@adcp/sdk 14.0.0-beta.0 → 14.0.0-beta.1

package/dist/lib/server/decisioning/platform.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/server/decisioning/platform.ts"],"sourcesContent":["/**\n * DecisioningPlatform — the top-level interface adopters implement.\n *\n * Per-specialism sub-interfaces (sales, creative, audiences, etc.) are\n * optional; framework's compile-time enforcement (RequiredPlatformsFor<S>)\n * forces the right sub-interfaces based on `capabilities.specialisms[]`.\n *\n * Status: Preview / 6.0. Not yet wired into the framework.\n *\n * @public\n */\n\nimport type { DecisioningCapabilities, BrandCapabilities } from './capabilities';\nimport type { Account, AccountStore } from './account';\nimport type { BuyerAgentRegistry } from './buyer-agent';\nimport type { SessionContext, OnInstructionsError, MaybePromise } from '../create-adcp-server';\nimport type { StatusMappers } from './status-mappers';\nimport type { SalesPlatform, SalesCorePlatform, SalesIngestionPlatform } from './specialisms/sales';\nimport type { ProposalManager, Recipe } from './proposal';\nimport type { CreativeBuilderPlatform } from './specialisms/creative';\nimport type { CreativeAdServerPlatform } from './specialisms/creative-ad-server';\nimport type { AudiencePlatform } from './specialisms/audiences';\nimport type { SignalsPlatform } from './specialisms/signals';\nimport type { SponsoredIntelligencePlatform } from './specialisms/sponsored-intelligence';\nimport type { CampaignGovernancePlatform } from './specialisms/campaign-governance';\nimport type { ContentStandardsPlatform } from './specialisms/content-standards';\nimport type { BrandRightsPlatform } from './specialisms/brand-rights';\nimport type { PropertyListsPlatform, CollectionListsPlatform } from './specialisms/lists';\nimport type { AdCPSpecialism } from '../../types/tools.generated';\n\n/**\n * Top-level platform interface. Adopters implement this; framework wires\n * the wire protocol around it.\n *\n * The \"framework owns X\" claims below are the v6.0 wiring contract — the\n * runtime guarantees the framework will provide once this surface is wired.\n * They are NOT yet enforced; this module is preview-only as of the scaffold\n * landing. Treat them as the design contract a v6.0 reviewer should hold\n * the framework refactor to, not as a description of existing behavior.\n *\n * **What the framework owns** (platform implementations DON'T see these):\n * - Wire-shape mapping (MCP tools/list, A2A skill manifest, request/response envelopes)\n * - Authentication + auth-principal extraction; `accounts.resolve()` is the only\n *   place the platform translates auth into its tenant model\n * - Idempotency: dedupe + replay handled before dispatch; platforms see clean traffic\n * - `sandbox` boundary: when `AccountReference.sandbox === true`, framework\n *   resolves the buyer's sandbox account via `accounts.resolve()`. The platform\n *   sees the resolved sandbox `Account` like any other and is responsible for\n *   routing reads/writes to its sandbox backend. There is no separate\n *   \"dry-run\" mode — sandbox subsumes \"validate against real platform without\n *   writing to production.\" Tool-specific `dry_run` flags on `sync_catalogs`\n *   and `sync_creatives` are wire fields the platform receives and honors;\n *   they are NOT a framework-level mode.\n * - `context` echo: framework round-trips `context` on every response\n * - Task envelopes: `submitted` outcomes are wrapped into A2A Task envelopes /\n *   MCP polling responses; `taskHandle.notify` calls dedupe + retry\n * - Schema validation: requests fail before reaching the platform; responses are\n *   shape-validated against the wire schema after the platform returns\n *\n * **What the platform owns**: the business decisions in each `SalesPlatform` /\n * `CreativeBuilderPlatform` / `AudiencePlatform` method. Nothing else.\n *\n * ### Cross-specialism dispatch\n *\n * When one specialism handler needs to consult another (canonical case:\n * `brandRights.acquireRights` calling `campaignGovernance.checkGovernance`\n * before granting rights, against a buyer-registered governance binding),\n * the framework does NOT thread a separate `ctx.platform.<specialism>`\n * accessor on `RequestContext`. Two idiomatic patterns; pick by authoring\n * style:\n *\n * **Pattern A — class instance + `this`** (canonical for holdco hubs;\n * `examples/hello_seller_adapter_multi_tenant.ts` is the reference):\n *\n * ```ts\n * class HoldcoAdapter implements DecisioningPlatform<Config, TenantMeta> {\n *   campaignGovernance = defineCampaignGovernancePlatform<TenantMeta>({  });\n *   brandRights = defineBrandRightsPlatform<TenantMeta>({\n *     acquireRights: async (req, ctx) => {\n *       const denial = await this.enforceGovernance(tenant, ctx, offering, req);\n *       if (denial) return denial;\n *\n *     },\n *   });\n *   private async enforceGovernance(...) {\n *     // calls this.campaignGovernance.checkGovernance(...)\n *   }\n * }\n * ```\n *\n * **Pattern B — closure capture** (for adopters using `define<X>Platform({...})`\n * factories standalone):\n *\n * ```ts\n * const campaignGovernance = defineCampaignGovernancePlatform<TenantMeta>({ ... });\n * const brandRights = defineBrandRightsPlatform<TenantMeta>({\n *   acquireRights: async (req, ctx) => {\n *     const govResp = await campaignGovernance.checkGovernance!(checkReq, ctx);\n *\n *   },\n * });\n * const platform: DecisioningPlatform<Config, TenantMeta> = {\n *   capabilities: {  }, accounts: {  }, campaignGovernance, brandRights,\n * };\n * ```\n *\n * Both patterns forward the same `RequestContext` (resolved account, agent,\n * authInfo), so tenant invariants hold transitively. Both bypass wire-side\n * validation, idempotency dedup, and mutating-tool annotations — that's\n * correct because you're inside the seller's code, not handling a buyer\n * request, but it means an in-process `checkGovernance` won't be\n * re-deduped if the originating tool is already idempotency-protected.\n * Single-specialism adopters MUST NOT copy this short-circuit: without a\n * co-resident sibling handler, dial out to the registered governance\n * agent URL via the `@adcp/sdk` client instead.\n *\n * Full walkthrough with same-tenant invariant + production caveats:\n * `skills/build-holdco-agent/SKILL.md` § Cross-specialism dispatch.\n *\n * @template TConfig Platform-specific config typed at the call site.\n *                   Example: `class GAM implements DecisioningPlatform<{ networkId: string }>`.\n * @template TCtxMeta Shape of the platform's opaque ctx_metadata blob — typed\n *                    once and propagated into `ctx.account.ctx_metadata`,\n *                    `ctx.ctxMetadata.get()`, and every specialism handler.\n */\nexport interface DecisioningPlatform<TConfig = unknown, TCtxMeta = Record<string, unknown>> {\n  /** Capability declaration; single source of truth for get_adcp_capabilities. */\n  capabilities: DecisioningCapabilities<TConfig>;\n\n  /** Account model + tenant resolution. */\n  accounts: AccountStore<TCtxMeta>;\n\n  /**\n   * Server-level instructions surfaced on the MCP `initialize` response.\n   * Use to publish platform facts, decision policy, and trends that buying\n   * agents should read before issuing tool calls (e.g., \"publisher-wide\n   * brand safety: alcohol disallowed\", \"carbon-aware pricing applies to\n   * display impressions only\", \"weekly cutoff Thursday 17:00 UTC\").\n   *\n   * Two forms:\n   *\n   * 1. **Static string** — captured once at construction.\n   * 2. **Function** `(ctx: SessionContext) => MaybePromise<string | undefined>` —\n   *    re-evaluated each time `createAdcpServerFromPlatform` runs. Under the\n   *    canonical `serve({ reuseAgent: false })` flow that is per session, so the\n   *    closure can surface tenant-shaped prose (per-buyer brand manifests,\n   *    storefront-platform copy). `serve()` refuses `reuseAgent: true`\n   *    when this is a function — the function would only fire once for\n   *    the lifetime of the shared agent.\n   *\n   *    Async functions are supported: the framework calls the function at\n   *    construction and awaits the returned Promise during MCP `initialize`.