@adcp/sdk 12.1.1 → 13.0.0-rc.0

package/dist/lib/adapters/index.js

@@ -19,11 +19,11 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var adapters_exports = {};
 __export(adapters_exports, {
   AISISessionManager: () => import_si_session_manager.AISISessionManager,
-  ContentStandardsAdapter: () => import_content_standards_adapter.ContentStandardsAdapter,
-  ContentStandardsErrorCodes: () => import_content_standards_adapter.ContentStandardsErrorCodes,
   GovernanceAdapter: () => import_governance_adapter.GovernanceAdapter,
   GovernanceAdapterErrorCodes: () => import_governance_adapter.GovernanceAdapterErrorCodes,
   InMemoryImplicitAccountStore: () => import_implicit_account_store.InMemoryImplicitAccountStore,
+  LegacyContentStandardsAdapter: () => import_content_standards_adapter.LegacyContentStandardsAdapter,
+  LegacyContentStandardsErrorCodes: () => import_content_standards_adapter.LegacyContentStandardsErrorCodes,
   PropertyListAdapter: () => import_property_list_adapter.PropertyListAdapter,
   PropertyListErrorCodes: () => import_property_list_adapter.PropertyListErrorCodes,
   SIErrorCodes: () => import_si_session_manager.SIErrorCodes,
@@ -31,14 +31,14 @@ __export(adapters_exports, {
   createDerivedAccountStore: () => import_derived_account_store.createDerivedAccountStore,
   createOAuthPassthroughResolver: () => import_oauth_passthrough_resolver.createOAuthPassthroughResolver,
   createRosterAccountStore: () => import_roster_account_store.createRosterAccountStore,
-  defaultContentStandardsAdapter: () => import_content_standards_adapter.defaultContentStandardsAdapter,
   defaultGovernanceAdapter: () => import_governance_adapter.defaultGovernanceAdapter,
   defaultImplicitKeyFn: () => import_implicit_account_store.defaultImplicitKeyFn,
   defaultPropertyListAdapter: () => import_property_list_adapter.defaultPropertyListAdapter,
   defaultSISessionManager: () => import_si_session_manager.defaultSISessionManager,
-  isContentStandardsError: () => import_content_standards_adapter.isContentStandardsError,
   isGovernanceAdapterError: () => import_governance_adapter.isGovernanceAdapterError,
-  isPropertyListError: () => import_property_list_adapter.isPropertyListError
+  isLegacyContentStandardsError: () => import_content_standards_adapter.isLegacyContentStandardsError,
+  isPropertyListError: () => import_property_list_adapter.isPropertyListError,
+  legacyDefaultContentStandardsAdapter: () => import_content_standards_adapter.legacyDefaultContentStandardsAdapter
 });
 module.exports = __toCommonJS(adapters_exports);
 var import_content_standards_adapter = require('./content-standards-adapter.js');
@@ -52,11 +52,11 @@ var import_derived_account_store = require('./derived-account-store.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AISISessionManager,
-  ContentStandardsAdapter,
-  ContentStandardsErrorCodes,
   GovernanceAdapter,
   GovernanceAdapterErrorCodes,
   InMemoryImplicitAccountStore,
+  LegacyContentStandardsAdapter,
+  LegacyContentStandardsErrorCodes,
   PropertyListAdapter,
   PropertyListErrorCodes,
   SIErrorCodes,
@@ -64,13 +64,13 @@ var import_derived_account_store = require('./derived-account-store.js');
   createDerivedAccountStore,
   createOAuthPassthroughResolver,
   createRosterAccountStore,
-  defaultContentStandardsAdapter,
   defaultGovernanceAdapter,
   defaultImplicitKeyFn,
   defaultPropertyListAdapter,
   defaultSISessionManager,
-  isContentStandardsError,
   isGovernanceAdapterError,
-  isPropertyListError
+  isLegacyContentStandardsError,
+  isPropertyListError,
+  legacyDefaultContentStandardsAdapter
 });
 //# sourceMappingURL=index.js.map

package/dist/lib/adapters/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/adapters/index.ts"],"sourcesContent":["/**\n * Server-Side Adapters\n *\n * These adapters allow publishers/brands to plug in their business logic\n * when implementing AdCP servers. Each adapter provides a stub implementation\n * that can be extended or replaced.\n *\n * Usage:\n * - ContentStandardsAdapter: Implement brand safety/suitability evaluation\n * - PropertyListAdapter: Manage buyer-defined property lists\n * - SISessionManager: Handle Sponsored Intelligence conversational sessions\n * - InMemoryImplicitAccountStore: AccountStore for resolution: 'implicit' platforms\n */\n\n// Content Standards\nexport {\n  ContentStandardsAdapter,\n  type IContentStandardsAdapter,\n  type ContentEvaluationResult,\n  ContentStandardsErrorCodes,\n  isContentStandardsError,\n  defaultContentStandardsAdapter,\n} from './content-standards-adapter';\n\n// Property Lists\nexport {\n  PropertyListAdapter,\n  type IPropertyListAdapter,\n  type ResolvedProperty,\n  PropertyListErrorCodes,\n  isPropertyListError,\n  defaultPropertyListAdapter,\n} from './property-list-adapter';\n\n// Governance (seller-side committed checks)\nexport {\n  GovernanceAdapter,\n  defaultGovernanceAdapter,\n  type IGovernanceAdapter,\n  type GovernanceAdapterConfig,\n  type GovernanceAdapterErrorCode,\n  type CommittedCheckRequest,\n  GovernanceAdapterErrorCodes,\n  isGovernanceAdapterError,\n} from './governance-adapter';\n\n// Sponsored Intelligence Sessions\nexport {\n  SISessionManager,\n  AISISessionManager,\n  type ISISessionManager,\n  type SISession,\n  SIErrorCodes,\n  defaultSISessionManager,\n} from './si-session-manager';\n\n// Implicit Account Store (resolution: 'implicit') — Shape A reference adapter.\nexport {\n  InMemoryImplicitAccountStore,\n  defaultImplicitKeyFn,\n  type ImplicitAccountStoreOptions,\n} from './implicit-account-store';\n\n// OAuth pass-through resolver — closes adcp-client#1363. Shape B factory\n// for adapters wrapping a vendor OAuth + ad-account API; replaces the ~30\n// LOC of bearer-extract + listing-fetch + match-by-id boilerplate every\n// such adapter re-derives by hand.\nexport { createOAuthPassthroughResolver, type OAuthPassthroughResolverOptions } from './oauth-passthrough-resolver';\n\n// Roster-backed AccountStore — Shape C factory for `resolution: 'explicit'`\n// publisher-curated platforms. Adopters bring their own roster source (admin-UI\n// managed DB row, in-memory map, file); the helper provides AccountStore\n// plumbing (resolve dispatch, optional list, ctx threading) with no opinion on\n// where the roster lives.\nexport { createRosterAccountStore, type RosterAccountStoreOptions } from './roster-account-store';\n\n// Derived AccountStore — Shape D factory for `resolution: 'derived'` single-\n// tenant agents (no account_id on the wire; auth principal alone identifies\n// the tenant). Closes adcp-client#1462. Replaces ~25–30 LOC of bearer-extract +\n// throw-AUTH_REQUIRED + return-singleton boilerplate Shape D adopters write today.\nexport { createDerivedAccountStore, type DerivedAccountStoreOptions } from './derived-account-store';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAeA,uCAOO;AAGP,mCAOO;AAGP,gCASO;AAGP,gCAOO;AAGP,oCAIO;AAMP,wCAAqF;AAOrF,kCAAyE;AAMzE,mCAA2E;","names":[]}
+{"version":3,"sources":["../../../src/lib/adapters/index.ts"],"sourcesContent":["/**\n * Server-Side Adapters\n *\n * These adapters allow publishers/brands to plug in their business logic\n * when implementing AdCP servers. Each adapter provides a stub implementation\n * that can be extended or replaced.\n *\n * Usage:\n * - LegacyContentStandardsAdapter: Maintain raw content-standard integrations during migration\n * - PropertyListAdapter: Manage buyer-defined property lists\n * - SISessionManager: Handle Sponsored Intelligence conversational sessions\n * - InMemoryImplicitAccountStore: AccountStore for resolution: 'implicit' platforms\n */\n\n// Content Standards\nexport {\n  LegacyContentStandardsAdapter,\n  type LegacyIContentStandardsAdapter,\n  type LegacyContentEvaluationResult,\n  LegacyContentStandardsErrorCodes,\n  isLegacyContentStandardsError,\n  legacyDefaultContentStandardsAdapter,\n} from './content-standards-adapter';\n\n// Property Lists\nexport {\n  PropertyListAdapter,\n  type IPropertyListAdapter,\n  type ResolvedProperty,\n  PropertyListErrorCodes,\n  isPropertyListError,\n  defaultPropertyListAdapter,\n} from './property-list-adapter';\n\n// Governance (seller-side committed checks)\nexport {\n  GovernanceAdapter,\n  defaultGovernanceAdapter,\n  type IGovernanceAdapter,\n  type GovernanceAdapterConfig,\n  type GovernanceAdapterErrorCode,\n  type CommittedCheckRequest,\n  GovernanceAdapterErrorCodes,\n  isGovernanceAdapterError,\n} from './governance-adapter';\n\n// Sponsored Intelligence Sessions\nexport {\n  SISessionManager,\n  AISISessionManager,\n  type ISISessionManager,\n  type SISession,\n  SIErrorCodes,\n  defaultSISessionManager,\n} from './si-session-manager';\n\n// Implicit Account Store (resolution: 'implicit') — Shape A reference adapter.\nexport {\n  InMemoryImplicitAccountStore,\n  defaultImplicitKeyFn,\n  type ImplicitAccountStoreOptions,\n} from './implicit-account-store';\n\n// OAuth pass-through resolver — closes adcp-client#1363. Shape B factory\n// for adapters wrapping a vendor OAuth + ad-account API; replaces the ~30\n// LOC of bearer-extract + listing-fetch + match-by-id boilerplate every\n// such adapter re-derives by hand.\nexport { createOAuthPassthroughResolver, type OAuthPassthroughResolverOptions } from './oauth-passthrough-resolver';\n\n// Roster-backed AccountStore — Shape C factory for `resolution: 'explicit'`\n// publisher-curated platforms. Adopters bring their own roster source (admin-UI\n// managed DB row, in-memory map, file); the helper provides AccountStore\n// plumbing (resolve dispatch, optional list, ctx threading) with no opinion on\n// where the roster lives.\nexport { createRosterAccountStore, type RosterAccountStoreOptions } from './roster-account-store';\n\n// Derived AccountStore — Shape D factory for `resolution: 'derived'` single-\n// tenant agents (no account_id on the wire; auth principal alone identifies\n// the tenant). Closes adcp-client#1462. Replaces ~25–30 LOC of bearer-extract +\n// throw-AUTH_REQUIRED + return-singleton boilerplate Shape D adopters write today.\nexport { createDerivedAccountStore, type DerivedAccountStoreOptions } from './derived-account-store';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAeA,uCAOO;AAGP,mCAOO;AAGP,gCASO;AAGP,gCAOO;AAGP,oCAIO;AAMP,wCAAqF;AAOrF,kCAAyE;AAMzE,mCAA2E;","names":[]}

package/dist/lib/adapters/index.mjs

@@ -1,8 +1,8 @@
 import {
-  ContentStandardsAdapter,
-  ContentStandardsErrorCodes,
-  isContentStandardsError,
-  defaultContentStandardsAdapter
+  LegacyContentStandardsAdapter,
+  LegacyContentStandardsErrorCodes,
+  isLegacyContentStandardsError,
+  legacyDefaultContentStandardsAdapter
 } from "./content-standards-adapter.mjs";
 import {
   PropertyListAdapter,
@@ -31,11 +31,11 @@ import { createRosterAccountStore } from "./roster-account-store.mjs";
 import { createDerivedAccountStore } from "./derived-account-store.mjs";
 export {
   AISISessionManager,
-  ContentStandardsAdapter,
-  ContentStandardsErrorCodes,
   GovernanceAdapter,
   GovernanceAdapterErrorCodes,
   InMemoryImplicitAccountStore,
+  LegacyContentStandardsAdapter,
+  LegacyContentStandardsErrorCodes,
   PropertyListAdapter,
   PropertyListErrorCodes,
   SIErrorCodes,
@@ -43,13 +43,13 @@ export {
   createDerivedAccountStore,
   createOAuthPassthroughResolver,
   createRosterAccountStore,
-  defaultContentStandardsAdapter,
   defaultGovernanceAdapter,
   defaultImplicitKeyFn,
   defaultPropertyListAdapter,
   defaultSISessionManager,
-  isContentStandardsError,
   isGovernanceAdapterError,
-  isPropertyListError
+  isLegacyContentStandardsError,
+  isPropertyListError,
+  legacyDefaultContentStandardsAdapter
 };
 //# sourceMappingURL=index.mjs.map

package/dist/lib/adapters/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/adapters/index.ts"],"sourcesContent":["/**\n * Server-Side Adapters\n *\n * These adapters allow publishers/brands to plug in their business logic\n * when implementing AdCP servers. Each adapter provides a stub implementation\n * that can be extended or replaced.\n *\n * Usage:\n * - ContentStandardsAdapter: Implement brand safety/suitability evaluation\n * - PropertyListAdapter: Manage buyer-defined property lists\n * - SISessionManager: Handle Sponsored Intelligence conversational sessions\n * - InMemoryImplicitAccountStore: AccountStore for resolution: 'implicit' platforms\n */\n\n// Content Standards\nexport {\n  ContentStandardsAdapter,\n  type IContentStandardsAdapter,\n  type ContentEvaluationResult,\n  ContentStandardsErrorCodes,\n  isContentStandardsError,\n  defaultContentStandardsAdapter,\n} from './content-standards-adapter';\n\n// Property Lists\nexport {\n  PropertyListAdapter,\n  type IPropertyListAdapter,\n  type ResolvedProperty,\n  PropertyListErrorCodes,\n  isPropertyListError,\n  defaultPropertyListAdapter,\n} from './property-list-adapter';\n\n// Governance (seller-side committed checks)\nexport {\n  GovernanceAdapter,\n  defaultGovernanceAdapter,\n  type IGovernanceAdapter,\n  type GovernanceAdapterConfig,\n  type GovernanceAdapterErrorCode,\n  type CommittedCheckRequest,\n  GovernanceAdapterErrorCodes,\n  isGovernanceAdapterError,\n} from './governance-adapter';\n\n// Sponsored Intelligence Sessions\nexport {\n  SISessionManager,\n  AISISessionManager,\n  type ISISessionManager,\n  type SISession,\n  SIErrorCodes,\n  defaultSISessionManager,\n} from './si-session-manager';\n\n// Implicit Account Store (resolution: 'implicit') — Shape A reference adapter.\nexport {\n  InMemoryImplicitAccountStore,\n  defaultImplicitKeyFn,\n  type ImplicitAccountStoreOptions,\n} from './implicit-account-store';\n\n// OAuth pass-through resolver — closes adcp-client#1363. Shape B factory\n// for adapters wrapping a vendor OAuth + ad-account API; replaces the ~30\n// LOC of bearer-extract + listing-fetch + match-by-id boilerplate every\n// such adapter re-derives by hand.\nexport { createOAuthPassthroughResolver, type OAuthPassthroughResolverOptions } from './oauth-passthrough-resolver';\n\n// Roster-backed AccountStore — Shape C factory for `resolution: 'explicit'`\n// publisher-curated platforms. Adopters bring their own roster source (admin-UI\n// managed DB row, in-memory map, file); the helper provides AccountStore\n// plumbing (resolve dispatch, optional list, ctx threading) with no opinion on\n// where the roster lives.\nexport { createRosterAccountStore, type RosterAccountStoreOptions } from './roster-account-store';\n\n// Derived AccountStore — Shape D factory for `resolution: 'derived'` single-\n// tenant agents (no account_id on the wire; auth principal alone identifies\n// the tenant). Closes adcp-client#1462. Replaces ~25–30 LOC of bearer-extract +\n// throw-AUTH_REQUIRED + return-singleton boilerplate Shape D adopters write today.\nexport { createDerivedAccountStore, type DerivedAccountStoreOptions } from './derived-account-store';\n"],"mappings":"AAeA;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EAKA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAMP,SAAS,sCAA4E;AAOrF,SAAS,gCAAgE;AAMzE,SAAS,iCAAkE;","names":[]}
+{"version":3,"sources":["../../../src/lib/adapters/index.ts"],"sourcesContent":["/**\n * Server-Side Adapters\n *\n * These adapters allow publishers/brands to plug in their business logic\n * when implementing AdCP servers. Each adapter provides a stub implementation\n * that can be extended or replaced.\n *\n * Usage:\n * - LegacyContentStandardsAdapter: Maintain raw content-standard integrations during migration\n * - PropertyListAdapter: Manage buyer-defined property lists\n * - SISessionManager: Handle Sponsored Intelligence conversational sessions\n * - InMemoryImplicitAccountStore: AccountStore for resolution: 'implicit' platforms\n */\n\n// Content Standards\nexport {\n  LegacyContentStandardsAdapter,\n  type LegacyIContentStandardsAdapter,\n  type LegacyContentEvaluationResult,\n  LegacyContentStandardsErrorCodes,\n  isLegacyContentStandardsError,\n  legacyDefaultContentStandardsAdapter,\n} from './content-standards-adapter';\n\n// Property Lists\nexport {\n  PropertyListAdapter,\n  type IPropertyListAdapter,\n  type ResolvedProperty,\n  PropertyListErrorCodes,\n  isPropertyListError,\n  defaultPropertyListAdapter,\n} from './property-list-adapter';\n\n// Governance (seller-side committed checks)\nexport {\n  GovernanceAdapter,\n  defaultGovernanceAdapter,\n  type IGovernanceAdapter,\n  type GovernanceAdapterConfig,\n  type GovernanceAdapterErrorCode,\n  type CommittedCheckRequest,\n  GovernanceAdapterErrorCodes,\n  isGovernanceAdapterError,\n} from './governance-adapter';\n\n// Sponsored Intelligence Sessions\nexport {\n  SISessionManager,\n  AISISessionManager,\n  type ISISessionManager,\n  type SISession,\n  SIErrorCodes,\n  defaultSISessionManager,\n} from './si-session-manager';\n\n// Implicit Account Store (resolution: 'implicit') — Shape A reference adapter.\nexport {\n  InMemoryImplicitAccountStore,\n  defaultImplicitKeyFn,\n  type ImplicitAccountStoreOptions,\n} from './implicit-account-store';\n\n// OAuth pass-through resolver — closes adcp-client#1363. Shape B factory\n// for adapters wrapping a vendor OAuth + ad-account API; replaces the ~30\n// LOC of bearer-extract + listing-fetch + match-by-id boilerplate every\n// such adapter re-derives by hand.\nexport { createOAuthPassthroughResolver, type OAuthPassthroughResolverOptions } from './oauth-passthrough-resolver';\n\n// Roster-backed AccountStore — Shape C factory for `resolution: 'explicit'`\n// publisher-curated platforms. Adopters bring their own roster source (admin-UI\n// managed DB row, in-memory map, file); the helper provides AccountStore\n// plumbing (resolve dispatch, optional list, ctx threading) with no opinion on\n// where the roster lives.\nexport { createRosterAccountStore, type RosterAccountStoreOptions } from './roster-account-store';\n\n// Derived AccountStore — Shape D factory for `resolution: 'derived'` single-\n// tenant agents (no account_id on the wire; auth principal alone identifies\n// the tenant). Closes adcp-client#1462. Replaces ~25–30 LOC of bearer-extract +\n// throw-AUTH_REQUIRED + return-singleton boilerplate Shape D adopters write today.\nexport { createDerivedAccountStore, type DerivedAccountStoreOptions } from './derived-account-store';\n"],"mappings":"AAeA;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EAKA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAMP,SAAS,sCAA4E;AAOrF,SAAS,gCAAgE;AAMzE,SAAS,iCAAkE;","names":[]}

