@adcp/sdk 14.0.0-rc.39 → 14.0.0-rc.40

package/README.md

@@ -1050,3 +1050,5 @@ Apache 2.0 License - see [LICENSE](LICENSE) file for details.
 - **Documentation**: [docs.adcontextprotocol.org](https://docs.adcontextprotocol.org)
 - **Issues**: [GitHub Issues](https://github.com/adcontextprotocol/adcp-client/issues)
 - **Protocol Spec**: [AdCP Specification](https://github.com/adcontextprotocol/adcp)
+
+Supply-path verification: use `verifySupplyPath` for authoritative evidence or the canonical registry verdict, and opt into external collection discovery annotations. See [the supply-path guide](docs/guides/SUPPLY-PATH-VERIFICATION.md).

package/dist/lib/core/AgentClient.d.mts

@@ -6,7 +6,8 @@ import { type CanonicalReadTaskOptions, type CreativeDeliveryTaskOptions, type S
 import type { InputHandler, TaskOptions, TaskResult, TaskInfo, Message, DirectPauseRecoveryRequest } from './ConversationTypes.mjs';
 import type { AdcpCapabilities } from '../utils/capabilities.mjs';
 import type { WebhookHeaderValue } from '../webhooks/index.mjs';
-import type { GetProductsRequest, GetProductsResponse, ListProductsRequest, ListProductsResponse, RequestProposalsRequest, RequestProposalsResponse, DeclineProposalsRequest, DeclineProposalsResponse, BuyProductsRequest, BuyProductsResponse, AcceptProposalRequest, AcceptProposalResponse, ControlMediaBuyRequest, ControlMediaBuyResponse, ListCreativeFormatsRequest, ListCreativeFormatsResponse, CreateMediaBuyRequest, CreateMediaBuyResponse, UpdateMediaBuyRequest, UpdateMediaBuyResponse, SyncCreativesRequest, SyncCreativesResponse, ListCreativesRequest, ListCreativesResponse, GetMediaBuysRequest, GetMediaBuysResponse, GetMediaBuyDeliveryRequest, GetMediaBuyDeliveryResponse, GetReportingStatusRequest, GetReportingStatusResponse, SyncReportingStatusRequest, SyncReportingStatusResponse, SyncReportingReceiptsRequest, SyncReportingReceiptsResponse, GetCreativeDeliveryRequest, GetCreativeDeliveryResponse, ProvidePerformanceFeedbackRequest, ProvidePerformanceFeedbackResponse, GetSignalsRequest, GetSignalsResponse, ActivateSignalRequest, ActivateSignalResponse, GetAdCPCapabilitiesRequest, GetAdCPCapabilitiesResponse, PreviewCreativeRequest, PreviewCreativeResponse, BuildCreativeRequest, BuildCreativeResponse, ListAccountChangesRequest, ListAccountChangesResponse, ListAccountsRequest, ListAccountsResponse, SyncAccountsRequest, SyncAccountsResponse, SyncAudiencesRequest, SyncAudiencesResponse, CreatePropertyListRequest, CreatePropertyListResponse, GetPropertyListRequest, GetPropertyListResponse, UpdatePropertyListRequest, UpdatePropertyListResponse, ListPropertyListsRequest, ListPropertyListsResponse, DeletePropertyListRequest, DeletePropertyListResponse, ListContentStandardsRequest, ListContentStandardsResponse, GetContentStandardsRequest, GetContentStandardsResponse, CalibrateContentRequest, CalibrateContentResponse, ValidateContentDeliveryRequest, ValidateContentDeliveryResponse, SIGetOfferingRequest, SIGetOfferingResponse, SIInitiateSessionRequest, SIInitiateSessionResponse, SISendMessageRequest, SISendMessageResponse, SITerminateSessionRequest, SITerminateSessionResponse, SyncPlansRequest, SyncPlansResponse, CheckGovernanceRequest, CheckGovernanceResponse, ReportPlanOutcomeRequest, ReportPlanOutcomeResponse, ReportPlanAdjustmentRequest, ReportPlanAdjustmentResponse, GetPlanAuditLogsRequest, GetPlanAuditLogsResponse, ListTransformersRequest, ListTransformersResponse, SyncAgentNotificationConfigsRequest, SyncAgentNotificationConfigsResponse } from '../types/tools.generated.mjs';
+import type { ListProductsResponseWithSupplyPath } from '../supply-path/index.mjs';