\n   *    A rejected Promise is governed by `onInstructionsError`.\n   *\n   * MCP-only today. The A2A `AgentCard` analog is `description` (and\n   * per-skill `description`); threading platform.instructions into the\n   * agent-card builder is tracked separately so MCP and A2A buyers see\n   * the same prose.\n   *\n   * When set on the platform, takes precedence over any `instructions`\n   * supplied via `createAdcpServerFromPlatform` opts — same precedence as\n   * `agentRegistry`. Adopters with v5 escape-hatch wiring can keep using\n   * `opts.instructions`; v6 callers should declare it here.\n   *\n   * @see {@link OnInstructionsError} for `onInstructionsError` (default `'skip'`).\n   */\n  instructions?: string | ((ctx: SessionContext) => MaybePromise<string | undefined>);\n\n  /**\n   * Behavior when a function-form `instructions` callback throws.\n   * Defaults to `'skip'` — best-effort prose (brand manifests, marketing\n   * copy) should not kill the buyer's session on a registry fetch failure.\n   * Set `'fail'` for adopters whose instructions carry load-bearing policy.\n   *\n   * Threaded through to {@link createAdcpServer} unchanged.\n   */\n  onInstructionsError?: OnInstructionsError;\n\n  /**\n   * Buyer-agent identity registry. Optional. When\n   * configured, framework calls `agentRegistry.resolve(authInfo)` once per\n   * request before `accounts.resolve` and threads the resolved record\n   * through `ctx.agent` to specialism handlers.\n   *\n   * Adopters construct via {@link BuyerAgentRegistry.signingOnly},\n   * {@link BuyerAgentRegistry.bearerOnly}, or {@link BuyerAgentRegistry.mixed}\n   * depending on their authentication posture. When omitted, `ctx.agent`\n   * is always undefined and the framework's request flow is unchanged.\n   *\n   * The resolved record drives framework status/sandbox gates and\n   * `sync_accounts.billing` enforcement against\n   * `BuyerAgent.billing_capabilities`.\n   */\n  agentRegistry?: BuyerAgentRegistry;\n\n  /**\n   * Native-status mappers (account, mediaBuy, creative, plan).\n   *\n   * **Optional.** Default behavior treats the platform's status strings as\n   * already-canonical AdCP status values (no translation). Provide mappers\n   * only when your platform exposes non-AdCP status strings (e.g., GAM's\n   * `DELIVERY_PAUSED` → AdCP's `paused`).\n   */\n  statusMappers?: StatusMappers;\n\n  /**\n   * Per-tenant capability override. Multi-tenant SaaS adopters (Prebid-style\n   * deployments where one server hosts many advertisers, each with different\n   * `manualApprovalOperations` / pricing tiers / channel mixes) implement this\n   * to scope capabilities per resolved Account. When absent, the framework\n   * uses `capabilities` for every request.\n   *\n   * The framework calls this AFTER `accounts.resolve()` and uses the returned\n   * capabilities to gate the rest of the request. The static `agent-card.json`\n   * AND `tools/list` shape is derived from `capabilities` (the union) — per-tenant\n   * differences are runtime-only.\n   */\n  getCapabilitiesFor?(\n    account: Account<TCtxMeta>\n  ): DecisioningCapabilities<TConfig> | Promise<DecisioningCapabilities<TConfig>>;\n\n  // Per-specialism sub-interfaces — optional at the type level; required at the\n  // call site by RequiredPlatformsFor<S>. v1.0 ships these. Each is parameterized\n  // by `TCtxMeta` so adopters get typed `ctx.account.ctx_metadata` access in their\n  // method bodies without casting.\n  sales?: SalesPlatform<TCtxMeta>;\n  creative?: CreativeBuilderPlatform<TCtxMeta> | CreativeAdServerPlatform<TCtxMeta>;\n  audiences?: AudiencePlatform<TCtxMeta>;\n  signals?: SignalsPlatform<TCtxMeta>;\n  /**\n   * Sponsored Intelligence implementation. In AdCP 3.1 this field is required\n   * when the agent claims the `sponsored-intelligence` specialism. The\n   * framework also derives the legacy wire protocol entry\n   * `supported_protocols: ['sponsored_intelligence']` from the SI tool set so\n   * protocol-bundle storyboards and 3.0-era consumers keep working.\n   */\n  sponsoredIntelligence?: SponsoredIntelligencePlatform<TCtxMeta>;\n  /** @see DecisioningPlatform — § Cross-specialism dispatch (used as the canonical example: `brandRights.acquireRights` consulting `checkGovernance` before granting rights). */\n  campaignGovernance?: CampaignGovernancePlatform<TCtxMeta>;\n  contentStandards?: ContentStandardsPlatform<TCtxMeta>;\n  propertyLists?: PropertyListsPlatform<TCtxMeta>;\n  collectionLists?: CollectionListsPlatform<TCtxMeta>;\n  /** @see DecisioningPlatform — § Cross-specialism dispatch (`acquireRights` is the canonical caller into `campaignGovernance.checkGovernance`). */\n  brandRights?: BrandRightsPlatform<TCtxMeta>;\n\n  /**\n   * Optional sibling that owns the proposal side of the two-platform\n   * composition (port of `adcp-client-python`'s `ProposalManager`). When\n   * present, the framework routes `get_products` and refine traffic to\n   * the manager instead of `sales.getProducts`; `sales` stays\n   * responsible for media-buy execution. Either side can be mock-backed\n   * independently — see `MockProposalManager`.\n   *\n   * **Status**: primitive types only. Framework dispatch wiring (the\n   * five seams that intercept `getProducts`, `createMediaBuy`,\n   * `updateMediaBuy`, `getMediaBuyDelivery` to persist drafts, hydrate\n   * recipes, and commit on finalize) lands in a follow-up release. v1.5\n   * adopters can already implement against this surface; the framework\n   * just doesn't drive the lifecycle yet.\n   */\n  proposalManager?: ProposalManager<Recipe, TCtxMeta>;\n\n  // v1.1+ specialisms add: creative-review.\n}\n\n// ---------------------------------------------------------------------------\n// Compile-time capability enforcement\n// ---------------------------------------------------------------------------\n\n/**\n * Maps an AdCP specialism to the platform interface(s) it requires. The\n * framework's `createAdcpServer<P extends DecisioningPlatform>` constrains\n * `P` to satisfy `RequiredPlatformsFor<P['capabilities']['specialisms'][number]>`,\n * forcing every claimed specialism's interface methods to exist.\n *\n * Drop a method, fail compile.\n * Claim a specialism without an implementation, fail compile.\n *\n * The nested-conditional encoding (rather than a union of `S extends X ? {} : never`)\n * is deliberate: when a specialism is claimed without its required platform\n * interface, TypeScript surfaces \"Property 'sales' is missing in type 'P'\"\n * rather than the unactionable \"Type 'P' does not satisfy the constraint 'never'.\"\n *\n * v1.0 covers the 4 specialisms shipping in v1.0; extended in v1.1+.\n * Unknown specialisms (v1.1+ when this module hasn't been updated yet)\n * resolve to an empty requirement — the framework's runtime check is the\n * fallback gate.\n */\n// Sales specialisms — split into two groups by what the adopter actually owns.\n//\n//  - **Core sales** specialisms run their own bidding + media-buy lifecycle and\n//    are required to implement `SalesCorePlatform` (`getProducts`,\n//    `createMediaBuy`, `updateMediaBuy`, `getMediaBuyDelivery`, `getMediaBuys`).\n//    The retail-media variants additionally compose ingestion surfaces.\n//  - **Ingestion-only** specialisms (today: `sales-social`) front a walled-\n//    garden CAPI / audience surface that owns bidding upstream — adopters only\n//    need `SalesIngestionPlatform` (`syncCreatives` / `syncCatalogs` /\n//    `syncEventSources` / `logEvent` / etc., all optional individually).\n//  - **Proposal mode** is a hybrid — only `getProducts` is required; the rest\n//    of the lifecycle flows through notification channels.\n//\n// Wired per the AdCP 3.0 GA enum; preview specialisms (sales-streaming-tv,\n// sales-exchange, sales-retail-media) get added when they land in spec.\ntype SalesCoreSpecialism = 'sales-non-guaranteed' | 'sales-guaranteed' | 'sales-broadcast-tv' | 'sales-catalog-driven';\ntype SalesIngestionSpecialism = 'sales-social';\ntype SalesProposalSpecialism = 'sales-proposal-mode';\n\n// Signal specialisms — both share the SignalsPlatform interface. Marketplace\n// = third-party data brokers; owned = first-party data providers.