package/dist/lib/auth/oauth/provider-cache.d.mts

@@ -0,0 +1,7 @@
+import { createNonInteractiveOAuthProvider } from './index.mjs';
+import type { MCPOAuthProvider } from './MCPOAuthProvider.mjs';
+import type { AgentConfig } from './types.mjs';
+/** Reuse one refresh-capable provider for repeated calls in the same agent authorization context. */
+export declare function getNonInteractiveOAuthProvider(agent: AgentConfig, options?: Parameters<typeof createNonInteractiveOAuthProvider>[1]): MCPOAuthProvider;
+/** Preserve provider identity when endpoint discovery creates a derived AgentConfig object. */
+export declare function shareNonInteractiveOAuthProvider(source: AgentConfig, target: AgentConfig): void;

package/dist/lib/auth/oauth/provider-cache.d.ts

@@ -0,0 +1,8 @@
+import { createNonInteractiveOAuthProvider } from './index';
+import type { MCPOAuthProvider } from './MCPOAuthProvider';
+import type { AgentConfig } from './types';
+/** Reuse one refresh-capable provider for repeated calls in the same agent authorization context. */
+export declare function getNonInteractiveOAuthProvider(agent: AgentConfig, options?: Parameters<typeof createNonInteractiveOAuthProvider>[1]): MCPOAuthProvider;
+/** Preserve provider identity when endpoint discovery creates a derived AgentConfig object. */
+export declare function shareNonInteractiveOAuthProvider(source: AgentConfig, target: AgentConfig): void;
+//# sourceMappingURL=provider-cache.d.ts.map

package/dist/lib/auth/oauth/provider-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-cache.d.ts","sourceRoot":"","sources":["../../../../src/lib/auth/oauth/provider-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAI3C,qGAAqG;AACrG,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,iCAAiC,CAAC,CAAC,CAAC,CAAC,GAChE,gBAAgB,CAOlB;AAED,+FAA+F;AAC/F,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI,CAG/F"}

package/dist/lib/auth/oauth/provider-cache.js

@@ -0,0 +1,44 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var provider_cache_exports = {};
+__export(provider_cache_exports, {
+  getNonInteractiveOAuthProvider: () => getNonInteractiveOAuthProvider,
+  shareNonInteractiveOAuthProvider: () => shareNonInteractiveOAuthProvider
+});
+module.exports = __toCommonJS(provider_cache_exports);
+var import_index = require('./index.js');
+const nonInteractiveOAuthProviderCache = /* @__PURE__ */ new WeakMap();
+function getNonInteractiveOAuthProvider(agent, options) {
+  let provider = nonInteractiveOAuthProviderCache.get(agent);
+  if (!provider) {
+    provider = (0, import_index.createNonInteractiveOAuthProvider)(agent, options);
+    nonInteractiveOAuthProviderCache.set(agent, provider);
+  }
+  return provider;
+}
+function shareNonInteractiveOAuthProvider(source, target) {
+  const provider = nonInteractiveOAuthProviderCache.get(source);
+  if (provider) nonInteractiveOAuthProviderCache.set(target, provider);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  getNonInteractiveOAuthProvider,
+  shareNonInteractiveOAuthProvider
+});
+//# sourceMappingURL=provider-cache.js.map

package/dist/lib/auth/oauth/provider-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/lib/auth/oauth/provider-cache.ts"],"sourcesContent":["import { createNonInteractiveOAuthProvider } from './index';\nimport type { MCPOAuthProvider } from './MCPOAuthProvider';\nimport type { AgentConfig } from './types';\n\nconst nonInteractiveOAuthProviderCache = new WeakMap<AgentConfig, MCPOAuthProvider>();\n\n/** Reuse one refresh-capable provider for repeated calls in the same agent authorization context. */\nexport function getNonInteractiveOAuthProvider(\n  agent: AgentConfig,\n  options?: Parameters<typeof createNonInteractiveOAuthProvider>[1]\n): MCPOAuthProvider {\n  let provider = nonInteractiveOAuthProviderCache.get(agent);\n  if (!provider) {\n    provider = createNonInteractiveOAuthProvider(agent, options);\n    nonInteractiveOAuthProviderCache.set(agent, provider);\n  }\n  return provider;\n}\n\n/** Preserve provider identity when endpoint discovery creates a derived AgentConfig object. */\nexport function shareNonInteractiveOAuthProvider(source: AgentConfig, target: AgentConfig): void {\n  const provider = nonInteractiveOAuthProviderCache.get(source);\n  if (provider) nonInteractiveOAuthProviderCache.set(target, provider);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAkD;AAIlD,MAAM,mCAAmC,oBAAI,QAAuC;AAG7E,SAAS,+BACd,OACA,SACkB;AAClB,MAAI,WAAW,iCAAiC,IAAI,KAAK;AACzD,MAAI,CAAC,UAAU;AACb,mBAAW,gDAAkC,OAAO,OAAO;AAC3D,qCAAiC,IAAI,OAAO,QAAQ;AAAA,EACtD;AACA,SAAO;AACT;AAGO,SAAS,iCAAiC,QAAqB,QAA2B;AAC/F,QAAM,WAAW,iCAAiC,IAAI,MAAM;AAC5D,MAAI,SAAU,kCAAiC,IAAI,QAAQ,QAAQ;AACrE;","names":[]}

package/dist/lib/auth/oauth/provider-cache.mjs

@@ -0,0 +1,19 @@
+import { createNonInteractiveOAuthProvider } from "./index.mjs";
+const nonInteractiveOAuthProviderCache = /* @__PURE__ */ new WeakMap();
+function getNonInteractiveOAuthProvider(agent, options) {
+  let provider = nonInteractiveOAuthProviderCache.get(agent);
+  if (!provider) {
+    provider = createNonInteractiveOAuthProvider(agent, options);
+    nonInteractiveOAuthProviderCache.set(agent, provider);
+  }
+  return provider;
+}
+function shareNonInteractiveOAuthProvider(source, target) {
+  const provider = nonInteractiveOAuthProviderCache.get(source);
+  if (provider) nonInteractiveOAuthProviderCache.set(target, provider);
+}
+export {
+  getNonInteractiveOAuthProvider,
+  shareNonInteractiveOAuthProvider
+};
+//# sourceMappingURL=provider-cache.mjs.map

package/dist/lib/auth/oauth/provider-cache.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/lib/auth/oauth/provider-cache.ts"],"sourcesContent":["import { createNonInteractiveOAuthProvider } from './index';\nimport type { MCPOAuthProvider } from './MCPOAuthProvider';\nimport type { AgentConfig } from './types';\n\nconst nonInteractiveOAuthProviderCache = new WeakMap<AgentConfig, MCPOAuthProvider>();\n\n/** Reuse one refresh-capable provider for repeated calls in the same agent authorization context. */\nexport function getNonInteractiveOAuthProvider(\n  agent: AgentConfig,\n  options?: Parameters<typeof createNonInteractiveOAuthProvider>[1]\n): MCPOAuthProvider {\n  let provider = nonInteractiveOAuthProviderCache.get(agent);\n  if (!provider) {\n    provider = createNonInteractiveOAuthProvider(agent, options);\n    nonInteractiveOAuthProviderCache.set(agent, provider);\n  }\n  return provider;\n}\n\n/** Preserve provider identity when endpoint discovery creates a derived AgentConfig object. */\nexport function shareNonInteractiveOAuthProvider(source: AgentConfig, target: AgentConfig): void {\n  const provider = nonInteractiveOAuthProviderCache.get(source);\n  if (provider) nonInteractiveOAuthProviderCache.set(target, provider);\n}\n"],"mappings":"AAAA,SAAS,yCAAyC;AAIlD,MAAM,mCAAmC,oBAAI,QAAuC;AAG7E,SAAS,+BACd,OACA,SACkB;AAClB,MAAI,WAAW,iCAAiC,IAAI,KAAK;AACzD,MAAI,CAAC,UAAU;AACb,eAAW,kCAAkC,OAAO,OAAO;AAC3D,qCAAiC,IAAI,OAAO,QAAQ;AAAA,EACtD;AACA,SAAO;AACT;AAGO,SAAS,iCAAiC,QAAqB,QAA2B;AAC/F,QAAM,WAAW,iCAAiC,IAAI,MAAM;AAC5D,MAAI,SAAU,kCAAiC,IAAI,QAAQ,QAAQ;AACrE;","names":[]}

package/dist/lib/conformance/invariants/uniformError.js

@@ -120,7 +120,7 @@ async function runUniformErrorInvariant(tool, options) {
 async function capturedProbe(agent, tool, request, options) {
   try {
     const { captures } = await (0, import_rawResponseCapture.withRawResponseCapture)(async () => {
-      await agent.executeTask(tool, request);
+      await agent.executeTaskLegacy(tool, request);
     }, options);
     const toolCallCapture = lastPostCapture(captures);
     if (!toolCallCapture) {