+import type { GetProductsRequest, GetProductsResponse, ListProductsRequest, RequestProposalsRequest, RequestProposalsResponse, DeclineProposalsRequest, DeclineProposalsResponse, BuyProductsRequest, BuyProductsResponse, AcceptProposalRequest, AcceptProposalResponse, ControlMediaBuyRequest, ControlMediaBuyResponse, ListCreativeFormatsRequest, ListCreativeFormatsResponse, CreateMediaBuyRequest, CreateMediaBuyResponse, UpdateMediaBuyRequest, UpdateMediaBuyResponse, SyncCreativesRequest, SyncCreativesResponse, ListCreativesRequest, ListCreativesResponse, GetMediaBuysRequest, GetMediaBuysResponse, GetMediaBuyDeliveryRequest, GetMediaBuyDeliveryResponse, GetReportingStatusRequest, GetReportingStatusResponse, SyncReportingStatusRequest, SyncReportingStatusResponse, SyncReportingReceiptsRequest, SyncReportingReceiptsResponse, GetCreativeDeliveryRequest, GetCreativeDeliveryResponse, ProvidePerformanceFeedbackRequest, ProvidePerformanceFeedbackResponse, GetSignalsRequest, GetSignalsResponse, ActivateSignalRequest, ActivateSignalResponse, GetAdCPCapabilitiesRequest, GetAdCPCapabilitiesResponse, PreviewCreativeRequest, PreviewCreativeResponse, BuildCreativeRequest, BuildCreativeResponse, ListAccountChangesRequest, ListAccountChangesResponse, ListAccountsRequest, ListAccountsResponse, SyncAccountsRequest, SyncAccountsResponse, SyncAudiencesRequest, SyncAudiencesResponse, CreatePropertyListRequest, CreatePropertyListResponse, GetPropertyListRequest, GetPropertyListResponse, UpdatePropertyListRequest, UpdatePropertyListResponse, ListPropertyListsRequest, ListPropertyListsResponse, DeletePropertyListRequest, DeletePropertyListResponse, ListContentStandardsRequest, ListContentStandardsResponse, GetContentStandardsRequest, GetContentStandardsResponse, CalibrateContentRequest, CalibrateContentResponse, ValidateContentDeliveryRequest, ValidateContentDeliveryResponse, SIGetOfferingRequest, SIGetOfferingResponse, SIInitiateSessionRequest, SIInitiateSessionResponse, SISendMessageRequest, SISendMessageResponse, SITerminateSessionRequest, SITerminateSessionResponse, SyncPlansRequest, SyncPlansResponse, CheckGovernanceRequest, CheckGovernanceResponse, ReportPlanOutcomeRequest, ReportPlanOutcomeResponse, ReportPlanAdjustmentRequest, ReportPlanAdjustmentResponse, GetPlanAuditLogsRequest, GetPlanAuditLogsResponse, ListTransformersRequest, ListTransformersResponse, SyncAgentNotificationConfigsRequest, SyncAgentNotificationConfigsResponse } from '../types/tools.generated.mjs';
 import type { MutatingRequestInput } from '../utils/idempotency.mjs';
 import { MediaBuyLifecycleCoordinator, type MediaBuyLifecycleCoordinatorOptions } from '../media-buy/compatibility.mjs';
 import type { ProposalRefinementCapabilities, RefineProposalsInput, RefineProposalsResponse } from '../negotiation/types.mjs';
@@ -45,7 +46,7 @@ export type V2AugmentedGetProductsResponse = CanonicalGetProductsResponse;
  */
 export type TaskResponseTypeMap = {
     get_products: CanonicalGetProductsResponse;
-    list_products: ListProductsResponse;
+    list_products: ListProductsResponseWithSupplyPath;
     request_proposals: RequestProposalsResponse;
     refine_proposals: RefineProposalsResponse;
     decline_proposals: DeclineProposalsResponse;
@@ -327,7 +328,7 @@ export declare class AgentClient {
      */
     getProducts(params: CanonicalGetProductsRequest, inputHandler?: InputHandler, options?: CanonicalProjectionTaskOptions): Promise<TaskResult<CanonicalGetProductsResponse>>;
     /** Discover products through the compact AdCP 3.2 catalog task. */
-    listProducts(params: ListProductsRequest, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<ListProductsResponse>>;
+    listProducts(params: ListProductsRequest, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<ListProductsResponseWithSupplyPath>>;
     /** Request one or more compact AdCP 3.2 proposals. */
     requestProposals(params: MutatingRequestInput<RequestProposalsRequest>, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<RequestProposalsResponse>>;
     /** Decline outstanding proposals. */