\ntype SignalSpecialism = 'signal-marketplace' | 'signal-owned';\n\n// Today's spec splits campaign governance into spend-authority + delivery-monitor;\n// both share one CampaignGovernancePlatform interface. When adcp#3329 lands and\n// the spec consolidates to `campaign-governance`, this union shrinks to one\n// value without shape changes.\ntype CampaignGovernanceSpecialism = 'governance-spend-authority' | 'governance-delivery-monitor';\n\n// `TCtxMeta` defaults to `any` so callers that don't pass it explicitly (the\n// common case — `RequiredPlatformsFor<S>` without a second argument) get a\n// constraint that accepts any adopter metadata shape. The `any` is not a\n// soundness escape — adopters declare metadata inside `DecisioningPlatform<_,\n// TCtxMeta>` directly; this constraint exists only to compile-check that\n// claimed specialisms have a matching sub-interface field on the platform.\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport type RequiredPlatformsFor<\n  S extends AdCPSpecialism,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TCtxMeta = any,\n> = [S] extends [never]\n  ? // Empty specialisms[] (legitimate when the agent's only declared\n    // surface is a protocol or custom tool that is not represented as an\n    // AdCP specialism).\n    // `[S] extends [never]` short-circuits the distributive conditional —\n    // without this, a generic `S extends ...` over `never` yields `never`,\n    // collapsing `P & RequiredPlatformsFor<...>` to `never` and rejecting\n    // every platform value at the call site.\n    // eslint-disable-next-line @typescript-eslint/no-empty-object-type\n    {}\n  : S extends 'creative-template' | 'creative-generative' | 'creative-transformers'\n    ? { creative: CreativeBuilderPlatform<TCtxMeta> }\n    : S extends 'creative-ad-server'\n      ? { creative: CreativeAdServerPlatform<TCtxMeta> }\n      : S extends SalesCoreSpecialism\n        ? { sales: SalesCorePlatform<TCtxMeta> & SalesIngestionPlatform<TCtxMeta> }\n        : S extends SalesIngestionSpecialism\n          ? // Walled-garden specialisms (sales-social, today). Bidding owned upstream\n            // — only the ingestion surface is required. Adopters can voluntarily\n            // implement core methods on the same `sales` object; the SalesPlatform\n            // alias accepts both shapes.\n            { sales: SalesIngestionPlatform<TCtxMeta> }\n          : S extends SalesProposalSpecialism\n            ? // Proposal-mode adopters only need `getProducts` — the rest of the\n              // lifecycle flows through `publishStatusChange` on\n              // `resource_type: 'proposal'`. Ingestion is optional.\n              { sales: Required<Pick<SalesPlatform<TCtxMeta>, 'getProducts'>> & SalesIngestionPlatform<TCtxMeta> }\n            : S extends 'audience-sync'\n              ? { audiences: AudiencePlatform<TCtxMeta> }\n              : S extends SignalSpecialism\n                ? { signals: SignalsPlatform<TCtxMeta> }\n                : S extends CampaignGovernanceSpecialism\n                  ? { campaignGovernance: CampaignGovernancePlatform<TCtxMeta> }\n                  : S extends 'sponsored-intelligence'\n                    ? { sponsoredIntelligence: SponsoredIntelligencePlatform<TCtxMeta> }\n                    : S extends 'property-lists'\n                      ? { propertyLists: PropertyListsPlatform<TCtxMeta> }\n                      : S extends 'collection-lists'\n                        ? { collectionLists: CollectionListsPlatform<TCtxMeta> }\n                        : S extends 'content-standards'\n                          ? { contentStandards: ContentStandardsPlatform<TCtxMeta> }\n                          : S extends 'brand-rights'\n                            ? { brandRights: BrandRightsPlatform<TCtxMeta> }\n                            : // eslint-disable-next-line @typescript-eslint/no-empty-object-type\n                              {};\n// `{}` (not `Record<string, never>`) is the right \"no extra requirements\"\n// fallthrough — intersects to identity (`P & {} = P`) for specialisms\n// without platform constraints. Same reasoning RequiredCapabilitiesFor\n// documents at its own fall-through. `Record<string, never>` would force\n// the platform to have NO extra properties, collapsing `P & Record<string,\n// never>` to `never` for any platform with handler fields.\n\n/**\n * The framework's createAdcpServer<P> signature uses this intersection to\n * enforce capability claims at compile time. Sketch:\n *\n * ```ts\n * declare function createAdcpServer<P extends DecisioningPlatform>(config: {\n *   platform: P & RequiredPlatformsFor<P['capabilities']['specialisms'][number]>;\n * }): AdcpServer;\n * ```\n *\n * NOTE: The companion file is preview-only; the actual `createAdcpServer`\n * doesn't yet enforce this. Wiring lands in a follow-up PR with the\n * framework refactor.\n */\n\n/**\n * Compile-time mapping from a claimed specialism to the capability\n * blocks the framework requires on `DecisioningCapabilities`. Sister\n * type to `RequiredPlatformsFor<S>` — that one constrains the per-\n * specialism platform interfaces; this one constrains capability-block\n * declarations on `capabilities.*`.\n *\n * Mappings populated conservatively in v1.0:\n *\n *   - `'brand-rights'` → `{ brand: BrandCapabilities }`. Adopters\n *     claiming brand-rights MUST declare `capabilities.brand`. The\n *     framework auto-derives `rights: true` from the\n *     `BrandRightsPlatform` impl, but adopters still need to declare\n *     the block (even as `{}`) so `right_types`, `available_uses`,\n *     etc. land coherently in `get_adcp_capabilities`.\n *\n * Other specialisms have no required capability blocks today —\n * `audience_targeting` is recommended for `audience-sync` adopters but\n * not enforced (some sync platforms accept anonymous IDs only and\n * legitimately have no `supported_identifier_types` to declare).\n *\n * The `& Record<string, never>` fallthrough means specialisms not\n * mapped here add no constraint — adopters can claim them without\n * declaring extra capability blocks.\n */\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport type RequiredCapabilitiesFor<S extends AdCPSpecialism> = S extends 'brand-rights'\n  ? { capabilities: { brand: BrandCapabilities } }\n  : {};\n// `{}` (not `Record<string, never>`) is the right \"no extra requirements\"\n// fallthrough: it intersects to identity (`P & {} = P`) for specialisms\n// without capability constraints. `Record<string, never>` would force the\n// platform to have NO extra properties, which would reject every real\n// platform impl.\n"],"mappings":";;;;;;;;;;;;;;AAAA;AAAA;","names":[]}
+{"version":3,"sources":["../../../../src/lib/server/decisioning/platform.ts"],"sourcesContent":["/**\n * DecisioningPlatform — the top-level interface adopters implement.\n *\n * Per-specialism sub-interfaces (sales, creative, audiences, etc.) are\n * optional; framework's compile-time enforcement (RequiredPlatformsFor<S>)\n * forces the right sub-interfaces based on `capabilities.specialisms[]`.\n *\n * Status: Preview / 6.0. Not yet wired into the framework.\n *\n * @public\n */\n\nimport type { DecisioningCapabilities, BrandCapabilities } from './capabilities';\nimport type { Account, AccountStore } from './account';\nimport type { BuyerAgentRegistry } from './buyer-agent';\nimport type { SessionContext, OnInstructionsError, MaybePromise } from '../create-adcp-server';\nimport type { StatusMappers } from './status-mappers';\nimport type {\n  SalesPlatform,\n  SalesCorePlatform,\n  SalesIngestionPlatform,\n  MediaBuyLifecyclePlatform,\n  MediaBuyLifecycleCorePlatform,\n  MediaBuyLifecycleProposalPlatform,\n} from './specialisms/sales';\nimport type { ProposalManager, Recipe } from './proposal';\nimport type { CreativeBuilderPlatform } from './specialisms/creative';\nimport type { CreativeAdServerPlatform } from './specialisms/creative-ad-server';\nimport type { AudiencePlatform } from './specialisms/audiences';\nimport type { SignalsPlatform } from './specialisms/signals';\nimport type { SponsoredIntelligencePlatform } from './specialisms/sponsored-intelligence';\nimport type { CampaignGovernancePlatform } from './specialisms/campaign-governance';\nimport type { ContentStandardsPlatform } from './specialisms/content-standards';\nimport type { BrandRightsPlatform } from './specialisms/brand-rights';\nimport type { PropertyListsPlatform, CollectionListsPlatform } from './specialisms/lists';\nimport type { AdCPSpecialism } from '../../types/tools.generated';\n\n/**\n * Top-level platform interface. Adopters implement this; framework wires\n * the wire protocol around it.