package/dist/lib/conformance/invariants/uniformError.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/conformance/invariants/uniformError.ts"],"sourcesContent":["// Uniform error response invariant (adcp spec § error-handling).\n//\n// The spec MUSTs that a seller returns byte-equivalent responses for\n// \"the id exists but the caller lacks access\" vs \"the id does not\n// exist\" — through every observable channel (error code/message/field/\n// details, HTTP status, A2A task state / MCP isError, response headers,\n// latency distribution). Distinguishing the two leaks cross-tenant\n// existence information.\n//\n// This invariant exercises the MUST with a paired probe: two requests\n// to the same tool, compared byte-for-byte.\n//\n// Pairing modes:\n//   - baseline: two fresh UUIDs, single auth token. Catches id-echo\n//     leaks, header divergence, and grossly different latency. Does\n//     not catch cross-tenant leaks — both ids are impossible, so the\n//     \"inaccessible vs unknown\" branch never fires.\n//   - cross-tenant: one seeded id owned by tenant A plus one fresh\n//     UUID, both probed as tenant B. Catches the full MUST.\n//\n// Tool coverage is keyed by TOOL_ID_CONFIG below. A tool must expose\n// a single scalar \"lookup id\" field and have a matching seeder before\n// it can be probed.\n\nimport { AgentClient } from '../../core/AgentClient';\nimport { randomUUID } from 'node:crypto';\nimport { withRawResponseCapture, type RawHttpCapture } from '../../protocols/rawResponseCapture';\nimport type { ConformanceFixtures, ConformanceToolName } from '../types';\nimport { compareProbes, type ProbeComparisonResult } from './uniformErrorComparator';\n\nexport type UniformErrorVerdict = 'pass' | 'fail' | 'skipped';\n\nexport interface UniformErrorReport {\n  tool: ConformanceToolName;\n  /** Which pairing actually ran. */\n  mode: 'baseline' | 'cross-tenant';\n  verdict: UniformErrorVerdict;\n  /** Populated on verdict === 'skipped'. */\n  skipReason?: string;\n  /** Populated on verdict !== 'skipped'. */\n  differences?: string[];\n  /** Probe summaries for diagnostics. Sanitized via `summarizeCapture`. */\n  probes?: {\n    inaccessibleOrRandomA: ProbeSummary;\n    impossibleOrRandomB: ProbeSummary;\n  };\n}\n\nexport interface ProbeSummary {\n  /** Label describing what kind of id was probed. */\n  label: 'cross-tenant' | 'impossible' | 'random-a' | 'random-b';\n  status: number | null;\n  headers: Record<string, string>;\n  body: string;\n  latencyMs: number;\n  /** Whether the capture body was truncated. */\n  bodyTruncated: boolean;\n}\n\n/**\n * Per-tool configuration for the invariant. Each tool that can be\n * probed declares:\n *  - the single id field to mutate\n *  - the fixture key that holds a seeded id (for cross-tenant mode)\n *  - a minimal request builder given the id\n *\n * Extending coverage to more tools is additive — populate a new entry.\n */\ninterface ToolIdConfig {\n  idField: string;\n  /**\n   * Fixture pool that holds a seeded \"accessible to tenant A\" id for\n   * cross-tenant mode. When omitted, cross-tenant mode is unavailable\n   * for this tool — baseline is the only mode. Useful for tools whose\n   * ids don't come from a seeder (catalog-style lookups, provider-\n   * owned signals, etc.).\n   */\n  fixtureKey?: keyof ConformanceFixtures;\n  buildRequest: (id: string) => Record<string, unknown>;\n}\n\nconst TOOL_ID_CONFIG: Partial<Record<ConformanceToolName, ToolIdConfig>> = {\n  get_property_list: {\n    idField: 'list_id',\n    fixtureKey: 'list_ids',\n    buildRequest: id => ({ list_id: id }),\n  },\n  get_content_standards: {\n    idField: 'standards_id',\n    fixtureKey: 'standards_ids',\n    buildRequest: id => ({ standards_id: id }),\n  },\n  get_media_buy_delivery: {\n    idField: 'media_buy_id',\n    fixtureKey: 'media_buy_ids',\n    buildRequest: id => {\n      // Spec-min request: one buy id + a date range wide enough to avoid\n      // per-seller reporting-window rejection. Dates are arbitrary — the\n      // resolution happens before access-check per the spec, so the\n      // response must be byte-equivalent regardless of window.\n      const now = new Date();\n      const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);\n      const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);\n      return { media_buy_ids: [id], start_date: start, end_date: end };\n    },\n  },\n  get_creative_delivery: {\n    idField: 'creative_id',\n    fixtureKey: 'creative_ids',\n    buildRequest: id => {\n      const now = new Date();\n      const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);\n      const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);\n      return { creative_ids: [id], start_date: start, end_date: end };\n    },\n  },\n  tasks_get: {\n    idField: 'task_id',\n    fixtureKey: 'task_ids',\n    buildRequest: id => ({ task_id: id }),\n  },\n  get_signals: {\n    idField: 'signal_ids',\n    // No seeder for signals today (catalog signals are provider-\n    // controlled, not agent-created). Baseline-only: two fresh UUIDs\n    // wrapped in a SignalID shape, probed under the single caller\n    // token. Cross-tenant mode becomes available when the signals\n    // protocol grows a create/sync path and a seeder produces ids.\n    buildRequest: id => ({\n      signal_ids: [{ source: 'catalog', data_provider_domain: 'conformance.example', id }],\n    }),\n  },\n};\n\n/** Tools eligible for the uniform-error probe. Used by the runner wiring. */\nexport function toolsEligibleForUniformError(): ConformanceToolName[] {\n  return Object.keys(TOOL_ID_CONFIG) as ConformanceToolName[];\n}\n\nexport interface ProbeOptions {\n  /** Agent client that probes with the \"caller\" credentials (tenant B in cross-tenant mode). */\n  prober: AgentClient;\n  /** Fixtures accumulated so far — drawn from for cross-tenant mode. */\n  fixtures: ConformanceFixtures;\n  /** Whether a distinct cross-tenant token was configured. When false, mode is 'baseline'. */\n  crossTenantConfigured: boolean;\n  /**\n   * Cap individual probe body size in the capture. Defaults to the\n   * rawResponseCapture default. Not usually worth overriding.\n   */\n  maxBodyBytes?: number;\n}\n\nexport async function runUniformErrorInvariant(\n  tool: ConformanceToolName,\n  options: ProbeOptions\n): Promise<UniformErrorReport> {\n  const config = TOOL_ID_CONFIG[tool];\n  if (!config) {\n    return {\n      tool,\n      mode: options.crossTenantConfigured ? 'cross-tenant' : 'baseline',\n      verdict: 'skipped',\n      skipReason: 'tool not in TOOL_ID_CONFIG',\n    };\n  }\n\n  // Resolve the pair of ids under probe.\n  //\n  // Cross-tenant mode needs a seeded id (tenant A owns the resource;\n  // tenant B is probing it — that's the \"exists but inaccessible\" leg).\n  // Missing seeded id (or a tool with no fixtureKey at all, like\n  // get_signals) → fall back to baseline rather than skipping; the\n  // baseline still catches id-echo and header-divergence leaks.\n  const seededPool = config.fixtureKey ? (options.fixtures[config.fixtureKey] ?? []) : [];\n  const seededId = seededPool[0];\n  const mode: UniformErrorReport['mode'] = options.crossTenantConfigured && seededId ? 'cross-tenant' : 'baseline';\n\n  const idA = mode === 'cross-tenant' ? (seededId as string) : randomUUID();\n  const idB = randomUUID();\n  const labelA: ProbeSummary['label'] = mode === 'cross-tenant' ? 'cross-tenant' : 'random-a';\n  const labelB: ProbeSummary['label'] = mode === 'cross-tenant' ? 'impossible' : 'random-b';\n\n  const captureOpts = { maxBodyBytes: options.maxBodyBytes };\n\n  const probeA = await capturedProbe(options.prober, tool, config.buildRequest(idA), captureOpts);\n  const probeB = await capturedProbe(options.prober, tool, config.buildRequest(idB), captureOpts);\n\n  if (!probeA.capture || !probeB.capture) {\n    // One side didn't produce a capture — the underlying transport\n    // surfaced an error before we could observe the response (e.g.,\n    // the SDK threw an AuthenticationRequiredError). Report the root\n    // cause so the operator knows why the invariant skipped.\n    const reason = probeA.error ?? probeB.error ?? 'no capture observed';\n    return {\n      tool,\n      mode,\n      verdict: 'skipped',\n      skipReason: `probe did not produce a raw capture (${reason})`,\n    };\n  }\n\n  const comparison = compareProbes(probeA.capture, probeB.capture);\n\n  return {\n    tool,\n    mode,\n    verdict: comparison.equivalent ? 'pass' : 'fail',\n    differences: comparison.differences,\n    probes: {\n      inaccessibleOrRandomA: summarizeCapture(probeA.capture, labelA),\n      impossibleOrRandomB: summarizeCapture(probeB.capture, labelB),\n    },\n  };\n}\n\ninterface ProbeOutcome {\n  capture?: RawHttpCapture;\n  /** Error message when executeTask threw before producing a capture. */\n  error?: string;\n}\n\n/**\n * Execute a probe inside a capture context and return the tool-call\n * response. Filters captures to POST — MCP's tool call and A2A's\n * `sendMessage` are both POSTs, while A2A's `/.well-known/agent.json`\n * discovery (issued on a fresh client) is a GET that we must not\n * confuse with the tool response.\n */\nasync function capturedProbe(\n  agent: AgentClient,\n  tool: ConformanceToolName,\n  request: Record<string, unknown>,\n  options: { maxBodyBytes?: number }\n): Promise<ProbeOutcome> {\n  try {\n    const { captures } = await withRawResponseCapture(async () => {\n      await agent.executeTask(tool, request);\n    }, options);\n    const toolCallCapture = lastPostCapture(captures);\n    if (!toolCallCapture) {\n      return { error: 'captured only non-POST traffic' };\n    }\n    return { capture: toolCallCapture };\n  } catch (err) {\n    return { error: err instanceof Error ? err.message : String(err) };\n  }\n}\n\nfunction lastPostCapture(captures: readonly RawHttpCapture[]): RawHttpCapture | undefined {\n  for (let i = captures.length - 1; i >= 0; i--) {\n    const cap = captures[i];\n    if (cap && cap.method === 'POST') return cap;\n  }\n  return undefined;\n}\n\nfunction summarizeCapture(cap: RawHttpCapture, label: ProbeSummary['label']): ProbeSummary {\n  return {\n    label,\n    status: cap.status,\n    headers: cap.headers,\n    body: cap.body,\n    latencyMs: cap.latencyMs,\n    bodyTruncated: cap.bodyTruncated,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyBA,yBAA2B;AAC3B,gCAA4D;AAE5D,oCAA0D;AAqD1D,MAAM,iBAAqE;AAAA,EACzE,mBAAmB;AAAA,IACjB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,SAAS,GAAG;AAAA,EACrC;AAAA,EACA,uBAAuB;AAAA,IACrB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,cAAc,GAAG;AAAA,EAC1C;AAAA,EACA,wBAAwB;AAAA,IACtB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,QAAM;AAKlB,YAAM,MAAM,oBAAI,KAAK;AACrB,YAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC/E,YAAM,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7E,aAAO,EAAE,eAAe,CAAC,EAAE,GAAG,YAAY,OAAO,UAAU,IAAI;AAAA,IACjE;AAAA,EACF;AAAA,EACA,uBAAuB;AAAA,IACrB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,QAAM;AAClB,YAAM,MAAM,oBAAI,KAAK;AACrB,YAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC/E,YAAM,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7E,aAAO,EAAE,cAAc,CAAC,EAAE,GAAG,YAAY,OAAO,UAAU,IAAI;AAAA,IAChE;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,SAAS,GAAG;AAAA,EACrC;AAAA,EACA,aAAa;AAAA,IACX,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMT,cAAc,SAAO;AAAA,MACnB,YAAY,CAAC,EAAE,QAAQ,WAAW,sBAAsB,uBAAuB,GAAG,CAAC;AAAA,IACrF;AAAA,EACF;AACF;AAGO,SAAS,+BAAsD;AACpE,SAAO,OAAO,KAAK,cAAc;AACnC;AAgBA,eAAsB,yBACpB,MACA,SAC6B;AAC7B,QAAM,SAAS,eAAe,IAAI;AAClC,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL;AAAA,MACA,MAAM,QAAQ,wBAAwB,iBAAiB;AAAA,MACvD,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AASA,QAAM,aAAa,OAAO,aAAc,QAAQ,SAAS,OAAO,UAAU,KAAK,CAAC,IAAK,CAAC;AACtF,QAAM,WAAW,WAAW,CAAC;AAC7B,QAAM,OAAmC,QAAQ,yBAAyB,WAAW,iBAAiB;AAEtG,QAAM,MAAM,SAAS,iBAAkB,eAAsB,+BAAW;AACxE,QAAM,UAAM,+BAAW;AACvB,QAAM,SAAgC,SAAS,iBAAiB,iBAAiB;AACjF,QAAM,SAAgC,SAAS,iBAAiB,eAAe;AAE/E,QAAM,cAAc,EAAE,cAAc,QAAQ,aAAa;AAEzD,QAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,MAAM,OAAO,aAAa,GAAG,GAAG,WAAW;AAC9F,QAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,MAAM,OAAO,aAAa,GAAG,GAAG,WAAW;AAE9F,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,SAAS;AAKtC,UAAM,SAAS,OAAO,SAAS,OAAO,SAAS;AAC/C,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,YAAY,wCAAwC,MAAM;AAAA,IAC5D;AAAA,EACF;AAEA,QAAM,iBAAa,6CAAc,OAAO,SAAS,OAAO,OAAO;AAE/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,WAAW,aAAa,SAAS;AAAA,IAC1C,aAAa,WAAW;AAAA,IACxB,QAAQ;AAAA,MACN,uBAAuB,iBAAiB,OAAO,SAAS,MAAM;AAAA,MAC9D,qBAAqB,iBAAiB,OAAO,SAAS,MAAM;AAAA,IAC9D;AAAA,EACF;AACF;AAeA,eAAe,cACb,OACA,MACA,SACA,SACuB;AACvB,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,UAAM,kDAAuB,YAAY;AAC5D,YAAM,MAAM,YAAY,MAAM,OAAO;AAAA,IACvC,GAAG,OAAO;AACV,UAAM,kBAAkB,gBAAgB,QAAQ;AAChD,QAAI,CAAC,iBAAiB;AACpB,aAAO,EAAE,OAAO,iCAAiC;AAAA,IACnD;AACA,WAAO,EAAE,SAAS,gBAAgB;AAAA,EACpC,SAAS,KAAK;AACZ,WAAO,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,EACnE;AACF;AAEA,SAAS,gBAAgB,UAAiE;AACxF,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,OAAO,IAAI,WAAW,OAAQ,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,KAAqB,OAA4C;AACzF,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,IAAI;AAAA,IACZ,SAAS,IAAI;AAAA,IACb,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,eAAe,IAAI;AAAA,EACrB;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/lib/conformance/invariants/uniformError.ts"],"sourcesContent":["// Uniform error response invariant (adcp spec § error-handling).