package/dist/lib/core/AgentClient.d.ts

@@ -6,7 +6,8 @@ import { type CanonicalReadTaskOptions, type CreativeDeliveryTaskOptions, type S
 import type { InputHandler, TaskOptions, TaskResult, TaskInfo, Message, DirectPauseRecoveryRequest } from './ConversationTypes';
 import type { AdcpCapabilities } from '../utils/capabilities';
 import type { WebhookHeaderValue } from '../webhooks';
-import type { GetProductsRequest, GetProductsResponse, ListProductsRequest, ListProductsResponse, RequestProposalsRequest, RequestProposalsResponse, DeclineProposalsRequest, DeclineProposalsResponse, BuyProductsRequest, BuyProductsResponse, AcceptProposalRequest, AcceptProposalResponse, ControlMediaBuyRequest, ControlMediaBuyResponse, ListCreativeFormatsRequest, ListCreativeFormatsResponse, CreateMediaBuyRequest, CreateMediaBuyResponse, UpdateMediaBuyRequest, UpdateMediaBuyResponse, SyncCreativesRequest, SyncCreativesResponse, ListCreativesRequest, ListCreativesResponse, GetMediaBuysRequest, GetMediaBuysResponse, GetMediaBuyDeliveryRequest, GetMediaBuyDeliveryResponse, GetReportingStatusRequest, GetReportingStatusResponse, SyncReportingStatusRequest, SyncReportingStatusResponse, SyncReportingReceiptsRequest, SyncReportingReceiptsResponse, GetCreativeDeliveryRequest, GetCreativeDeliveryResponse, ProvidePerformanceFeedbackRequest, ProvidePerformanceFeedbackResponse, GetSignalsRequest, GetSignalsResponse, ActivateSignalRequest, ActivateSignalResponse, GetAdCPCapabilitiesRequest, GetAdCPCapabilitiesResponse, PreviewCreativeRequest, PreviewCreativeResponse, BuildCreativeRequest, BuildCreativeResponse, ListAccountChangesRequest, ListAccountChangesResponse, ListAccountsRequest, ListAccountsResponse, SyncAccountsRequest, SyncAccountsResponse, SyncAudiencesRequest, SyncAudiencesResponse, CreatePropertyListRequest, CreatePropertyListResponse, GetPropertyListRequest, GetPropertyListResponse, UpdatePropertyListRequest, UpdatePropertyListResponse, ListPropertyListsRequest, ListPropertyListsResponse, DeletePropertyListRequest, DeletePropertyListResponse, ListContentStandardsRequest, ListContentStandardsResponse, GetContentStandardsRequest, GetContentStandardsResponse, CalibrateContentRequest, CalibrateContentResponse, ValidateContentDeliveryRequest, ValidateContentDeliveryResponse, SIGetOfferingRequest, SIGetOfferingResponse, SIInitiateSessionRequest, SIInitiateSessionResponse, SISendMessageRequest, SISendMessageResponse, SITerminateSessionRequest, SITerminateSessionResponse, SyncPlansRequest, SyncPlansResponse, CheckGovernanceRequest, CheckGovernanceResponse, ReportPlanOutcomeRequest, ReportPlanOutcomeResponse, ReportPlanAdjustmentRequest, ReportPlanAdjustmentResponse, GetPlanAuditLogsRequest, GetPlanAuditLogsResponse, ListTransformersRequest, ListTransformersResponse, SyncAgentNotificationConfigsRequest, SyncAgentNotificationConfigsResponse } from '../types/tools.generated';
+import type { ListProductsResponseWithSupplyPath } from '../supply-path';
+import type { GetProductsRequest, GetProductsResponse, ListProductsRequest, RequestProposalsRequest, RequestProposalsResponse, DeclineProposalsRequest, DeclineProposalsResponse, BuyProductsRequest, BuyProductsResponse, AcceptProposalRequest, AcceptProposalResponse, ControlMediaBuyRequest, ControlMediaBuyResponse, ListCreativeFormatsRequest, ListCreativeFormatsResponse, CreateMediaBuyRequest, CreateMediaBuyResponse, UpdateMediaBuyRequest, UpdateMediaBuyResponse, SyncCreativesRequest, SyncCreativesResponse, ListCreativesRequest, ListCreativesResponse, GetMediaBuysRequest, GetMediaBuysResponse, GetMediaBuyDeliveryRequest, GetMediaBuyDeliveryResponse, GetReportingStatusRequest, GetReportingStatusResponse, SyncReportingStatusRequest, SyncReportingStatusResponse, SyncReportingReceiptsRequest, SyncReportingReceiptsResponse, GetCreativeDeliveryRequest, GetCreativeDeliveryResponse, ProvidePerformanceFeedbackRequest, ProvidePerformanceFeedbackResponse, GetSignalsRequest, GetSignalsResponse, ActivateSignalRequest, ActivateSignalResponse, GetAdCPCapabilitiesRequest, GetAdCPCapabilitiesResponse, PreviewCreativeRequest, PreviewCreativeResponse, BuildCreativeRequest, BuildCreativeResponse, ListAccountChangesRequest, ListAccountChangesResponse, ListAccountsRequest, ListAccountsResponse, SyncAccountsRequest, SyncAccountsResponse, SyncAudiencesRequest, SyncAudiencesResponse, CreatePropertyListRequest, CreatePropertyListResponse, GetPropertyListRequest, GetPropertyListResponse, UpdatePropertyListRequest, UpdatePropertyListResponse, ListPropertyListsRequest, ListPropertyListsResponse, DeletePropertyListRequest, DeletePropertyListResponse, ListContentStandardsRequest, ListContentStandardsResponse, GetContentStandardsRequest, GetContentStandardsResponse, CalibrateContentRequest, CalibrateContentResponse, ValidateContentDeliveryRequest, ValidateContentDeliveryResponse, SIGetOfferingRequest, SIGetOfferingResponse, SIInitiateSessionRequest, SIInitiateSessionResponse, SISendMessageRequest, SISendMessageResponse, SITerminateSessionRequest, SITerminateSessionResponse, SyncPlansRequest, SyncPlansResponse, CheckGovernanceRequest, CheckGovernanceResponse, ReportPlanOutcomeRequest, ReportPlanOutcomeResponse, ReportPlanAdjustmentRequest, ReportPlanAdjustmentResponse, GetPlanAuditLogsRequest, GetPlanAuditLogsResponse, ListTransformersRequest, ListTransformersResponse, SyncAgentNotificationConfigsRequest, SyncAgentNotificationConfigsResponse } from '../types/tools.generated';
 import type { MutatingRequestInput } from '../utils/idempotency';
 import { MediaBuyLifecycleCoordinator, type MediaBuyLifecycleCoordinatorOptions } from '../media-buy/compatibility';
 import type { ProposalRefinementCapabilities, RefineProposalsInput, RefineProposalsResponse } from '../negotiation/types';
@@ -45,7 +46,7 @@ export type V2AugmentedGetProductsResponse = CanonicalGetProductsResponse;
  */
 export type TaskResponseTypeMap = {
     get_products: CanonicalGetProductsResponse;
-    list_products: ListProductsResponse;
+    list_products: ListProductsResponseWithSupplyPath;
     request_proposals: RequestProposalsResponse;
     refine_proposals: RefineProposalsResponse;
     decline_proposals: DeclineProposalsResponse;
@@ -327,7 +328,7 @@ export declare class AgentClient {
      */
     getProducts(params: CanonicalGetProductsRequest, inputHandler?: InputHandler, options?: CanonicalProjectionTaskOptions): Promise<TaskResult<CanonicalGetProductsResponse>>;
     /** Discover products through the compact AdCP 3.2 catalog task. */
-    listProducts(params: ListProductsRequest, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<ListProductsResponse>>;
+    listProducts(params: ListProductsRequest, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<ListProductsResponseWithSupplyPath>>;
     /** Request one or more compact AdCP 3.2 proposals. */
     requestProposals(params: MutatingRequestInput<RequestProposalsRequest>, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<RequestProposalsResponse>>;
     /** Decline outstanding proposals. */