\n *\n * The \"framework owns X\" claims below are the v6.0 wiring contract — the\n * runtime guarantees the framework will provide once this surface is wired.\n * They are NOT yet enforced; this module is preview-only as of the scaffold\n * landing. Treat them as the design contract a v6.0 reviewer should hold\n * the framework refactor to, not as a description of existing behavior.\n *\n * **What the framework owns** (platform implementations DON'T see these):\n * - Wire-shape mapping (MCP tools/list, A2A skill manifest, request/response envelopes)\n * - Authentication + auth-principal extraction; `accounts.resolve()` is the only\n *   place the platform translates auth into its tenant model\n * - Idempotency: dedupe + replay handled before dispatch; platforms see clean traffic\n * - `sandbox` boundary: when `AccountReference.sandbox === true`, framework\n *   resolves the buyer's sandbox account via `accounts.resolve()`. The platform\n *   sees the resolved sandbox `Account` like any other and is responsible for\n *   routing reads/writes to its sandbox backend. There is no separate\n *   \"dry-run\" mode — sandbox subsumes \"validate against real platform without\n *   writing to production.\" Tool-specific `dry_run` flags on `sync_catalogs`\n *   and `sync_creatives` are wire fields the platform receives and honors;\n *   they are NOT a framework-level mode.\n * - `context` echo: framework round-trips `context` on every response\n * - Task envelopes: `submitted` outcomes are wrapped into A2A Task envelopes /\n *   MCP polling responses; `taskHandle.notify` calls dedupe + retry\n * - Schema validation: requests fail before reaching the platform; responses are\n *   shape-validated against the wire schema after the platform returns\n *\n * **What the platform owns**: the business decisions in each `SalesPlatform` /\n * `CreativeBuilderPlatform` / `AudiencePlatform` method. Nothing else.\n *\n * ### Cross-specialism dispatch\n *\n * When one specialism handler needs to consult another (canonical case:\n * `brandRights.acquireRights` calling `campaignGovernance.checkGovernance`\n * before granting rights, against a buyer-registered governance binding),\n * the framework does NOT thread a separate `ctx.platform.<specialism>`\n * accessor on `RequestContext`. Two idiomatic patterns; pick by authoring\n * style:\n *\n * **Pattern A — class instance + `this`** (canonical for holdco hubs;\n * `examples/hello_seller_adapter_multi_tenant.ts` is the reference):\n *\n * ```ts\n * class HoldcoAdapter implements DecisioningPlatform<Config, TenantMeta> {\n *   campaignGovernance = defineCampaignGovernancePlatform<TenantMeta>({  });\n *   brandRights = defineBrandRightsPlatform<TenantMeta>({\n *     acquireRights: async (req, ctx) => {\n *       const denial = await this.enforceGovernance(tenant, ctx, offering, req);\n *       if (denial) return denial;\n *\n *     },\n *   });\n *   private async enforceGovernance(...) {\n *     // calls this.campaignGovernance.checkGovernance(...)\n *   }\n * }\n * ```\n *\n * **Pattern B — closure capture** (for adopters using `define<X>Platform({...})`\n * factories standalone):\n *\n * ```ts\n * const campaignGovernance = defineCampaignGovernancePlatform<TenantMeta>({ ... });\n * const brandRights = defineBrandRightsPlatform<TenantMeta>({\n *   acquireRights: async (req, ctx) => {\n *     const govResp = await campaignGovernance.checkGovernance!(checkReq, ctx);\n *\n *   },\n * });\n * const platform: DecisioningPlatform<Config, TenantMeta> = {\n *   capabilities: {  }, accounts: {  }, campaignGovernance, brandRights,\n * };\n * ```\n *\n * Both patterns forward the same `RequestContext` (resolved account, agent,\n * authInfo), so tenant invariants hold transitively. Both bypass wire-side\n * validation, idempotency dedup, and mutating-tool annotations — that's\n * correct because you're inside the seller's code, not handling a buyer\n * request, but it means an in-process `checkGovernance` won't be\n * re-deduped if the originating tool is already idempotency-protected.\n * Single-specialism adopters MUST NOT copy this short-circuit: without a\n * co-resident sibling handler, dial out to the registered governance\n * agent URL via the `@adcp/sdk` client instead.\n *\n * Full walkthrough with same-tenant invariant + production caveats:\n * `skills/build-holdco-agent/SKILL.md` § Cross-specialism dispatch.\n *\n * @template TConfig Platform-specific config typed at the call site.\n *                   Example: `class GAM implements DecisioningPlatform<{ networkId: string }>`.\n * @template TCtxMeta Shape of the platform's opaque ctx_metadata blob — typed\n *                    once and propagated into `ctx.account.ctx_metadata`,\n *                    `ctx.ctxMetadata.get()`, and every specialism handler.\n */\nexport interface DecisioningPlatform<TConfig = unknown, TCtxMeta = Record<string, unknown>> {\n  /** Capability declaration; single source of truth for get_adcp_capabilities. */\n  capabilities: DecisioningCapabilities<TConfig>;\n\n  /** Account model + tenant resolution. */\n  accounts: AccountStore<TCtxMeta>;\n\n  /**\n   * Server-level instructions surfaced on the MCP `initialize` response.\n   * Use to publish platform facts, decision policy, and trends that buying\n   * agents should read before issuing tool calls (e.g., \"publisher-wide\n   * brand safety: alcohol disallowed\", \"carbon-aware pricing applies to\n   * display impressions only\", \"weekly cutoff Thursday 17:00 UTC\").\n   *\n   * Two forms:\n   *\n   * 1. **Static string** — captured once at construction.\n   * 2. **Function** `(ctx: SessionContext) => MaybePromise<string | undefined>` —\n   *    re-evaluated each time `createAdcpServerFromPlatform` runs. Under the\n   *    canonical `serve({ reuseAgent: false })` flow that is per session, so the\n   *    closure can surface tenant-shaped prose (per-buyer brand manifests,\n   *    storefront-platform copy). `serve()` refuses `reuseAgent: true`\n   *    when this is a function — the function would only fire once for\n   *    the lifetime of the shared agent.\n   *\n   *    Async functions are supported: the framework calls the function at\n   *    construction and awaits the returned Promise during MCP `initialize`.\n   *    A rejected Promise is governed by `onInstructionsError`.\n   *\n   * MCP-only today. The A2A `AgentCard` analog is `description` (and\n   * per-skill `description`); threading platform.instructions into the\n   * agent-card builder is tracked separately so MCP and A2A buyers see\n   * the same prose.\n   *\n   * When set on the platform, takes precedence over any `instructions`\n   * supplied via `createAdcpServerFromPlatform` opts — same precedence as\n   * `agentRegistry`. Adopters with v5 escape-hatch wiring can keep using\n   * `opts.instructions`; v6 callers should declare it here.\n   *\n   * @see {@link OnInstructionsError} for `onInstructionsError` (default `'skip'`).\n   */\n  instructions?: string | ((ctx: SessionContext) => MaybePromise<string | undefined>);\n\n  /**\n   * Behavior when a function-form `instructions` callback throws.\n   * Defaults to `'skip'` — best-effort prose (brand manifests, marketing\n   * copy) should not kill the buyer's session on a registry fetch failure.\n   * Set `'fail'` for adopters whose instructions carry load-bearing policy.\n   *\n   * Threaded through to {@link createAdcpServer} unchanged.\n   */\n  onInstructionsError?: OnInstructionsError;\n\n  /**\n   * Buyer-agent identity registry. Optional. When\n   * configured, framework calls `agentRegistry.resolve(authInfo)` once per\n   * request before `accounts.resolve` and threads the resolved record\n   * through `ctx.agent` to specialism handlers.