": {
@@ -152,7 +152,7 @@
             "context": {
               "type": "object",
               "additionalProperties": {
-                "$ref": "/schemas/3.1.2/a2ui/bound-value.json"
+                "$ref": "/schemas/3.1.5/a2ui/bound-value.json"
               }
             }
           },
@@ -177,27 +177,27 @@
       "description": "Product display card (SI-specific)",
       "properties": {
         "title": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Product name"
         },
         "price": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Price display string"
         },
         "image": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Product image URL"
         },
         "description": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Product description"
         },
         "badge": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Badge text (e.g., 'Best Seller')"
         },
         "ctaLabel": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "CTA button label"
         },
         "action": {
@@ -209,7 +209,7 @@
             "context": {
               "type": "object",
               "additionalProperties": {
-                "$ref": "/schemas/3.1.2/a2ui/bound-value.json"
+                "$ref": "/schemas/3.1.5/a2ui/bound-value.json"
               }
             }
           },
@@ -228,7 +228,7 @@
       "description": "Data-bound list component",
       "properties": {
         "items": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Path to array in data model"
         },
         "template": {
@@ -245,7 +245,7 @@
           ]
         },
         "emptyMessage": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Message to show when list is empty"
         },
         "layout": {
@@ -349,11 +349,11 @@
           "description": "Integration type"
         },
         "label": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Button label"
         },
         "url": {
-          "$ref": "/schemas/3.1.2/a2ui/bound-value.json",
+          "$ref": "/schemas/3.1.5/a2ui/bound-value.json",
           "description": "Integration endpoint URL"
         },
         "highlighted": {

package/dist/lib/schemas-data/3.1/a2ui/surface.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/a2ui/surface.json",
+  "$id": "/schemas/3.1.5/a2ui/surface.json",
   "title": "A2UI Surface",
   "description": "A contiguous UI region containing components",
   "type": "object",
@@ -18,7 +18,7 @@
       "type": "array",
       "description": "Flat list of components (adjacency list structure)",
       "items": {
-        "$ref": "/schemas/3.1.2/a2ui/component.json"
+        "$ref": "/schemas/3.1.5/a2ui/component.json"
       }
     },
     "rootId": {

package/dist/lib/schemas-data/3.1/a2ui/user-action.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/a2ui/user-action.json",
+  "$id": "/schemas/3.1.5/a2ui/user-action.json",
   "title": "A2UI User Action",
   "description": "User interaction event sent from client to agent",
   "type": "object",

package/dist/lib/schemas-data/3.1/aao/agent-publishers.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/aao/agent-publishers.json",
+  "$id": "/schemas/3.1.5/aao/agent-publishers.json",
   "title": "AAO Directory: Agent → Publishers Inverse Lookup Response",
   "description": "Response envelope for `GET /v1/agents/{agent_url}/publishers` against an AAO-compatible directory. Returns the set of publishers whose adagents.json authorizes the given agent_url, with provenance (discovery_method, manager_domain), per-publisher property counts, and lifecycle status. The publisher's own adagents.json remains the trust root; this endpoint is discovery, not authorization. Each `publisher_domain` row tells the operator which publishers to verify directly via the SDK's per-domain primitives.",
   "type": "object",