package/dist/lib/core/AsyncHandler.d.mts

@@ -7,6 +7,7 @@ import type { ListCreativeFormatsResponse, PreviewCreativeResponse, BuildCreativ
 import type { AdCPAsyncResponseData, CreateMediaBuyAsyncInputRequired, CreateMediaBuyAsyncSubmitted, CreateMediaBuyAsyncWorking, GetProductsAsyncInputRequired, GetProductsAsyncSubmitted, GetProductsAsyncWorking, SyncCreativesAsyncInputRequired, SyncCreativesAsyncSubmitted, SyncCreativesAsyncWorking, UpdateMediaBuyAsyncInputRequired, UpdateMediaBuyAsyncSubmitted, UpdateMediaBuyAsyncWorking } from '../types/core.generated.mjs';
 import type { TaskResultMetadata } from './ConversationTypes.mjs';
 import type { CanonicalCreativeResponse, CanonicalGetProductsResponse, CanonicalListCreativesResponse } from '../v2/projection/creative-delivery.mjs';
+import type { ListProductsResponseWithSupplyPath } from '../supply-path/products.mjs';
 /**
  * Metadata provided with webhook responses
  */
@@ -76,6 +77,7 @@ export interface NotificationMetadata extends WebhookMetadata {
     next_expected_at?: string;
 }
 export type GetProductsStatusChangeHandler = (response: CanonicalGetProductsResponse | GetProductsAsyncSubmitted | GetProductsAsyncWorking | GetProductsAsyncInputRequired, metadata: WebhookMetadata) => void | Promise<void>;
+export type ListProductsStatusChangeHandler = (response: ListProductsResponseWithSupplyPath, metadata: WebhookMetadata) => void | Promise<void>;
 export type CreateMediaBuyStatusChangeHandler = (response: CanonicalCreativeResponse<CreateMediaBuyResponse | CreateMediaBuyAsyncSubmitted | CreateMediaBuyAsyncWorking | CreateMediaBuyAsyncInputRequired>, metadata: WebhookMetadata) => void | Promise<void>;
 export type UpdateMediaBuyStatusChangeHandler = (response: CanonicalCreativeResponse<UpdateMediaBuyResponse | UpdateMediaBuyAsyncSubmitted | UpdateMediaBuyAsyncWorking | UpdateMediaBuyAsyncInputRequired>, metadata: WebhookMetadata) => void | Promise<void>;
 export type SyncCreativesStatusChangeHandler = (response: CanonicalCreativeResponse<SyncCreativesResponse | SyncCreativesAsyncSubmitted | SyncCreativesAsyncWorking | SyncCreativesAsyncInputRequired>, metadata: WebhookMetadata) => void | Promise<void>;
@@ -139,6 +141,7 @@ export interface Activity {
  */
 export interface AsyncHandlerConfig {
     onGetProductsStatusChange?: GetProductsStatusChangeHandler;
+    onListProductsStatusChange?: ListProductsStatusChangeHandler;
     onListCreativeFormatsLegacyStatusChange?: (data: ListCreativeFormatsResponse, metadata: WebhookMetadata) => void | Promise<void>;
     onCreateMediaBuyStatusChange?: CreateMediaBuyStatusChangeHandler;
     onUpdateMediaBuyStatusChange?: UpdateMediaBuyStatusChangeHandler;

package/dist/lib/core/AsyncHandler.d.ts

@@ -7,6 +7,7 @@ import type { ListCreativeFormatsResponse, PreviewCreativeResponse, BuildCreativ
 import type { AdCPAsyncResponseData, CreateMediaBuyAsyncInputRequired, CreateMediaBuyAsyncSubmitted, CreateMediaBuyAsyncWorking, GetProductsAsyncInputRequired, GetProductsAsyncSubmitted, GetProductsAsyncWorking, SyncCreativesAsyncInputRequired, SyncCreativesAsyncSubmitted, SyncCreativesAsyncWorking, UpdateMediaBuyAsyncInputRequired, UpdateMediaBuyAsyncSubmitted, UpdateMediaBuyAsyncWorking } from '../types/core.generated';
 import type { TaskResultMetadata } from './ConversationTypes';
 import type { CanonicalCreativeResponse, CanonicalGetProductsResponse, CanonicalListCreativesResponse } from '../v2/projection/creative-delivery';
+import type { ListProductsResponseWithSupplyPath } from '../supply-path/products';
 /**
  * Metadata provided with webhook responses
  */
@@ -76,6 +77,7 @@ export interface NotificationMetadata extends WebhookMetadata {
     next_expected_at?: string;
 }
 export type GetProductsStatusChangeHandler = (response: CanonicalGetProductsResponse | GetProductsAsyncSubmitted | GetProductsAsyncWorking | GetProductsAsyncInputRequired, metadata: WebhookMetadata) => void | Promise<void>;
+export type ListProductsStatusChangeHandler = (response: ListProductsResponseWithSupplyPath, metadata: WebhookMetadata) => void | Promise<void>;
 export type CreateMediaBuyStatusChangeHandler = (response: CanonicalCreativeResponse<CreateMediaBuyResponse | CreateMediaBuyAsyncSubmitted | CreateMediaBuyAsyncWorking | CreateMediaBuyAsyncInputRequired>, metadata: WebhookMetadata) => void | Promise<void>;
 export type UpdateMediaBuyStatusChangeHandler = (response: CanonicalCreativeResponse<UpdateMediaBuyResponse | UpdateMediaBuyAsyncSubmitted | UpdateMediaBuyAsyncWorking | UpdateMediaBuyAsyncInputRequired>, metadata: WebhookMetadata) => void | Promise<void>;
 export type SyncCreativesStatusChangeHandler = (response: CanonicalCreativeResponse<SyncCreativesResponse | SyncCreativesAsyncSubmitted | SyncCreativesAsyncWorking | SyncCreativesAsyncInputRequired>, metadata: WebhookMetadata) => void | Promise<void>;
@@ -139,6 +141,7 @@ export interface Activity {
  */
 export interface AsyncHandlerConfig {
     onGetProductsStatusChange?: GetProductsStatusChangeHandler;
+    onListProductsStatusChange?: ListProductsStatusChangeHandler;
     onListCreativeFormatsLegacyStatusChange?: (data: ListCreativeFormatsResponse, metadata: WebhookMetadata) => void | Promise<void>;
     onCreateMediaBuyStatusChange?: CreateMediaBuyStatusChangeHandler;
     onUpdateMediaBuyStatusChange?: UpdateMediaBuyStatusChangeHandler;

package/dist/lib/core/AsyncHandler.js

@@ -325,6 +325,9 @@ class AsyncHandler {
       case "get_products":
         handler = this.config.onGetProductsStatusChange;
         break;
+      case "list_products":
+        handler = this.config.onListProductsStatusChange;
+        break;
       case "list_creative_formats":
         handler = this.config.onListCreativeFormatsLegacyStatusChange;
         break;

package/dist/lib/core/AsyncHandler.mjs

@@ -298,6 +298,9 @@ class AsyncHandler {
       case "get_products":
         handler = this.config.onGetProductsStatusChange;
         break;
+      case "list_products":
+        handler = this.config.onListProductsStatusChange;
+        break;
       case "list_creative_formats":
         handler = this.config.onListCreativeFormatsLegacyStatusChange;
         break;