\n   *\n   * Adopters construct via {@link BuyerAgentRegistry.signingOnly},\n   * {@link BuyerAgentRegistry.bearerOnly}, or {@link BuyerAgentRegistry.mixed}\n   * depending on their authentication posture. When omitted, `ctx.agent`\n   * is always undefined and the framework's request flow is unchanged.\n   *\n   * The resolved record drives framework status/sandbox gates and\n   * `sync_accounts.billing` enforcement against\n   * `BuyerAgent.billing_capabilities`.\n   */\n  agentRegistry?: BuyerAgentRegistry;\n\n  /**\n   * Native-status mappers (account, mediaBuy, creative, plan).\n   *\n   * **Optional.** Default behavior treats the platform's status strings as\n   * already-canonical AdCP status values (no translation). Provide mappers\n   * only when your platform exposes non-AdCP status strings (e.g., GAM's\n   * `DELIVERY_PAUSED` → AdCP's `paused`).\n   */\n  statusMappers?: StatusMappers;\n\n  /**\n   * Per-tenant capability override. Multi-tenant SaaS adopters (Prebid-style\n   * deployments where one server hosts many advertisers, each with different\n   * `manualApprovalOperations` / pricing tiers / channel mixes) implement this\n   * to scope capabilities per resolved Account. When absent, the framework\n   * uses `capabilities` for every request.\n   *\n   * The framework calls this AFTER `accounts.resolve()` and uses the returned\n   * capabilities to gate the rest of the request. The static `agent-card.json`\n   * AND `tools/list` shape is derived from `capabilities` (the union) — per-tenant\n   * differences are runtime-only.\n   */\n  getCapabilitiesFor?(\n    account: Account<TCtxMeta>\n  ): DecisioningCapabilities<TConfig> | Promise<DecisioningCapabilities<TConfig>>;\n\n  // Per-specialism sub-interfaces — optional at the type level; required at the\n  // call site by RequiredPlatformsFor<S>. v1.0 ships these. Each is parameterized\n  // by `TCtxMeta` so adopters get typed `ctx.account.ctx_metadata` access in their\n  // method bodies without casting.\n  sales?: SalesPlatform<TCtxMeta>;\n  /** Primary AdCP 3.2 media-buy lifecycle; compose with `sales` for 3.0/3.1 compatibility routes. */\n  mediaBuyLifecycle?: MediaBuyLifecyclePlatform<TCtxMeta>;\n  creative?: CreativeBuilderPlatform<TCtxMeta> | CreativeAdServerPlatform<TCtxMeta>;\n  audiences?: AudiencePlatform<TCtxMeta>;\n  signals?: SignalsPlatform<TCtxMeta>;\n  /**\n   * Sponsored Intelligence implementation. In AdCP 3.1 this field is required\n   * when the agent claims the `sponsored-intelligence` specialism. The\n   * framework also derives the legacy wire protocol entry\n   * `supported_protocols: ['sponsored_intelligence']` from the SI tool set so\n   * protocol-bundle storyboards and 3.0-era consumers keep working.\n   */\n  sponsoredIntelligence?: SponsoredIntelligencePlatform<TCtxMeta>;\n  /** @see DecisioningPlatform — § Cross-specialism dispatch (used as the canonical example: `brandRights.acquireRights` consulting `checkGovernance` before granting rights). */\n  campaignGovernance?: CampaignGovernancePlatform<TCtxMeta>;\n  contentStandards?: ContentStandardsPlatform<TCtxMeta>;\n  propertyLists?: PropertyListsPlatform<TCtxMeta>;\n  collectionLists?: CollectionListsPlatform<TCtxMeta>;\n  /** @see DecisioningPlatform — § Cross-specialism dispatch (`acquireRights` is the canonical caller into `campaignGovernance.checkGovernance`). */\n  brandRights?: BrandRightsPlatform<TCtxMeta>;\n\n  /**\n   * Optional sibling that owns the proposal side of the two-platform\n   * composition (port of `adcp-client-python`'s `ProposalManager`). When\n   * present, the framework routes `get_products` and refine traffic to\n   * the manager instead of `sales.getProducts`; `sales` stays\n   * responsible for media-buy execution. Either side can be mock-backed\n   * independently — see `MockProposalManager`.\n   *\n   * **Status**: primitive types only. Framework dispatch wiring (the\n   * five seams that intercept `getProducts`, `createMediaBuy`,\n   * `updateMediaBuy`, `getMediaBuyDelivery` to persist drafts, hydrate\n   * recipes, and commit on finalize) lands in a follow-up release. v1.5\n   * adopters can already implement against this surface; the framework\n   * just doesn't drive the lifecycle yet.\n   */\n  proposalManager?: ProposalManager<Recipe, TCtxMeta>;\n\n  // v1.1+ specialisms add: creative-review.\n}\n\n// ---------------------------------------------------------------------------\n// Compile-time capability enforcement\n// ---------------------------------------------------------------------------\n\n/**\n * Maps an AdCP specialism to the platform interface(s) it requires. The\n * framework's `createAdcpServer<P extends DecisioningPlatform>` constrains\n * `P` to satisfy `RequiredPlatformsFor<P['capabilities']['specialisms'][number]>`,\n * forcing every claimed specialism's interface methods to exist.\n *\n * Drop a method, fail compile.\n * Claim a specialism without an implementation, fail compile.\n *\n * The nested-conditional encoding (rather than a union of `S extends X ? {} : never`)\n * is deliberate: when a specialism is claimed without its required platform\n * interface, TypeScript surfaces \"Property 'sales' is missing in type 'P'\"\n * rather than the unactionable \"Type 'P' does not satisfy the constraint 'never'.\"\n *\n * v1.0 covers the 4 specialisms shipping in v1.0; extended in v1.1+.\n * Unknown specialisms (v1.1+ when this module hasn't been updated yet)\n * resolve to an empty requirement — the framework's runtime check is the\n * fallback gate.\n */\n// Sales specialisms — split into two groups by what the adopter actually owns.\n//\n//  - **Core sales** specialisms run their own bidding + media-buy lifecycle and\n//    are required to implement `SalesCorePlatform` (`getProducts`,\n//    `createMediaBuy`, `updateMediaBuy`, `getMediaBuyDelivery`, `getMediaBuys`).\n//    The retail-media variants additionally compose ingestion surfaces.\n//  - **Ingestion-only** specialisms (today: `sales-social`) front a walled-\n//    garden CAPI / audience surface that owns bidding upstream — adopters only\n//    need `SalesIngestionPlatform` (`syncCreatives` / `syncCatalogs` /\n//    `syncEventSources` / `logEvent` / etc., all optional individually).\n//  - **Proposal mode** is a hybrid — only `getProducts` is required; the rest\n//    of the lifecycle flows through notification channels.\n//\n// Wired per the AdCP 3.0 GA enum; preview specialisms (sales-streaming-tv,\n// sales-exchange, sales-retail-media) get added when they land in spec.\ntype SalesCoreSpecialism = 'sales-non-guaranteed' | 'sales-guaranteed' | 'sales-broadcast-tv';\ntype SalesCatalogSpecialism = 'sales-catalog-driven';\ntype SalesIngestionSpecialism = 'sales-social';\ntype SalesProposalSpecialism = 'sales-proposal-mode';\n\n// Signal specialisms — both share the SignalsPlatform interface. Marketplace\n// = third-party data brokers; owned = first-party data providers.\ntype SignalSpecialism = 'signal-marketplace' | 'signal-owned';\n\n// Today's spec splits campaign governance into spend-authority + delivery-monitor;\n// both share one CampaignGovernancePlatform interface. When adcp#3329 lands and\n// the spec consolidates to `campaign-governance`, this union shrinks to one\n// value without shape changes.\ntype CampaignGovernanceSpecialism = 'governance-spend-authority' | 'governance-delivery-monitor';\n\n// `TCtxMeta` defaults to `any` so callers that don't pass it explicitly (the\n// common case — `RequiredPlatformsFor<S>` without a second argument) get a\n// constraint that accepts any adopter metadata shape. The `any` is not a\n// soundness escape — adopters declare metadata inside `DecisioningPlatform<_,\n// TCtxMeta>` directly; this constraint exists only to compile-check that\n// claimed specialisms have a matching sub-interface field on the platform.