package/dist/lib/schemas-data/3.1/account/get-account-financials-request.json

@@ -1,28 +1,28 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/account/get-account-financials-request.json",
+  "$id": "/schemas/3.1.5/account/get-account-financials-request.json",
   "title": "Get Account Financials Request",
   "description": "Request financial status for an operator-billed account. Returns spend summary, credit/balance status, and invoice history. Only applicable when the seller declares account_financials capability.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "/schemas/3.1.2/core/version-envelope.json"
+      "$ref": "/schemas/3.1.5/core/version-envelope.json"
     }
   ],
   "properties": {
     "account": {
-      "$ref": "/schemas/3.1.2/core/account-ref.json",
+      "$ref": "/schemas/3.1.5/core/account-ref.json",
       "description": "Account to query financials for. Must be an operator-billed account."
     },
     "period": {
-      "$ref": "/schemas/3.1.2/core/date-range.json",
+      "$ref": "/schemas/3.1.5/core/date-range.json",
       "description": "Date range for the spend summary. Defaults to the current billing cycle if omitted."
     },
     "context": {
-      "$ref": "/schemas/3.1.2/core/context.json"
+      "$ref": "/schemas/3.1.5/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.1.2/core/ext.json"
+      "$ref": "/schemas/3.1.5/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.1/account/get-account-financials-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/account/get-account-financials-response.json",
+  "$id": "/schemas/3.1.5/account/get-account-financials-response.json",
   "title": "Get Account Financials Response",
   "description": "Financial status for an operator-billed account. Returns spend summary, credit/balance status, payment status, and invoice history. The level of detail varies by seller — only account, currency, and period are guaranteed on success.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "/schemas/3.1.2/core/version-envelope.json"
+      "$ref": "/schemas/3.1.5/core/version-envelope.json"
     },
     {
-      "$ref": "/schemas/3.1.2/core/protocol-envelope.json"
+      "$ref": "/schemas/3.1.5/core/protocol-envelope.json"
     }
   ],
   "oneOf": [
@@ -19,7 +19,7 @@
       "type": "object",
       "properties": {
         "account": {
-          "$ref": "/schemas/3.1.2/core/account-ref.json",
+          "$ref": "/schemas/3.1.5/core/account-ref.json",
           "description": "Account reference, echoed from the request"
         },
         "currency": {
@@ -28,7 +28,7 @@
           "description": "ISO 4217 currency code for all monetary amounts in this response"
         },
         "period": {
-          "$ref": "/schemas/3.1.2/core/date-range.json",
+          "$ref": "/schemas/3.1.5/core/date-range.json",
           "description": "The actual period covered by spend data. May differ from the requested period if the seller adjusts to billing cycle boundaries."
         },
         "timezone": {
@@ -123,7 +123,7 @@
           "description": "Overall payment status. current: all obligations met. past_due: one or more invoices overdue. suspended: account suspended due to payment issues."
         },
         "payment_terms": {
-          "$ref": "/schemas/3.1.2/enums/payment-terms.json",
+          "$ref": "/schemas/3.1.5/enums/payment-terms.json",
           "description": "Payment terms in effect for this account"
         },
         "invoices": {
@@ -137,7 +137,7 @@
                 "description": "Seller-assigned invoice identifier"
               },
               "period": {
-                "$ref": "/schemas/3.1.2/core/date-range.json",
+                "$ref": "/schemas/3.1.5/core/date-range.json",
                 "description": "Billing period covered by this invoice"
               },
               "amount": {
@@ -175,10 +175,10 @@
           }
         },
         "context": {
-          "$ref": "/schemas/3.1.2/core/context.json"
+          "$ref": "/schemas/3.1.5/core/context.json"
         },
         "ext": {
-          "$ref": "/schemas/3.1.2/core/ext.json"
+          "$ref": "/schemas/3.1.5/core/ext.json"
         }
       },
       "required": [
@@ -203,15 +203,15 @@
           "type": "array",
           "description": "Operation-level errors",
           "items": {
-            "$ref": "/schemas/3.1.2/core/error.json"
+            "$ref": "/schemas/3.1.5/core/error.json"
           },
           "minItems": 1
         },
         "context": {
-          "$ref": "/schemas/3.1.2/core/context.json"
+          "$ref": "/schemas/3.1.5/core/context.json"
         },
         "ext": {
-          "$ref": "/schemas/3.1.2/core/ext.json"
+          "$ref": "/schemas/3.1.5/core/ext.json"
         }
       },
       "required": [

package/dist/lib/schemas-data/3.1/account/list-accounts-request.json

@@ -1,17 +1,17 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/account/list-accounts-request.json",
+  "$id": "/schemas/3.1.5/account/list-accounts-request.json",
   "title": "List Accounts Request",
   "description": "Request parameters for listing accounts accessible to the authenticated agent. For upstream-managed account namespaces, this is the mandatory discovery surface for seller-assigned account_id values before account-scoped calls when a credential may access more than one account, and the preferred singleton discovery surface when a credential is bound to exactly one account.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "/schemas/3.1.2/core/version-envelope.json"
+      "$ref": "/schemas/3.1.5/core/version-envelope.json"
     }
   ],
   "properties": {
     "account": {
-      "$ref": "/schemas/3.1.2/core/account-ref.json",
+      "$ref": "/schemas/3.1.5/core/account-ref.json",
       "description": "Optional exact account filter. Use `account_id` to retrieve one known account from an account_id namespace, or the natural key (`brand` + `operator`, optionally `sandbox`) for buyer-declared account sellers. When present, the seller returns only matching accounts visible to the authenticated caller."
     },
     "status": {
@@ -27,17 +27,17 @@
       "description": "Filter accounts by status. Omit to return accounts in all statuses."
     },
     "pagination": {
-      "$ref": "/schemas/3.1.2/core/pagination-request.json"
+      "$ref": "/schemas/3.1.5/core/pagination-request.json"
     },
     "sandbox": {
       "type": "boolean",
       "description": "Filter by sandbox status. true returns only sandbox accounts, false returns only production accounts. Omit to return all accounts. Primarily used with account-id namespaces where sandbox accounts are pre-existing test accounts on the platform."
     },
     "context": {
-      "$ref": "/schemas/3.1.2/core/context.json"
+      "$ref": "/schemas/3.1.5/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.1.2/core/ext.json"
+      "$ref": "/schemas/3.1.5/core/ext.json"
     }
   },
   "required": [],

