@adcp/sdk 13.0.0-rc.8 → 13.0.0-rc.9

package/dist/lib/testing/storyboard/index.js

@@ -41,8 +41,10 @@ __export(storyboard_exports, {
   applyContextOutputsWithProvenance: () => import_context2.applyContextOutputsWithProvenance,
   applyFixtureBindingsToRequest: () => import_fixture_resolution.applyFixtureBindingsToRequest,
   applyStoryboardVersionOptions: () => import_runner.applyStoryboardVersionOptions,
+  buildAuthorizationServerMetadataUrl: () => import_oauth_metadata_graph.buildAuthorizationServerMetadataUrl,
   buildDiscoveryFailedResult: () => import_runner.buildDiscoveryFailedResult,
   buildFixtureResolutionSpecs: () => import_fixture_resolution.buildFixtureResolutionSpecs,
+  buildProtectedResourceMetadataUrl: () => import_oauth_metadata_graph.buildProtectedResourceMetadataUrl,
   buildRequest: () => import_request_builder.buildRequest,
   clearAssertionRegistry: () => import_assertions.clearAssertionRegistry,
   clearSandboxCache: () => import_sandbox_entities.clearSandboxCache,
@@ -51,10 +53,12 @@ __export(storyboard_exports, {
   detectContextRejectionHints: () => import_rejection_hints.detectContextRejectionHints,
   evaluateCapabilityPredicate: () => import_runner.evaluateCapabilityPredicate,
   executeStoryboardTask: () => import_task_map.executeStoryboardTask,
+  expandCreativeAssetDirectives: () => import_creative_assets.expandCreativeAssetDirectives,
   extractContext: () => import_context2.extractContext,
   extractContextWithProvenance: () => import_context2.extractContextWithProvenance,
   extractTaskAdcpError: () => import_rate_limit_trip.extractTaskAdcpError,
   findBundleById: () => import_compliance.findBundleById,
+  findUnresolvedCreativeAssetDirectives: () => import_creative_assets.findUnresolvedCreativeAssetDirectives,
   getAssertion: () => import_assertions.getAssertion,
   getComplianceCacheDir: () => import_compliance.getComplianceCacheDir,
   getComplianceStoryboardById: () => import_compliance.getComplianceStoryboardById,
@@ -63,6 +67,8 @@ __export(storyboard_exports, {
   getSandboxBrand: () => import_sandbox_entities.getSandboxBrand,
   getSandboxBrands: () => import_sandbox_entities.getSandboxBrands,
   getSandboxEntities: () => import_sandbox_entities.getSandboxEntities,
+  gradeOAuthMetadataGraph: () => import_oauth_metadata_graph.gradeOAuthMetadataGraph,
+  gradeOAuthMetadataGraphVector: () => import_oauth_metadata_graph.gradeOAuthMetadataGraphVector,
   hasRequestBuilder: () => import_request_builder.hasRequestBuilder,
   injectContext: () => import_context2.injectContext,
   isComplianceVersionSupported: () => import_compliance.isComplianceVersionSupported,
@@ -75,12 +81,15 @@ __export(storyboard_exports, {
   listStrictOnlyFailures: () => import_runner.listStrictOnlyFailures,
   loadBundleStoryboards: () => import_compliance.loadBundleStoryboards,
   loadComplianceIndex: () => import_compliance.loadComplianceIndex,
+  loadOAuthMetadataGraphVectors: () => import_oauth_metadata_graph.loadOAuthMetadataGraphVectors,
   loadSpecialismDetail: () => import_compliance.loadSpecialismDetail,
   loadStoryboardFile: () => import_loader.loadStoryboardFile,
   matchesFixtureRequirements: () => import_fixture_resolution.matchesFixtureRequirements,
   normalizeFixtureMatchExpression: () => import_fixture_resolution.normalizeFixtureMatchExpression,
+  normalizeOAuthResourceForComparison: () => import_oauth_metadata_graph.normalizeOAuthResourceForComparison,
   parsePath: () => import_path.parsePath,
   parseStoryboard: () => import_loader.parseStoryboard,
+  redactOAuthUrlForOutput: () => import_oauth_metadata_graph.redactOAuthUrlForOutput,
   registerAssertion: () => import_assertions.registerAssertion,
   resolveAssertions: () => import_assertions.resolveAssertions,
   resolveBundleOrStoryboard: () => import_compliance.resolveBundleOrStoryboard,
@@ -108,11 +117,13 @@ var import_loader = require('./loader.js');
 var import_fixture_resolution = require('./fixture-resolution.js');
 var import_compliance = require('./compliance.js');
 var import_task_map = require('./task-map.js');
+var import_creative_assets = require('./creative-assets.js');
 var import_path = require('./path.js');
 var import_context2 = require('./context.js');
 var import_rejection_hints = require('./rejection-hints.js');
 var import_request_builder = require('./request-builder.js');
 var import_validations = require('./validations.js');
+var import_oauth_metadata_graph = require('./oauth-metadata-graph/index.js');
 var import_rate_limit_trip = require('./rate-limit-trip.js');
 var import_test_kit = require('./test-kit.js');
 var import_wellknown_schemas = require('../../types/wellknown-schemas.generated.js');
@@ -143,8 +154,10 @@ var import_sandbox_entities = require('./sandbox-entities.js');
   applyContextOutputsWithProvenance,
   applyFixtureBindingsToRequest,
   applyStoryboardVersionOptions,
+  buildAuthorizationServerMetadataUrl,
   buildDiscoveryFailedResult,
   buildFixtureResolutionSpecs,
+  buildProtectedResourceMetadataUrl,
   buildRequest,
   clearAssertionRegistry,
   clearSandboxCache,
@@ -153,10 +166,12 @@ var import_sandbox_entities = require('./sandbox-entities.js');
   detectContextRejectionHints,
   evaluateCapabilityPredicate,
   executeStoryboardTask,
+  expandCreativeAssetDirectives,
   extractContext,
   extractContextWithProvenance,
   extractTaskAdcpError,
   findBundleById,
+  findUnresolvedCreativeAssetDirectives,
   getAssertion,
   getComplianceCacheDir,
   getComplianceStoryboardById,
@@ -165,6 +180,8 @@ var import_sandbox_entities = require('./sandbox-entities.js');
