@adcp/sdk 13.0.0-rc.8 → 13.0.0-rc.9

package/dist/lib/server/legacy/v5/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../src/lib/server/legacy/v5/index.ts"],"sourcesContent":["/**\n * `@adcp/sdk/server/legacy/v5` — stable home for the v5 handler-bag\n * server constructor.\n *\n * **New code should not import from this subpath.** The canonical v6\n * entry point is `createAdcpServerFromPlatform` from `@adcp/sdk/server`,\n * which wraps this constructor with the typed specialism interfaces,\n * compile-time capability enforcement, ctx_metadata auto-hydration,\n * idempotency-principal synthesis, status mappers, multi-tenant routing,\n * and webhook auto-emit. See `docs/migration-5.x-to-6.x.md`.\n *\n * Reasons to import from `legacy/v5` rather than `@adcp/sdk/server`:\n *\n *   1. **Mid-migration codebases.** v5 adopters who haven't finished\n *      migrating to v6 keep working by switching the import path —\n *      same constructor, same config shape, no behavior change.\n *\n *   2. **Escape-hatch handlers** that v6 doesn't model directly: custom\n *      `tools[]` outside the AdCP wire surface, the `mergeSeam` hook,\n *      `preTransport` / `signedRequests` middleware. These stay on v5\n *      until the v6 platform interface picks them up explicitly.\n *\n *   3. **Pinning against future v6 evolution.** The top-level export\n *      is `@deprecated` and may be removed in a major; `legacy/v5`\n *      is the stable subpath for adopters who genuinely need the v5\n *      shape long-term.\n *\n * The top-level `@adcp/sdk/server` keeps a tag-deprecated re-export of\n * `createAdcpServer` for one cycle so existing imports don't break on\n * upgrade. New imports SHOULD reach for the subpath.\n *\n * @public\n */\n\n// `createAdcpServer` is the v5 entry point that was previously at the\n// top-level `@adcp/sdk/server` export. It now lives only here.\nexport { createAdcpServer } from '../../create-adcp-server';\n\n// Preserve the original low-level response-builder names on the explicit v5\n// subpath. The primary root/server barrels expose these only as `legacy*`\n// aliases so raw wire construction cannot be mistaken for the canonical\n// DecisioningPlatform surface.\nexport {\n  capabilitiesResponse,\n  productsResponse,\n  mediaBuyResponse,\n  deliveryResponse,\n  listAccountsResponse,\n  listCreativeFormatsResponse,\n  updateMediaBuyResponse,\n  getMediaBuysResponse,\n  performanceFeedbackResponse,\n  buildCreativeResponse,\n  buildCreativeMultiResponse,\n  previewCreativeResponse,\n  creativeDeliveryResponse,\n  listCreativesResponse,\n  listPropertyListsResponse,\n  listCollectionListsResponse,\n  listContentStandardsResponse,\n  getPlanAuditLogsResponse,\n  syncCreativesResponse,\n  getSignalsResponse,\n  activateSignalResponse,\n  cancelMediaBuyResponse,\n  acquireRightsResponse,\n  acquireRightsAcquired,\n  acquireRightsPendingApproval,\n  acquireRightsRejected,\n  updateRightsResponse,\n  updateRightsSuccess,\n  creativeApprovalResponse,\n  creativeApprovalApproved,\n  creativeApprovalRejected,\n  creativeApprovalPendingReview,\n  creativeApprovalError,\n  syncAccountsResponse,\n  syncGovernanceResponse,\n  reportUsageResponse,\n} from '../../responses';\n\n// Re-export everything else from `@adcp/sdk/server` so a v5 adopter's\n// migration path is a single-line import swap:\n//   from '@adcp/sdk/server'  →  from '@adcp/sdk/server/legacy/v5'\n// without splitting destructured imports across two paths.