\ntype SalesCorePlatformRequirement<TCtxMeta> =\n  | {\n      sales: SalesCorePlatform<TCtxMeta> & SalesIngestionPlatform<TCtxMeta>;\n      mediaBuyLifecycle?: MediaBuyLifecyclePlatform<TCtxMeta>;\n    }\n  | {\n      sales?: SalesPlatform<TCtxMeta>;\n      mediaBuyLifecycle: MediaBuyLifecycleCorePlatform<TCtxMeta>;\n    };\n\ntype SalesProposalPlatformRequirement<TCtxMeta> =\n  | {\n      sales: Required<Pick<SalesPlatform<TCtxMeta>, 'getProducts'>> & SalesIngestionPlatform<TCtxMeta>;\n      mediaBuyLifecycle?: MediaBuyLifecyclePlatform<TCtxMeta>;\n    }\n  | {\n      sales?: SalesPlatform<TCtxMeta>;\n      mediaBuyLifecycle: MediaBuyLifecycleProposalPlatform<TCtxMeta>;\n    };\n\nexport type RequiredPlatformsFor<\n  S extends AdCPSpecialism,\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  TCtxMeta = any,\n> = [S] extends [never]\n  ? // Empty specialisms[] (legitimate when the agent's only declared\n    // surface is a protocol or custom tool that is not represented as an\n    // AdCP specialism).\n    // `[S] extends [never]` short-circuits the distributive conditional —\n    // without this, a generic `S extends ...` over `never` yields `never`,\n    // collapsing `P & RequiredPlatformsFor<...>` to `never` and rejecting\n    // every platform value at the call site.\n    // eslint-disable-next-line @typescript-eslint/no-empty-object-type\n    {}\n  : S extends 'creative-template' | 'creative-generative' | 'creative-transformers'\n    ? { creative: CreativeBuilderPlatform<TCtxMeta> }\n    : S extends 'creative-ad-server'\n      ? { creative: CreativeAdServerPlatform<TCtxMeta> }\n      : S extends SalesCoreSpecialism\n        ? SalesCorePlatformRequirement<TCtxMeta>\n        : S extends SalesCatalogSpecialism\n          ? { sales: SalesCorePlatform<TCtxMeta> & SalesIngestionPlatform<TCtxMeta> }\n          : S extends SalesIngestionSpecialism\n            ? // Walled-garden specialisms (sales-social, today). Bidding owned upstream\n              // — only the ingestion surface is required. Adopters can voluntarily\n              // implement core methods on the same `sales` object; the SalesPlatform\n              // alias accepts both shapes.\n              { sales: SalesIngestionPlatform<TCtxMeta> }\n            : S extends SalesProposalSpecialism\n              ? // Proposal-mode adopters only need `getProducts` — the rest of the\n                // lifecycle flows through `publishStatusChange` on\n                // `resource_type: 'proposal'`. Ingestion is optional.\n                SalesProposalPlatformRequirement<TCtxMeta>\n              : S extends 'audience-sync'\n                ? { audiences: AudiencePlatform<TCtxMeta> }\n                : S extends SignalSpecialism\n                  ? { signals: SignalsPlatform<TCtxMeta> }\n                  : S extends CampaignGovernanceSpecialism\n                    ? { campaignGovernance: CampaignGovernancePlatform<TCtxMeta> }\n                    : S extends 'sponsored-intelligence'\n                      ? { sponsoredIntelligence: SponsoredIntelligencePlatform<TCtxMeta> }\n                      : S extends 'property-lists'\n                        ? { propertyLists: PropertyListsPlatform<TCtxMeta> }\n                        : S extends 'collection-lists'\n                          ? { collectionLists: CollectionListsPlatform<TCtxMeta> }\n                          : S extends 'content-standards'\n                            ? { contentStandards: ContentStandardsPlatform<TCtxMeta> }\n                            : S extends 'brand-rights'\n                              ? { brandRights: BrandRightsPlatform<TCtxMeta> }\n                              : // eslint-disable-next-line @typescript-eslint/no-empty-object-type\n                                {};\n// `{}` (not `Record<string, never>`) is the right \"no extra requirements\"\n// fallthrough — intersects to identity (`P & {} = P`) for specialisms\n// without platform constraints. Same reasoning RequiredCapabilitiesFor\n// documents at its own fall-through. `Record<string, never>` would force\n// the platform to have NO extra properties, collapsing `P & Record<string,\n// never>` to `never` for any platform with handler fields.\n\n/**\n * The framework's createAdcpServer<P> signature uses this intersection to\n * enforce capability claims at compile time. Sketch:\n *\n * ```ts\n * declare function createAdcpServer<P extends DecisioningPlatform>(config: {\n *   platform: P & RequiredPlatformsFor<P['capabilities']['specialisms'][number]>;\n * }): AdcpServer;\n * ```\n *\n * NOTE: The companion file is preview-only; the actual `createAdcpServer`\n * doesn't yet enforce this. Wiring lands in a follow-up PR with the\n * framework refactor.\n */\n\n/**\n * Compile-time mapping from a claimed specialism to the capability\n * blocks the framework requires on `DecisioningCapabilities`. Sister\n * type to `RequiredPlatformsFor<S>` — that one constrains the per-\n * specialism platform interfaces; this one constrains capability-block\n * declarations on `capabilities.*`.\n *\n * Mappings populated conservatively in v1.0:\n *\n *   - `'brand-rights'` → `{ brand: BrandCapabilities }`. Adopters\n *     claiming brand-rights MUST declare `capabilities.brand`. The\n *     framework auto-derives `rights: true` from the\n *     `BrandRightsPlatform` impl, but adopters still need to declare\n *     the block (even as `{}`) so `right_types`, `available_uses`,\n *     etc. land coherently in `get_adcp_capabilities`.\n *\n * Other specialisms have no required capability blocks today —\n * `audience_targeting` is recommended for `audience-sync` adopters but\n * not enforced (some sync platforms accept anonymous IDs only and\n * legitimately have no `supported_identifier_types` to declare).\n *\n * The `& Record<string, never>` fallthrough means specialisms not\n * mapped here add no constraint — adopters can claim them without\n * declaring extra capability blocks.\n */\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport type RequiredCapabilitiesFor<S extends AdCPSpecialism> = S extends 'brand-rights'\n  ? { capabilities: { brand: BrandCapabilities } }\n  : {};\n// `{}` (not `Record<string, never>`) is the right \"no extra requirements\"\n// fallthrough: it intersects to identity (`P & {} = P`) for specialisms\n// without capability constraints. `Record<string, never>` would force the\n// platform to have NO extra properties, which would reject every real\n// platform impl.\n"],"mappings":";;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/dist/lib/server/decisioning/runtime/from-platform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"from-platform.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/decisioning/runtime/from-platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAEL,KAAK,gBAAgB,EASrB,KAAK,cAAc,EAEpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,KAAK,EAAE,OAAO,EAAoC,MAAM,YAAY,CAAC;AA6C5E,OAAO,EACL,KAAK,gBAAgB,EAOtB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EACV,aAAa,EAKd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAI7D,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,UAAU,EAAmB,MAAM,iBAAiB,CAAC;AAkBlH,OAAO,EAAiC,KAAK,eAAe,EAAgC,MAAM,mBAAmB,CAAC;AACtH,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAoBzG,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAcnG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAisCrF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,YAAY,CAAC,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAEnG;;;;;;;OAOG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAET;;;;;;;;;;OAUG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrG;AAED,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC/C,gBAAgB,EAChB,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,aAAa,CACvD,CAAC;AAEF,MAAM,WAAW,mCAAoC,SAAQ,IAAI,CAC/D,gBAAgB,EAChB,gBAAgB,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,aAAa,CAChH;IACC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,8BAA8B,CAAC;IAChD;;;;;OAKG;IACH,6BAA6B,CAAC,EAAE,qBAAqB,CAAC;IACtD,gGAAgG;IAChG,6BAA6B,CAAC,EAAE,6BAA6B,CAAC;IAC9D;;;;;OAKG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,6BAA6B,CAAC;IAE9C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAE1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,EAAE,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1D;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;IAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAE/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,aAAa,CAAC,EAAE,OAAO,aAAa,EAAE,aAAa,CAAC;IAEpD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAElC;;;;;;;;;;;;;OAaG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CAsCtC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS;IAC/E,YAAY,EAAE;QAAE,kBAAkB,EAAE,6BAA6B,CAAA;KAAE,CAAC;CACrE,GACG,mCAAmC,GAAG;IAAE,UAAU,EAAE,sBAAsB,CAAA;CAAE,GAC5E,mCAAmC,CAAC;AAExC;;;;GAIG;AACH,MAAM,WAAW,qBAAsB,SAAQ,UAAU;IACvD;;;;;;;;;;;;;;;OAeG;IACH,YAAY,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjH;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,EAAE,eAAe,CAAC;CAC/B;AAOD,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,EAClF,QAAQ,EAAE,CAAC,GACT,oBAAoB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,GAC9D,uBAAuB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,EACnE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,GACvB,qBAAqB,CAypCvB;AA+WD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,KAAK,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAwM/D;;;;;;;;;;;GAWG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}