package/dist/lib/schemas-data/3.1/account/list-accounts-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/account/list-accounts-response.json",
+  "$id": "/schemas/3.1.5/account/list-accounts-response.json",
   "title": "List Accounts Response",
   "description": "Response payload for list_accounts task",
   "type": "object",
   "allOf": [
     {
-      "$ref": "/schemas/3.1.2/core/version-envelope.json"
+      "$ref": "/schemas/3.1.5/core/version-envelope.json"
     },
     {
-      "$ref": "/schemas/3.1.2/core/protocol-envelope.json"
+      "$ref": "/schemas/3.1.5/core/protocol-envelope.json"
     }
   ],
   "properties": {
@@ -17,24 +17,24 @@
       "type": "array",
       "description": "Array of accounts accessible to the authenticated agent. Each entry is the full Account object plus an optional `authorization` object describing what the calling agent is permitted to do on that account.",
       "items": {
-        "$ref": "/schemas/3.1.2/core/account-with-authorization.json"
+        "$ref": "/schemas/3.1.5/core/account-with-authorization.json"
       }
     },
     "errors": {
       "type": "array",
       "description": "Task-specific errors and warnings",
       "items": {
-        "$ref": "/schemas/3.1.2/core/error.json"
+        "$ref": "/schemas/3.1.5/core/error.json"
       }
     },
     "pagination": {
-      "$ref": "/schemas/3.1.2/core/pagination-response.json"
+      "$ref": "/schemas/3.1.5/core/pagination-response.json"
     },
     "context": {
-      "$ref": "/schemas/3.1.2/core/context.json"
+      "$ref": "/schemas/3.1.5/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.1.2/core/ext.json"
+      "$ref": "/schemas/3.1.5/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.1/account/report-usage-request.json

@@ -1,12 +1,12 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/account/report-usage-request.json",
+  "$id": "/schemas/3.1.5/account/report-usage-request.json",
   "title": "Report Usage Request",
   "description": "Reports how a vendor's service was consumed after campaign delivery. Used by orchestrators (DSPs, storefronts) to inform vendor agents (signals, governance, creative, or — when the receiving agent is the seller of the media buy itself — a sales agent for buyer-attested or vendor-attested billing reconciliation) what was used so the receiver can track earned revenue and verify billing. Records can span multiple accounts and campaigns in a single request. When the buy's `measurement_terms.billing_measurement.vendor` names a party other than the seller's own ad server, that party (or the buyer on its behalf) pushes final measurements via this task; the seller invoices against those final records. See [Billing authority](/docs/media-buy/advanced-topics/billing-authority) for the end-to-end flow.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "/schemas/3.1.2/core/version-envelope.json"
+      "$ref": "/schemas/3.1.5/core/version-envelope.json"
     }
   ],
   "x-mutates-state": true,
@@ -16,7 +16,7 @@
       "description": "Client-generated unique key for this request. If a request with the same key has already been accepted, the server returns the original response without re-processing. MUST be unique per (seller, request) pair to prevent cross-seller correlation. Use a fresh UUID v4 for each request. Prevents duplicate billing on retries."
     },
     "reporting_period": {
-      "$ref": "/schemas/3.1.2/core/datetime-range.json",
+      "$ref": "/schemas/3.1.5/core/datetime-range.json",
       "description": "The time range covered by this usage report. Applies to all records in the request."
     },
     "usage": {
@@ -27,7 +27,7 @@
         "type": "object",
         "properties": {
           "account": {
-            "$ref": "/schemas/3.1.2/core/account-ref.json",
+            "$ref": "/schemas/3.1.5/core/account-ref.json",
             "description": "Account for this usage record."
           },
           "media_buy_id": {
@@ -122,10 +122,10 @@
       }
     },
     "context": {
-      "$ref": "/schemas/3.1.2/core/context.json"
+      "$ref": "/schemas/3.1.5/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.1.2/core/ext.json"
+      "$ref": "/schemas/3.1.5/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.1/account/report-usage-response.json

@@ -1,15 +1,15 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.1.2/account/report-usage-response.json",
+  "$id": "/schemas/3.1.5/account/report-usage-response.json",
   "title": "Report Usage Response",
   "description": "Response from report_usage. Partial acceptance is valid — records that pass validation are stored even when others fail.",
   "type": "object",
   "allOf": [
     {
-      "$ref": "/schemas/3.1.2/core/version-envelope.json"
+      "$ref": "/schemas/3.1.5/core/version-envelope.json"
     },
     {
-      "$ref": "/schemas/3.1.2/core/protocol-envelope.json"
+      "$ref": "/schemas/3.1.5/core/protocol-envelope.json"
     }
   ],
   "properties": {
@@ -22,7 +22,7 @@
       "type": "array",
       "description": "Validation errors for individual records. The field property identifies which record failed (e.g., 'usage[1].pricing_option_id').",
       "items": {
-        "$ref": "/schemas/3.1.2/core/error.json"
+        "$ref": "/schemas/3.1.5/core/error.json"
       }
     },
     "sandbox": {
@@ -30,10 +30,10 @@
       "description": "When true, the account is a sandbox account and no billing occurred."
     },
     "context": {
-      "$ref": "/schemas/3.1.2/core/context.json"
+      "$ref": "/schemas/3.1.5/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.1.2/core/ext.json"
+      "$ref": "/schemas/3.1.5/core/ext.json"
     }
   },
   "required": [