\nexport * from '../..';\n\nexport type {\n  AdcpServerConfig,\n  WebhooksConfig,\n  AdcpToolMap,\n  AdcpServerToolName,\n  AdcpCapabilitiesConfig,\n  AdcpCapabilitiesOverrides,\n  AdcpCustomToolConfig,\n  McpAppUiMeta,\n  McpAppMeta,\n  AdcpLogger,\n  SignedRequestsConfig,\n  AdcpPreTransport,\n  AdcpSignedRequestsState,\n  HandlerContext,\n  SessionKeyContext,\n  MediaBuyHandlers,\n  SignalsHandlers,\n  CreativeHandlers,\n  GovernanceHandlers,\n  AccountHandlers,\n  EventTrackingHandlers,\n  SponsoredIntelligenceHandlers,\n  ResolveAccountContext,\n} from '../../create-adcp-server';\n\nexport type {\n  AdcpServer,\n  AdcpServerComplianceApi,\n  AdcpServerTransport,\n  AdcpTestRequest,\n  AdcpTestToolsCallRequest,\n  AdcpTestResponse,\n} from '../../adcp-server';\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAoCA,gCAAiC;AAMjC,uBAqCO;AAMP,uBAAc,kBArFd;","names":[]}
+{"version":3,"sources":["../../../../../src/lib/server/legacy/v5/index.ts"],"sourcesContent":["/**\n * `@adcp/sdk/server/legacy/v5` — stable home for the v5 handler-bag\n * server constructor.\n *\n * **New code should not import from this subpath.** The canonical v6\n * entry point is `createAdcpServerFromPlatform` from `@adcp/sdk/server`,\n * which wraps this constructor with the typed specialism interfaces,\n * compile-time capability enforcement, ctx_metadata auto-hydration,\n * idempotency-principal synthesis, status mappers, multi-tenant routing,\n * and async task completion webhooks. Synchronous terminal responses remain\n * inline by default. See `docs/migration-5.x-to-6.x.md`.\n *\n * Reasons to import from `legacy/v5` rather than `@adcp/sdk/server`:\n *\n *   1. **Mid-migration codebases.** v5 adopters who haven't finished\n *      migrating to v6 keep working by switching the import path —\n *      same constructor, same config shape, no behavior change.\n *\n *   2. **Escape-hatch handlers** that v6 doesn't model directly: custom\n *      `tools[]` outside the AdCP wire surface, the `mergeSeam` hook,\n *      `preTransport` / `signedRequests` middleware. These stay on v5\n *      until the v6 platform interface picks them up explicitly.\n *\n *   3. **Pinning against future v6 evolution.** The top-level export\n *      is `@deprecated` and may be removed in a major; `legacy/v5`\n *      is the stable subpath for adopters who genuinely need the v5\n *      shape long-term.\n *\n * The top-level `@adcp/sdk/server` keeps a tag-deprecated re-export of\n * `createAdcpServer` for one cycle so existing imports don't break on\n * upgrade. New imports SHOULD reach for the subpath.\n *\n * @public\n */\n\n// `createAdcpServer` is the v5 entry point that was previously at the\n// top-level `@adcp/sdk/server` export. It now lives only here.\nexport { createAdcpServer } from '../../create-adcp-server';\n\n// Preserve the original low-level response-builder names on the explicit v5\n// subpath. The primary root/server barrels expose these only as `legacy*`\n// aliases so raw wire construction cannot be mistaken for the canonical\n// DecisioningPlatform surface.\nexport {\n  capabilitiesResponse,\n  productsResponse,\n  mediaBuyResponse,\n  deliveryResponse,\n  listAccountsResponse,\n  listCreativeFormatsResponse,\n  updateMediaBuyResponse,\n  getMediaBuysResponse,\n  performanceFeedbackResponse,\n  buildCreativeResponse,\n  buildCreativeMultiResponse,\n  previewCreativeResponse,\n  creativeDeliveryResponse,\n  listCreativesResponse,\n  listPropertyListsResponse,\n  listCollectionListsResponse,\n  listContentStandardsResponse,\n  getPlanAuditLogsResponse,\n  syncCreativesResponse,\n  getSignalsResponse,\n  activateSignalResponse,\n  cancelMediaBuyResponse,\n  acquireRightsResponse,\n  acquireRightsAcquired,\n  acquireRightsPendingApproval,\n  