package/dist/lib/core/SingleAgentClient.d.mts

@@ -1,6 +1,7 @@
+import { type ListProductsResponseWithSupplyPath, type ProductSupplyPathOptions } from '../supply-path/products.mjs';
 import type { AgentConfig } from '../types/index.mjs';
 import { type AdcpVersion } from '../version.mjs';
-import type { GetProductsRequest, GetProductsResponse, ListCreativeFormatsRequest, ListCreativeFormatsResponse, ListTransformersRequest, ListTransformersResponse, CreateMediaBuyRequest, CreateMediaBuyResponse, UpdateMediaBuyRequest, UpdateMediaBuyResponse, SyncCreativesRequest, SyncCreativesResponse, ListCreativesRequest, ListCreativesResponse, GetMediaBuysRequest, GetMediaBuysResponse, GetMediaBuyDeliveryRequest, GetMediaBuyDeliveryResponse, GetCreativeDeliveryRequest, GetCreativeDeliveryResponse, ProvidePerformanceFeedbackRequest, ProvidePerformanceFeedbackResponse, GetSignalsRequest, GetSignalsResponse, ActivateSignalRequest, ActivateSignalResponse, PreviewCreativeRequest, PreviewCreativeResponse, BuildCreativeRequest, BuildCreativeResponse, Format, GetAdCPCapabilitiesRequest, GetAdCPCapabilitiesResponse, ListAccountChangesRequest, ListAccountChangesResponse, ListAccountsRequest, ListAccountsResponse, SyncAccountsRequest, SyncAccountsResponse, SyncAudiencesRequest, SyncAudiencesResponse, CreatePropertyListRequest, CreatePropertyListResponse, GetPropertyListRequest, GetPropertyListResponse, UpdatePropertyListRequest, UpdatePropertyListResponse, ListPropertyListsRequest, ListPropertyListsResponse, DeletePropertyListRequest, DeletePropertyListResponse, ListContentStandardsRequest, ListContentStandardsResponse, GetContentStandardsRequest, GetContentStandardsResponse, CalibrateContentRequest, CalibrateContentResponse, ValidateContentDeliveryRequest, ValidateContentDeliveryResponse, SIGetOfferingRequest, SIGetOfferingResponse, SIInitiateSessionRequest, SIInitiateSessionResponse, SISendMessageRequest, SISendMessageResponse, SITerminateSessionRequest, SITerminateSessionResponse, SyncPlansRequest, SyncPlansResponse, GetPlanAuditLogsRequest, GetPlanAuditLogsResponse, OutcomeType } from '../types/tools.generated.mjs';
+import type { GetProductsRequest, GetProductsResponse, ListProductsRequest, ListCreativeFormatsRequest, ListCreativeFormatsResponse, ListTransformersRequest, ListTransformersResponse, CreateMediaBuyRequest, CreateMediaBuyResponse, UpdateMediaBuyRequest, UpdateMediaBuyResponse, SyncCreativesRequest, SyncCreativesResponse, ListCreativesRequest, ListCreativesResponse, GetMediaBuysRequest, GetMediaBuysResponse, GetMediaBuyDeliveryRequest, GetMediaBuyDeliveryResponse, GetCreativeDeliveryRequest, GetCreativeDeliveryResponse, ProvidePerformanceFeedbackRequest, ProvidePerformanceFeedbackResponse, GetSignalsRequest, GetSignalsResponse, ActivateSignalRequest, ActivateSignalResponse, PreviewCreativeRequest, PreviewCreativeResponse, BuildCreativeRequest, BuildCreativeResponse, Format, GetAdCPCapabilitiesRequest, GetAdCPCapabilitiesResponse, ListAccountChangesRequest, ListAccountChangesResponse, ListAccountsRequest, ListAccountsResponse, SyncAccountsRequest, SyncAccountsResponse, SyncAudiencesRequest, SyncAudiencesResponse, CreatePropertyListRequest, CreatePropertyListResponse, GetPropertyListRequest, GetPropertyListResponse, UpdatePropertyListRequest, UpdatePropertyListResponse, ListPropertyListsRequest, ListPropertyListsResponse, DeletePropertyListRequest, DeletePropertyListResponse, ListContentStandardsRequest, ListContentStandardsResponse, GetContentStandardsRequest, GetContentStandardsResponse, CalibrateContentRequest, CalibrateContentResponse, ValidateContentDeliveryRequest, ValidateContentDeliveryResponse, SIGetOfferingRequest, SIGetOfferingResponse, SIInitiateSessionRequest, SIInitiateSessionResponse, SISendMessageRequest, SISendMessageResponse, SITerminateSessionRequest, SITerminateSessionResponse, SyncPlansRequest, SyncPlansResponse, GetPlanAuditLogsRequest, GetPlanAuditLogsResponse, OutcomeType } from '../types/tools.generated.mjs';
 import { type MutatingRequestInput } from '../utils/idempotency.mjs';
 import type { MCPWebhookPayload, TaskStatus } from '../types/core.generated.mjs';
 type A2ATask = Record<string, any>;
@@ -418,6 +419,8 @@ export interface SingleAgentClientConfig extends ConversationConfig {
          * violates an exclusion for `ladbible.com`.
          */
         productPropertyPolicy?: ClientProductPropertyPolicy | false;
+        /** Opt in to computed, evidence-bearing external collection path annotations on product discovery. */
+        supplyPathVerification?: ProductSupplyPathOptions;
     };
     /** Governance configuration for buyer-side campaign governance */
     governance?: import('./GovernanceTypes.mjs').GovernanceConfig;
@@ -835,6 +838,8 @@ export declare class SingleAgentClient {
      * ```
      */
     getProducts(params: CanonicalGetProductsRequest, inputHandler?: InputHandler, options?: CanonicalReadTaskOptions): Promise<TaskResult<CanonicalGetProductsResponse>>;
+    /** Discover products through the compact AdCP 3.2 catalog task. */
+    listProducts(params: ListProductsRequest, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<ListProductsResponseWithSupplyPath>>;
     /** @deprecated Explicit raw-wire escape hatch for migration tooling. */
     getProductsLegacy(params: GetProductsRequest, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<GetProductsResponse>>;
     /**