+{"version":3,"file":"from-platform.d.ts","sourceRoot":"","sources":["../../../../../src/lib/server/decisioning/runtime/from-platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAGL,KAAK,gBAAgB,EAUrB,KAAK,cAAc,EAEpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,KAAK,EAAE,OAAO,EAAoC,MAAM,YAAY,CAAC;AA6C5E,OAAO,EACL,KAAK,gBAAgB,EAOtB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EACV,aAAa,EAKd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAI7D,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,UAAU,EAAmB,MAAM,iBAAiB,CAAC;AAkBlH,OAAO,EAAiC,KAAK,eAAe,EAAgC,MAAM,mBAAmB,CAAC;AACtH,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAoBzG,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAcnG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAisCrF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,YAAY,CAAC,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAEnG;;;;;;;OAOG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAET;;;;;;;;;;OAUG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrG;AAED,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC/C,gBAAgB,EAChB,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,aAAa,CACvD,CAAC;AAEF,MAAM,WAAW,mCAAoC,SAAQ,IAAI,CAC/D,gBAAgB,EAChB,gBAAgB,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,aAAa,CAChH;IACC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,8BAA8B,CAAC;IAChD;;;;;OAKG;IACH,6BAA6B,CAAC,EAAE,qBAAqB,CAAC;IACtD,gGAAgG;IAChG,6BAA6B,CAAC,EAAE,6BAA6B,CAAC;IAC9D;;;;;OAKG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,6BAA6B,CAAC;IAE9C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAE1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,EAAE,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1D;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;IAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAE/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,aAAa,CAAC,EAAE,OAAO,aAAa,EAAE,aAAa,CAAC;IAEpD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAElC;;;;;;;;;;;;;OAaG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CAsCtC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS;IAC/E,YAAY,EAAE;QAAE,kBAAkB,EAAE,6BAA6B,CAAA;KAAE,CAAC;CACrE,GACG,mCAAmC,GAAG;IAAE,UAAU,EAAE,sBAAsB,CAAA;CAAE,GAC5E,mCAAmC,CAAC;AAExC;;;;GAIG;AACH,MAAM,WAAW,qBAAsB,SAAQ,UAAU;IACvD;;;;;;;;;;;;;;;OAeG;IACH,YAAY,CAAC,OAAO,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjH;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC;;;;;;;;;;;;;;;;;OAiBG;IACH,YAAY,EAAE,eAAe,CAAC;CAC/B;AAOD,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,EAClF,QAAQ,EAAE,CAAC,GACT,oBAAoB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,GAC9D,uBAAuB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,EACnE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,GACvB,qBAAqB,CAqrCvB;AA+WD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,KAAK,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAwM/D;;;;;;;;;;;GAWG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}

package/dist/lib/server/decisioning/runtime/from-platform.js

@@ -1017,8 +1017,8 @@ function createAdcpServerFromPlatform(platform, opts) {
   const som = somCandidate != null && somCandidate.length > 0 ? somCandidate : void 0;
   const fc = platform.capabilities.frequency_capping;
   const targeting = platform.capabilities.targeting ? (0, import_capabilities.normalizeTargetingCapabilities)(platform.capabilities.targeting) : void 0;
-  const hasSalesPlatform = platform.sales != null || platform.proposalManager != null;
-  const supportsProposals = platform.capabilities.supportsProposals ?? (platform.proposalManager != null ? true : hasSalesPlatform ? false : void 0);
+  const hasSalesPlatform = platform.sales != null || platform.mediaBuyLifecycle != null || platform.proposalManager != null;
+  const supportsProposals = platform.capabilities.supportsProposals ?? (platform.proposalManager != null || platform.mediaBuyLifecycle?.requestProposals != null || platform.mediaBuyLifecycle?.refineProposals != null ? true : hasSalesPlatform ? false : void 0);
   const hasMediaBuyProjection = hasSalesPlatform || at != null || ct != null || cs != null || som != null || fc != null || targeting != null || supportsProposals !== void 0;
   const configuredAdcpVersion = opts.adcpVersion ?? import_version.ADCP_VERSION;
   const configuredRelease = parseAdcpRelease(configuredAdcpVersion);
@@ -1147,6 +1147,23 @@ function createAdcpServerFromPlatform(platform, opts) {
     }
   };
   const ctxFor = makeCtxFor(effectiveCtxMetadata);
+  const platformProposalNegotiation = buildProposalNegotiationHandlers(
+    platform,
+    taskRegistry,
+    taskWebhookEmit,
+    observability,
+    fwLogger,
+    {
+      allowPrivateWebhookUrls: opts.allowPrivateWebhookUrls === true,
+      autoEmitCompletionWebhooks: opts.autoEmitCompletionWebhooks === true
+    },
+    ctxFor
+  );
+  if (platformProposalNegotiation && opts.proposalNegotiation) {
+    throw new import_validate_platform.PlatformConfigError(
+      "Configure refine_proposals through platform.mediaBuyLifecycle or opts.proposalNegotiation, not both"
+    );
+  }
   if (opts.resolveIdempotencyPrincipal === void 0) {
     const env = process.env.NODE_ENV;
     const inDevAllowlist = env === "test" || env === "development";
@@ -1159,6 +1176,7 @@ function createAdcpServerFromPlatform(platform, opts) {
   }
   const config = {
     ...opts,
+    requireCompactMutationAccountScope: true,
     taskRegistry,
     ...autoSeedStore != null && { testController: makeAutoSeedBridge(autoSeedStore) },
     ...projectedCapabilitiesConfig != null && { capabilities: projectedCapabilitiesConfig },
@@ -1182,17 +1200,14 @@ function createAdcpServerFromPlatform(platform, opts) {
     // Pool-derived stores override the spread above when adopters supplied
     // `pool` but no explicit per-store opt. Explicit values still win.
     ...effectiveIdempotency !== void 0 && { idempotency: effectiveIdempotency },
-    // v6 default principal resolver: every mutating tool requires an
-    // idempotency principal (the v5 createAdcpServer surface returns
-    // SERVICE_UNAVAILABLE when one isn't wired). v6 platform adopters
-    // who skip the explicit hook get a sensible default — auth client
-    // id when present (multi-tenant: each buyer owns its own
-    // idempotency namespace), else session key, else account id
-    // (single-tenant fallback). Adopters override by passing
-    // resolveIdempotencyPrincipal in opts; the spread above keeps
-    // explicit values winning. Closed by the Emma matrix surfacing
-    // SERVICE_UNAVAILABLE on every v6 mutating call.
-    resolveIdempotencyPrincipal: opts.resolveIdempotencyPrincipal ?? ((ctx) => ctx.authInfo?.clientId ?? ctx.sessionKey ?? ctx.account?.id ?? void 0),
+    // Preserve the SDK 13 principal namespace for established tools so a
+    // retry spanning a rolling 13→14 deployment still finds its durable
+    // idempotency entry. The new compact lifecycle uses credential-kind
+    // namespacing and refuses session/account fallbacks, preventing
+    // cross-credential collisions without reopening a duplicate-buy window
+    // on create_media_buy/update_media_buy. Explicit adopter resolvers still
+    // win for every tool.