acquireRightsRejected,\n  updateRightsResponse,\n  updateRightsSuccess,\n  creativeApprovalResponse,\n  creativeApprovalApproved,\n  creativeApprovalRejected,\n  creativeApprovalPendingReview,\n  creativeApprovalError,\n  syncAccountsResponse,\n  syncGovernanceResponse,\n  reportUsageResponse,\n} from '../../responses';\n\n// Re-export everything else from `@adcp/sdk/server` so a v5 adopter's\n// migration path is a single-line import swap:\n//   from '@adcp/sdk/server'  →  from '@adcp/sdk/server/legacy/v5'\n// without splitting destructured imports across two paths.\nexport * from '../..';\n\nexport type {\n  AdcpServerConfig,\n  WebhooksConfig,\n  AdcpToolMap,\n  AdcpServerToolName,\n  AdcpCapabilitiesConfig,\n  AdcpCapabilitiesOverrides,\n  AdcpCustomToolConfig,\n  McpAppUiMeta,\n  McpAppMeta,\n  AdcpLogger,\n  SignedRequestsConfig,\n  AdcpPreTransport,\n  AdcpSignedRequestsState,\n  HandlerContext,\n  SessionKeyContext,\n  MediaBuyHandlers,\n  SignalsHandlers,\n  CreativeHandlers,\n  GovernanceHandlers,\n  AccountHandlers,\n  EventTrackingHandlers,\n  SponsoredIntelligenceHandlers,\n  ResolveAccountContext,\n} from '../../create-adcp-server';\n\nexport type {\n  AdcpServer,\n  AdcpServerComplianceApi,\n  AdcpServerTransport,\n  AdcpTestRequest,\n  AdcpTestToolsCallRequest,\n  AdcpTestResponse,\n} from '../../adcp-server';\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAqCA,gCAAiC;AAMjC,uBAqCO;AAMP,uBAAc,kBAtFd;","names":[]}

package/dist/lib/server/legacy/v5/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../src/lib/server/legacy/v5/index.ts"],"sourcesContent":["/**\n * `@adcp/sdk/server/legacy/v5` — stable home for the v5 handler-bag\n * server constructor.\n *\n * **New code should not import from this subpath.** The canonical v6\n * entry point is `createAdcpServerFromPlatform` from `@adcp/sdk/server`,\n * which wraps this constructor with the typed specialism interfaces,\n * compile-time capability enforcement, ctx_metadata auto-hydration,\n * idempotency-principal synthesis, status mappers, multi-tenant routing,\n * and webhook auto-emit. See `docs/migration-5.x-to-6.x.md`.\n *\n * Reasons to import from `legacy/v5` rather than `@adcp/sdk/server`:\n *\n *   1. **Mid-migration codebases.** v5 adopters who haven't finished\n *      migrating to v6 keep working by switching the import path —\n *      same constructor, same config shape, no behavior change.\n *\n *   2. **Escape-hatch handlers** that v6 doesn't model directly: custom\n *      `tools[]` outside the AdCP wire surface, the `mergeSeam` hook,\n *      `preTransport` / `signedRequests` middleware. These stay on v5\n *      until the v6 platform interface picks them up explicitly.\n *\n *   3. **Pinning against future v6 evolution.** The top-level export\n *      is `@deprecated` and may be removed in a major; `legacy/v5`\n *      is the stable subpath for adopters who genuinely need the v5\n *      shape long-term.\n *\n * The top-level `@adcp/sdk/server` keeps a tag-deprecated re-export of\n * `createAdcpServer` for one cycle so existing imports don't break on\n * upgrade. New imports SHOULD reach for the subpath.\n *\n * @public\n */\n\n// `createAdcpServer` is the v5 entry point that was previously at the\n// top-level `@adcp/sdk/server` export. It now lives only here.\nexport { createAdcpServer } from '../../create-adcp-server';\n\n// Preserve the original low-level response-builder names on the explicit v5\n// subpath. The primary root/server barrels expose these only as `legacy*`\n// aliases so raw wire construction cannot be mistaken for the canonical\n// DecisioningPlatform surface.