   getSandboxBrand,
   getSandboxBrands,
   getSandboxEntities,
+  gradeOAuthMetadataGraph,
+  gradeOAuthMetadataGraphVector,
   hasRequestBuilder,
   injectContext,
   isComplianceVersionSupported,
@@ -177,12 +194,15 @@ var import_sandbox_entities = require('./sandbox-entities.js');
   listStrictOnlyFailures,
   loadBundleStoryboards,
   loadComplianceIndex,
+  loadOAuthMetadataGraphVectors,
   loadSpecialismDetail,
   loadStoryboardFile,
   matchesFixtureRequirements,
   normalizeFixtureMatchExpression,
+  normalizeOAuthResourceForComparison,
   parsePath,
   parseStoryboard,
+  redactOAuthUrlForOutput,
   registerAssertion,
   resolveAssertions,
   resolveBundleOrStoryboard,

package/dist/lib/testing/storyboard/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/testing/storyboard/index.ts"],"sourcesContent":["/**\n * Storyboard-driven testing for AdCP agents.\n *\n * Storyboards are YAML-defined workflows that map directly to\n * SingleAgentClient methods, enabling step-by-step agent testing.\n * The canonical storyboard set lives in the AdCP compliance tarball\n * and is pulled into `compliance/cache/{version}/` via `npm run sync-schemas`.\n */\n\n// Side-effect import: registers the default cross-step assertions that\n// upstream storyboards reference by id (idempotency.conflict_no_payload_leak,\n// context.no_secret_echo, governance.denial_blocks_mutation). Without this\n// registration here, any `runStoryboard` call against a storyboard declaring\n// `invariants: [...]` would throw at start on unresolved ids. Consumers who\n// want to replace the defaults can `clearAssertionRegistry()` first.\nimport { registerDefaultInvariants } from './default-invariants';\n\nregisterDefaultInvariants();\n\n// Types\nexport type {\n  A2ATaskEnvelope,\n  AgentEntry,\n  Storyboard,\n  StoryboardFixtureResolution,\n  FixtureResolutionStrategy,\n  FixtureMatchOperator,\n  FixtureMatchClause,\n  FixtureResolutionDeclaration,\n  ProductFixtureResolutionDeclaration,\n  PricingOptionFixtureResolutionDeclaration,\n  FixtureResolutionStatus,\n  FixtureResolutionRecord,\n  FixtureResolutionAttempt,\n  FixtureResolutionEvidence,\n  FixtureResolutionCoverageGap,\n  StoryboardInvariants,\n  StoryboardInvariantsObject,\n  StepInvariantsObject,\n  StoryboardPhase,\n  StoryboardStep,\n  RateLimitTripSpec,\n  StoryboardValidation,\n  StoryboardValidationCheck,\n  WebhookFilterSpec,\n  WebhookRetryTriggerSpec,\n  WebhookAssertionErrorCode,\n  ContextOutput,\n  ContextInput,\n  ContextProvenanceEntry,\n  ContextValueRejectedHint,\n  ShapeDriftHint,\n  MissingRequiredFieldHint,\n  FormatMismatchHint,\n  MonotonicViolationHint,\n  ImpairmentCoherenceHint,\n  ImpairmentCoherenceNotApplicableHint,\n  StoryboardContext,\n  StoryboardRunOptions,\n  ValidationResult,\n  StoryboardStepPreview,\n  StoryboardStepResult,\n  StoryboardStepHint,\n  StoryboardStepHintBase,\n  StoryboardPhaseResult,\n  StoryboardResult,\n  AssertionResult,\n  StrictValidationSummary,\n  StrictValidationVerdict,\n  UpstreamTrafficPayloadMatch,\n  RunnerNotice,\n  NoticeCode,\n  NoticeSeverity,\n} from './types';\nexport { WEBHOOK_IDEMPOTENCY_KEY_PATTERN } from './types';\n\n// Cross-step assertion registry (adcontextprotocol/adcp#2639)\nexport {\n  registerAssertion,\n  getAssertion,\n  listAssertions,\n  listDefaultAssertions,\n  clearAssertionRegistry,\n  resolveAssertions,\n} from './assertions';\nexport type { AssertionSpec, AssertionContext, RegisterAssertionOptions } from './assertions';\n\n// Webhook receiver (outbound-webhook conformance testing per adcontextprotocol/adcp#2431)\nexport { createWebhookReceiver } from './webhook-receiver';\nexport type {\n  CapturedWebhook,\n  CreateWebhookReceiverOptions,\n  RetryReplayPolicy,\n  WebhookFilter,\n  WebhookReceiver,\n  WebhookWaitResult,\n} from './webhook-receiver';\n\n// Runner-variable substitution (`{{runner.*}}` / `{{prior_step.*.operation_id}}`)\nexport { createRunnerVariables } from './context';\nexport type { RunnerVariables } from './context';\n\n// Webhook-assertion pseudo-tasks\nexport { WEBHOOK_ASSERTION_TASKS } from './webhook-assertions';\n\n// Runner\nexport {\n  runStoryboard,\n  runStoryboardStep,\n  applyAdcpVersionRunOptions,\n  applyStoryboardVersionOptions,\n  getFirstStepPreview,\n  summarizeStrictValidation,\n  listStrictOnlyFailures,\n  resolveCapabilityPath,\n  evaluateCapabilityPredicate,\n  buildDiscoveryFailedResult,\n} from './runner';\n\n// Parser (single-file load for spec evolution / targeted testing)\nexport { parseStoryboard, loadStoryboardFile } from './loader';\n\n// AdCP 3.2 fixture-handle resolution\nexport {\n  applyFixtureBindingsToRequest,\n  buildFixtureResolutionSpecs,\n  FixtureBindingRegistry,\n  matchesFixtureRequirements,\n  normalizeFixtureMatchExpression,\n  validateFixtureResolutionDeclarations,\n} from './fixture-resolution';\n\n// Compliance cache: capability-driven resolution\nexport {\n  getComplianceCacheDir,\n  getExternalSchemaRootForCompliance,\n  loadComplianceIndex,\n  listBundles,\n  loadBundleStoryboards,\n  listAllComplianceStoryboards,\n  getComplianceStoryboardById,\n  findBundleById,\n  resolveBundleOrStoryboard,\n  resolveStoryboardsForCapabilities,\n  isComplianceVersionSupported,\n  loadSpecialismDetail,\n  listSpecialisms,\n  CapabilityResolutionError,\n  PROTOCOL_TO_PATH,\n  UNBASELINED_SUPPORTED_PROTOCOLS,\n} from './compliance';\nexport type {\n  AgentCapabilities,\n  BundleKind,\n  BundleRef,\n  CapabilityResolutionCode,\n  ComplianceIndex,\n  ComplianceIndexProtocol,\n  ComplianceIndexSpecialism,\n  NotApplicableStoryboard,\n  