package/dist/lib/core/SingleAgentClient.d.ts

@@ -1,6 +1,7 @@
+import { type ListProductsResponseWithSupplyPath, type ProductSupplyPathOptions } from '../supply-path/products';
 import type { AgentConfig } from '../types';
 import { type AdcpVersion } from '../version';
-import type { GetProductsRequest, GetProductsResponse, ListCreativeFormatsRequest, ListCreativeFormatsResponse, ListTransformersRequest, ListTransformersResponse, CreateMediaBuyRequest, CreateMediaBuyResponse, UpdateMediaBuyRequest, UpdateMediaBuyResponse, SyncCreativesRequest, SyncCreativesResponse, ListCreativesRequest, ListCreativesResponse, GetMediaBuysRequest, GetMediaBuysResponse, GetMediaBuyDeliveryRequest, GetMediaBuyDeliveryResponse, GetCreativeDeliveryRequest, GetCreativeDeliveryResponse, ProvidePerformanceFeedbackRequest, ProvidePerformanceFeedbackResponse, GetSignalsRequest, GetSignalsResponse, ActivateSignalRequest, ActivateSignalResponse, PreviewCreativeRequest, PreviewCreativeResponse, BuildCreativeRequest, BuildCreativeResponse, Format, GetAdCPCapabilitiesRequest, GetAdCPCapabilitiesResponse, ListAccountChangesRequest, ListAccountChangesResponse, ListAccountsRequest, ListAccountsResponse, SyncAccountsRequest, SyncAccountsResponse, SyncAudiencesRequest, SyncAudiencesResponse, CreatePropertyListRequest, CreatePropertyListResponse, GetPropertyListRequest, GetPropertyListResponse, UpdatePropertyListRequest, UpdatePropertyListResponse, ListPropertyListsRequest, ListPropertyListsResponse, DeletePropertyListRequest, DeletePropertyListResponse, ListContentStandardsRequest, ListContentStandardsResponse, GetContentStandardsRequest, GetContentStandardsResponse, CalibrateContentRequest, CalibrateContentResponse, ValidateContentDeliveryRequest, ValidateContentDeliveryResponse, SIGetOfferingRequest, SIGetOfferingResponse, SIInitiateSessionRequest, SIInitiateSessionResponse, SISendMessageRequest, SISendMessageResponse, SITerminateSessionRequest, SITerminateSessionResponse, SyncPlansRequest, SyncPlansResponse, GetPlanAuditLogsRequest, GetPlanAuditLogsResponse, OutcomeType } from '../types/tools.generated';
+import type { GetProductsRequest, GetProductsResponse, ListProductsRequest, ListCreativeFormatsRequest, ListCreativeFormatsResponse, ListTransformersRequest, ListTransformersResponse, CreateMediaBuyRequest, CreateMediaBuyResponse, UpdateMediaBuyRequest, UpdateMediaBuyResponse, SyncCreativesRequest, SyncCreativesResponse, ListCreativesRequest, ListCreativesResponse, GetMediaBuysRequest, GetMediaBuysResponse, GetMediaBuyDeliveryRequest, GetMediaBuyDeliveryResponse, GetCreativeDeliveryRequest, GetCreativeDeliveryResponse, ProvidePerformanceFeedbackRequest, ProvidePerformanceFeedbackResponse, GetSignalsRequest, GetSignalsResponse, ActivateSignalRequest, ActivateSignalResponse, PreviewCreativeRequest, PreviewCreativeResponse, BuildCreativeRequest, BuildCreativeResponse, Format, GetAdCPCapabilitiesRequest, GetAdCPCapabilitiesResponse, ListAccountChangesRequest, ListAccountChangesResponse, ListAccountsRequest, ListAccountsResponse, SyncAccountsRequest, SyncAccountsResponse, SyncAudiencesRequest, SyncAudiencesResponse, CreatePropertyListRequest, CreatePropertyListResponse, GetPropertyListRequest, GetPropertyListResponse, UpdatePropertyListRequest, UpdatePropertyListResponse, ListPropertyListsRequest, ListPropertyListsResponse, DeletePropertyListRequest, DeletePropertyListResponse, ListContentStandardsRequest, ListContentStandardsResponse, GetContentStandardsRequest, GetContentStandardsResponse, CalibrateContentRequest, CalibrateContentResponse, ValidateContentDeliveryRequest, ValidateContentDeliveryResponse, SIGetOfferingRequest, SIGetOfferingResponse, SIInitiateSessionRequest, SIInitiateSessionResponse, SISendMessageRequest, SISendMessageResponse, SITerminateSessionRequest, SITerminateSessionResponse, SyncPlansRequest, SyncPlansResponse, GetPlanAuditLogsRequest, GetPlanAuditLogsResponse, OutcomeType } from '../types/tools.generated';
 import { type MutatingRequestInput } from '../utils/idempotency';
 import type { MCPWebhookPayload, TaskStatus } from '../types/core.generated';
 type A2ATask = Record<string, any>;
@@ -418,6 +419,8 @@ export interface SingleAgentClientConfig extends ConversationConfig {
          * violates an exclusion for `ladbible.com`.
          */
         productPropertyPolicy?: ClientProductPropertyPolicy | false;
+        /** Opt in to computed, evidence-bearing external collection path annotations on product discovery. */
+        supplyPathVerification?: ProductSupplyPathOptions;
     };
     /** Governance configuration for buyer-side campaign governance */
     governance?: import('./GovernanceTypes').GovernanceConfig;
@@ -835,6 +838,8 @@ export declare class SingleAgentClient {
      * ```
      */
     getProducts(params: CanonicalGetProductsRequest, inputHandler?: InputHandler, options?: CanonicalReadTaskOptions): Promise<TaskResult<CanonicalGetProductsResponse>>;
+    /** Discover products through the compact AdCP 3.2 catalog task. */
+    listProducts(params: ListProductsRequest, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<ListProductsResponseWithSupplyPath>>;
     /** @deprecated Explicit raw-wire escape hatch for migration tooling. */
     getProductsLegacy(params: GetProductsRequest, inputHandler?: InputHandler, options?: TaskOptions): Promise<TaskResult<GetProductsResponse>>;
     /**