\nexport {\n  capabilitiesResponse,\n  productsResponse,\n  mediaBuyResponse,\n  deliveryResponse,\n  listAccountsResponse,\n  listCreativeFormatsResponse,\n  updateMediaBuyResponse,\n  getMediaBuysResponse,\n  performanceFeedbackResponse,\n  buildCreativeResponse,\n  buildCreativeMultiResponse,\n  previewCreativeResponse,\n  creativeDeliveryResponse,\n  listCreativesResponse,\n  listPropertyListsResponse,\n  listCollectionListsResponse,\n  listContentStandardsResponse,\n  getPlanAuditLogsResponse,\n  syncCreativesResponse,\n  getSignalsResponse,\n  activateSignalResponse,\n  cancelMediaBuyResponse,\n  acquireRightsResponse,\n  acquireRightsAcquired,\n  acquireRightsPendingApproval,\n  acquireRightsRejected,\n  updateRightsResponse,\n  updateRightsSuccess,\n  creativeApprovalResponse,\n  creativeApprovalApproved,\n  creativeApprovalRejected,\n  creativeApprovalPendingReview,\n  creativeApprovalError,\n  syncAccountsResponse,\n  syncGovernanceResponse,\n  reportUsageResponse,\n} from '../../responses';\n\n// Re-export everything else from `@adcp/sdk/server` so a v5 adopter's\n// migration path is a single-line import swap:\n//   from '@adcp/sdk/server'  →  from '@adcp/sdk/server/legacy/v5'\n// without splitting destructured imports across two paths.\nexport * from '../..';\n\nexport type {\n  AdcpServerConfig,\n  WebhooksConfig,\n  AdcpToolMap,\n  AdcpServerToolName,\n  AdcpCapabilitiesConfig,\n  AdcpCapabilitiesOverrides,\n  AdcpCustomToolConfig,\n  McpAppUiMeta,\n  McpAppMeta,\n  AdcpLogger,\n  SignedRequestsConfig,\n  AdcpPreTransport,\n  AdcpSignedRequestsState,\n  HandlerContext,\n  SessionKeyContext,\n  MediaBuyHandlers,\n  SignalsHandlers,\n  CreativeHandlers,\n  GovernanceHandlers,\n  AccountHandlers,\n  EventTrackingHandlers,\n  SponsoredIntelligenceHandlers,\n  ResolveAccountContext,\n} from '../../create-adcp-server';\n\nexport type {\n  AdcpServer,\n  AdcpServerComplianceApi,\n  AdcpServerTransport,\n  AdcpTestRequest,\n  AdcpTestToolsCallRequest,\n  AdcpTestResponse,\n} from '../../adcp-server';\n"],"mappings":"AAoCA,SAAS,wBAAwB;AAMjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,cAAc;","names":[]}
+{"version":3,"sources":["../../../../../src/lib/server/legacy/v5/index.ts"],"sourcesContent":["/**\n * `@adcp/sdk/server/legacy/v5` — stable home for the v5 handler-bag\n * server constructor.\n *\n * **New code should not import from this subpath.** The canonical v6\n * entry point is `createAdcpServerFromPlatform` from `@adcp/sdk/server`,\n * which wraps this constructor with the typed specialism interfaces,\n * compile-time capability enforcement, ctx_metadata auto-hydration,\n * idempotency-principal synthesis, status mappers, multi-tenant routing,\n * and async task completion webhooks. Synchronous terminal responses remain\n * inline by default. See `docs/migration-5.x-to-6.x.md`.\n *\n * Reasons to import from `legacy/v5` rather than `@adcp/sdk/server`:\n *\n *   1. **Mid-migration codebases.** v5 adopters who haven't finished\n *      migrating to v6 keep working by switching the import path —\n *      same constructor, same config shape, no behavior change.\n *\n *   2. **Escape-hatch handlers** that v6 doesn't model directly: custom\n *      `tools[]` outside the AdCP wire surface, the `mergeSeam` hook,\n *      `preTransport` / `signedRequests` middleware. These stay on v5\n *      until the v6 platform interface picks them up explicitly.\n *\n *   3. **Pinning against future v6 evolution.** The top-level export\n *      is `@deprecated` and may be removed in a major; `legacy/v5`\n *      is the stable subpath for adopters who genuinely need the v5\n *      shape long-term.