+    resolveIdempotencyPrincipal: opts.resolveIdempotencyPrincipal ?? ((ctx, _params, toolName) => import_create_adcp_server.COMPACT_MEDIA_BUY_MUTATION_TOOLS.has(toolName) ? authenticatedPrincipalFor(ctx) : ctx.authInfo?.clientId ?? ctx.sessionKey ?? ctx.account?.id ?? void 0),
     resolveAccount: async (ref, ctx) => {
       const start = Date.now();
       let resolved = false;
@@ -1294,6 +1309,7 @@ function createAdcpServerFromPlatform(platform, opts) {
       mergeOpts,
       defaultCreativeWireMode
     ),
+    proposalNegotiation: platformProposalNegotiation ?? opts.proposalNegotiation,
     creative: mergeHandlers(
       legacyHandlers.creative,
       buildCreativeHandlers(
@@ -2093,6 +2109,17 @@ function taskOwnerScopeFor(ctx, accountId) {
   }
   return `account:${accountId}`;
 }
+function authenticatedPrincipalFor(ctx) {
+  if (ctx.agent?.agent_url) return `agent:${ctx.agent.agent_url}`;
+  const credential = ctx.authInfo?.credential;
+  if (credential?.kind === "http_sig") return `http_sig:${credential.agent_url}`;
+  if (credential?.kind === "oauth") return `oauth:${credential.client_id}`;
+  if (credential?.kind === "api_key") return `api_key:${credential.key_id}`;
+  if (typeof ctx.authInfo?.clientId === "string" && ctx.authInfo.clientId.length > 0) {
+    return `client:${ctx.authInfo.clientId}`;
+  }
+  return void 0;
+}
 function hasPushNotificationConfig(params) {
   return params != null && typeof params === "object" && params.push_notification_config !== void 0;
 }
@@ -2755,11 +2782,167 @@ function validatePushNotificationOperationId(operationId) {
   }
   return { ok: true };
 }
+function buildProposalNegotiationHandlers(platform, taskRegistry, taskWebhookEmit, observability, logger, pushOpts, ctxFor) {
+  const lifecycle = platform.mediaBuyLifecycle;
+  if (!lifecycle?.refineProposals) return void 0;
+  if (!lifecycle.proposalRefinement) {
+    throw new import_validate_platform.PlatformConfigError(
+      "mediaBuyLifecycle.refineProposals requires mediaBuyLifecycle.proposalRefinement capability metadata"
+    );
+  }
+  return {
+    capabilities: lifecycle.proposalRefinement,
+    resolveScope: (ctx) => {
+      const accountId = ctx.account?.id;
+      if (!accountId) {
+        throw new import_async_outcome.AdcpError("ACCOUNT_NOT_FOUND", {
+          message: "refine_proposals requires an authenticated account scope",
+          recovery: "correctable"
+        });
+      }
+      const principalId = authenticatedPrincipalFor(ctx);
+      if (!principalId) {
+        throw new import_async_outcome.AdcpError("AUTH_REQUIRED", {
+          message: "refine_proposals requires an authenticated buyer principal",
+          recovery: "correctable"
+        });
+      }
+      return { tenant_id: accountId, account_id: accountId, principal_id: principalId };
+    },
+    refineProposals: async (params, ctx) => {
+      const request = params;
+      const reqCtx = ctxFor(ctx, request);
+      if (!reqCtx.account?.id) {
+        throw new import_async_outcome.AdcpError("ACCOUNT_NOT_FOUND", {
+          message: "refine_proposals requires an authenticated account scope",
+          recovery: "correctable"
+        });
+      }
+      return projectSync(
+        async () => {
+          const push = extractPushConfig(request, logger, {
+            allowPrivateWebhookUrls: pushOpts.allowPrivateWebhookUrls
+          });
+          const result = await lifecycle.refineProposals(params, reqCtx);
+          return routeIfHandoff(
+            taskRegistry,
+            {
+              tool: "refine_proposals",
+              accountId: reqCtx.account.id,
+              ownerScope: taskOwnerScopeFor(ctx, reqCtx.account.id),
+              pushNotificationUrl: push.url,
+              pushNotificationToken: push.token,
+              pushNotificationOperationId: push.operationId,
+              emitWebhook: taskWebhookEmit ?? ctx.emitWebhook,
+              autoEmitCompletion: pushOpts.autoEmitCompletionWebhooks,
+              observability,
+              logger
+            },
+            result,
+            (value) => value
+          );
+        },
+        (value) => value
+      );
+    }
+  };
+}
 function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observability, logger, pushOpts, ctxFor, ctxMetadataStore, mediaBuyStore, proposalStore, legacyFormatConverter, canonicalFormatLegacyResolver, creativeWireMode) {
   const sales = platform.sales;
+  const lifecycle = platform.mediaBuyLifecycle;
+  const getMediaBuyDelivery = lifecycle?.getMediaBuyDelivery ?? sales?.getMediaBuyDelivery;
+  const getMediaBuys = lifecycle?.getMediaBuys ?? sales?.getMediaBuys;
   const proposalManager = platform.proposalManager;
-  if (!sales && !proposalManager) return void 0;
+  if (!sales && !lifecycle && !proposalManager) return void 0;
+  const dispatchCompactMutation = async (tool, params, ctx, invoke) => {
+    return projectSync(
+      async () => {
+        if (ctx.authInfo === void 0 && ctx.agent === void 0) {
+          throw new import_async_outcome.AdcpError("AUTH_MISSING", {
+            message: `${tool} requires an authenticated buyer principal`,
+            recovery: "correctable"
+          });
+        }
+        const accountId = ctx.account?.id;
+        if (!accountId) {
+          throw new import_async_outcome.AdcpError("ACCOUNT_NOT_FOUND", {
+            message: `${tool} requires a resolved account scope`,
+            recovery: "correctable"
+          });
+        }
+        const principalId = authenticatedPrincipalFor(ctx);
+        if (!principalId) {
+          throw new import_async_outcome.AdcpError("AUTH_MISSING", {
+            message: `${tool} requires an authenticated buyer principal`,
+            recovery: "correctable"
+          });
+        }
+        const callerMutationScope = Object.freeze({
+          tenant_id: accountId,
+          account_id: accountId,
+          principal_id: principalId
+        });
+        const reqCtx = ctxFor({ ...ctx, callerMutationScope }, params);
+        const push = extractPushConfig(params, logger, {
+          allowPrivateWebhookUrls: pushOpts.allowPrivateWebhookUrls
+        });
+        const result = await invoke(reqCtx);
+        return routeIfHandoff(
+          taskRegistry,
+          {
+            tool,
+            accountId,
+            ownerScope: taskOwnerScopeFor(ctx, accountId),
+            pushNotificationUrl: push.url,
+            pushNotificationToken: push.token,
+            pushNotificationOperationId: push.operationId,
+            emitWebhook: taskWebhookEmit ?? ctx.emitWebhook,
+            autoEmitCompletion: pushOpts.autoEmitCompletionWebhooks,
+            observability,
+            logger
+          },
+          result,
+          (value) => value
+        );
+      },
+      (value) => value
+    );
+  };
   return {
+    ...lifecycle?.listProducts && {
+      listProducts: async (...[params, ctx]) => {
+        const reqCtx = ctxFor(ctx, params);
+        return projectSync(
+          () => lifecycle.listProducts(params, reqCtx),
+          (value) => value
+        );
+      }
+    },
+    ...lifecycle?.requestProposals && {
+      requestProposals: async (...[params, ctx]) => dispatchCompactMutation(
+        "request_proposals",
+        params,
+        ctx,
+        (reqCtx) => lifecycle.requestProposals(params, reqCtx)
+      )
+    },
+    ...lifecycle?.declineProposals && {
+      declineProposals: async (...[params, ctx]) => dispatchCompactMutation(
+        "decline_proposals",
+        params,
+        ctx,
+        (reqCtx) => lifecycle.declineProposals(params, reqCtx)
+      )
+    },
+    ...lifecycle?.buyProducts && {
+      buyProducts: async (...[params, ctx]) => dispatchCompactMutation("buy_products", params, ctx, (reqCtx) => lifecycle.buyProducts(params, reqCtx))
+    },
+    ...lifecycle?.acceptProposal && {
+      acceptProposal: async (...[params, ctx]) => dispatchCompactMutation("accept_proposal", params, ctx, (reqCtx) => lifecycle.acceptProposal(params, reqCtx))
+    },
+    ...lifecycle?.controlMediaBuy && {
+      controlMediaBuy: async (...[params, ctx]) => dispatchCompactMutation("control_media_buy", params, ctx, (reqCtx) => lifecycle.controlMediaBuy(params, reqCtx))
+    },
     ...(sales?.getProducts || proposalManager) && {
       getProducts: async (...[params, ctx]) => {
         const responseWireMode = creativeWireModeForRequest(
@@ -3107,7 +3290,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
         );
       }
     },
-    ...sales?.getMediaBuyDelivery && {
+    ...getMediaBuyDelivery && {
       getMediaBuyDelivery: async (...[params, ctx]) => {
         const responseWireMode = creativeWireModeForRequest(ctx, creativeWireMode, params);
         const reqCtx = ctxFor(ctx, params);
@@ -3127,7 +3310,7 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
         }
         return projectSync(
           async () => {
-            const result = await sales.getMediaBuyDelivery(asValidatedDomainRequest(params), reqCtx);
+            const result = await getMediaBuyDelivery(asValidatedDomainRequest(params), reqCtx);
             warnIfTruncatedMultiIdResponse(
               "getMediaBuyDelivery",
               "media_buy_ids",
@@ -3160,13 +3343,13 @@ function buildMediaBuyHandlers(platform, taskRegistry, taskWebhookEmit, observab
     // platform-derived handler when absent lets `mergeHandlers` pick up the
     // adopter's custom handler from `opts.legacyHandlers.mediaBuy` instead of throwing
     // `sales.getMediaBuys is not a function`.
-    ...sales?.getMediaBuys && {
+    ...getMediaBuys && {
       getMediaBuys: async (...[params, ctx]) => {
         const responseWireMode = creativeWireModeForRequest(ctx, creativeWireMode, params);
         const reqCtx = ctxFor(ctx, params);
         return projectSync(
           async () => {
-            const result = await sales.getMediaBuys(asValidatedDomainRequest(params), reqCtx);
+            const result = await getMediaBuys(asValidatedDomainRequest(params), reqCtx);
             warnIfTruncatedMultiIdResponse(
               "getMediaBuys",
               "media_buy_ids",