\n//\n// The spec MUSTs that a seller returns byte-equivalent responses for\n// \"the id exists but the caller lacks access\" vs \"the id does not\n// exist\" — through every observable channel (error code/message/field/\n// details, HTTP status, A2A task state / MCP isError, response headers,\n// latency distribution). Distinguishing the two leaks cross-tenant\n// existence information.\n//\n// This invariant exercises the MUST with a paired probe: two requests\n// to the same tool, compared byte-for-byte.\n//\n// Pairing modes:\n//   - baseline: two fresh UUIDs, single auth token. Catches id-echo\n//     leaks, header divergence, and grossly different latency. Does\n//     not catch cross-tenant leaks — both ids are impossible, so the\n//     \"inaccessible vs unknown\" branch never fires.\n//   - cross-tenant: one seeded id owned by tenant A plus one fresh\n//     UUID, both probed as tenant B. Catches the full MUST.\n//\n// Tool coverage is keyed by TOOL_ID_CONFIG below. A tool must expose\n// a single scalar \"lookup id\" field and have a matching seeder before\n// it can be probed.\n\nimport { AgentClient } from '../../core/AgentClient';\nimport { randomUUID } from 'node:crypto';\nimport { withRawResponseCapture, type RawHttpCapture } from '../../protocols/rawResponseCapture';\nimport type { ConformanceFixtures, ConformanceToolName } from '../types';\nimport { compareProbes, type ProbeComparisonResult } from './uniformErrorComparator';\n\nexport type UniformErrorVerdict = 'pass' | 'fail' | 'skipped';\n\nexport interface UniformErrorReport {\n  tool: ConformanceToolName;\n  /** Which pairing actually ran. */\n  mode: 'baseline' | 'cross-tenant';\n  verdict: UniformErrorVerdict;\n  /** Populated on verdict === 'skipped'. */\n  skipReason?: string;\n  /** Populated on verdict !== 'skipped'. */\n  differences?: string[];\n  /** Probe summaries for diagnostics. Sanitized via `summarizeCapture`. */\n  probes?: {\n    inaccessibleOrRandomA: ProbeSummary;\n    impossibleOrRandomB: ProbeSummary;\n  };\n}\n\nexport interface ProbeSummary {\n  /** Label describing what kind of id was probed. */\n  label: 'cross-tenant' | 'impossible' | 'random-a' | 'random-b';\n  status: number | null;\n  headers: Record<string, string>;\n  body: string;\n  latencyMs: number;\n  /** Whether the capture body was truncated. */\n  bodyTruncated: boolean;\n}\n\n/**\n * Per-tool configuration for the invariant. Each tool that can be\n * probed declares:\n *  - the single id field to mutate\n *  - the fixture key that holds a seeded id (for cross-tenant mode)\n *  - a minimal request builder given the id\n *\n * Extending coverage to more tools is additive — populate a new entry.\n */\ninterface ToolIdConfig {\n  idField: string;\n  /**\n   * Fixture pool that holds a seeded \"accessible to tenant A\" id for\n   * cross-tenant mode. When omitted, cross-tenant mode is unavailable\n   * for this tool — baseline is the only mode. Useful for tools whose\n   * ids don't come from a seeder (catalog-style lookups, provider-\n   * owned signals, etc.).\n   */\n  fixtureKey?: keyof ConformanceFixtures;\n  buildRequest: (id: string) => Record<string, unknown>;\n}\n\nconst TOOL_ID_CONFIG: Partial<Record<ConformanceToolName, ToolIdConfig>> = {\n  get_property_list: {\n    idField: 'list_id',\n    fixtureKey: 'list_ids',\n    buildRequest: id => ({ list_id: id }),\n  },\n  get_content_standards: {\n    idField: 'standards_id',\n    fixtureKey: 'standards_ids',\n    buildRequest: id => ({ standards_id: id }),\n  },\n  get_media_buy_delivery: {\n    idField: 'media_buy_id',\n    fixtureKey: 'media_buy_ids',\n    buildRequest: id => {\n      // Spec-min request: one buy id + a date range wide enough to avoid\n      // per-seller reporting-window rejection. Dates are arbitrary — the\n      // resolution happens before access-check per the spec, so the\n      // response must be byte-equivalent regardless of window.\n      const now = new Date();\n      const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);\n      const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);\n      return { media_buy_ids: [id], start_date: start, end_date: end };\n    },\n  },\n  get_creative_delivery: {\n    idField: 'creative_id',\n    fixtureKey: 'creative_ids',\n    buildRequest: id => {\n      const now = new Date();\n      const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);\n      const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);\n      return { creative_ids: [id], start_date: start, end_date: end };\n    },\n  },\n  tasks_get: {\n    idField: 'task_id',\n    fixtureKey: 'task_ids',\n    buildRequest: id => ({ task_id: id }),\n  },\n  get_signals: {\n    idField: 'signal_ids',\n    // No seeder for signals today (catalog signals are provider-\n    // controlled, not agent-created). Baseline-only: two fresh UUIDs\n    // wrapped in a SignalID shape, probed under the single caller\n    // token. Cross-tenant mode becomes available when the signals\n    // protocol grows a create/sync path and a seeder produces ids.\n    buildRequest: id => ({\n      signal_ids: [{ source: 'catalog', data_provider_domain: 'conformance.example', id }],\n    }),\n  },\n};\n\n/** Tools eligible for the uniform-error probe. Used by the runner wiring. */\nexport function toolsEligibleForUniformError(): ConformanceToolName[] {\n  return Object.keys(TOOL_ID_CONFIG) as ConformanceToolName[];\n}\n\nexport interface ProbeOptions {\n  /** Agent client that probes with the \"caller\" credentials (tenant B in cross-tenant mode). */\n  prober: AgentClient;\n  /** Fixtures accumulated so far — drawn from for cross-tenant mode. */\n  fixtures: ConformanceFixtures;\n  /** Whether a distinct cross-tenant token was configured. When false, mode is 'baseline'. */\n  crossTenantConfigured: boolean;\n  /**\n   * Cap individual probe body size in the capture. Defaults to the\n   * rawResponseCapture default. Not usually worth overriding.\n   */\n  maxBodyBytes?: number;\n}\n\nexport async function runUniformErrorInvariant(\n  tool: ConformanceToolName,\n  options: ProbeOptions\n): Promise<UniformErrorReport> {\n  const config = TOOL_ID_CONFIG[tool];\n  if (!config) {\n    return {\n      tool,\n      mode: options.crossTenantConfigured ? 'cross-tenant' : 'baseline',\n      verdict: 'skipped',\n      skipReason: 'tool not in TOOL_ID_CONFIG',\n    };\n  }\n\n  // Resolve the pair of ids under probe.\n  //\n  // Cross-tenant mode needs a seeded id (tenant A owns the resource;\n  // tenant B is probing it — that's the \"exists but inaccessible\" leg).\n  // Missing seeded id (or a tool with no fixtureKey at all, like\n  // get_signals) → fall back to baseline rather than skipping; the\n  // baseline still catches id-echo and header-divergence leaks.\n  const seededPool = config.fixtureKey ? (options.fixtures[config.fixtureKey] ?? []) : [];\n  const seededId = seededPool[0];\n  const mode: UniformErrorReport['mode'] = options.crossTenantConfigured && seededId ? 'cross-tenant' : 'baseline';\n\n  const idA = mode === 'cross-tenant' ? (seededId as string) : randomUUID();\n  const idB = randomUUID();\n  const labelA: ProbeSummary['label'] = mode === 'cross-tenant' ? 'cross-tenant' : 'random-a';\n  const labelB: ProbeSummary['label'] = mode === 'cross-tenant' ? 'impossible' : 'random-b';\n\n  const captureOpts = { maxBodyBytes: options.maxBodyBytes };\n\n  const probeA = await capturedProbe(options.prober, tool, config.buildRequest(idA), captureOpts);\n  const probeB = await capturedProbe(options.prober, tool, config.buildRequest(idB), captureOpts);\n\n  if (!probeA.capture || !probeB.capture) {\n    // One side didn't produce a capture — the underlying transport\n    // surfaced an error before we could observe the response (e.g.,\n    // the SDK threw an AuthenticationRequiredError). Report the root\n    // cause so the operator knows why the invariant skipped.\n    const reason = probeA.error ?? probeB.error ?? 'no capture observed';\n    return {\n      tool,\n      mode,\n      verdict: 'skipped',\n      skipReason: `probe did not produce a raw capture (${reason})`,\n    };\n  }\n\n  const comparison = compareProbes(probeA.capture, probeB.capture);\n\n  return {\n    tool,\n    mode,\n    verdict: comparison.equivalent ? 'pass' : 'fail',\n    differences: comparison.differences,\n    probes: {\n      inaccessibleOrRandomA: summarizeCapture(probeA.capture, labelA),\n      impossibleOrRandomB: summarizeCapture(probeB.capture, labelB),\n    },\n  };\n}\n\ninterface ProbeOutcome {\n  capture?: RawHttpCapture;\n  /** Error message when executeTask threw before producing a capture. */\n  error?: string;\n}\n\n/**\n * Execute a probe inside a capture context and return the tool-call\n * response. Filters captures to POST — MCP's tool call and A2A's\n * `sendMessage` are both POSTs, while A2A's `/.well-known/agent.json`\n * discovery (issued on a fresh client) is a GET that we must not\n * confuse with the tool response.\n */\nasync function capturedProbe(\n  agent: AgentClient,\n  tool: ConformanceToolName,\n  request: Record<string, unknown>,\n  options: { maxBodyBytes?: number }\n): Promise<ProbeOutcome> {\n  try {\n    const { captures } = await withRawResponseCapture(async () => {\n      await agent.executeTaskLegacy(tool, request);\n    }, options);\n    const toolCallCapture = lastPostCapture(captures);\n    if (!toolCallCapture) {\n      return { error: 'captured only non-POST traffic' };\n    }\n    return { capture: toolCallCapture };\n  } catch (err) {\n    return { error: err instanceof Error ? err.message : String(err) };\n  }\n}\n\nfunction lastPostCapture(captures: readonly RawHttpCapture[]): RawHttpCapture | undefined {\n  for (let i = captures.length - 1; i >= 0; i--) {\n    const cap = captures[i];\n    if (cap && cap.method === 'POST') return cap;\n  }\n  return undefined;\n}\n\nfunction summarizeCapture(cap: RawHttpCapture, label: ProbeSummary['label']): ProbeSummary {\n  return {\n    label,\n    status: cap.status,\n    headers: cap.headers,\n    body: cap.body,\n    latencyMs: cap.latencyMs,\n    bodyTruncated: cap.bodyTruncated,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyBA,yBAA2B;AAC3B,gCAA4D;AAE5D,oCAA0D;AAqD1D,MAAM,iBAAqE;AAAA,EACzE,mBAAmB;AAAA,IACjB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,SAAS,GAAG;AAAA,EACrC;AAAA,EACA,uBAAuB;AAAA,IACrB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,cAAc,GAAG;AAAA,EAC1C;AAAA,EACA,wBAAwB;AAAA,IACtB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,QAAM;AAKlB,YAAM,MAAM,oBAAI,KAAK;AACrB,YAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC/E,YAAM,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7E,aAAO,EAAE,eAAe,CAAC,EAAE,GAAG,YAAY,OAAO,UAAU,IAAI;AAAA,IACjE;AAAA,EACF;AAAA,EACA,uBAAuB;AAAA,IACrB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,QAAM;AAClB,YAAM,MAAM,oBAAI,KAAK;AACrB,YAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC/E,YAAM,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7E,aAAO,EAAE,cAAc,CAAC,EAAE,GAAG,YAAY,OAAO,UAAU,IAAI;AAAA,IAChE;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,SAAS,GAAG;AAAA,EACrC;AAAA,EACA,aAAa;AAAA,IACX,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMT,cAAc,SAAO;AAAA,MACnB,YAAY,CAAC,EAAE,QAAQ,WAAW,sBAAsB,uBAAuB,GAAG,CAAC;AAAA,IACrF;AAAA,EACF;AACF;AAGO,SAAS,+BAAsD;AACpE,SAAO,OAAO,KAAK,cAAc;AACnC;AAgBA,eAAsB,yBACpB,MACA,SAC6B;AAC7B,QAAM,SAAS,eAAe,IAAI;AAClC,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL;AAAA,MACA,MAAM,QAAQ,wBAAwB,iBAAiB;AAAA,MACvD,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AASA,QAAM,aAAa,OAAO,aAAc,QAAQ,SAAS,OAAO,UAAU,KAAK,CAAC,IAAK,CAAC;AACtF,QAAM,WAAW,WAAW,CAAC;AAC7B,QAAM,OAAmC,QAAQ,yBAAyB,WAAW,iBAAiB;AAEtG,QAAM,MAAM,SAAS,iBAAkB,eAAsB,+BAAW;AACxE,QAAM,UAAM,+BAAW;AACvB,QAAM,SAAgC,SAAS,iBAAiB,iBAAiB;AACjF,QAAM,SAAgC,SAAS,iBAAiB,eAAe;AAE/E,QAAM,cAAc,EAAE,cAAc,QAAQ,aAAa;AAEzD,QAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,MAAM,OAAO,aAAa,GAAG,GAAG,WAAW;AAC9F,QAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,MAAM,OAAO,aAAa,GAAG,GAAG,WAAW;AAE9F,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,SAAS;AAKtC,UAAM,SAAS,OAAO,SAAS,OAAO,SAAS;AAC/C,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,YAAY,wCAAwC,MAAM;AAAA,IAC5D;AAAA,EACF;AAEA,QAAM,iBAAa,6CAAc,OAAO,SAAS,OAAO,OAAO;AAE/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,WAAW,aAAa,SAAS;AAAA,IAC1C,aAAa,WAAW;AAAA,IACxB,QAAQ;AAAA,MACN,uBAAuB,iBAAiB,OAAO,SAAS,MAAM;AAAA,MAC9D,qBAAqB,iBAAiB,OAAO,SAAS,MAAM;AAAA,IAC9D;AAAA,EACF;AACF;AAeA,eAAe,cACb,OACA,MACA,SACA,SACuB;AACvB,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,UAAM,kDAAuB,YAAY;AAC5D,YAAM,MAAM,kBAAkB,MAAM,OAAO;AAAA,IAC7C,GAAG,OAAO;AACV,UAAM,kBAAkB,gBAAgB,QAAQ;AAChD,QAAI,CAAC,iBAAiB;AACpB,aAAO,EAAE,OAAO,iCAAiC;AAAA,IACnD;AACA,WAAO,EAAE,SAAS,gBAAgB;AAAA,EACpC,SAAS,KAAK;AACZ,WAAO,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,EACnE;AACF;AAEA,SAAS,gBAAgB,UAAiE;AACxF,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,OAAO,IAAI,WAAW,OAAQ,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,KAAqB,OAA4C;AACzF,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,IAAI;AAAA,IACZ,SAAS,IAAI;AAAA,IACb,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,eAAe,IAAI;AAAA,EACrB;AACF;","names":[]}