\n *\n * The top-level `@adcp/sdk/server` keeps a tag-deprecated re-export of\n * `createAdcpServer` for one cycle so existing imports don't break on\n * upgrade. New imports SHOULD reach for the subpath.\n *\n * @public\n */\n\n// `createAdcpServer` is the v5 entry point that was previously at the\n// top-level `@adcp/sdk/server` export. It now lives only here.\nexport { createAdcpServer } from '../../create-adcp-server';\n\n// Preserve the original low-level response-builder names on the explicit v5\n// subpath. The primary root/server barrels expose these only as `legacy*`\n// aliases so raw wire construction cannot be mistaken for the canonical\n// DecisioningPlatform surface.\nexport {\n  capabilitiesResponse,\n  productsResponse,\n  mediaBuyResponse,\n  deliveryResponse,\n  listAccountsResponse,\n  listCreativeFormatsResponse,\n  updateMediaBuyResponse,\n  getMediaBuysResponse,\n  performanceFeedbackResponse,\n  buildCreativeResponse,\n  buildCreativeMultiResponse,\n  previewCreativeResponse,\n  creativeDeliveryResponse,\n  listCreativesResponse,\n  listPropertyListsResponse,\n  listCollectionListsResponse,\n  listContentStandardsResponse,\n  getPlanAuditLogsResponse,\n  syncCreativesResponse,\n  getSignalsResponse,\n  activateSignalResponse,\n  cancelMediaBuyResponse,\n  acquireRightsResponse,\n  acquireRightsAcquired,\n  acquireRightsPendingApproval,\n  acquireRightsRejected,\n  updateRightsResponse,\n  updateRightsSuccess,\n  creativeApprovalResponse,\n  creativeApprovalApproved,\n  creativeApprovalRejected,\n  creativeApprovalPendingReview,\n  creativeApprovalError,\n  syncAccountsResponse,\n  syncGovernanceResponse,\n  reportUsageResponse,\n} from '../../responses';\n\n// Re-export everything else from `@adcp/sdk/server` so a v5 adopter's\n// migration path is a single-line import swap:\n//   from '@adcp/sdk/server'  →  from '@adcp/sdk/server/legacy/v5'\n// without splitting destructured imports across two paths.\nexport * from '../..';\n\nexport type {\n  AdcpServerConfig,\n  WebhooksConfig,\n  AdcpToolMap,\n  AdcpServerToolName,\n  AdcpCapabilitiesConfig,\n  AdcpCapabilitiesOverrides,\n  AdcpCustomToolConfig,\n  McpAppUiMeta,\n  McpAppMeta,\n  AdcpLogger,\n  SignedRequestsConfig,\n  AdcpPreTransport,\n  AdcpSignedRequestsState,\n  HandlerContext,\n  SessionKeyContext,\n  MediaBuyHandlers,\n  SignalsHandlers,\n  CreativeHandlers,\n  GovernanceHandlers,\n  AccountHandlers,\n  EventTrackingHandlers,\n  SponsoredIntelligenceHandlers,\n  ResolveAccountContext,\n} from '../../create-adcp-server';\n\nexport type {\n  AdcpServer,\n  AdcpServerComplianceApi,\n  AdcpServerTransport,\n  AdcpTestRequest,\n  AdcpTestToolsCallRequest,\n  AdcpTestResponse,\n} from '../../adcp-server';\n"],"mappings":"AAqCA,SAAS,wBAAwB;AAMjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,cAAc;","names":[]}

package/dist/lib/testing/compliance/comply.d.mts

@@ -52,6 +52,8 @@ export interface ComplyOptions extends TestOptions {
      * storyboards. Passed through to `runStoryboard`.
      */
     webhook_replay_receiver?: StoryboardRunOptions['webhook_replay_receiver'];
+    /** Configure raw `POST /context` router replay storyboards. */
+    trusted_match_context_router_runner?: StoryboardRunOptions['trusted_match_context_router_runner'];
     /**
      * Test-kit contract ids in scope for this run. Passed through to
      * `runStoryboard`. See `StoryboardRunOptions.contracts`.

package/dist/lib/testing/compliance/comply.d.ts

@@ -52,6 +52,8 @@ export interface ComplyOptions extends TestOptions {
      * storyboards. Passed through to `runStoryboard`.