ResolveOptions,\n  ResolvedBundle,\n  ResolvedStoryboards,\n  SpecialismDetail,\n} from './compliance';\n\n// Task mapping\nexport { TASK_TO_METHOD, executeStoryboardTask } from './task-map';\n\n// Path utilities\nexport { parsePath, resolvePath, setPath } from './path';\n\n// Context\nexport {\n  CONTEXT_EXTRACTORS,\n  extractContext,\n  extractContextWithProvenance,\n  injectContext,\n  applyContextOutputs,\n  applyContextOutputsWithProvenance,\n  applyContextInputs,\n} from './context';\nexport type { ContextWriteResult } from './context';\n\n// Rejection-hint detection (issue #870)\nexport { detectContextRejectionHints } from './rejection-hints';\n\n// Request builder\nexport { buildRequest, hasRequestBuilder } from './request-builder';\n\n// Validations\nexport { runValidations } from './validations';\nexport {\n  RateLimitTripObserver,\n  RATE_LIMIT_TRIP_CONTRACT,\n  RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS,\n  RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX,\n  RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN,\n  extractTaskAdcpError,\n  validateRateLimitTripSpec,\n  type RateLimitTripFailureCode,\n  type RateLimitTripClient,\n  type RateLimitTripObservation,\n  type RateLimitTripObserverOptions,\n  type RateLimitTripResponseSnapshot,\n  type RateLimitTripStructuredResult,\n  type RateLimitTripTaskOptions,\n} from './rate-limit-trip';\n\n// `./junit` is deliberately NOT re-exported. The CLI requires it\n// directly from `dist/lib/testing/storyboard/junit.js` and the function\n// is marked `@internal` (stripped from the generated `.d.ts`). Add a\n// re-export here only if/when we promote it to a public API surface.\n\n// Test-kit schema validation\nexport { validateTestKit, TestKitValidationError, PROBE_TASK_ALLOWLIST } from './test-kit';\n\n// Sandbox entities\nexport type { SandboxBrand, SandboxAgent, SandboxEntities, BrandJson } from './sandbox-entities';\nexport { BrandJsonSchema, AdagentsJsonSchema } from '../../types/wellknown-schemas.generated';\nexport type { AdagentsJson } from '../../types/wellknown-schemas.generated';\nexport {\n  getSandboxEntities,\n  getSandboxBrands,\n  getSandboxBrand,\n  isSandboxDomain,\n  clearSandboxCache,\n} from './sandbox-entities';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAeA,gCAA0C;AA2D1C,mBAAgD;AAGhD,wBAOO;AAIP,8BAAsC;AAWtC,qBAAsC;AAItC,gCAAwC;AAGxC,oBAWO;AAGP,oBAAoD;AAGpD,gCAOO;AAGP,wBAiBO;AAiBP,sBAAsD;AAGtD,kBAAgD;AAGhD,IAAAA,kBAQO;AAIP,6BAA4C;AAG5C,6BAAgD;AAGhD,yBAA+B;AAC/B,6BAeO;AAQP,sBAA8E;AAI9E,+BAAoD;AAEpD,8BAMO;AAAA,IAlNP,qDAA0B;","names":["import_context"]}
+{"version":3,"sources":["../../../../src/lib/testing/storyboard/index.ts"],"sourcesContent":["/**\n * Storyboard-driven testing for AdCP agents.\n *\n * Storyboards are YAML-defined workflows that map directly to\n * SingleAgentClient methods, enabling step-by-step agent testing.\n * The canonical storyboard set lives in the AdCP compliance tarball\n * and is pulled into `compliance/cache/{version}/` via `npm run sync-schemas`.\n */\n\n// Side-effect import: registers the default cross-step assertions that\n// upstream storyboards reference by id (idempotency.conflict_no_payload_leak,\n// context.no_secret_echo, governance.denial_blocks_mutation). Without this\n// registration here, any `runStoryboard` call against a storyboard declaring\n// `invariants: [...]` would throw at start on unresolved ids. Consumers who\n// want to replace the defaults can `clearAssertionRegistry()` first.\nimport { registerDefaultInvariants } from './default-invariants';\n\nregisterDefaultInvariants();\n\n// Types\nexport type {\n  A2ATaskEnvelope,\n  AgentEntry,\n  Storyboard,\n  StoryboardFixtureResolution,\n  FixtureResolutionStrategy,\n  FixtureMatchOperator,\n  FixtureMatchClause,\n  FixtureResolutionDeclaration,\n  ProductFixtureResolutionDeclaration,\n  PricingOptionFixtureResolutionDeclaration,\n  FixtureResolutionStatus,\n  FixtureResolutionRecord,\n  FixtureResolutionAttempt,\n  FixtureResolutionEvidence,\n  FixtureResolutionCoverageGap,\n  StoryboardInvariants,\n  StoryboardInvariantsObject,\n  StepInvariantsObject,\n  StoryboardPhase,\n  StoryboardStep,\n  RateLimitTripSpec,\n  StoryboardValidation,\n  StoryboardValidationCheck,\n  WebhookFilterSpec,\n  WebhookRetryTriggerSpec,\n  WebhookAssertionErrorCode,\n  ContextOutput,\n  ContextInput,\n  ContextProvenanceEntry,\n  ContextValueRejectedHint,\n  ShapeDriftHint,\n  MissingRequiredFieldHint,\n  FormatMismatchHint,\n  MonotonicViolationHint,\n  ImpairmentCoherenceHint,\n  ImpairmentCoherenceNotApplicableHint,\n  StoryboardContext,\n  StoryboardRunOptions,\n  TrustedMatchContextProviderEndpoint,\n  TrustedMatchContextRegistrationContext,\n  TrustedMatchContextRouterRunnerOptions,\n  ValidationResult,\n  StoryboardStepPreview,\n  StoryboardStepResult,\n  StoryboardStepHint,\n  StoryboardStepHintBase,\n  StoryboardPhaseResult,\n  StoryboardResult,\n  AssertionResult,\n  StrictValidationSummary,\n  StrictValidationVerdict,\n  UpstreamTrafficPayloadMatch,\n  RunnerNotice,\n  NoticeCode,\n  NoticeSeverity,\n} from './types';\nexport { WEBHOOK_IDEMPOTENCY_KEY_PATTERN } from './types';\n\n// Cross-step assertion registry (adcontextprotocol/adcp#2639)\nexport {\n  registerAssertion,\n  getAssertion,\n  listAssertions,\n  listDefaultAssertions,\n  clearAssertionRegistry,\n  resolveAssertions,\n} from './assertions';\nexport type { AssertionSpec, AssertionContext, RegisterAssertionOptions } from './assertions';\n\n// Webhook receiver (outbound-webhook conformance testing per adcontextprotocol/adcp#2431)\nexport { createWebhookReceiver } from './webhook-receiver';\nexport type {\n  CapturedWebhook,\n  CreateWebhookReceiverOptions,\n  RetryReplayPolicy,\n  WebhookFilter,\n  WebhookReceiver,\n  WebhookWaitResult,\n} from './webhook-receiver';\n\n// Runner-variable substitution (`{{runner.