package/dist/lib/conformance/invariants/uniformError.mjs

@@ -96,7 +96,7 @@ async function runUniformErrorInvariant(tool, options) {
 async function capturedProbe(agent, tool, request, options) {
   try {
     const { captures } = await withRawResponseCapture(async () => {
-      await agent.executeTask(tool, request);
+      await agent.executeTaskLegacy(tool, request);
     }, options);
     const toolCallCapture = lastPostCapture(captures);
     if (!toolCallCapture) {

package/dist/lib/conformance/invariants/uniformError.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/conformance/invariants/uniformError.ts"],"sourcesContent":["// Uniform error response invariant (adcp spec § error-handling).\n//\n// The spec MUSTs that a seller returns byte-equivalent responses for\n// \"the id exists but the caller lacks access\" vs \"the id does not\n// exist\" — through every observable channel (error code/message/field/\n// details, HTTP status, A2A task state / MCP isError, response headers,\n// latency distribution). Distinguishing the two leaks cross-tenant\n// existence information.\n//\n// This invariant exercises the MUST with a paired probe: two requests\n// to the same tool, compared byte-for-byte.\n//\n// Pairing modes:\n//   - baseline: two fresh UUIDs, single auth token. Catches id-echo\n//     leaks, header divergence, and grossly different latency. Does\n//     not catch cross-tenant leaks — both ids are impossible, so the\n//     \"inaccessible vs unknown\" branch never fires.\n//   - cross-tenant: one seeded id owned by tenant A plus one fresh\n//     UUID, both probed as tenant B. Catches the full MUST.\n//\n// Tool coverage is keyed by TOOL_ID_CONFIG below. A tool must expose\n// a single scalar \"lookup id\" field and have a matching seeder before\n// it can be probed.\n\nimport { AgentClient } from '../../core/AgentClient';\nimport { randomUUID } from 'node:crypto';\nimport { withRawResponseCapture, type RawHttpCapture } from '../../protocols/rawResponseCapture';\nimport type { ConformanceFixtures, ConformanceToolName } from '../types';\nimport { compareProbes, type ProbeComparisonResult } from './uniformErrorComparator';\n\nexport type UniformErrorVerdict = 'pass' | 'fail' | 'skipped';\n\nexport interface UniformErrorReport {\n  tool: ConformanceToolName;\n  /** Which pairing actually ran. */\n  mode: 'baseline' | 'cross-tenant';\n  verdict: UniformErrorVerdict;\n  /** Populated on verdict === 'skipped'. */\n  skipReason?: string;\n  /** Populated on verdict !== 'skipped'. */\n  differences?: string[];\n  /** Probe summaries for diagnostics. Sanitized via `summarizeCapture`. */\n  probes?: {\n    inaccessibleOrRandomA: ProbeSummary;\n    impossibleOrRandomB: ProbeSummary;\n  };\n}\n\nexport interface ProbeSummary {\n  /** Label describing what kind of id was probed. */\n  label: 'cross-tenant' | 'impossible' | 'random-a' | 'random-b';\n  status: number | null;\n  headers: Record<string, string>;\n  body: string;\n  latencyMs: number;\n  /** Whether the capture body was truncated. */\n  bodyTruncated: boolean;\n}\n\n/**\n * Per-tool configuration for the invariant. Each tool that can be\n * probed declares:\n *  - the single id field to mutate\n *  - the fixture key that holds a seeded id (for cross-tenant mode)\n *  - a minimal request builder given the id\n *\n * Extending coverage to more tools is additive — populate a new entry.\n */\ninterface ToolIdConfig {\n  idField: string;\n  /**\n   * Fixture pool that holds a seeded \"accessible to tenant A\" id for\n   * cross-tenant mode. When omitted, cross-tenant mode is unavailable\n   * for this tool — baseline is the only mode. Useful for tools whose\n   * ids don't come from a seeder (catalog-style lookups, provider-\n   * owned signals, etc.).\n   */\n  fixtureKey?: keyof ConformanceFixtures;\n  buildRequest: (id: string) => Record<string, unknown>;\n}\n\nconst TOOL_ID_CONFIG: Partial<Record<ConformanceToolName, ToolIdConfig>> = {\n  get_property_list: {\n    idField: 'list_id',\n    fixtureKey: 'list_ids',\n    buildRequest: id => ({ list_id: id }),\n  },\n  get_content_standards: {\n    idField: 'standards_id',\n    fixtureKey: 'standards_ids',\n    buildRequest: id => ({ standards_id: id }),\n  },\n  get_media_buy_delivery: {\n    idField: 'media_buy_id',\n    fixtureKey: 'media_buy_ids',\n    buildRequest: id => {\n      // Spec-min request: one buy id + a date range wide enough to avoid\n      // per-seller reporting-window rejection. Dates are arbitrary — the\n      // resolution happens before access-check per the spec, so the\n      // response must be byte-equivalent regardless of window.\n      const now = new Date();\n      const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);\n      const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);\n      return { media_buy_ids: [id], start_date: start, end_date: end };\n    },\n  },\n  get_creative_delivery: {\n    idField: 'creative_id',\n    fixtureKey: 'creative_ids',\n    buildRequest: id => {\n      const now = new Date();\n      const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);\n      const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);\n      return { creative_ids: [id], start_date: start, end_date: end };\n    },\n  },\n  tasks_get: {\n    idField: 'task_id',\n    fixtureKey: 'task_ids',\n    buildRequest: id => ({ task_id: id }),\n  },\n  get_signals: {\n    idField: 'signal_ids',\n    // No seeder for signals today (catalog signals are provider-\n    // controlled, not agent-created). Baseline-only: two fresh UUIDs\n    // wrapped in a SignalID shape, probed under the single caller\n    // token. Cross-tenant mode becomes available when the signals\n    // protocol grows a create/sync path and a seeder produces ids.\n    buildRequest: id => ({\n      signal_ids: [{ source: 'catalog', data_provider_domain: 'conformance.example', id }],\n    }),\n  },\n};\n\n/** Tools eligible for the uniform-error probe. Used by the runner wiring. */\nexport function toolsEligibleForUniformError(): ConformanceToolName[] {\n  return Object.keys(TOOL_ID_CONFIG) as ConformanceToolName[];\n}\n\nexport interface ProbeOptions {\n  /** Agent client that probes with the \"caller\" credentials (tenant B in cross-tenant mode). */\n  prober: AgentClient;\n  /** Fixtures accumulated so far — drawn from for cross-tenant mode. */\n  fixtures: ConformanceFixtures;\n  /** Whether a distinct cross-tenant token was configured. When false, mode is 'baseline'. */\n  crossTenantConfigured: boolean;\n  /**\n   * Cap individual probe body size in the capture. Defaults to the\n   * rawResponseCapture default. Not usually worth overriding.\n   */\n  maxBodyBytes?: number;\n}\n\nexport async function runUniformErrorInvariant(\n  tool: ConformanceToolName,\n  options: ProbeOptions\n): Promise<UniformErrorReport> {\n  const config = TOOL_ID_CONFIG[tool];\n  if (!config) {\n    return {\n      tool,\n      mode: options.crossTenantConfigured ? 'cross-tenant' : 'baseline',\n      verdict: 'skipped',\n      skipReason: 'tool not in TOOL_ID_CONFIG',\n    };\n  }\n\n  // Resolve the pair of ids under probe.\n  //\n  // Cross-tenant mode needs a seeded id (tenant A owns the resource;\n  // tenant B is probing it — that's the \"exists but inaccessible\" leg).\n  // Missing seeded id (or a tool with no fixtureKey at all, like\n  // get_signals) → fall back to baseline rather than skipping; the\n  // baseline still catches id-echo and header-divergence leaks.\n  const seededPool = config.fixtureKey ? (options.fixtures[config.fixtureKey] ?? []) : [];\n  const seededId = seededPool[0];\n  const mode: UniformErrorReport['mode'] = options.crossTenantConfigured && seededId ? 'cross-tenant' : 'baseline';\n\n  const idA = mode === 'cross-tenant' ? (seededId as string) : randomUUID();\n  const idB = randomUUID();\n  const labelA: ProbeSummary['label'] = mode === 'cross-tenant' ? 'cross-tenant' : 'random-a';\n  const labelB: ProbeSummary['label'] = mode === 'cross-tenant' ? 'impossible' : 'random-b';\n\n  const captureOpts = { maxBodyBytes: options.maxBodyBytes };\n\n  const probeA = await capturedProbe(options.prober, tool, config.buildRequest(idA), captureOpts);\n  const probeB = await capturedProbe(options.prober, tool, config.buildRequest(idB), captureOpts);\n\n  if (!probeA.capture || !probeB.capture) {\n    // One side didn't produce a capture — the underlying transport\n    // surfaced an error before we could observe the response (e.g.,\n    // the SDK threw an AuthenticationRequiredError). Report the root\n    // cause so the operator knows why the invariant skipped.\n    const reason = probeA.error ?? probeB.error ?? 'no capture observed';\n    return {\n      tool,\n      mode,\n      verdict: 'skipped',\n      skipReason: `probe did not produce a raw capture (${reason})`,\n    };\n  }\n\n  const comparison = compareProbes(probeA.capture, probeB.capture);\n\n  return {\n    tool,\n    mode,\n    verdict: comparison.equivalent ? 'pass' : 'fail',\n    differences: comparison.differences,\n    probes: {\n      inaccessibleOrRandomA: summarizeCapture(probeA.capture, labelA),\n      impossibleOrRandomB: summarizeCapture(probeB.capture, labelB),\n    },\n  };\n}\n\ninterface ProbeOutcome {\n  capture?: RawHttpCapture;\n  /** Error message when executeTask threw before producing a capture. */\n  error?: string;\n}\n\n/**\n * Execute a probe inside a capture context and return the tool-call\n * response. Filters captures to POST — MCP's tool call and A2A's\n * `sendMessage` are both POSTs, while A2A's `/.well-known/agent.json`\n * discovery (issued on a fresh client) is a GET that we must not\n * confuse with the tool response.\n */\nasync function capturedProbe(\n  agent: AgentClient,\n  tool: ConformanceToolName,\n  request: Record<string, unknown>,\n  options: { maxBodyBytes?: number }\n): Promise<ProbeOutcome> {\n  try {\n    const { captures } = await withRawResponseCapture(async () => {\n      await agent.executeTask(tool, request);\n    }, options);\n    const toolCallCapture = lastPostCapture(captures);\n    if (!toolCallCapture) {\n      return { error: 'captured only non-POST traffic' };\n    }\n    return { capture: toolCallCapture };\n  } catch (err) {\n    return { error: err instanceof Error ? err.message : String(err) };\n  }\n}\n\nfunction lastPostCapture(captures: readonly RawHttpCapture[]): RawHttpCapture | undefined {\n  for (let i = captures.length - 1; i >= 0; i--) {\n    const cap = captures[i];\n    if (cap && cap.method === 'POST') return cap;\n  }\n  return undefined;\n}\n\nfunction summarizeCapture(cap: RawHttpCapture, label: ProbeSummary['label']): ProbeSummary {\n  return {\n    label,\n    status: cap.status,\n    headers: cap.headers,\n    body: cap.body,\n    latencyMs: cap.latencyMs,\n    bodyTruncated: cap.bodyTruncated,\n  };\n}\n"],"mappings":"AAyBA,SAAS,kBAAkB;AAC3B,SAAS,8BAAmD;AAE5D,SAAS,qBAAiD;AAqD1D,MAAM,iBAAqE;AAAA,EACzE,mBAAmB;AAAA,IACjB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,SAAS,GAAG;AAAA,EACrC;AAAA,EACA,uBAAuB;AAAA,IACrB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,cAAc,GAAG;AAAA,EAC1C;AAAA,EACA,wBAAwB;AAAA,IACtB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,QAAM;AAKlB,YAAM,MAAM,oBAAI,KAAK;AACrB,YAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC/E,YAAM,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7E,aAAO,EAAE,eAAe,CAAC,EAAE,GAAG,YAAY,OAAO,UAAU,IAAI;AAAA,IACjE;AAAA,EACF;AAAA,EACA,uBAAuB;AAAA,IACrB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,QAAM;AAClB,YAAM,MAAM,oBAAI,KAAK;AACrB,YAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC/E,YAAM,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7E,aAAO,EAAE,cAAc,CAAC,EAAE,GAAG,YAAY,OAAO,UAAU,IAAI;AAAA,IAChE;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,SAAS,GAAG;AAAA,EACrC;AAAA,EACA,aAAa;AAAA,IACX,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMT,cAAc,SAAO;AAAA,MACnB,YAAY,CAAC,EAAE,QAAQ,WAAW,sBAAsB,uBAAuB,GAAG,CAAC;AAAA,IACrF;AAAA,EACF;AACF;AAGO,SAAS,+BAAsD;AACpE,SAAO,OAAO,KAAK,cAAc;AACnC;AAgBA,eAAsB,yBACpB,MACA,SAC6B;AAC7B,QAAM,SAAS,eAAe,IAAI;AAClC,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL;AAAA,MACA,MAAM,QAAQ,wBAAwB,iBAAiB;AAAA,MACvD,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AASA,QAAM,aAAa,OAAO,aAAc,QAAQ,SAAS,OAAO,UAAU,KAAK,CAAC,IAAK,CAAC;AACtF,QAAM,WAAW,WAAW,CAAC;AAC7B,QAAM,OAAmC,QAAQ,yBAAyB,WAAW,iBAAiB;AAEtG,QAAM,MAAM,SAAS,iBAAkB,WAAsB,WAAW;AACxE,QAAM,MAAM,WAAW;AACvB,QAAM,SAAgC,SAAS,iBAAiB,iBAAiB;AACjF,QAAM,SAAgC,SAAS,iBAAiB,eAAe;AAE/E,QAAM,cAAc,EAAE,cAAc,QAAQ,aAAa;AAEzD,QAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,MAAM,OAAO,aAAa,GAAG,GAAG,WAAW;AAC9F,QAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,MAAM,OAAO,aAAa,GAAG,GAAG,WAAW;AAE9F,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,SAAS;AAKtC,UAAM,SAAS,OAAO,SAAS,OAAO,SAAS;AAC/C,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,YAAY,wCAAwC,MAAM;AAAA,IAC5D;AAAA,EACF;AAEA,QAAM,aAAa,cAAc,OAAO,SAAS,OAAO,OAAO;AAE/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,WAAW,aAAa,SAAS;AAAA,IAC1C,aAAa,WAAW;AAAA,IACxB,QAAQ;AAAA,MACN,uBAAuB,iBAAiB,OAAO,SAAS,MAAM;AAAA,MAC9D,qBAAqB,iBAAiB,OAAO,SAAS,MAAM;AAAA,IAC9D;AAAA,EACF;AACF;AAeA,eAAe,cACb,OACA,MACA,SACA,SACuB;AACvB,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,MAAM,uBAAuB,YAAY;AAC5D,YAAM,MAAM,YAAY,MAAM,OAAO;AAAA,IACvC,GAAG,OAAO;AACV,UAAM,kBAAkB,gBAAgB,QAAQ;AAChD,QAAI,CAAC,iBAAiB;AACpB,aAAO,EAAE,OAAO,iCAAiC;AAAA,IACnD;AACA,WAAO,EAAE,SAAS,gBAAgB;AAAA,EACpC,SAAS,KAAK;AACZ,WAAO,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,EACnE;AACF;AAEA,SAAS,gBAAgB,UAAiE;AACxF,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,OAAO,IAAI,WAAW,OAAQ,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,KAAqB,OAA4C;AACzF,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,IAAI;AAAA,IACZ,SAAS,IAAI;AAAA,IACb,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,eAAe,IAAI;AAAA,EACrB;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/lib/conformance/invariants/uniformError.ts"],"sourcesContent":["// Uniform error response invariant (adcp spec § error-handling).