package/dist/lib/core/SingleAgentClient.js

@@ -34,6 +34,7 @@ __export(SingleAgentClient_exports, {
   createSingleAgentClient: () => createSingleAgentClient
 });
 module.exports = __toCommonJS(SingleAgentClient_exports);
+var import_products = require('../supply-path/products.js');
 var import_zod = require("zod");
 var import_node_crypto = require("node:crypto");
 var schemas = __toESM(require('../types/schemas.generated.js'));
@@ -3037,7 +3038,7 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
       this.rememberProductPolicyRequestParams(taskType, context.productPolicyRequest, result, resumedOptions);
     }
     this.rememberLegacyFormatConverter(taskType, finalizerLegacyFormatConverter, result, resumedOptions);
-    result = await this.applyProductPropertyPolicy(result, taskType, context.productPolicyRequest);
+    result = await this.applyProductPropertyPolicy(result, taskType, context.productPolicyRequest, options?.signal);
     (0, import_abort2.throwIfAborted)(options?.signal);
     if (context.canonical) {
       if (result.status === "completed" && result.success && result.data) {
@@ -3087,13 +3088,21 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     if (result.submitted && rawSubmittedWaitForCompletion) {
       result.submitted = {
         ...result.submitted,
-        waitForCompletion: async (pollInterval, signal) => this.finalizeTaskResult(
-          await rawSubmittedWaitForCompletion(pollInterval, signal),
-          context,
-          options,
-          transformCompletedResponse,
-          finalizerLegacyFormatConverter
-        )
+        waitForCompletion: async (pollInterval, signal) => {
+          const signals = [options?.signal, signal].filter(
+            (candidate) => candidate !== void 0
+          );
+          const completionSignal = signals.length > 1 ? AbortSignal.any(signals) : signals[0];
+          const completionOptions = { ...options ?? {}, ...completionSignal ? { signal: completionSignal } : {} };
+          const completed = await rawSubmittedWaitForCompletion(pollInterval, signal);
+          return this.finalizeTaskResult(
+            completed,
+            context,
+            completed.success && completed.status === "completed" ? completionOptions : options,
+            transformCompletedResponse,
+            finalizerLegacyFormatConverter
+          );
+        }
       };
     }
     const finalized = (0, import_match.attachMatch)(result);
@@ -3483,8 +3492,21 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     ];
     return result;
   }
-  async applyProductPropertyPolicy(result, taskType, requestParams) {
+  async applyProductPropertyPolicy(result, taskType, requestParams, taskSignal) {
     result = this.enforceProductPricingOptions(result, taskType);
+    if (this.config.validation?.supplyPathVerification && (taskType === "get_products" || taskType === "list_products") && result.success && result.status === "completed" && result.data) {
+      const data = result.data;
+      if (Array.isArray(data.products)) {
+        const configured = this.config.validation.supplyPathVerification;
+        const signals = [configured.signal, taskSignal].filter((signal2) => signal2 !== void 0);
+        const signal = signals.length > 1 ? AbortSignal.any(signals) : signals[0];
+        const products = await (0, import_products.annotateProductsSupplyPaths)(data.products, this.agent.agent_uri, {
+          ...configured,
+          ...signal ? { signal } : {}
+        });
+        result = { ...result, data: { ...result.data, products } };
+      }
+    }
     const policyConfig = this.config.validation?.productPropertyPolicy;
     if (policyConfig === false || taskType !== "get_products") return result;
     if (!result.success || result.status !== "completed" || !result.data) return result;
@@ -3644,7 +3666,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     );
   }
   rememberProductPolicyRequestState(taskType, requestState, result, options) {
-    if (taskType !== "get_products") return;
+    if (taskType !== "get_products" && !(taskType === "list_products" && this.config.validation?.supplyPathVerification))
+      return;
     if (result.status !== "submitted" && result.status !== "working") return;
     const keys = /* @__PURE__ */ new Set();
     if (result.metadata.taskId) keys.add(result.metadata.taskId);
@@ -3700,7 +3723,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     }
   }
   wrapProductPolicySubmittedContinuation(result, taskType, requestParams, options) {
-    if (taskType !== "get_products" || result.status !== "submitted" || !result.submitted) return result;
+    if (taskType !== "get_products" && !(taskType === "list_products" && this.config.validation?.supplyPathVerification) || result.status !== "submitted" || !result.submitted)
+      return result;
     const submitted = result.submitted;
     const policyState = {
       request: productPolicyRequestSnapshot(requestParams)
@@ -3723,7 +3747,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
           return await this.applyProductPropertyPolicyToTaskInfo(
             taskInfo,
             taskType,
-            policyState.request ?? {}
+            policyState.request ?? {},
+            options?.signal
           );
         } finally {
           if (terminal) {
@@ -3742,7 +3767,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
           return await this.applyProductPropertyPolicy(
             completed,
             taskType,
-            policyState.request ?? {}
+            policyState.request ?? {},
+            signal ?? options?.signal
           );
         } finally {
           if (terminal) {
@@ -3758,8 +3784,9 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     };
     return result;
   }
-  async applyProductPropertyPolicyToTaskInfo(taskInfo, taskType, requestParams) {
-    if (taskType !== "get_products" || taskInfo.status !== "completed" || !taskInfo.result) return taskInfo;
+  async applyProductPropertyPolicyToTaskInfo(taskInfo, taskType, requestParams, taskSignal) {
+    if (taskType !== "get_products" && !(taskType === "list_products" && this.config.validation?.supplyPathVerification) || taskInfo.status !== "completed" || !taskInfo.result)
+      return taskInfo;
     const policyResult = await this.applyProductPropertyPolicy(
       (0, import_match.attachMatch)({
         success: true,
@@ -3777,7 +3804,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
         debug_logs: []
       }),
       taskType,
-      requestParams
+      requestParams,
+      taskSignal
     );
     if (policyResult.success) {
       return { ...taskInfo, result: policyResult.data };
@@ -3802,7 +3830,7 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     return state.request;
   }
   async applyProductPropertyPolicyToWebhookResult(result, metadata) {
-    if (metadata.task_type !== "get_products" || metadata.status !== "completed" || !result) {
+    if (metadata.task_type !== "get_products" && !(metadata.task_type === "list_products" && this.config.validation?.supplyPathVerification) || metadata.status !== "completed" || !result) {
       return { result, metadata, suppressHandler: false };
     }
     const policyResult = await this.applyProductPropertyPolicy(
@@ -4029,6 +4057,16 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
       projectionCatalogs
     );
   }
+  /** Discover products through the compact AdCP 3.2 catalog task. */
+  async listProducts(params, inputHandler, options) {
+    return this.executeAndHandle(
+      "list_products",
+      "onListProductsStatusChange",
+      params,
+      inputHandler,
+      options
+    );
+  }
   /** @deprecated Explicit raw-wire escape hatch for migration tooling. */
   async getProductsLegacy(params, inputHandler, options) {
     return this.executeTaskUnprojected("get_products", params, inputHandler, options);
@@ -4884,6 +4922,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     switch (taskName) {
       case "get_products":
         return this.getProducts(params, inputHandler, options);
+      case "list_products":
+        return this.listProducts(params, inputHandler, options);
       case "create_media_buy":
         return await this.createMediaBuy(
           params,