*}}` / `{{prior_step.*.operation_id}}`)\nexport { createRunnerVariables } from './context';\nexport type { RunnerVariables } from './context';\n\n// Webhook-assertion pseudo-tasks\nexport { WEBHOOK_ASSERTION_TASKS } from './webhook-assertions';\n\n// Runner\nexport {\n  runStoryboard,\n  runStoryboardStep,\n  applyAdcpVersionRunOptions,\n  applyStoryboardVersionOptions,\n  getFirstStepPreview,\n  summarizeStrictValidation,\n  listStrictOnlyFailures,\n  resolveCapabilityPath,\n  evaluateCapabilityPredicate,\n  buildDiscoveryFailedResult,\n} from './runner';\n\n// Parser (single-file load for spec evolution / targeted testing)\nexport { parseStoryboard, loadStoryboardFile } from './loader';\n\n// AdCP 3.2 fixture-handle resolution\nexport {\n  applyFixtureBindingsToRequest,\n  buildFixtureResolutionSpecs,\n  FixtureBindingRegistry,\n  matchesFixtureRequirements,\n  normalizeFixtureMatchExpression,\n  validateFixtureResolutionDeclarations,\n} from './fixture-resolution';\n\n// Compliance cache: capability-driven resolution\nexport {\n  getComplianceCacheDir,\n  getExternalSchemaRootForCompliance,\n  loadComplianceIndex,\n  listBundles,\n  loadBundleStoryboards,\n  listAllComplianceStoryboards,\n  getComplianceStoryboardById,\n  findBundleById,\n  resolveBundleOrStoryboard,\n  resolveStoryboardsForCapabilities,\n  isComplianceVersionSupported,\n  loadSpecialismDetail,\n  listSpecialisms,\n  CapabilityResolutionError,\n  PROTOCOL_TO_PATH,\n  UNBASELINED_SUPPORTED_PROTOCOLS,\n} from './compliance';\nexport type {\n  AgentCapabilities,\n  BundleKind,\n  BundleRef,\n  CapabilityResolutionCode,\n  ComplianceIndex,\n  ComplianceIndexProtocol,\n  ComplianceIndexSpecialism,\n  NotApplicableStoryboard,\n  ResolveOptions,\n  ResolvedBundle,\n  ResolvedStoryboards,\n  SpecialismDetail,\n} from './compliance';\n\n// Task mapping\nexport { TASK_TO_METHOD, executeStoryboardTask } from './task-map';\n\n// Storyboard-only creative asset directives\nexport { expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives } from './creative-assets';\n\n// Path utilities\nexport { parsePath, resolvePath, setPath } from './path';\n\n// Context\nexport {\n  CONTEXT_EXTRACTORS,\n  extractContext,\n  extractContextWithProvenance,\n  injectContext,\n  applyContextOutputs,\n  applyContextOutputsWithProvenance,\n  applyContextInputs,\n} from './context';\nexport type { ContextWriteResult } from './context';\n\n// Rejection-hint detection (issue #870)\nexport { detectContextRejectionHints } from './rejection-hints';\n\n// Request builder\nexport { buildRequest, hasRequestBuilder } from './request-builder';\n\n// Validations\nexport { runValidations } from './validations';\nexport {\n  gradeOAuthMetadataGraph,\n  gradeOAuthMetadataGraphVector,\n  loadOAuthMetadataGraphVectors,\n  buildAuthorizationServerMetadataUrl,\n  buildProtectedResourceMetadataUrl,\n  normalizeOAuthResourceForComparison,\n  redactOAuthUrlForOutput,\n} from './oauth-metadata-graph';\nexport type {\n  GradeOAuthMetadataGraphOptions,\n  OAuthMetadataFetchResponse,\n  OAuthMetadataFetchTransport,\n  OAuthMetadataGraphErrorCode,\n  OAuthMetadataGraphFinding,\n  OAuthMetadataGraphGrade,\n  OAuthMetadataGraphObservation,\n  OAuthMetadataGraphVector,\n  OAuthMetadataGraphVectorCorpus,\n} from './oauth-metadata-graph';\nexport {\n  RateLimitTripObserver,\n  RATE_LIMIT_TRIP_CONTRACT,\n  RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS,\n  RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX,\n  RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN,\n  extractTaskAdcpError,\n  validateRateLimitTripSpec,\n  type RateLimitTripFailureCode,\n  type RateLimitTripClient,\n  type RateLimitTripObservation,\n  type RateLimitTripObserverOptions,\n  type RateLimitTripResponseSnapshot,\n  type RateLimitTripStructuredResult,\n  type RateLimitTripTaskOptions,\n} from './rate-limit-trip';\n\n// `./junit` is deliberately NOT re-exported. The CLI requires it\n// directly from `dist/lib/testing/storyboard/junit.js` and the function\n// is marked `@internal` (stripped from the generated `.d.ts`). Add a\n// re-export here only if/when we promote it to a public API surface.\n\n// Test-kit schema validation\nexport { validateTestKit, TestKitValidationError, PROBE_TASK_ALLOWLIST } from './test-kit';\n\n// Sandbox entities\nexport type { SandboxBrand, SandboxAgent, SandboxEntities, BrandJson } from './sandbox-entities';\nexport { BrandJsonSchema, AdagentsJsonSchema } from '../../types/wellknown-schemas.generated';\nexport type { AdagentsJson } from '../../types/wellknown-schemas.generated';\nexport {\n  getSandboxEntities,\n  getSandboxBrands,\n  getSandboxBrand,\n  isSandboxDomain,\n  clearSandboxCache,\n} from './sandbox-entities';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAeA,gCAA0C;AA8D1C,mBAAgD;AAGhD,wBAOO;AAIP,8BAAsC;AAWtC,qBAAsC;AAItC,gCAAwC;AAGxC,oBAWO;AAGP,oBAAoD;AAGpD,gCAOO;AAGP,wBAiBO;AAiBP,sBAAsD;AAGtD,6BAAqF;AAGrF,kBAAgD;AAGhD,IAAAA,kBAQO;AAIP,6BAA4C;AAG5C,6BAAgD;AAGhD,yBAA+B;AAC/B,kCAQO;AAYP,6BAeO;AAQP,sBAA8E;AAI9E,+BAAoD;AAEpD,8BAMO;AAAA,IA5OP,qDAA0B;","names":["import_context"]}

package/dist/lib/testing/storyboard/index.mjs

@@ -52,6 +52,7 @@ import {
   UNBASELINED_SUPPORTED_PROTOCOLS
 } from "./compliance.mjs";
 import { TASK_TO_METHOD, executeStoryboardTask } from "./task-map.mjs";