\n//\n// The spec MUSTs that a seller returns byte-equivalent responses for\n// \"the id exists but the caller lacks access\" vs \"the id does not\n// exist\" — through every observable channel (error code/message/field/\n// details, HTTP status, A2A task state / MCP isError, response headers,\n// latency distribution). Distinguishing the two leaks cross-tenant\n// existence information.\n//\n// This invariant exercises the MUST with a paired probe: two requests\n// to the same tool, compared byte-for-byte.\n//\n// Pairing modes:\n//   - baseline: two fresh UUIDs, single auth token. Catches id-echo\n//     leaks, header divergence, and grossly different latency. Does\n//     not catch cross-tenant leaks — both ids are impossible, so the\n//     \"inaccessible vs unknown\" branch never fires.\n//   - cross-tenant: one seeded id owned by tenant A plus one fresh\n//     UUID, both probed as tenant B. Catches the full MUST.\n//\n// Tool coverage is keyed by TOOL_ID_CONFIG below. A tool must expose\n// a single scalar \"lookup id\" field and have a matching seeder before\n// it can be probed.\n\nimport { AgentClient } from '../../core/AgentClient';\nimport { randomUUID } from 'node:crypto';\nimport { withRawResponseCapture, type RawHttpCapture } from '../../protocols/rawResponseCapture';\nimport type { ConformanceFixtures, ConformanceToolName } from '../types';\nimport { compareProbes, type ProbeComparisonResult } from './uniformErrorComparator';\n\nexport type UniformErrorVerdict = 'pass' | 'fail' | 'skipped';\n\nexport interface UniformErrorReport {\n  tool: ConformanceToolName;\n  /** Which pairing actually ran. */\n  mode: 'baseline' | 'cross-tenant';\n  verdict: UniformErrorVerdict;\n  /** Populated on verdict === 'skipped'. */\n  skipReason?: string;\n  /** Populated on verdict !== 'skipped'. */\n  differences?: string[];\n  /** Probe summaries for diagnostics. Sanitized via `summarizeCapture`. */\n  probes?: {\n    inaccessibleOrRandomA: ProbeSummary;\n    impossibleOrRandomB: ProbeSummary;\n  };\n}\n\nexport interface ProbeSummary {\n  /** Label describing what kind of id was probed. */\n  label: 'cross-tenant' | 'impossible' | 'random-a' | 'random-b';\n  status: number | null;\n  headers: Record<string, string>;\n  body: string;\n  latencyMs: number;\n  /** Whether the capture body was truncated. */\n  bodyTruncated: boolean;\n}\n\n/**\n * Per-tool configuration for the invariant. Each tool that can be\n * probed declares:\n *  - the single id field to mutate\n *  - the fixture key that holds a seeded id (for cross-tenant mode)\n *  - a minimal request builder given the id\n *\n * Extending coverage to more tools is additive — populate a new entry.\n */\ninterface ToolIdConfig {\n  idField: string;\n  /**\n   * Fixture pool that holds a seeded \"accessible to tenant A\" id for\n   * cross-tenant mode. When omitted, cross-tenant mode is unavailable\n   * for this tool — baseline is the only mode. Useful for tools whose\n   * ids don't come from a seeder (catalog-style lookups, provider-\n   * owned signals, etc.).\n   */\n  fixtureKey?: keyof ConformanceFixtures;\n  buildRequest: (id: string) => Record<string, unknown>;\n}\n\nconst TOOL_ID_CONFIG: Partial<Record<ConformanceToolName, ToolIdConfig>> = {\n  get_property_list: {\n    idField: 'list_id',\n    fixtureKey: 'list_ids',\n    buildRequest: id => ({ list_id: id }),\n  },\n  get_content_standards: {\n    idField: 'standards_id',\n    fixtureKey: 'standards_ids',\n    buildRequest: id => ({ standards_id: id }),\n  },\n  get_media_buy_delivery: {\n    idField: 'media_buy_id',\n    fixtureKey: 'media_buy_ids',\n    buildRequest: id => {\n      // Spec-min request: one buy id + a date range wide enough to avoid\n      // per-seller reporting-window rejection. Dates are arbitrary — the\n      // resolution happens before access-check per the spec, so the\n      // response must be byte-equivalent regardless of window.\n      const now = new Date();\n      const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);\n      const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);\n      return { media_buy_ids: [id], start_date: start, end_date: end };\n    },\n  },\n  get_creative_delivery: {\n    idField: 'creative_id',\n    fixtureKey: 'creative_ids',\n    buildRequest: id => {\n      const now = new Date();\n      const start = new Date(now.getTime() - 7 * 86400_000).toISOString().slice(0, 10);\n      const end = new Date(now.getTime() + 7 * 86400_000).toISOString().slice(0, 10);\n      return { creative_ids: [id], start_date: start, end_date: end };\n    },\n  },\n  tasks_get: {\n    idField: 'task_id',\n    fixtureKey: 'task_ids',\n    buildRequest: id => ({ task_id: id }),\n  },\n  get_signals: {\n    idField: 'signal_ids',\n    // No seeder for signals today (catalog signals are provider-\n    // controlled, not agent-created). Baseline-only: two fresh UUIDs\n    // wrapped in a SignalID shape, probed under the single caller\n    // token. Cross-tenant mode becomes available when the signals\n    // protocol grows a create/sync path and a seeder produces ids.\n    buildRequest: id => ({\n      signal_ids: [{ source: 'catalog', data_provider_domain: 'conformance.example', id }],\n    }),\n  },\n};\n\n/** Tools eligible for the uniform-error probe. Used by the runner wiring. */\nexport function toolsEligibleForUniformError(): ConformanceToolName[] {\n  return Object.keys(TOOL_ID_CONFIG) as ConformanceToolName[];\n}\n\nexport interface ProbeOptions {\n  /** Agent client that probes with the \"caller\" credentials (tenant B in cross-tenant mode). */\n  prober: AgentClient;\n  /** Fixtures accumulated so far — drawn from for cross-tenant mode. */\n  fixtures: ConformanceFixtures;\n  /** Whether a distinct cross-tenant token was configured. When false, mode is 'baseline'. */\n  crossTenantConfigured: boolean;\n  /**\n   * Cap individual probe body size in the capture. Defaults to the\n   * rawResponseCapture default. Not usually worth overriding.\n   */\n  maxBodyBytes?: number;\n}\n\nexport async function runUniformErrorInvariant(\n  tool: ConformanceToolName,\n  options: ProbeOptions\n): Promise<UniformErrorReport> {\n  const config = TOOL_ID_CONFIG[tool];\n  if (!config) {\n    return {\n      tool,\n      mode: options.crossTenantConfigured ? 'cross-tenant' : 'baseline',\n      verdict: 'skipped',\n      skipReason: 'tool not in TOOL_ID_CONFIG',\n    };\n  }\n\n  // Resolve the pair of ids under probe.\n  //\n  // Cross-tenant mode needs a seeded id (tenant A owns the resource;\n  // tenant B is probing it — that's the \"exists but inaccessible\" leg).\n  // Missing seeded id (or a tool with no fixtureKey at all, like\n  // get_signals) → fall back to baseline rather than skipping; the\n  // baseline still catches id-echo and header-divergence leaks.\n  const seededPool = config.fixtureKey ? (options.fixtures[config.fixtureKey] ?? []) : [];\n  const seededId = seededPool[0];\n  const mode: UniformErrorReport['mode'] = options.crossTenantConfigured && seededId ? 'cross-tenant' : 'baseline';\n\n  const idA = mode === 'cross-tenant' ? (seededId as string) : randomUUID();\n  const idB = randomUUID();\n  const labelA: ProbeSummary['label'] = mode === 'cross-tenant' ? 'cross-tenant' : 'random-a';\n  const labelB: ProbeSummary['label'] = mode === 'cross-tenant' ? 'impossible' : 'random-b';\n\n  const captureOpts = { maxBodyBytes: options.maxBodyBytes };\n\n  const probeA = await capturedProbe(options.prober, tool, config.buildRequest(idA), captureOpts);\n  const probeB = await capturedProbe(options.prober, tool, config.buildRequest(idB), captureOpts);\n\n  if (!probeA.capture || !probeB.capture) {\n    // One side didn't produce a capture — the underlying transport\n    // surfaced an error before we could observe the response (e.g.,\n    // the SDK threw an AuthenticationRequiredError). Report the root\n    // cause so the operator knows why the invariant skipped.\n    const reason = probeA.error ?? probeB.error ?? 'no capture observed';\n    return {\n      tool,\n      mode,\n      verdict: 'skipped',\n      skipReason: `probe did not produce a raw capture (${reason})`,\n    };\n  }\n\n  const comparison = compareProbes(probeA.capture, probeB.capture);\n\n  return {\n    tool,\n    mode,\n    verdict: comparison.equivalent ? 'pass' : 'fail',\n    differences: comparison.differences,\n    probes: {\n      inaccessibleOrRandomA: summarizeCapture(probeA.capture, labelA),\n      impossibleOrRandomB: summarizeCapture(probeB.capture, labelB),\n    },\n  };\n}\n\ninterface ProbeOutcome {\n  capture?: RawHttpCapture;\n  /** Error message when executeTask threw before producing a capture. */\n  error?: string;\n}\n\n/**\n * Execute a probe inside a capture context and return the tool-call\n * response. Filters captures to POST — MCP's tool call and A2A's\n * `sendMessage` are both POSTs, while A2A's `/.well-known/agent.json`\n * discovery (issued on a fresh client) is a GET that we must not\n * confuse with the tool response.\n */\nasync function capturedProbe(\n  agent: AgentClient,\n  tool: ConformanceToolName,\n  request: Record<string, unknown>,\n  options: { maxBodyBytes?: number }\n): Promise<ProbeOutcome> {\n  try {\n    const { captures } = await withRawResponseCapture(async () => {\n      await agent.executeTaskLegacy(tool, request);\n    }, options);\n    const toolCallCapture = lastPostCapture(captures);\n    if (!toolCallCapture) {\n      return { error: 'captured only non-POST traffic' };\n    }\n    return { capture: toolCallCapture };\n  } catch (err) {\n    return { error: err instanceof Error ? err.message : String(err) };\n  }\n}\n\nfunction lastPostCapture(captures: readonly RawHttpCapture[]): RawHttpCapture | undefined {\n  for (let i = captures.length - 1; i >= 0; i--) {\n    const cap = captures[i];\n    if (cap && cap.method === 'POST') return cap;\n  }\n  return undefined;\n}\n\nfunction summarizeCapture(cap: RawHttpCapture, label: ProbeSummary['label']): ProbeSummary {\n  return {\n    label,\n    status: cap.status,\n    headers: cap.headers,\n    body: cap.body,\n    latencyMs: cap.latencyMs,\n    bodyTruncated: cap.bodyTruncated,\n  };\n}\n"],"mappings":"AAyBA,SAAS,kBAAkB;AAC3B,SAAS,8BAAmD;AAE5D,SAAS,qBAAiD;AAqD1D,MAAM,iBAAqE;AAAA,EACzE,mBAAmB;AAAA,IACjB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,SAAS,GAAG;AAAA,EACrC;AAAA,EACA,uBAAuB;AAAA,IACrB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,cAAc,GAAG;AAAA,EAC1C;AAAA,EACA,wBAAwB;AAAA,IACtB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,QAAM;AAKlB,YAAM,MAAM,oBAAI,KAAK;AACrB,YAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC/E,YAAM,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7E,aAAO,EAAE,eAAe,CAAC,EAAE,GAAG,YAAY,OAAO,UAAU,IAAI;AAAA,IACjE;AAAA,EACF;AAAA,EACA,uBAAuB;AAAA,IACrB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,QAAM;AAClB,YAAM,MAAM,oBAAI,KAAK;AACrB,YAAM,QAAQ,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC/E,YAAM,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,IAAI,KAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7E,aAAO,EAAE,cAAc,CAAC,EAAE,GAAG,YAAY,OAAO,UAAU,IAAI;AAAA,IAChE;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,cAAc,SAAO,EAAE,SAAS,GAAG;AAAA,EACrC;AAAA,EACA,aAAa;AAAA,IACX,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMT,cAAc,SAAO;AAAA,MACnB,YAAY,CAAC,EAAE,QAAQ,WAAW,sBAAsB,uBAAuB,GAAG,CAAC;AAAA,IACrF;AAAA,EACF;AACF;AAGO,SAAS,+BAAsD;AACpE,SAAO,OAAO,KAAK,cAAc;AACnC;AAgBA,eAAsB,yBACpB,MACA,SAC6B;AAC7B,QAAM,SAAS,eAAe,IAAI;AAClC,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL;AAAA,MACA,MAAM,QAAQ,wBAAwB,iBAAiB;AAAA,MACvD,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AASA,QAAM,aAAa,OAAO,aAAc,QAAQ,SAAS,OAAO,UAAU,KAAK,CAAC,IAAK,CAAC;AACtF,QAAM,WAAW,WAAW,CAAC;AAC7B,QAAM,OAAmC,QAAQ,yBAAyB,WAAW,iBAAiB;AAEtG,QAAM,MAAM,SAAS,iBAAkB,WAAsB,WAAW;AACxE,QAAM,MAAM,WAAW;AACvB,QAAM,SAAgC,SAAS,iBAAiB,iBAAiB;AACjF,QAAM,SAAgC,SAAS,iBAAiB,eAAe;AAE/E,QAAM,cAAc,EAAE,cAAc,QAAQ,aAAa;AAEzD,QAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,MAAM,OAAO,aAAa,GAAG,GAAG,WAAW;AAC9F,QAAM,SAAS,MAAM,cAAc,QAAQ,QAAQ,MAAM,OAAO,aAAa,GAAG,GAAG,WAAW;AAE9F,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,SAAS;AAKtC,UAAM,SAAS,OAAO,SAAS,OAAO,SAAS;AAC/C,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,YAAY,wCAAwC,MAAM;AAAA,IAC5D;AAAA,EACF;AAEA,QAAM,aAAa,cAAc,OAAO,SAAS,OAAO,OAAO;AAE/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,WAAW,aAAa,SAAS;AAAA,IAC1C,aAAa,WAAW;AAAA,IACxB,QAAQ;AAAA,MACN,uBAAuB,iBAAiB,OAAO,SAAS,MAAM;AAAA,MAC9D,qBAAqB,iBAAiB,OAAO,SAAS,MAAM;AAAA,IAC9D;AAAA,EACF;AACF;AAeA,eAAe,cACb,OACA,MACA,SACA,SACuB;AACvB,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,MAAM,uBAAuB,YAAY;AAC5D,YAAM,MAAM,kBAAkB,MAAM,OAAO;AAAA,IAC7C,GAAG,OAAO;AACV,UAAM,kBAAkB,gBAAgB,QAAQ;AAChD,QAAI,CAAC,iBAAiB;AACpB,aAAO,EAAE,OAAO,iCAAiC;AAAA,IACnD;AACA,WAAO,EAAE,SAAS,gBAAgB;AAAA,EACpC,SAAS,KAAK;AACZ,WAAO,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,EACnE;AACF;AAEA,SAAS,gBAAgB,UAAiE;AACxF,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,OAAO,IAAI,WAAW,OAAQ,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,KAAqB,OAA4C;AACzF,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,IAAI;AAAA,IACZ,SAAS,IAAI;AAAA,IACb,MAAM,IAAI;AAAA,IACV,WAAW,IAAI;AAAA,IACf,eAAe,IAAI;AAAA,EACrB;AACF;","names":[]}

package/dist/lib/conformance/runners.js

@@ -60,7 +60,7 @@ async function runToolFuzz(tool, agent, options) {
     const probeRequest = "adcp_major_version" in request || "adcp_version" in request ? { ...request, adcp_major_version: import_version.ADCP_MAJOR_VERSION } : request;
     let result;
     try {
-      result = await agent.executeTask(tool, probeRequest);
+      result = await agent.executeTaskLegacy(tool, probeRequest);
     } catch (err2) {
       const message = err2?.message ?? String(err2);
       if (err2?.name === "FeatureUnsupportedError" || /does not support/i.test(message)) {