      */
     webhook_replay_receiver?: StoryboardRunOptions['webhook_replay_receiver'];
+    /** Configure raw `POST /context` router replay storyboards. */
+    trusted_match_context_router_runner?: StoryboardRunOptions['trusted_match_context_router_runner'];
     /**
      * Test-kit contract ids in scope for this run. Passed through to
      * `runStoryboard`. See `StoryboardRunOptions.contracts`.

package/dist/lib/testing/compliance/comply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"comply.d.ts","sourceRoot":"","sources":["../../../../src/lib/testing/compliance/comply.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAkB,MAAM,UAAU,CAAC;AAuBtF,OAAO,KAAK,EAGV,UAAU,EAEV,gBAAgB,EAChB,oBAAoB,EAGrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAEV,eAAe,EACf,iBAAiB,EAEjB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACd,MAAM,SAAS,CAAC;AAEjB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAyB3D;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,YAAY,GACpB,mBAAmB,EAAE,CAuavB;AAED,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IAC5D;;;OAGG;IACH,uBAAuB,CAAC,EAAE,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IAC1E;;;OAGG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC9C,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAsB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwBrG;AA2FD,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE;IACN,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;CAC7C,GACA,WAAW,CAuBb;AAsOD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,gBAAgB,EAAE,EAC3B,WAAW,EAAE,UAAU,EAAE,EACzB,QAAQ,EAAE,MAAM,EAChB,UAAU,GAAE;IACV,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACL,iBAAiB,EAAE,CA6DrB;AAmcD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE,OAAO,KAAK,GACrB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,mBAAmB,EAAE,CAAA;CAAE,CAAC,CAqFnE;AA8KD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,GAAG,aAAa,CAe9E;AAgJD;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAmKxE;AAcD;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAE5E"}
+{"version":3,"file":"comply.d.ts","sourceRoot":"","sources":["../../../../src/lib/testing/compliance/comply.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAkB,MAAM,UAAU,CAAC;AAuBtF,OAAO,KAAK,EAGV,UAAU,EAEV,gBAAgB,EAChB,oBAAoB,EAGrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAEV,eAAe,EACf,iBAAiB,EAGjB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACd,MAAM,SAAS,CAAC;AAEjB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAwC3D;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,YAAY,GACpB,mBAAmB,EAAE,CAuavB;AAED,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IAC5D;;;OAGG;IACH,uBAAuB,CAAC,EAAE,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IAC1E,+DAA+D;IAC/D,mCAAmC,CAAC,EAAE,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IAClG;;;OAGG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC9C,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAsB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwBrG;AA2FD,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE;IACN,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;CAC7C,GACA,WAAW,CAuBb;AAsOD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,gBAAgB,EAAE,EAC3B,WAAW,EAAE,UAAU,EAAE,EACzB,QAAQ,EAAE,MAAM,EAChB,UAAU,GAAE;IACV,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAC3B,GACL,iBAAiB,EAAE,CA6DrB;AAwcD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE,OAAO,KAAK,GACrB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,mBAAmB,EAAE,CAAA;CAAE,CAAC,CAsFnE;AAoLD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,GAAG,aAAa,CAe9E;AAgJD;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAoKxE;AAcD;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAa5E"}

package/dist/lib/testing/compliance/comply.js

@@ -50,6 +50,7 @@ var import_test_controller = require('../test-controller.js');
 var import_crypto = require("crypto");
 var import_adcp_version_config = require('../../utils/adcp-version-config.js');
 var import_schema_loader = require('../../validation/schema-loader.js');
+var import_oauth_metadata_graph = require('../storyboard/oauth-metadata-graph/index.js');