+import { expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives } from "./creative-assets.mjs";
 import { parsePath, resolvePath, setPath } from "./path.mjs";
 import {
   CONTEXT_EXTRACTORS,
@@ -65,6 +66,15 @@ import {
 import { detectContextRejectionHints } from "./rejection-hints.mjs";
 import { buildRequest, hasRequestBuilder } from "./request-builder.mjs";
 import { runValidations } from "./validations.mjs";
+import {
+  gradeOAuthMetadataGraph,
+  gradeOAuthMetadataGraphVector,
+  loadOAuthMetadataGraphVectors,
+  buildAuthorizationServerMetadataUrl,
+  buildProtectedResourceMetadataUrl,
+  normalizeOAuthResourceForComparison,
+  redactOAuthUrlForOutput
+} from "./oauth-metadata-graph/index.mjs";
 import {
   RateLimitTripObserver,
   RATE_LIMIT_TRIP_CONTRACT,
@@ -107,8 +117,10 @@ export {
   applyContextOutputsWithProvenance,
   applyFixtureBindingsToRequest,
   applyStoryboardVersionOptions,
+  buildAuthorizationServerMetadataUrl,
   buildDiscoveryFailedResult,
   buildFixtureResolutionSpecs,
+  buildProtectedResourceMetadataUrl,
   buildRequest,
   clearAssertionRegistry,
   clearSandboxCache,
@@ -117,10 +129,12 @@ export {
   detectContextRejectionHints,
   evaluateCapabilityPredicate,
   executeStoryboardTask,
+  expandCreativeAssetDirectives,
   extractContext,
   extractContextWithProvenance,
   extractTaskAdcpError,
   findBundleById,
+  findUnresolvedCreativeAssetDirectives,
   getAssertion,
   getComplianceCacheDir,
   getComplianceStoryboardById,
@@ -129,6 +143,8 @@ export {
   getSandboxBrand,
   getSandboxBrands,
   getSandboxEntities,
+  gradeOAuthMetadataGraph,
+  gradeOAuthMetadataGraphVector,
   hasRequestBuilder,
   injectContext,
   isComplianceVersionSupported,
@@ -141,12 +157,15 @@ export {
   listStrictOnlyFailures,
   loadBundleStoryboards,
   loadComplianceIndex,
+  loadOAuthMetadataGraphVectors,
   loadSpecialismDetail,
   loadStoryboardFile,
   matchesFixtureRequirements,
   normalizeFixtureMatchExpression,
+  normalizeOAuthResourceForComparison,
   parsePath,
   parseStoryboard,
+  redactOAuthUrlForOutput,
   registerAssertion,
   resolveAssertions,
   resolveBundleOrStoryboard,

package/dist/lib/testing/storyboard/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/testing/storyboard/index.ts"],"sourcesContent":["/**\n * Storyboard-driven testing for AdCP agents.\n *\n * Storyboards are YAML-defined workflows that map directly to\n * SingleAgentClient methods, enabling step-by-step agent testing.\n * The canonical storyboard set lives in the AdCP compliance tarball\n * and is pulled into `compliance/cache/{version}/` via `npm run sync-schemas`.\n */\n\n// Side-effect import: registers the default cross-step assertions that\n// upstream storyboards reference by id (idempotency.conflict_no_payload_leak,\n// context.no_secret_echo, governance.denial_blocks_mutation). Without this\n// registration here, any `runStoryboard` call against a storyboard declaring\n// `invariants: [...]` would throw at start on unresolved ids. Consumers who\n// want to replace the defaults can `clearAssertionRegistry()` first.\nimport { registerDefaultInvariants } from './default-invariants';\n\nregisterDefaultInvariants();\n\n// Types\nexport type {\n  A2ATaskEnvelope,\n  AgentEntry,\n  Storyboard,\n  StoryboardFixtureResolution,\n  FixtureResolutionStrategy,\n  FixtureMatchOperator,\n  FixtureMatchClause,\n  FixtureResolutionDeclaration,\n  ProductFixtureResolutionDeclaration,\n  PricingOptionFixtureResolutionDeclaration,\n  FixtureResolutionStatus,\n  FixtureResolutionRecord,\n  FixtureResolutionAttempt,\n  FixtureResolutionEvidence,\n  FixtureResolutionCoverageGap,\n  StoryboardInvariants,\n  StoryboardInvariantsObject,\n  StepInvariantsObject,\n  StoryboardPhase,\n  StoryboardStep,\n  RateLimitTripSpec,\n  StoryboardValidation,\n  StoryboardValidationCheck,\n  WebhookFilterSpec,\n  WebhookRetryTriggerSpec,\n  WebhookAssertionErrorCode,\n  ContextOutput,\n  ContextInput,\n  ContextProvenanceEntry,\n  ContextValueRejectedHint,\n  ShapeDriftHint,\n  MissingRequiredFieldHint,\n  FormatMismatchHint,\n  MonotonicViolationHint,\n  ImpairmentCoherenceHint,\n  ImpairmentCoherenceNotApplicableHint,\n  StoryboardContext,\n  StoryboardRunOptions,\n  ValidationResult,\n  StoryboardStepPreview,\n  StoryboardStepResult,\n  StoryboardStepHint,\n  StoryboardStepHintBase,\n  StoryboardPhaseResult,\n  StoryboardResult,\n  AssertionResult,\n  StrictValidationSummary,\n  StrictValidationVerdict,\n  UpstreamTrafficPayloadMatch,\n  RunnerNotice,\n  NoticeCode,\n  NoticeSeverity,\n} from './types';\nexport { WEBHOOK_IDEMPOTENCY_KEY_PATTERN } from './types';\n\n// Cross-step assertion registry (adcontextprotocol/adcp#2639)\nexport {\n  registerAssertion,\n  getAssertion,\n  listAssertions,\n  listDefaultAssertions,\n  clearAssertionRegistry,\n  resolveAssertions,\n} from './assertions';\nexport type { AssertionSpec, AssertionContext, RegisterAssertionOptions } from './assertions';\n\n// Webhook receiver (outbound-webhook conformance testing per adcontextprotocol/adcp#2431)\nexport { createWebhookReceiver } from './webhook-receiver';\nexport type {\n  CapturedWebhook,\n  CreateWebhookReceiverOptions,\n  RetryReplayPolicy,\n  WebhookFilter,\n  WebhookReceiver,\n  WebhookWaitResult,\n} from './webhook-receiver';\n\n// Runner-variable substitution (`{{runner.*}}` / `{{prior_step.