package/dist/lib/conformance/runners.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/conformance/runners.ts"],"sourcesContent":["import fc from 'fast-check';\nimport type { AgentClient } from '../core/AgentClient';\nimport type {\n  ConformanceFailure,\n  ConformanceFixtures,\n  ConformanceToolName,\n  ConformanceToolStats,\n  SkipReason,\n} from './types';\nimport { schemaToArbitrary } from './schemaArbitrary';\nimport { ADCP_MAJOR_VERSION } from '../version';\nimport { loadRequestSchema, type ConformanceSchemaOptions } from './schemaLoader';\nimport { evaluate, prepareResponseValidator } from './oracle';\n\nexport interface RunnerOptions {\n  seed: number;\n  numRuns: number;\n  authToken?: string;\n  /** Cap per-failure serialized payload size (bytes). */\n  maxFailurePayloadBytes: number;\n  /** ID pools for Tier-2 fixture injection. See ConformanceFixtures. */\n  fixtures?: ConformanceFixtures;\n  /** Schema bundle override for same-PR / external conformance runs. */\n  schemas?: ConformanceSchemaOptions;\n}\n\nexport interface RunnerResult {\n  stats: ConformanceToolStats;\n  failures: ConformanceFailure[];\n}\n\n/**\n * Fuzz a single tool against a connected agent. Uses fast-check's\n * `fc.check` for property generation + shrinking; a response that trips\n * the oracle is minimized to the smallest request that still reproduces\n * the failure before it's collected in the report.\n *\n * Returns the tool skipped when the agent declares it unsupported or when\n * the response schema can't be compiled — those aren't oracle failures,\n * they're environmental conditions.\n */\nexport async function runToolFuzz(\n  tool: ConformanceToolName,\n  agent: AgentClient,\n  options: RunnerOptions\n): Promise<RunnerResult> {\n  // Compile the response schema up front. Ajv sometimes fails on bundled\n  // schemas that still carry unresolved `$defs` refs (known upstream gap) —\n  // skip the tool cleanly rather than flag every run as invalid.\n  try {\n    prepareResponseValidator(tool, options.schemas);\n  } catch (err) {\n    return {\n      stats: skipStats('unresolvable_schema', (err as Error)?.message),\n      failures: [],\n    };\n  }\n\n  const schema = loadRequestSchema(tool, options.schemas);\n  const arb = schemaToArbitrary(schema, { fixtures: options.fixtures }) as fc.Arbitrary<Record<string, unknown>>;\n\n  // Counts only increment on fresh samples. `fc.check` re-runs the property\n  // during shrinking; we don't want those replays in the accepted/rejected\n  // tally. Track the minimum sample count we've seen and skip stat updates\n  // on replayed samples by hashing the sample.\n  const seenSamples = new Set<string>();\n  const stats: ConformanceToolStats = { runs: 0, accepted: 0, rejected: 0, failed: 0, skipped: false };\n  let transportUnsupported: string | null = null;\n\n  const property = fc.asyncProperty(arb, async request => {\n    const sampleKey = safeHash(request);\n    const isFreshSample = !seenSamples.has(sampleKey);\n    if (isFreshSample) {\n      seenSamples.add(sampleKey);\n      stats.runs++;\n    }\n\n    // Pin transport-envelope fields the buyer SDK manages itself.\n    // `applyVersionEnvelope` (PR #1073) auto-fills these on outbound\n    // requests, but the schema-driven arbitrary may overwrite them with\n    // out-of-window integers (1-99 per schema bounds). `createAdcpServer`'s\n    // single-field VERSION_UNSUPPORTED check (#1075) would then reject\n    // every probe before the handler runs, masking handler bugs the\n    // fuzzer is meant to catch. Version negotiation is exercised\n    // separately by storyboards (`error_compliance/unsupported_major_version`).\n    const probeRequest =\n      'adcp_major_version' in request || 'adcp_version' in request\n        ? { ...request, adcp_major_version: ADCP_MAJOR_VERSION }\n        : request;\n\n    let result;\n    try {\n      result = await agent.executeTask(tool, probeRequest);\n    } catch (err) {\n      const message = (err as Error)?.message ?? String(err);\n      // SDK throws FeatureUnsupportedError when the agent's declared\n      // capabilities don't list the tool. That's the agent saying \"not\n      // my job\" — not a conformance failure.\n      if ((err as Error)?.name === 'FeatureUnsupportedError' || /does not support/i.test(message)) {\n        transportUnsupported = message;\n        return; // pass — we'll convert the whole tool to skipped below\n      }\n      throw new InvariantViolation({ thrown: String(err), name: (err as Error)?.name, message }, [\n        'unhandled transport error: ' + message,\n      ]);\n    }\n\n    const verdict = evaluate({ tool, request, result, authToken: options.authToken, schemas: options.schemas });\n    if (isFreshSample) {\n      if (verdict.verdict === 'accepted') stats.accepted++;\n      else if (verdict.verdict === 'rejected') stats.rejected++;\n    }\n\n    if (verdict.verdict === 'invalid') {\n      throw new InvariantViolation(result, verdict.invariantFailures);\n    }\n  });\n\n  const details = await fc.check(property, {\n    seed: options.seed,\n    numRuns: options.numRuns,\n    verbose: 0,\n  });\n\n  if (transportUnsupported) {\n    return { stats: skipStats('feature_unsupported', transportUnsupported), failures: [] };\n  }\n\n  if (!details.failed) {\n    return { stats, failures: [] };\n  }\n\n  stats.failed = 1;\n  const shrunkInput = (details.counterexample as [Record<string, unknown>] | null)?.[0];\n  const err = details.errorInstance;\n  const invariantFailures =\n    err instanceof InvariantViolation\n      ? err.invariantFailures\n      : ['fuzz assertion failed: ' + ((err as Error | undefined)?.message ?? 'unknown')];\n  const response = err instanceof InvariantViolation ? err.response : undefined;\n\n  return {\n    stats,\n    failures: [\n      {\n        tool,\n        path: details.counterexamplePath ?? undefined,\n        seed: options.seed,\n        shrunk: (details.numShrinks ?? 0) > 0,\n        input: truncateForReport(shrunkInput, options.maxFailurePayloadBytes),\n        response: truncateForReport(response, options.maxFailurePayloadBytes),\n        verdict: 'invalid',\n        invariantFailures,\n      },\n    ],\n  };\n}\n\nfunction skipStats(reason: SkipReason, detail?: string): ConformanceToolStats {\n  return {\n    runs: 0,\n    accepted: 0,\n    rejected: 0,\n    failed: 0,\n    skipped: true,\n    skipReason: reason,\n    ...(detail ? { _detail: detail } : {}),\n  } as ConformanceToolStats;\n}\n\nfunction safeHash(value: unknown): string {\n  try {\n    return JSON.stringify(value) ?? '';\n  } catch {\n    return String(value);\n  }\n}\n\nfunction truncateForReport(value: unknown, maxBytes: number): unknown {\n  if (value === undefined || value === null) return value;\n  let serialized: string;\n  try {\n    serialized = JSON.stringify(value) ?? '';\n  } catch {\n    return { _truncated: true, _reason: 'unserializable' };\n  }\n  if (serialized.length <= maxBytes) return value;\n  return {\n    _truncated: true,\n    _originalBytes: serialized.length,\n    preview: serialized.slice(0, Math.max(256, maxBytes - 64)),\n  };\n}\n\nclass InvariantViolation extends Error {\n  constructor(\n    public readonly response: unknown,\n    public readonly invariantFailures: string[]\n  ) {\n    super(invariantFailures.join('; '));\n    this.name = 'InvariantViolation';\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAAe;AASf,6BAAkC;AAClC,qBAAmC;AACnC,0BAAiE;AACjE,oBAAmD;AA6BnD,eAAsB,YACpB,MACA,OACA,SACuB;AAIvB,MAAI;AACF,gDAAyB,MAAM,QAAQ,OAAO;AAAA,EAChD,SAASA,MAAK;AACZ,WAAO;AAAA,MACL,OAAO,UAAU,uBAAwBA,MAAe,OAAO;AAAA,MAC/D,UAAU,CAAC;AAAA,IACb;AAAA,EACF;AAEA,QAAM,aAAS,uCAAkB,MAAM,QAAQ,OAAO;AACtD,QAAM,UAAM,0CAAkB,QAAQ,EAAE,UAAU,QAAQ,SAAS,CAAC;AAMpE,QAAM,cAAc,oBAAI,IAAY;AACpC,QAAM,QAA8B,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,MAAM;AACnG,MAAI,uBAAsC;AAE1C,QAAM,WAAW,kBAAAC,QAAG,cAAc,KAAK,OAAM,YAAW;AACtD,UAAM,YAAY,SAAS,OAAO;AAClC,UAAM,gBAAgB,CAAC,YAAY,IAAI,SAAS;AAChD,QAAI,eAAe;AACjB,kBAAY,IAAI,SAAS;AACzB,YAAM;AAAA,IACR;AAUA,UAAM,eACJ,wBAAwB,WAAW,kBAAkB,UACjD,EAAE,GAAG,SAAS,oBAAoB,kCAAmB,IACrD;AAEN,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,MAAM,YAAY,MAAM,YAAY;AAAA,IACrD,SAASD,MAAK;AACZ,YAAM,UAAWA,MAAe,WAAW,OAAOA,IAAG;AAIrD,UAAKA,MAAe,SAAS,6BAA6B,oBAAoB,KAAK,OAAO,GAAG;AAC3F,+BAAuB;AACvB;AAAA,MACF;AACA,YAAM,IAAI,mBAAmB,EAAE,QAAQ,OAAOA,IAAG,GAAG,MAAOA,MAAe,MAAM,QAAQ,GAAG;AAAA,QACzF,gCAAgC;AAAA,MAClC,CAAC;AAAA,IACH;AAEA,UAAM,cAAU,wBAAS,EAAE,MAAM,SAAS,QAAQ,WAAW,QAAQ,WAAW,SAAS,QAAQ,QAAQ,CAAC;AAC1G,QAAI,eAAe;AACjB,UAAI,QAAQ,YAAY,WAAY,OAAM;AAAA,eACjC,QAAQ,YAAY,WAAY,OAAM;AAAA,IACjD;AAEA,QAAI,QAAQ,YAAY,WAAW;AACjC,YAAM,IAAI,mBAAmB,QAAQ,QAAQ,iBAAiB;AAAA,IAChE;AAAA,EACF,CAAC;AAED,QAAM,UAAU,MAAM,kBAAAC,QAAG,MAAM,UAAU;AAAA,IACvC,MAAM,QAAQ;AAAA,IACd,SAAS,QAAQ;AAAA,IACjB,SAAS;AAAA,EACX,CAAC;AAED,MAAI,sBAAsB;AACxB,WAAO,EAAE,OAAO,UAAU,uBAAuB,oBAAoB,GAAG,UAAU,CAAC,EAAE;AAAA,EACvF;AAEA,MAAI,CAAC,QAAQ,QAAQ;AACnB,WAAO,EAAE,OAAO,UAAU,CAAC,EAAE;AAAA,EAC/B;AAEA,QAAM,SAAS;AACf,QAAM,cAAe,QAAQ,iBAAsD,CAAC;AACpF,QAAM,MAAM,QAAQ;AACpB,QAAM,oBACJ,eAAe,qBACX,IAAI,oBACJ,CAAC,6BAA8B,KAA2B,WAAW,UAAU;AACrF,QAAM,WAAW,eAAe,qBAAqB,IAAI,WAAW;AAEpE,SAAO;AAAA,IACL;AAAA,IACA,UAAU;AAAA,MACR;AAAA,QACE;AAAA,QACA,MAAM,QAAQ,sBAAsB;AAAA,QACpC,MAAM,QAAQ;AAAA,QACd,SAAS,QAAQ,cAAc,KAAK;AAAA,QACpC,OAAO,kBAAkB,aAAa,QAAQ,sBAAsB;AAAA,QACpE,UAAU,kBAAkB,UAAU,QAAQ,sBAAsB;AAAA,QACpE,SAAS;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,UAAU,QAAoB,QAAuC;AAC5E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,GAAI,SAAS,EAAE,SAAS,OAAO,IAAI,CAAC;AAAA,EACtC;AACF;AAEA,SAAS,SAAS,OAAwB;AACxC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,kBAAkB,OAAgB,UAA2B;AACpE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,UAAU,KAAK,KAAK;AAAA,EACxC,QAAQ;AACN,WAAO,EAAE,YAAY,MAAM,SAAS,iBAAiB;AAAA,EACvD;AACA,MAAI,WAAW,UAAU,SAAU,QAAO;AAC1C,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,gBAAgB,WAAW;AAAA,IAC3B,SAAS,WAAW,MAAM,GAAG,KAAK,IAAI,KAAK,WAAW,EAAE,CAAC;AAAA,EAC3D;AACF;AAEA,MAAM,2BAA2B,MAAM;AAAA,EACrC,YACkB,UACA,mBAChB;AACA,UAAM,kBAAkB,KAAK,IAAI,CAAC;AAHlB;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAAA,EACA;AAKpB;","names":["err","fc"]}
+{"version":3,"sources":["../../../src/lib/conformance/runners.ts"],"sourcesContent":["import fc from 'fast-check';\nimport type { AgentClient } from '../core/AgentClient';\nimport type {\n  ConformanceFailure,\n  ConformanceFixtures,\n  ConformanceToolName,\n  ConformanceToolStats,\n  SkipReason,\n} from './types';\nimport { schemaToArbitrary } from './schemaArbitrary';\nimport { ADCP_MAJOR_VERSION } from '../version';\nimport { loadRequestSchema, type ConformanceSchemaOptions } from './schemaLoader';\nimport { evaluate, prepareResponseValidator } from './oracle';\n\nexport interface RunnerOptions {\n  seed: number;\n  numRuns: number;\n  authToken?: string;\n  /** Cap per-failure serialized payload size (bytes). */\n  maxFailurePayloadBytes: number;\n  /** ID pools for Tier-2 fixture injection. See ConformanceFixtures. */\n  fixtures?: ConformanceFixtures;\n  /** Schema bundle override for same-PR / external conformance runs. */\n  schemas?: ConformanceSchemaOptions;\n}\n\nexport interface RunnerResult {\n  stats: ConformanceToolStats;\n  failures: ConformanceFailure[];\n}\n\n/**\n * Fuzz a single tool against a connected agent. Uses fast-check's\n * `fc.check` for property generation + shrinking; a response that trips\n * the oracle is minimized to the smallest request that still reproduces\n * the failure before it's collected in the report.\n *\n * Returns the tool skipped when the agent declares it unsupported or when\n * the response schema can't be compiled — those aren't oracle failures,\n * they're environmental conditions.\n */\nexport async function runToolFuzz(\n  tool: ConformanceToolName,\n  agent: AgentClient,\n  options: RunnerOptions\n): Promise<RunnerResult> {\n  // Compile the response schema up front. Ajv sometimes fails on bundled\n  // schemas that still carry unresolved `$defs` refs (known upstream gap) —\n  // skip the tool cleanly rather than flag every run as invalid.\n  try {\n    prepareResponseValidator(tool, options.schemas);\n  } catch (err) {\n    return {\n      stats: skipStats('unresolvable_schema', (err as Error)?.message),\n      failures: [],\n    };\n  }\n\n  const schema = loadRequestSchema(tool, options.schemas);\n  const arb = schemaToArbitrary(schema, { fixtures: options.fixtures }) as fc.Arbitrary<Record<string, unknown>>;\n\n  // Counts only increment on fresh samples. `fc.check` re-runs the property\n  // during shrinking; we don't want those replays in the accepted/rejected\n  // tally. Track the minimum sample count we've seen and skip stat updates\n  // on replayed samples by hashing the sample.\n  const seenSamples = new Set<string>();\n  const stats: ConformanceToolStats = { runs: 0, accepted: 0, rejected: 0, failed: 0, skipped: false };\n  let transportUnsupported: string | null = null;\n\n  const property = fc.asyncProperty(arb, async request => {\n    const sampleKey = safeHash(request);\n    const isFreshSample = !seenSamples.has(sampleKey);\n    if (isFreshSample) {\n      seenSamples.add(sampleKey);\n      stats.runs++;\n    }\n\n    // Pin transport-envelope fields the buyer SDK manages itself.\n    // `applyVersionEnvelope` (PR #1073) auto-fills these on outbound\n    // requests, but the schema-driven arbitrary may overwrite them with\n    // out-of-window integers (1-99 per schema bounds). `createAdcpServer`'s\n    // single-field VERSION_UNSUPPORTED check (#1075) would then reject\n    // every probe before the handler runs, masking handler bugs the\n    // fuzzer is meant to catch. Version negotiation is exercised\n    // separately by storyboards (`error_compliance/unsupported_major_version`).\n    const probeRequest =\n      'adcp_major_version' in request || 'adcp_version' in request\n        ? { ...request, adcp_major_version: ADCP_MAJOR_VERSION }\n        : request;\n\n    let result;\n    try {\n      result = await agent.executeTaskLegacy(tool, probeRequest);\n    } catch (err) {\n      const message = (err as Error)?.message ?? String(err);\n      // SDK throws FeatureUnsupportedError when the agent's declared\n      // capabilities don't list the tool. That's the agent saying \"not\n      // my job\" — not a conformance failure.\n      if ((err as Error)?.name === 'FeatureUnsupportedError' || /does not support/i.test(message)) {\n        transportUnsupported = message;\n        return; // pass — we'll convert the whole tool to skipped below\n      }\n      throw new InvariantViolation({ thrown: String(err), name: (err as Error)?.name, message }, [\n        'unhandled transport error: ' + message,\n      ]);\n    }\n\n    const verdict = evaluate({ tool, request, result, authToken: options.authToken, schemas: options.schemas });\n    if (isFreshSample) {\n      if (verdict.verdict === 'accepted') stats.accepted++;\n      else if (verdict.verdict === 'rejected') stats.rejected++;\n    }\n\n    if (verdict.verdict === 'invalid') {\n      throw new InvariantViolation(result, verdict.invariantFailures);\n    }\n  });\n\n  const details = await fc.check(property, {\n    seed: options.seed,\n    numRuns: options.numRuns,\n    verbose: 0,\n  });\n\n  if (transportUnsupported) {\n    return { stats: skipStats('feature_unsupported', transportUnsupported), failures: [] };\n  }\n\n  if (!details.failed) {\n    return { stats, failures: [] };\n  }\n\n  stats.failed = 1;\n  const shrunkInput = (details.counterexample as [Record<string, unknown>] | null)?.[0];\n  const err = details.errorInstance;\n  const invariantFailures =\n    err instanceof InvariantViolation\n      ? err.invariantFailures\n      : ['fuzz assertion failed: ' + ((err as Error | undefined)?.message ?? 'unknown')];\n  const response = err instanceof InvariantViolation ? err.response : undefined;\n\n  return {\n    stats,\n    failures: [\n      {\n        tool,\n        path: details.counterexamplePath ?? undefined,\n        seed: options.seed,\n        shrunk: (details.numShrinks ?? 0) > 0,\n        input: truncateForReport(shrunkInput, options.maxFailurePayloadBytes),\n        response: truncateForReport(response, options.maxFailurePayloadBytes),\n        verdict: 'invalid',\n        invariantFailures,\n      },\n    ],\n  };\n}\n\nfunction skipStats(reason: SkipReason, detail?: string): ConformanceToolStats {\n  return {\n    runs: 0,\n    accepted: 0,\n    rejected: 0,\n    failed: 0,\n    skipped: true,\n    skipReason: reason,\n    ...(detail ? { _detail: detail } : {}),\n  } as ConformanceToolStats;\n}\n\nfunction safeHash(value: unknown): string {\n  try {\n    return JSON.stringify(value) ?? '';\n  } catch {\n    return String(value);\n  }\n}\n\nfunction truncateForReport(value: unknown, maxBytes: number): unknown {\n  if (value === undefined || value === null) return value;\n  let serialized: string;\n  try {\n    serialized = JSON.stringify(value) ?? '';\n  } catch {\n    return { _truncated: true, _reason: 'unserializable' };\n  }\n  if (serialized.length <= maxBytes) return value;\n  return {\n    _truncated: true,\n    _originalBytes: serialized.length,\n    preview: serialized.slice(0, Math.max(256, maxBytes - 64)),\n  };\n}\n\nclass InvariantViolation extends Error {\n  constructor(\n    public readonly response: unknown,\n    public readonly invariantFailures: string[]\n  ) {\n    super(invariantFailures.join('; '));\n    this.name = 'InvariantViolation';\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAAe;AASf,6BAAkC;AAClC,qBAAmC;AACnC,0BAAiE;AACjE,oBAAmD;AA6BnD,eAAsB,YACpB,MACA,OACA,SACuB;AAIvB,MAAI;AACF,gDAAyB,MAAM,QAAQ,OAAO;AAAA,EAChD,SAASA,MAAK;AACZ,WAAO;AAAA,MACL,OAAO,UAAU,uBAAwBA,MAAe,OAAO;AAAA,MAC/D,UAAU,CAAC;AAAA,IACb;AAAA,EACF;AAEA,QAAM,aAAS,uCAAkB,MAAM,QAAQ,OAAO;AACtD,QAAM,UAAM,0CAAkB,QAAQ,EAAE,UAAU,QAAQ,SAAS,CAAC;AAMpE,QAAM,cAAc,oBAAI,IAAY;AACpC,QAAM,QAA8B,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,MAAM;AACnG,MAAI,uBAAsC;AAE1C,QAAM,WAAW,kBAAAC,QAAG,cAAc,KAAK,OAAM,YAAW;AACtD,UAAM,YAAY,SAAS,OAAO;AAClC,UAAM,gBAAgB,CAAC,YAAY,IAAI,SAAS;AAChD,QAAI,eAAe;AACjB,kBAAY,IAAI,SAAS;AACzB,YAAM;AAAA,IACR;AAUA,UAAM,eACJ,wBAAwB,WAAW,kBAAkB,UACjD,EAAE,GAAG,SAAS,oBAAoB,kCAAmB,IACrD;AAEN,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,MAAM,kBAAkB,MAAM,YAAY;AAAA,IAC3D,SAASD,MAAK;AACZ,YAAM,UAAWA,MAAe,WAAW,OAAOA,IAAG;AAIrD,UAAKA,MAAe,SAAS,6BAA6B,oBAAoB,KAAK,OAAO,GAAG;AAC3F,+BAAuB;AACvB;AAAA,MACF;AACA,YAAM,IAAI,mBAAmB,EAAE,QAAQ,OAAOA,IAAG,GAAG,MAAOA,MAAe,MAAM,QAAQ,GAAG;AAAA,QACzF,gCAAgC;AAAA,MAClC,CAAC;AAAA,IACH;AAEA,UAAM,cAAU,wBAAS,EAAE,MAAM,SAAS,QAAQ,WAAW,QAAQ,WAAW,SAAS,QAAQ,QAAQ,CAAC;AAC1G,QAAI,eAAe;AACjB,UAAI,QAAQ,YAAY,WAAY,OAAM;AAAA,eACjC,QAAQ,YAAY,WAAY,OAAM;AAAA,IACjD;AAEA,QAAI,QAAQ,YAAY,WAAW;AACjC,YAAM,IAAI,mBAAmB,QAAQ,QAAQ,iBAAiB;AAAA,IAChE;AAAA,EACF,CAAC;AAED,QAAM,UAAU,MAAM,kBAAAC,QAAG,MAAM,UAAU;AAAA,IACvC,MAAM,QAAQ;AAAA,IACd,SAAS,QAAQ;AAAA,IACjB,SAAS;AAAA,EACX,CAAC;AAED,MAAI,sBAAsB;AACxB,WAAO,EAAE,OAAO,UAAU,uBAAuB,oBAAoB,GAAG,UAAU,CAAC,EAAE;AAAA,EACvF;AAEA,MAAI,CAAC,QAAQ,QAAQ;AACnB,WAAO,EAAE,OAAO,UAAU,CAAC,EAAE;AAAA,EAC/B;AAEA,QAAM,SAAS;AACf,QAAM,cAAe,QAAQ,iBAAsD,CAAC;AACpF,QAAM,MAAM,QAAQ;AACpB,QAAM,oBACJ,eAAe,qBACX,IAAI,oBACJ,CAAC,6BAA8B,KAA2B,WAAW,UAAU;AACrF,QAAM,WAAW,eAAe,qBAAqB,IAAI,WAAW;AAEpE,SAAO;AAAA,IACL;AAAA,IACA,UAAU;AAAA,MACR;AAAA,QACE;AAAA,QACA,MAAM,QAAQ,sBAAsB;AAAA,QACpC,MAAM,QAAQ;AAAA,QACd,SAAS,QAAQ,cAAc,KAAK;AAAA,QACpC,OAAO,kBAAkB,aAAa,QAAQ,sBAAsB;AAAA,QACpE,UAAU,kBAAkB,UAAU,QAAQ,sBAAsB;AAAA,QACpE,SAAS;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,UAAU,QAAoB,QAAuC;AAC5E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,GAAI,SAAS,EAAE,SAAS,OAAO,IAAI,CAAC;AAAA,EACtC;AACF;AAEA,SAAS,SAAS,OAAwB;AACxC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,kBAAkB,OAAgB,UAA2B;AACpE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,UAAU,KAAK,KAAK;AAAA,EACxC,QAAQ;AACN,WAAO,EAAE,YAAY,MAAM,SAAS,iBAAiB;AAAA,EACvD;AACA,MAAI,WAAW,UAAU,SAAU,QAAO;AAC1C,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,gBAAgB,WAAW;AAAA,IAC3B,SAAS,WAAW,MAAM,GAAG,KAAK,IAAI,KAAK,WAAW,EAAE,CAAC;AAAA,EAC3D;AACF;AAEA,MAAM,2BAA2B,MAAM;AAAA,EACrC,YACkB,UACA,mBAChB;AACA,UAAM,kBAAkB,KAAK,IAAI,CAAC;AAHlB;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAAA,EACA;AAKpB;","names":["err","fc"]}