 (0, import_default_invariants.registerDefaultInvariants)();
 const TRACK_ORDER = [
   "core",
@@ -63,8 +64,20 @@ const TRACK_ORDER = [
   "si",
   "audiences",
   "error_handling",
-  "brand"
+  "brand",
+  "security_transport"
 ];
+function toTestedTrackEntry(track) {
+  return {
+    track: track.track,
+    status: track.status,
+    label: track.label,
+    observations: track.observations,
+    duration_ms: track.duration_ms,
+    ...track.mode !== void 0 && { mode: track.mode },
+    _view: "reference"
+  };
+}
 function collectObservations(track, results, profile) {
   const observations = [];
   if (track === "core") {
@@ -600,7 +613,7 @@ function buildNotApplicableStoryboardResult(agentUrl, na) {
   return {
     storyboard_id: na.storyboard_id,
     storyboard_title: na.storyboard_title,
-    agent_url: agentUrl,
+    agent_url: (0, import_oauth_metadata_graph.redactOAuthUrlForOutput)(agentUrl),
     overall_passed: true,
     phases: [
       {
@@ -712,6 +725,7 @@ async function complyImpl(agentUrl, options) {
     signal: externalSignal,
     webhook_receiver,
     webhook_replay_receiver,
+    trusted_match_context_router_runner,
     contracts,
     version,
     complianceDir,
@@ -871,6 +885,9 @@ async function complyImpl(agentUrl, options) {
       agentTools: profile.tools,
       ...webhook_receiver !== void 0 && { webhook_receiver },
       ...webhook_replay_receiver !== void 0 && { webhook_replay_receiver },
+      ...trusted_match_context_router_runner !== void 0 && {
+        trusted_match_context_router_runner: complianceDir !== void 0 && trusted_match_context_router_runner.vectorsRoot === void 0 ? { ...trusted_match_context_router_runner, vectorsRoot: complianceDir } : trusted_match_context_router_runner
+      },
       ...contracts !== void 0 && { contracts },
       ...signal !== void 0 && { signal }
     };
@@ -932,14 +949,15 @@ async function complyImpl(agentUrl, options) {
     }
     const summary = buildSummary(trackResults, storyboardResults);
     for (const t of trackResults) t._view = "canonical";
-    const testedTracks = trackResults.filter((t) => t.status === "pass" || t.status === "fail" || t.status === "partial" || t.status === "silent").map((t) => ({ ...t, _view: "reference" }));
+    const testedTracks = trackResults.filter((t) => t.status === "pass" || t.status === "fail" || t.status === "partial" || t.status === "silent").map(toTestedTrackEntry);
     const skippedTracks = trackResults.filter((t) => t.status === "skip").map((t) => ({
       track: t.track,
       label: t.label,
       reason: "No storyboards produced results for this track"
     }));
     const overallStatus = stoppedForTimeoutBudget ? "partial" : computeOverallStatus(summary);
-    const agentRef = options.agent_alias || agentUrl;
+    const safeAgentUrl = (0, import_oauth_metadata_graph.redactOAuthUrlForOutput)(agentUrl);
+    const agentRef = options.agent_alias || safeAgentUrl;
     const failures = extractFailures(storyboardResults, runnableStoryboards, agentRef, {
       complianceVersion: complianceIndex.adcp_version,
       ...complianceDir !== void 0 && { complianceDir },
@@ -961,7 +979,7 @@ async function complyImpl(agentUrl, options) {
     }
     const noticesDedup = [...aggregatedNotices.values()];
     return {
-      agent_url: agentUrl,
+      agent_url: safeAgentUrl,
       adcp_version: complianceIndex.adcp_version,
       agent_profile: profile,
       overall_status: overallStatus,
@@ -1026,12 +1044,13 @@ async function detectAuthRejection(agentUrl, errorMsg, signal, fetchFn) {
     const oauthMeta = await discoverOAuthMetadata(agentUrl, { fetch: fetchFn });
     const looksOAuth = oauthMeta !== null || hasOAuthSignal;
     if (looksOAuth) {
-      const issuer = oauthMeta?.issuer ? fenceAgentText(oauthMeta.issuer, 200) : "(unknown)";
+      const issuer = oauthMeta?.issuer ? fenceAgentText((0, import_oauth_metadata_graph.redactOAuthUrlForOutput)(oauthMeta.issuer), 200) : "(unknown)";
+      const safeAgentUrl = (0, import_oauth_metadata_graph.redactOAuthUrlForOutput)(agentUrl);
       observations.push({
         category: "auth",