*.operation_id}}`)\nexport { createRunnerVariables } from './context';\nexport type { RunnerVariables } from './context';\n\n// Webhook-assertion pseudo-tasks\nexport { WEBHOOK_ASSERTION_TASKS } from './webhook-assertions';\n\n// Runner\nexport {\n  runStoryboard,\n  runStoryboardStep,\n  applyAdcpVersionRunOptions,\n  applyStoryboardVersionOptions,\n  getFirstStepPreview,\n  summarizeStrictValidation,\n  listStrictOnlyFailures,\n  resolveCapabilityPath,\n  evaluateCapabilityPredicate,\n  buildDiscoveryFailedResult,\n} from './runner';\n\n// Parser (single-file load for spec evolution / targeted testing)\nexport { parseStoryboard, loadStoryboardFile } from './loader';\n\n// AdCP 3.2 fixture-handle resolution\nexport {\n  applyFixtureBindingsToRequest,\n  buildFixtureResolutionSpecs,\n  FixtureBindingRegistry,\n  matchesFixtureRequirements,\n  normalizeFixtureMatchExpression,\n  validateFixtureResolutionDeclarations,\n} from './fixture-resolution';\n\n// Compliance cache: capability-driven resolution\nexport {\n  getComplianceCacheDir,\n  getExternalSchemaRootForCompliance,\n  loadComplianceIndex,\n  listBundles,\n  loadBundleStoryboards,\n  listAllComplianceStoryboards,\n  getComplianceStoryboardById,\n  findBundleById,\n  resolveBundleOrStoryboard,\n  resolveStoryboardsForCapabilities,\n  isComplianceVersionSupported,\n  loadSpecialismDetail,\n  listSpecialisms,\n  CapabilityResolutionError,\n  PROTOCOL_TO_PATH,\n  UNBASELINED_SUPPORTED_PROTOCOLS,\n} from './compliance';\nexport type {\n  AgentCapabilities,\n  BundleKind,\n  BundleRef,\n  CapabilityResolutionCode,\n  ComplianceIndex,\n  ComplianceIndexProtocol,\n  ComplianceIndexSpecialism,\n  NotApplicableStoryboard,\n  ResolveOptions,\n  ResolvedBundle,\n  ResolvedStoryboards,\n  SpecialismDetail,\n} from './compliance';\n\n// Task mapping\nexport { TASK_TO_METHOD, executeStoryboardTask } from './task-map';\n\n// Path utilities\nexport { parsePath, resolvePath, setPath } from './path';\n\n// Context\nexport {\n  CONTEXT_EXTRACTORS,\n  extractContext,\n  extractContextWithProvenance,\n  injectContext,\n  applyContextOutputs,\n  applyContextOutputsWithProvenance,\n  applyContextInputs,\n} from './context';\nexport type { ContextWriteResult } from './context';\n\n// Rejection-hint detection (issue #870)\nexport { detectContextRejectionHints } from './rejection-hints';\n\n// Request builder\nexport { buildRequest, hasRequestBuilder } from './request-builder';\n\n// Validations\nexport { runValidations } from './validations';\nexport {\n  RateLimitTripObserver,\n  RATE_LIMIT_TRIP_CONTRACT,\n  RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS,\n  RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX,\n  RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN,\n  extractTaskAdcpError,\n  validateRateLimitTripSpec,\n  type RateLimitTripFailureCode,\n  type RateLimitTripClient,\n  type RateLimitTripObservation,\n  type RateLimitTripObserverOptions,\n  type RateLimitTripResponseSnapshot,\n  type RateLimitTripStructuredResult,\n  type RateLimitTripTaskOptions,\n} from './rate-limit-trip';\n\n// `./junit` is deliberately NOT re-exported. The CLI requires it\n// directly from `dist/lib/testing/storyboard/junit.js` and the function\n// is marked `@internal` (stripped from the generated `.d.ts`). Add a\n// re-export here only if/when we promote it to a public API surface.\n\n// Test-kit schema validation\nexport { validateTestKit, TestKitValidationError, PROBE_TASK_ALLOWLIST } from './test-kit';\n\n// Sandbox entities\nexport type { SandboxBrand, SandboxAgent, SandboxEntities, BrandJson } from './sandbox-entities';\nexport { BrandJsonSchema, AdagentsJsonSchema } from '../../types/wellknown-schemas.generated';\nexport type { AdagentsJson } from '../../types/wellknown-schemas.generated';\nexport {\n  getSandboxEntities,\n  getSandboxBrands,\n  getSandboxBrand,\n  isSandboxDomain,\n  clearSandboxCache,\n} from './sandbox-entities';\n"],"mappings":"AAeA,SAAS,iCAAiC;AAE1C,0BAA0B;AAyD1B,SAAS,uCAAuC;AAGhD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,6BAA6B;AAWtC,SAAS,6BAA6B;AAItC,SAAS,+BAA+B;AAGxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,iBAAiB,0BAA0B;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiBP,SAAS,gBAAgB,6BAA6B;AAGtD,SAAS,WAAW,aAAa,eAAe;AAGhD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,mCAAmC;AAG5C,SAAS,cAAc,yBAAyB;AAGhD,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAQK;AAQP,SAAS,iBAAiB,wBAAwB,4BAA4B;AAI9E,SAAS,iBAAiB,0BAA0B;AAEpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;","names":[]}
+{"version":3,"sources":["../../../../src/lib/testing/storyboard/index.ts"],"sourcesContent":["/**\n * Storyboard-driven testing for AdCP agents.\n *\n * Storyboards are YAML-defined workflows that map directly to\n * SingleAgentClient methods, enabling step-by-step agent testing.\n * The canonical storyboard set lives in the AdCP compliance tarball\n * and is pulled into `compliance/cache/{version}/` via `npm run sync-schemas`.\n */\n\n// Side-effect import: registers the default cross-step assertions that\n// upstream storyboards reference by id (idempotency.conflict_no_payload_leak,\n// context.no_secret_echo, governance.denial_blocks_mutation). Without this\n// registration here, any `runStoryboard` call against a storyboard declaring\n// `invariants: [...]` would throw at start on unresolved ids. Consumers who\n// want to replace the defaults can `clearAssertionRegistry()` first.