package/dist/lib/conformance/runners.mjs

@@ -27,7 +27,7 @@ async function runToolFuzz(tool, agent, options) {
     const probeRequest = "adcp_major_version" in request || "adcp_version" in request ? { ...request, adcp_major_version: ADCP_MAJOR_VERSION } : request;
     let result;
     try {
-      result = await agent.executeTask(tool, probeRequest);
+      result = await agent.executeTaskLegacy(tool, probeRequest);
     } catch (err2) {
       const message = err2?.message ?? String(err2);
       if (err2?.name === "FeatureUnsupportedError" || /does not support/i.test(message)) {

package/dist/lib/conformance/runners.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/lib/conformance/runners.ts"],"sourcesContent":["import fc from 'fast-check';\nimport type { AgentClient } from '../core/AgentClient';\nimport type {\n  ConformanceFailure,\n  ConformanceFixtures,\n  ConformanceToolName,\n  ConformanceToolStats,\n  SkipReason,\n} from './types';\nimport { schemaToArbitrary } from './schemaArbitrary';\nimport { ADCP_MAJOR_VERSION } from '../version';\nimport { loadRequestSchema, type ConformanceSchemaOptions } from './schemaLoader';\nimport { evaluate, prepareResponseValidator } from './oracle';\n\nexport interface RunnerOptions {\n  seed: number;\n  numRuns: number;\n  authToken?: string;\n  /** Cap per-failure serialized payload size (bytes). */\n  maxFailurePayloadBytes: number;\n  /** ID pools for Tier-2 fixture injection. See ConformanceFixtures. */\n  fixtures?: ConformanceFixtures;\n  /** Schema bundle override for same-PR / external conformance runs. */\n  schemas?: ConformanceSchemaOptions;\n}\n\nexport interface RunnerResult {\n  stats: ConformanceToolStats;\n  failures: ConformanceFailure[];\n}\n\n/**\n * Fuzz a single tool against a connected agent. Uses fast-check's\n * `fc.check` for property generation + shrinking; a response that trips\n * the oracle is minimized to the smallest request that still reproduces\n * the failure before it's collected in the report.\n *\n * Returns the tool skipped when the agent declares it unsupported or when\n * the response schema can't be compiled — those aren't oracle failures,\n * they're environmental conditions.\n */\nexport async function runToolFuzz(\n  tool: ConformanceToolName,\n  agent: AgentClient,\n  options: RunnerOptions\n): Promise<RunnerResult> {\n  // Compile the response schema up front. Ajv sometimes fails on bundled\n  // schemas that still carry unresolved `$defs` refs (known upstream gap) —\n  // skip the tool cleanly rather than flag every run as invalid.\n  try {\n    prepareResponseValidator(tool, options.schemas);\n  } catch (err) {\n    return {\n      stats: skipStats('unresolvable_schema', (err as Error)?.message),\n      failures: [],\n    };\n  }\n\n  const schema = loadRequestSchema(tool, options.schemas);\n  const arb = schemaToArbitrary(schema, { fixtures: options.fixtures }) as fc.Arbitrary<Record<string, unknown>>;\n\n  // Counts only increment on fresh samples. `fc.check` re-runs the property\n  // during shrinking; we don't want those replays in the accepted/rejected\n  // tally. Track the minimum sample count we've seen and skip stat updates\n  // on replayed samples by hashing the sample.\n  const seenSamples = new Set<string>();\n  const stats: ConformanceToolStats = { runs: 0, accepted: 0, rejected: 0, failed: 0, skipped: false };\n  let transportUnsupported: string | null = null;\n\n  const property = fc.asyncProperty(arb, async request => {\n    const sampleKey = safeHash(request);\n    const isFreshSample = !seenSamples.has(sampleKey);\n    if (isFreshSample) {\n      seenSamples.add(sampleKey);\n      stats.runs++;\n    }\n\n    // Pin transport-envelope fields the buyer SDK manages itself.\n    // `applyVersionEnvelope` (PR #1073) auto-fills these on outbound\n    // requests, but the schema-driven arbitrary may overwrite them with\n    // out-of-window integers (1-99 per schema bounds). `createAdcpServer`'s\n    // single-field VERSION_UNSUPPORTED check (#1075) would then reject\n    // every probe before the handler runs, masking handler bugs the\n    // fuzzer is meant to catch. Version negotiation is exercised\n    // separately by storyboards (`error_compliance/unsupported_major_version`).\n    const probeRequest =\n      'adcp_major_version' in request || 'adcp_version' in request\n        ? { ...request, adcp_major_version: ADCP_MAJOR_VERSION }\n        : request;\n\n    let result;\n    try {\n      result = await agent.executeTask(tool, probeRequest);\n    } catch (err) {\n      const message = (err as Error)?.message ?? String(err);\n      // SDK throws FeatureUnsupportedError when the agent's declared\n      // capabilities don't list the tool. That's the agent saying \"not\n      // my job\" — not a conformance failure.\n      if ((err as Error)?.name === 'FeatureUnsupportedError' || /does not support/i.test(message)) {\n        transportUnsupported = message;\n        return; // pass — we'll convert the whole tool to skipped below\n      }\n      throw new InvariantViolation({ thrown: String(err), name: (err as Error)?.name, message }, [\n        'unhandled transport error: ' + message,\n      ]);\n    }\n\n    const verdict = evaluate({ tool, request, result, authToken: options.authToken, schemas: options.schemas });\n    if (isFreshSample) {\n      if (verdict.verdict === 'accepted') stats.accepted++;\n      else if (verdict.verdict === 'rejected') stats.rejected++;\n    }\n\n    if (verdict.verdict === 'invalid') {\n      throw new InvariantViolation(result, verdict.invariantFailures);\n    }\n  });\n\n  const details = await fc.check(property, {\n    seed: options.seed,\n    numRuns: options.numRuns,\n    verbose: 0,\n  });\n\n  if (transportUnsupported) {\n    return { stats: skipStats('feature_unsupported', transportUnsupported), failures: [] };\n  }\n\n  if (!details.failed) {\n    return { stats, failures: [] };\n  }\n\n  stats.failed = 1;\n  const shrunkInput = (details.counterexample as [Record<string, unknown>] | null)?.[0];\n  const err = details.errorInstance;\n  const invariantFailures =\n    err instanceof InvariantViolation\n      ? err.invariantFailures\n      : ['fuzz assertion failed: ' + ((err as Error | undefined)?.message ?? 'unknown')];\n  const response = err instanceof InvariantViolation ? err.response : undefined;\n\n  return {\n    stats,\n    failures: [\n      {\n        tool,\n        path: details.counterexamplePath ?? undefined,\n        seed: options.seed,\n        shrunk: (details.numShrinks ?? 0) > 0,\n        input: truncateForReport(shrunkInput, options.maxFailurePayloadBytes),\n        response: truncateForReport(response, options.maxFailurePayloadBytes),\n        verdict: 'invalid',\n        invariantFailures,\n      },\n    ],\n  };\n}\n\nfunction skipStats(reason: SkipReason, detail?: string): ConformanceToolStats {\n  return {\n    runs: 0,\n    accepted: 0,\n    rejected: 0,\n    failed: 0,\n    skipped: true,\n    skipReason: reason,\n    ...(detail ? { _detail: detail } : {}),\n  } as ConformanceToolStats;\n}\n\nfunction safeHash(value: unknown): string {\n  try {\n    return JSON.stringify(value) ?? '';\n  } catch {\n    return String(value);\n  }\n}\n\nfunction truncateForReport(value: unknown, maxBytes: number): unknown {\n  if (value === undefined || value === null) return value;\n  let serialized: string;\n  try {\n    serialized = JSON.stringify(value) ?? '';\n  } catch {\n    return { _truncated: true, _reason: 'unserializable' };\n  }\n  if (serialized.length <= maxBytes) return value;\n  return {\n    _truncated: true,\n    _originalBytes: serialized.length,\n    preview: serialized.slice(0, Math.max(256, maxBytes - 64)),\n  };\n}\n\nclass InvariantViolation extends Error {\n  constructor(\n    public readonly response: unknown,\n    public readonly invariantFailures: string[]\n  ) {\n    super(invariantFailures.join('; '));\n    this.name = 'InvariantViolation';\n  }\n}\n"],"mappings":"AAAA,OAAO,QAAQ;AASf,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,yBAAwD;AACjE,SAAS,UAAU,gCAAgC;AA6BnD,eAAsB,YACpB,MACA,OACA,SACuB;AAIvB,MAAI;AACF,6BAAyB,MAAM,QAAQ,OAAO;AAAA,EAChD,SAASA,MAAK;AACZ,WAAO;AAAA,MACL,OAAO,UAAU,uBAAwBA,MAAe,OAAO;AAAA,MAC/D,UAAU,CAAC;AAAA,IACb;AAAA,EACF;AAEA,QAAM,SAAS,kBAAkB,MAAM,QAAQ,OAAO;AACtD,QAAM,MAAM,kBAAkB,QAAQ,EAAE,UAAU,QAAQ,SAAS,CAAC;AAMpE,QAAM,cAAc,oBAAI,IAAY;AACpC,QAAM,QAA8B,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,MAAM;AACnG,MAAI,uBAAsC;AAE1C,QAAM,WAAW,GAAG,cAAc,KAAK,OAAM,YAAW;AACtD,UAAM,YAAY,SAAS,OAAO;AAClC,UAAM,gBAAgB,CAAC,YAAY,IAAI,SAAS;AAChD,QAAI,eAAe;AACjB,kBAAY,IAAI,SAAS;AACzB,YAAM;AAAA,IACR;AAUA,UAAM,eACJ,wBAAwB,WAAW,kBAAkB,UACjD,EAAE,GAAG,SAAS,oBAAoB,mBAAmB,IACrD;AAEN,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,MAAM,YAAY,MAAM,YAAY;AAAA,IACrD,SAASA,MAAK;AACZ,YAAM,UAAWA,MAAe,WAAW,OAAOA,IAAG;AAIrD,UAAKA,MAAe,SAAS,6BAA6B,oBAAoB,KAAK,OAAO,GAAG;AAC3F,+BAAuB;AACvB;AAAA,MACF;AACA,YAAM,IAAI,mBAAmB,EAAE,QAAQ,OAAOA,IAAG,GAAG,MAAOA,MAAe,MAAM,QAAQ,GAAG;AAAA,QACzF,gCAAgC;AAAA,MAClC,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,SAAS,EAAE,MAAM,SAAS,QAAQ,WAAW,QAAQ,WAAW,SAAS,QAAQ,QAAQ,CAAC;AAC1G,QAAI,eAAe;AACjB,UAAI,QAAQ,YAAY,WAAY,OAAM;AAAA,eACjC,QAAQ,YAAY,WAAY,OAAM;AAAA,IACjD;AAEA,QAAI,QAAQ,YAAY,WAAW;AACjC,YAAM,IAAI,mBAAmB,QAAQ,QAAQ,iBAAiB;AAAA,IAChE;AAAA,EACF,CAAC;AAED,QAAM,UAAU,MAAM,GAAG,MAAM,UAAU;AAAA,IACvC,MAAM,QAAQ;AAAA,IACd,SAAS,QAAQ;AAAA,IACjB,SAAS;AAAA,EACX,CAAC;AAED,MAAI,sBAAsB;AACxB,WAAO,EAAE,OAAO,UAAU,uBAAuB,oBAAoB,GAAG,UAAU,CAAC,EAAE;AAAA,EACvF;AAEA,MAAI,CAAC,QAAQ,QAAQ;AACnB,WAAO,EAAE,OAAO,UAAU,CAAC,EAAE;AAAA,EAC/B;AAEA,QAAM,SAAS;AACf,QAAM,cAAe,QAAQ,iBAAsD,CAAC;AACpF,QAAM,MAAM,QAAQ;AACpB,QAAM,oBACJ,eAAe,qBACX,IAAI,oBACJ,CAAC,6BAA8B,KAA2B,WAAW,UAAU;AACrF,QAAM,WAAW,eAAe,qBAAqB,IAAI,WAAW;AAEpE,SAAO;AAAA,IACL;AAAA,IACA,UAAU;AAAA,MACR;AAAA,QACE;AAAA,QACA,MAAM,QAAQ,sBAAsB;AAAA,QACpC,MAAM,QAAQ;AAAA,QACd,SAAS,QAAQ,cAAc,KAAK;AAAA,QACpC,OAAO,kBAAkB,aAAa,QAAQ,sBAAsB;AAAA,QACpE,UAAU,kBAAkB,UAAU,QAAQ,sBAAsB;AAAA,QACpE,SAAS;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,UAAU,QAAoB,QAAuC;AAC5E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,GAAI,SAAS,EAAE,SAAS,OAAO,IAAI,CAAC;AAAA,EACtC;AACF;AAEA,SAAS,SAAS,OAAwB;AACxC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,kBAAkB,OAAgB,UAA2B;AACpE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,UAAU,KAAK,KAAK;AAAA,EACxC,QAAQ;AACN,WAAO,EAAE,YAAY,MAAM,SAAS,iBAAiB;AAAA,EACvD;AACA,MAAI,WAAW,UAAU,SAAU,QAAO;AAC1C,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,gBAAgB,WAAW;AAAA,IAC3B,SAAS,WAAW,MAAM,GAAG,KAAK,IAAI,KAAK,WAAW,EAAE,CAAC;AAAA,EAC3D;AACF;AAEA,MAAM,2BAA2B,MAAM;AAAA,EACrC,YACkB,UACA,mBAChB;AACA,UAAM,kBAAkB,KAAK,IAAI,CAAC;AAHlB;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAAA,EACA;AAKpB;","names":["err"]}
+{"version":3,"sources":["../../../src/lib/conformance/runners.ts"],"sourcesContent":["import fc from 'fast-check';\nimport type { AgentClient } from '../core/AgentClient';\nimport type {\n  ConformanceFailure,\n  ConformanceFixtures,\n  ConformanceToolName,\n  ConformanceToolStats,\n  SkipReason,\n} from './types';\nimport { schemaToArbitrary } from './schemaArbitrary';\nimport { ADCP_MAJOR_VERSION } from '../version';\nimport { loadRequestSchema, type ConformanceSchemaOptions } from './schemaLoader';\nimport { evaluate, prepareResponseValidator } from './oracle';\n\nexport interface RunnerOptions {\n  seed: number;\n  numRuns: number;\n  authToken?: string;\n  /** Cap per-failure serialized payload size (bytes). */\n  maxFailurePayloadBytes: number;\n  /** ID pools for Tier-2 fixture injection. See ConformanceFixtures. */\n  fixtures?: ConformanceFixtures;\n  /** Schema bundle override for same-PR / external conformance runs. */\n  schemas?: ConformanceSchemaOptions;\n}\n\nexport interface RunnerResult {\n  stats: ConformanceToolStats;\n  failures: ConformanceFailure[];\n}\n\n/**\n * Fuzz a single tool against a connected agent. Uses fast-check's\n * `fc.check` for property generation + shrinking; a response that trips\n * the oracle is minimized to the smallest request that still reproduces\n * the failure before it's collected in the report.\n *\n * Returns the tool skipped when the agent declares it unsupported or when\n * the response schema can't be compiled — those aren't oracle failures,\n * they're environmental conditions.\n */\nexport async function runToolFuzz(\n  tool: ConformanceToolName,\n  agent: AgentClient,\n  options: RunnerOptions\n): Promise<RunnerResult> {\n  // Compile the response schema up front. Ajv sometimes fails on bundled\n  // schemas that still carry unresolved `$defs` refs (known upstream gap) —\n  // skip the tool cleanly rather than flag every run as invalid.\n  try {\n    prepareResponseValidator(tool, options.schemas);\n  } catch (err) {\n    return {\n      stats: skipStats('unresolvable_schema', (err as Error)?.message),\n      failures: [],\n    };\n  }\n\n  const schema = loadRequestSchema(tool, options.schemas);\n  const arb = schemaToArbitrary(schema, { fixtures: options.fixtures }) as fc.Arbitrary<Record<string, unknown>>;\n\n  // Counts only increment on fresh samples. `fc.check` re-runs the property\n  // during shrinking; we don't want those replays in the accepted/rejected\n  // tally. Track the minimum sample count we've seen and skip stat updates\n  // on replayed samples by hashing the sample.\n  const seenSamples = new Set<string>();\n  const stats: ConformanceToolStats = { runs: 0, accepted: 0, rejected: 0, failed: 0, skipped: false };\n  let transportUnsupported: string | null = null;\n\n  const property = fc.asyncProperty(arb, async request => {\n    const sampleKey = safeHash(request);\n    const isFreshSample = !seenSamples.has(sampleKey);\n    if (isFreshSample) {\n      seenSamples.add(sampleKey);\n      stats.runs++;\n    }\n\n    // Pin transport-envelope fields the buyer SDK manages itself.\n    // `applyVersionEnvelope` (PR #1073) auto-fills these on outbound\n    // requests, but the schema-driven arbitrary may overwrite them with\n    // out-of-window integers (1-99 per schema bounds). `createAdcpServer`'s\n    // single-field VERSION_UNSUPPORTED check (#1075) would then reject\n    // every probe before the handler runs, masking handler bugs the\n    // fuzzer is meant to catch. Version negotiation is exercised\n    // separately by storyboards (`error_compliance/unsupported_major_version`).\n    const probeRequest =\n      'adcp_major_version' in request || 'adcp_version' in request\n        ? { ...request, adcp_major_version: ADCP_MAJOR_VERSION }\n        : request;\n\n    let result;\n    try {\n      result = await agent.executeTaskLegacy(tool, probeRequest);\n    } catch (err) {\n      const message = (err as Error)?.message ?? String(err);\n      // SDK throws FeatureUnsupportedError when the agent's declared\n      // capabilities don't list the tool. That's the agent saying \"not\n      // my job\" — not a conformance failure.\n      if ((err as Error)?.name === 'FeatureUnsupportedError' || /does not support/i.test(message)) {\n        transportUnsupported = message;\n        return; // pass — we'll convert the whole tool to skipped below\n      }\n      throw new InvariantViolation({ thrown: String(err), name: (err as Error)?.name, message }, [\n        'unhandled transport error: ' + message,\n      ]);\n    }\n\n    const verdict = evaluate({ tool, request, result, authToken: options.authToken, schemas: options.schemas });\n    if (isFreshSample) {\n      if (verdict.verdict === 'accepted') stats.accepted++;\n      else if (verdict.verdict === 'rejected') stats.rejected++;\n    }\n\n    if (verdict.verdict === 'invalid') {\n      throw new InvariantViolation(result, verdict.invariantFailures);\n    }\n  });\n\n  const details = await fc.check(property, {\n    seed: options.seed,\n    numRuns: options.numRuns,\n    verbose: 0,\n  });\n\n  if (transportUnsupported) {\n    return { stats: skipStats('feature_unsupported', transportUnsupported), failures: [] };\n  }\n\n  if (!details.failed) {\n    return { stats, failures: [] };\n  }\n\n  stats.failed = 1;\n  const shrunkInput = (details.counterexample as [Record<string, unknown>] | null)?.[0];\n  const err = details.errorInstance;\n  const invariantFailures =\n    err instanceof InvariantViolation\n      ? err.invariantFailures\n      : ['fuzz assertion failed: ' + ((err as Error | undefined)?.message ?? 'unknown')];\n  const response = err instanceof InvariantViolation ? err.response : undefined;\n\n  return {\n    stats,\n    failures: [\n      {\n        tool,\n        path: details.counterexamplePath ?? undefined,\n        seed: options.seed,\n        shrunk: (details.numShrinks ?? 0) > 0,\n        input: truncateForReport(shrunkInput, options.maxFailurePayloadBytes),\n        response: truncateForReport(response, options.maxFailurePayloadBytes),\n        verdict: 'invalid',\n        invariantFailures,\n      },\n    ],\n  };\n}\n\nfunction skipStats(reason: SkipReason, detail?: string): ConformanceToolStats {\n  return {\n    runs: 0,\n    accepted: 0,\n    rejected: 0,\n    failed: 0,\n    skipped: true,\n    skipReason: reason,\n    ...(detail ? { _detail: detail } : {}),\n  } as ConformanceToolStats;\n}\n\nfunction safeHash(value: unknown): string {\n  try {\n    return JSON.stringify(value) ?? '';\n  } catch {\n    return String(value);\n  }\n}\n\nfunction truncateForReport(value: unknown, maxBytes: number): unknown {\n  if (value === undefined || value === null) return value;\n  let serialized: string;\n  try {\n    serialized = JSON.stringify(value) ?? '';\n  } catch {\n    return { _truncated: true, _reason: 'unserializable' };\n  }\n  if (serialized.length <= maxBytes) return value;\n  return {\n    _truncated: true,\n    _originalBytes: serialized.length,\n    preview: serialized.slice(0, Math.max(256, maxBytes - 64)),\n  };\n}\n\nclass InvariantViolation extends Error {\n  constructor(\n    public readonly response: unknown,\n    public readonly invariantFailures: string[]\n  ) {\n    super(invariantFailures.join('; '));\n    this.name = 'InvariantViolation';\n  }\n}\n"],"mappings":"AAAA,OAAO,QAAQ;AASf,SAAS,yBAAyB;AAClC,SAAS,0BAA0B;AACnC,SAAS,yBAAwD;AACjE,SAAS,UAAU,gCAAgC;AA6BnD,eAAsB,YACpB,MACA,OACA,SACuB;AAIvB,MAAI;AACF,6BAAyB,MAAM,QAAQ,OAAO;AAAA,EAChD,SAASA,MAAK;AACZ,WAAO;AAAA,MACL,OAAO,UAAU,uBAAwBA,MAAe,OAAO;AAAA,MAC/D,UAAU,CAAC;AAAA,IACb;AAAA,EACF;AAEA,QAAM,SAAS,kBAAkB,MAAM,QAAQ,OAAO;AACtD,QAAM,MAAM,kBAAkB,QAAQ,EAAE,UAAU,QAAQ,SAAS,CAAC;AAMpE,QAAM,cAAc,oBAAI,IAAY;AACpC,QAAM,QAA8B,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,MAAM;AACnG,MAAI,uBAAsC;AAE1C,QAAM,WAAW,GAAG,cAAc,KAAK,OAAM,YAAW;AACtD,UAAM,YAAY,SAAS,OAAO;AAClC,UAAM,gBAAgB,CAAC,YAAY,IAAI,SAAS;AAChD,QAAI,eAAe;AACjB,kBAAY,IAAI,SAAS;AACzB,YAAM;AAAA,IACR;AAUA,UAAM,eACJ,wBAAwB,WAAW,kBAAkB,UACjD,EAAE,GAAG,SAAS,oBAAoB,mBAAmB,IACrD;AAEN,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,MAAM,kBAAkB,MAAM,YAAY;AAAA,IAC3D,SAASA,MAAK;AACZ,YAAM,UAAWA,MAAe,WAAW,OAAOA,IAAG;AAIrD,UAAKA,MAAe,SAAS,6BAA6B,oBAAoB,KAAK,OAAO,GAAG;AAC3F,+BAAuB;AACvB;AAAA,MACF;AACA,YAAM,IAAI,mBAAmB,EAAE,QAAQ,OAAOA,IAAG,GAAG,MAAOA,MAAe,MAAM,QAAQ,GAAG;AAAA,QACzF,gCAAgC;AAAA,MAClC,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,SAAS,EAAE,MAAM,SAAS,QAAQ,WAAW,QAAQ,WAAW,SAAS,QAAQ,QAAQ,CAAC;AAC1G,QAAI,eAAe;AACjB,UAAI,QAAQ,YAAY,WAAY,OAAM;AAAA,eACjC,QAAQ,YAAY,WAAY,OAAM;AAAA,IACjD;AAEA,QAAI,QAAQ,YAAY,WAAW;AACjC,YAAM,IAAI,mBAAmB,QAAQ,QAAQ,iBAAiB;AAAA,IAChE;AAAA,EACF,CAAC;AAED,QAAM,UAAU,MAAM,GAAG,MAAM,UAAU;AAAA,IACvC,MAAM,QAAQ;AAAA,IACd,SAAS,QAAQ;AAAA,IACjB,SAAS;AAAA,EACX,CAAC;AAED,MAAI,sBAAsB;AACxB,WAAO,EAAE,OAAO,UAAU,uBAAuB,oBAAoB,GAAG,UAAU,CAAC,EAAE;AAAA,EACvF;AAEA,MAAI,CAAC,QAAQ,QAAQ;AACnB,WAAO,EAAE,OAAO,UAAU,CAAC,EAAE;AAAA,EAC/B;AAEA,QAAM,SAAS;AACf,QAAM,cAAe,QAAQ,iBAAsD,CAAC;AACpF,QAAM,MAAM,QAAQ;AACpB,QAAM,oBACJ,eAAe,qBACX,IAAI,oBACJ,CAAC,6BAA8B,KAA2B,WAAW,UAAU;AACrF,QAAM,WAAW,eAAe,qBAAqB,IAAI,WAAW;AAEpE,SAAO;AAAA,IACL;AAAA,IACA,UAAU;AAAA,MACR;AAAA,QACE;AAAA,QACA,MAAM,QAAQ,sBAAsB;AAAA,QACpC,MAAM,QAAQ;AAAA,QACd,SAAS,QAAQ,cAAc,KAAK;AAAA,QACpC,OAAO,kBAAkB,aAAa,QAAQ,sBAAsB;AAAA,QACpE,UAAU,kBAAkB,UAAU,QAAQ,sBAAsB;AAAA,QACpE,SAAS;AAAA,QACT;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,UAAU,QAAoB,QAAuC;AAC5E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,GAAI,SAAS,EAAE,SAAS,OAAO,IAAI,CAAC;AAAA,EACtC;AACF;AAEA,SAAS,SAAS,OAAwB;AACxC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,kBAAkB,OAAgB,UAA2B;AACpE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,UAAU,KAAK,KAAK;AAAA,EACxC,QAAQ;AACN,WAAO,EAAE,YAAY,MAAM,SAAS,iBAAiB;AAAA,EACvD;AACA,MAAI,WAAW,UAAU,SAAU,QAAO;AAC1C,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,gBAAgB,WAAW;AAAA,IAC3B,SAAS,WAAW,MAAM,GAAG,KAAK,IAAI,KAAK,WAAW,EAAE,CAAC;AAAA,EAC3D;AACF;AAEA,MAAM,2BAA2B,MAAM;AAAA,EACrC,YACkB,UACA,mBAChB;AACA,UAAM,kBAAkB,KAAK,IAAI,CAAC;AAHlB;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAAA,EACA;AAKpB;","names":["err"]}

package/dist/lib/conformance/seeder.js

@@ -98,7 +98,7 @@ async function seedPropertyList({ agent }) {
   return { ids: { list_ids: [listId] }, warnings: [] };
 }
 async function seedContentStandards({ agent }) {
-  const result = await agent.executeTask("create_content_standards", {
+  const result = await agent.executeTaskLegacy("create_content_standards", {
     idempotency_key: (0, import_idempotency.generateIdempotencyKey)(),
     scope: { languages_any: ["en"] },
     policies: [
@@ -126,7 +126,7 @@ async function seedContentStandards({ agent }) {
 }
 async function seedMediaBuy({ agent, brand }) {
   const warnings = [];
-  const products = await agent.executeTask("get_products", {
+  const products = await agent.executeTaskLegacy("get_products", {
     brief: "Conformance fuzzer seed \u2014 any product acceptable"
   });
   if (!products.success || products.status !== "completed" || !products.data) {
@@ -155,7 +155,7 @@ async function seedMediaBuy({ agent, brand }) {
   const end = new Date(now.getTime() + 8 * 24 * 60 * 60 * 1e3);
   const brandRef = { domain: brand.domain };
   if (brand.brand_id) brandRef.brand_id = brand.brand_id;
-  const result = await agent.executeTask("create_media_buy", {
+  const result = await agent.executeTaskLegacy("create_media_buy", {
     idempotency_key: (0, import_idempotency.generateIdempotencyKey)(),
     account: { brand: brandRef, operator: brand.domain },
     brand: brandRef,
@@ -197,7 +197,7 @@ function summarizeResult(result) {
 }
 async function seedSyncCreatives({ agent, brand }) {
   const warnings = [];
-  const formatsResult = await agent.executeTask("list_creative_formats", {});
+  const formatsResult = await agent.executeTaskLegacy("list_creative_formats", {});
   if (!formatsResult.success || formatsResult.status !== "completed" || !formatsResult.data) {
     return {
       ids: {},
@@ -220,7 +220,7 @@ async function seedSyncCreatives({ agent, brand }) {
   const manifest = synthesizeManifestAssets(picked);
   const creativeId = `cf_creative_${UNIQUE_TAG()}`;
   const tag = UNIQUE_TAG();
-  const result = await agent.executeTask("sync_creatives", {
+  const result = await agent.executeTaskLegacy("sync_creatives", {
     idempotency_key: (0, import_idempotency.generateIdempotencyKey)(),
     account: {
       brand: { domain: brand.domain, ...brand.brand_id ? { brand_id: brand.brand_id } : {} },