         severity: "error",
-        message: `Agent requires OAuth (issuer: ${issuer}). Inline: adcp storyboard run ${agentUrl} --oauth (requires a saved alias). Save once: adcp --save-auth <alias> ${agentUrl} --oauth.`,
-        ...oauthMeta?.issuer && { evidence: { oauth_issuer: oauthMeta.issuer } },
+        message: `Agent requires OAuth (issuer: ${issuer}). Inline: adcp storyboard run ${safeAgentUrl} --oauth (requires a saved alias). Save once: adcp --save-auth <alias> ${safeAgentUrl} --oauth.`,
+        ...oauthMeta?.issuer && { evidence: { oauth_issuer: (0, import_oauth_metadata_graph.redactOAuthUrlForOutput)(oauthMeta.issuer) } },
         source: { kind: "probe", code: "auth-oauth-required" }
       });
     } else {
@@ -1058,6 +1077,9 @@ async function runWithDegradedProfile(agentUrl, profile, storyboards, options, e
     ...options.webhook_replay_receiver !== void 0 && {
       webhook_replay_receiver: options.webhook_replay_receiver
     },
+    ...options.trusted_match_context_router_runner !== void 0 && {
+      trusted_match_context_router_runner: options.complianceDir !== void 0 && options.trusted_match_context_router_runner.vectorsRoot === void 0 ? { ...options.trusted_match_context_router_runner, vectorsRoot: options.complianceDir } : options.trusted_match_context_router_runner
+    },
     ...options.contracts !== void 0 && { contracts: options.contracts },
     ...signal !== void 0 && { signal }
   };
@@ -1105,7 +1127,8 @@ async function runWithDegradedProfile(agentUrl, profile, storyboards, options, e
   }
   const summary = buildSummary(trackResults, storyboardResults);
   const overallStatus = stoppedForTimeoutBudget ? "partial" : computeOverallStatus(summary);
-  const agentRef = options.agent_alias || agentUrl;
+  const safeAgentUrl = (0, import_oauth_metadata_graph.redactOAuthUrlForOutput)(agentUrl);
+  const agentRef = options.agent_alias || safeAgentUrl;
   const failures = extractFailures(storyboardResults, storyboards, agentRef, {
     complianceVersion: adcpVersion,
     ...options.complianceDir !== void 0 && { complianceDir: options.complianceDir },
@@ -1119,12 +1142,12 @@ async function runWithDegradedProfile(agentUrl, profile, storyboards, options, e
     reason: "No storyboards produced results for this track"
   }));
   return {
-    agent_url: agentUrl,
+    agent_url: safeAgentUrl,
     adcp_version: adcpVersion,
     agent_profile: profile,
     overall_status: overallStatus,
     tracks: trackResults,
-    tested_tracks: trackResults.filter((t) => t.status === "pass" || t.status === "fail" || t.status === "partial" || t.status === "silent").map((t) => ({ ...t, _view: "reference" })),
+    tested_tracks: trackResults.filter((t) => t.status === "pass" || t.status === "fail" || t.status === "partial" || t.status === "silent").map(toTestedTrackEntry),
     skipped_tracks: skippedTracks,
     summary,
     observations: allObservations,
@@ -1143,10 +1166,10 @@ async function buildUnreachableResult(agentUrl, profile, errorMsg, start, effect
     signal,
     effectiveOptions.transport?.fetchFn
   );
-  const err = errorMsg || "Unknown error";
+  const err = (0, import_oauth_metadata_graph.redactOAuthUrlsInText)(errorMsg || "Unknown error");
   const headline = isAuth ? `Authentication required` : `Agent unreachable \u2014 ${err}`;
   return {
-    agent_url: agentUrl,
+    agent_url: (0, import_oauth_metadata_graph.redactOAuthUrlForOutput)(agentUrl),
     adcp_version: adcpVersion,
     agent_profile: profile,
     overall_status: isAuth ? "auth_required" : "unreachable",
@@ -1444,7 +1467,15 @@ function formatReasonCounts(counts) {
   return entries.sort(([a], [b]) => a.localeCompare(b)).map(([reason, count]) => `${reason}=${count}`).join(", ");
 }
 function formatComplianceResultsJSON(result) {
-  return JSON.stringify(result, null, 2);
+  const testedTracks = result.tested_tracks?.map(toTestedTrackEntry);
+  return JSON.stringify(
+    {
+      ...result,
+      ...testedTracks !== void 0 && { tested_tracks: testedTracks }
+    },
+    null,
+    2
+  );
 }
 function formatMachineValue(value) {
   if (value === null || value === void 0) return "null";