\nimport { registerDefaultInvariants } from './default-invariants';\n\nregisterDefaultInvariants();\n\n// Types\nexport type {\n  A2ATaskEnvelope,\n  AgentEntry,\n  Storyboard,\n  StoryboardFixtureResolution,\n  FixtureResolutionStrategy,\n  FixtureMatchOperator,\n  FixtureMatchClause,\n  FixtureResolutionDeclaration,\n  ProductFixtureResolutionDeclaration,\n  PricingOptionFixtureResolutionDeclaration,\n  FixtureResolutionStatus,\n  FixtureResolutionRecord,\n  FixtureResolutionAttempt,\n  FixtureResolutionEvidence,\n  FixtureResolutionCoverageGap,\n  StoryboardInvariants,\n  StoryboardInvariantsObject,\n  StepInvariantsObject,\n  StoryboardPhase,\n  StoryboardStep,\n  RateLimitTripSpec,\n  StoryboardValidation,\n  StoryboardValidationCheck,\n  WebhookFilterSpec,\n  WebhookRetryTriggerSpec,\n  WebhookAssertionErrorCode,\n  ContextOutput,\n  ContextInput,\n  ContextProvenanceEntry,\n  ContextValueRejectedHint,\n  ShapeDriftHint,\n  MissingRequiredFieldHint,\n  FormatMismatchHint,\n  MonotonicViolationHint,\n  ImpairmentCoherenceHint,\n  ImpairmentCoherenceNotApplicableHint,\n  StoryboardContext,\n  StoryboardRunOptions,\n  TrustedMatchContextProviderEndpoint,\n  TrustedMatchContextRegistrationContext,\n  TrustedMatchContextRouterRunnerOptions,\n  ValidationResult,\n  StoryboardStepPreview,\n  StoryboardStepResult,\n  StoryboardStepHint,\n  StoryboardStepHintBase,\n  StoryboardPhaseResult,\n  StoryboardResult,\n  AssertionResult,\n  StrictValidationSummary,\n  StrictValidationVerdict,\n  UpstreamTrafficPayloadMatch,\n  RunnerNotice,\n  NoticeCode,\n  NoticeSeverity,\n} from './types';\nexport { WEBHOOK_IDEMPOTENCY_KEY_PATTERN } from './types';\n\n// Cross-step assertion registry (adcontextprotocol/adcp#2639)\nexport {\n  registerAssertion,\n  getAssertion,\n  listAssertions,\n  listDefaultAssertions,\n  clearAssertionRegistry,\n  resolveAssertions,\n} from './assertions';\nexport type { AssertionSpec, AssertionContext, RegisterAssertionOptions } from './assertions';\n\n// Webhook receiver (outbound-webhook conformance testing per adcontextprotocol/adcp#2431)\nexport { createWebhookReceiver } from './webhook-receiver';\nexport type {\n  CapturedWebhook,\n  CreateWebhookReceiverOptions,\n  RetryReplayPolicy,\n  WebhookFilter,\n  WebhookReceiver,\n  WebhookWaitResult,\n} from './webhook-receiver';\n\n// Runner-variable substitution (`{{runner.*}}` / `{{prior_step.*.operation_id}}`)\nexport { createRunnerVariables } from './context';\nexport type { RunnerVariables } from './context';\n\n// Webhook-assertion pseudo-tasks\nexport { WEBHOOK_ASSERTION_TASKS } from './webhook-assertions';\n\n// Runner\nexport {\n  runStoryboard,\n  runStoryboardStep,\n  applyAdcpVersionRunOptions,\n  applyStoryboardVersionOptions,\n  getFirstStepPreview,\n  summarizeStrictValidation,\n  listStrictOnlyFailures,\n  resolveCapabilityPath,\n  evaluateCapabilityPredicate,\n  buildDiscoveryFailedResult,\n} from './runner';\n\n// Parser (single-file load for spec evolution / targeted testing)\nexport { parseStoryboard, loadStoryboardFile } from './loader';\n\n// AdCP 3.2 fixture-handle resolution\nexport {\n  applyFixtureBindingsToRequest,\n  buildFixtureResolutionSpecs,\n  FixtureBindingRegistry,\n  matchesFixtureRequirements,\n  normalizeFixtureMatchExpression,\n  validateFixtureResolutionDeclarations,\n} from './fixture-resolution';\n\n// Compliance cache: capability-driven resolution\nexport {\n  getComplianceCacheDir,\n  getExternalSchemaRootForCompliance,\n  loadComplianceIndex,\n  listBundles,\n  loadBundleStoryboards,\n  listAllComplianceStoryboards,\n  getComplianceStoryboardById,\n  findBundleById,\n  resolveBundleOrStoryboard,\n  resolveStoryboardsForCapabilities,\n  isComplianceVersionSupported,\n  loadSpecialismDetail,\n  listSpecialisms,\n  CapabilityResolutionError,\n  PROTOCOL_TO_PATH,\n  UNBASELINED_SUPPORTED_PROTOCOLS,\n} from './compliance';\nexport type {\n  AgentCapabilities,\n  BundleKind,\n  BundleRef,\n  CapabilityResolutionCode,\n  ComplianceIndex,\n  ComplianceIndexProtocol,\n  ComplianceIndexSpecialism,\n  NotApplicableStoryboard,\n  ResolveOptions,\n  ResolvedBundle,\n  ResolvedStoryboards,\n  SpecialismDetail,\n} from './compliance';\n\n// Task mapping\nexport { TASK_TO_METHOD, executeStoryboardTask } from './task-map';\n\n// Storyboard-only creative asset directives\nexport { expandCreativeAssetDirectives, findUnresolvedCreativeAssetDirectives } from './creative-assets';\n\n// Path utilities\nexport { parsePath, resolvePath, setPath } from './path';\n\n// Context\nexport {\n  CONTEXT_EXTRACTORS,\n  extractContext,\n  extractContextWithProvenance,\n  injectContext,\n  applyContextOutputs,\n  applyContextOutputsWithProvenance,\n  applyContextInputs,\n} from './context';\nexport type { ContextWriteResult } from './context';\n\n// Rejection-hint detection (issue #870)\nexport { detectContextRejectionHints } from './rejection-hints';\n\n// Request builder\nexport { buildRequest, hasRequestBuilder } from './request-builder';\n\n// Validations\nexport { runValidations } from './validations';\nexport {\n  gradeOAuthMetadataGraph,\n  gradeOAuthMetadataGraphVector,\n  loadOAuthMetadataGraphVectors,\n  buildAuthorizationServerMetadataUrl,\n  buildProtectedResourceMetadataUrl,\n  normalizeOAuthResourceForComparison,\n  redactOAuthUrlForOutput,\n} from './oauth-metadata-graph';\nexport type {\n  GradeOAuthMetadataGraphOptions,\n  OAuthMetadataFetchResponse,\n  OAuthMetadataFetchTransport,\n  OAuthMetadataGraphErrorCode,\n  OAuthMetadataGraphFinding,\n  OAuthMetadataGraphGrade,\n  OAuthMetadataGraphObservation,\n  OAuthMetadataGraphVector,\n  OAuthMetadataGraphVectorCorpus,\n} from './oauth-metadata-graph';\nexport {\n  RateLimitTripObserver,\n  RATE_LIMIT_TRIP_CONTRACT,\n  RATE_LIMIT_TRIP_DEFAULT_REPLAY_MAX_WAIT_SECONDS,\n  RATE_LIMIT_TRIP_MAX_ATTEMPTS_MAX,\n  RATE_LIMIT_TRIP_MAX_ATTEMPTS_MIN,\n  extractTaskAdcpError,\n  validateRateLimitTripSpec,\n  type RateLimitTripFailureCode,\n  type RateLimitTripClient,\n  type RateLimitTripObservation,\n  type RateLimitTripObserverOptions,\n  type RateLimitTripResponseSnapshot,\n  type RateLimitTripStructuredResult,\n  type RateLimitTripTaskOptions,\n} from './rate-limit-trip';\n\n// `./junit` is deliberately NOT re-exported. The CLI requires it\n// directly from `dist/lib/testing/storyboard/junit.js` and the function\n// is marked `@internal` (stripped from the generated `.d.ts`). Add a\n// re-export here only if/when we promote it to a public API surface.\n\n// Test-kit schema validation\nexport { validateTestKit, TestKitValidationError, PROBE_TASK_ALLOWLIST } from './test-kit';\n\n// Sandbox entities\nexport type { SandboxBrand, SandboxAgent, SandboxEntities, BrandJson } from './sandbox-entities';\nexport { BrandJsonSchema, AdagentsJsonSchema } from '../../types/wellknown-schemas.generated';\nexport type { AdagentsJson } from '../../types/wellknown-schemas.generated';\nexport {\n  getSandboxEntities,\n  getSandboxBrands,\n  getSandboxBrand,\n  isSandboxDomain,\n  clearSandboxCache,\n} from './sandbox-entities';\n"],"mappings":"AAeA,SAAS,iCAAiC;AAE1C,0BAA0B;AA4D1B,SAAS,uCAAuC;AAGhD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,6BAA6B;AAWtC,SAAS,6BAA6B;AAItC,SAAS,+BAA+B;AAGxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,iBAAiB,0BAA0B;AAGpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiBP,SAAS,gBAAgB,6BAA6B;AAGtD,SAAS,+BAA+B,6CAA6C;AAGrF,SAAS,WAAW,aAAa,eAAe;AAGhD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,mCAAmC;AAG5C,SAAS,cAAc,yBAAyB;AAGhD,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAYP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAQK;AAQP,SAAS,iBAAiB,wBAAwB,4BAA4B;AAI9E,SAAS,iBAAiB,0BAA0B;AAEpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;","names":[]}

package/dist/lib/testing/storyboard/oauth-metadata-graph/grader.d.mts

@@ -0,0 +1,21 @@
+import type { OAuthMetadataGraphGrade } from './types.mjs';
+export interface GradeOAuthMetadataGraphOptions {
+    /** Explicit local-development opt-in. Production grading remains HTTPS-only. */
+    allowHttp?: boolean;
+    signal?: AbortSignal;
+    /** Trusted scoped fetch supplied by a hosted runner; it must enforce peer-address binding. */
+    trustedFetchFn?: typeof fetch;
+}
+/**
+ * Shared RFC 9728 comparison semantics used by security.yaml and oauth_setup.
+ * Only scheme and host are case-folded and default ports are elided. The
+ * path, query, fragment, userinfo, and trailing slash remain significant.
+ */
+export declare function normalizeOAuthResourceForComparison(value: string): string;
+/** Redact sensitive URL components before including a URL in a report. */
+export declare function redactOAuthUrlForOutput(value: string): string;
+/** Redact absolute URLs embedded in diagnostic text before report serialization. */
+export declare function redactOAuthUrlsInText(value: string): string;
+export declare function buildProtectedResourceMetadataUrl(agentUrl: string): string;
+export declare function buildAuthorizationServerMetadataUrl(issuer: string): string;
+export declare function gradeOAuthMetadataGraph(agentUrl: string, options?: GradeOAuthMetadataGraphOptions): Promise<OAuthMetadataGraphGrade>;

package/dist/lib/testing/storyboard/oauth-metadata-graph/grader.d.ts

@@ -0,0 +1,22 @@
+import type { OAuthMetadataGraphGrade } from './types';
+export interface GradeOAuthMetadataGraphOptions {
+    /** Explicit local-development opt-in. Production grading remains HTTPS-only. */
+    allowHttp?: boolean;
+    signal?: AbortSignal;
+    /** Trusted scoped fetch supplied by a hosted runner; it must enforce peer-address binding. */
+    trustedFetchFn?: typeof fetch;
+}
+/**
+ * Shared RFC 9728 comparison semantics used by security.yaml and oauth_setup.
+ * Only scheme and host are case-folded and default ports are elided. The
+ * path, query, fragment, userinfo, and trailing slash remain significant.
+ */
+export declare function normalizeOAuthResourceForComparison(value: string): string;
+/** Redact sensitive URL components before including a URL in a report. */
+export declare function redactOAuthUrlForOutput(value: string): string;
+/** Redact absolute URLs embedded in diagnostic text before report serialization. */
+export declare function redactOAuthUrlsInText(value: string): string;
+export declare function buildProtectedResourceMetadataUrl(agentUrl: string): string;
+export declare function buildAuthorizationServerMetadataUrl(issuer: string): string;
+export declare function gradeOAuthMetadataGraph(agentUrl: string, options?: GradeOAuthMetadataGraphOptions): Promise<OAuthMetadataGraphGrade>;
+//# sourceMappingURL=grader.d.ts.map

package/dist/lib/testing/storyboard/oauth-metadata-graph/grader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grader.d.ts","sourceRoot":"","sources":["../../../../../src/lib/testing/storyboard/oauth-metadata-graph/grader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAKV,uBAAuB,EAExB,MAAM,SAAS,CAAC;AA4BjB,MAAM,WAAW,8BAA8B;IAC7C,gFAAgF;IAChF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,8FAA8F;IAC9F,cAAc,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AA8BD;;;;GAIG;AACH,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAoCzE;AAED,0EAA0E;AAC1E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAa7D;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG1E;AAED,wBAAgB,mCAAmC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAI1E;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,8BAAmC,GAC3C,OAAO,CAAC,uBAAuB,CAAC,CAElC"}