package/dist/lib/core/SingleAgentClient.mjs

@@ -1,3 +1,6 @@
+import {
+  annotateProductsSupplyPaths
+} from "../supply-path/products.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import * as schemas from "../types/schemas.generated.mjs";
@@ -3091,7 +3094,7 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
       this.rememberProductPolicyRequestParams(taskType, context.productPolicyRequest, result, resumedOptions);
     }
     this.rememberLegacyFormatConverter(taskType, finalizerLegacyFormatConverter, result, resumedOptions);
-    result = await this.applyProductPropertyPolicy(result, taskType, context.productPolicyRequest);
+    result = await this.applyProductPropertyPolicy(result, taskType, context.productPolicyRequest, options?.signal);
     throwIfAborted(options?.signal);
     if (context.canonical) {
       if (result.status === "completed" && result.success && result.data) {
@@ -3141,13 +3144,21 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     if (result.submitted && rawSubmittedWaitForCompletion) {
       result.submitted = {
         ...result.submitted,
-        waitForCompletion: async (pollInterval, signal) => this.finalizeTaskResult(
-          await rawSubmittedWaitForCompletion(pollInterval, signal),
-          context,
-          options,
-          transformCompletedResponse,
-          finalizerLegacyFormatConverter
-        )
+        waitForCompletion: async (pollInterval, signal) => {
+          const signals = [options?.signal, signal].filter(
+            (candidate) => candidate !== void 0
+          );
+          const completionSignal = signals.length > 1 ? AbortSignal.any(signals) : signals[0];
+          const completionOptions = { ...options ?? {}, ...completionSignal ? { signal: completionSignal } : {} };
+          const completed = await rawSubmittedWaitForCompletion(pollInterval, signal);
+          return this.finalizeTaskResult(
+            completed,
+            context,
+            completed.success && completed.status === "completed" ? completionOptions : options,
+            transformCompletedResponse,
+            finalizerLegacyFormatConverter
+          );
+        }
       };
     }
     const finalized = attachMatch(result);
@@ -3537,8 +3548,21 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     ];
     return result;
   }
-  async applyProductPropertyPolicy(result, taskType, requestParams) {
+  async applyProductPropertyPolicy(result, taskType, requestParams, taskSignal) {
     result = this.enforceProductPricingOptions(result, taskType);
+    if (this.config.validation?.supplyPathVerification && (taskType === "get_products" || taskType === "list_products") && result.success && result.status === "completed" && result.data) {
+      const data = result.data;
+      if (Array.isArray(data.products)) {
+        const configured = this.config.validation.supplyPathVerification;
+        const signals = [configured.signal, taskSignal].filter((signal2) => signal2 !== void 0);
+        const signal = signals.length > 1 ? AbortSignal.any(signals) : signals[0];
+        const products = await annotateProductsSupplyPaths(data.products, this.agent.agent_uri, {
+          ...configured,
+          ...signal ? { signal } : {}
+        });
+        result = { ...result, data: { ...result.data, products } };
+      }
+    }
     const policyConfig = this.config.validation?.productPropertyPolicy;
     if (policyConfig === false || taskType !== "get_products") return result;
     if (!result.success || result.status !== "completed" || !result.data) return result;
@@ -3698,7 +3722,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     );
   }
   rememberProductPolicyRequestState(taskType, requestState, result, options) {
-    if (taskType !== "get_products") return;
+    if (taskType !== "get_products" && !(taskType === "list_products" && this.config.validation?.supplyPathVerification))
+      return;
     if (result.status !== "submitted" && result.status !== "working") return;
     const keys = /* @__PURE__ */ new Set();
     if (result.metadata.taskId) keys.add(result.metadata.taskId);
@@ -3754,7 +3779,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     }
   }
   wrapProductPolicySubmittedContinuation(result, taskType, requestParams, options) {
-    if (taskType !== "get_products" || result.status !== "submitted" || !result.submitted) return result;
+    if (taskType !== "get_products" && !(taskType === "list_products" && this.config.validation?.supplyPathVerification) || result.status !== "submitted" || !result.submitted)
+      return result;
     const submitted = result.submitted;
     const policyState = {
       request: productPolicyRequestSnapshot(requestParams)
@@ -3777,7 +3803,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
           return await this.applyProductPropertyPolicyToTaskInfo(
             taskInfo,
             taskType,
-            policyState.request ?? {}
+            policyState.request ?? {},
+            options?.signal
           );
         } finally {
           if (terminal) {
@@ -3796,7 +3823,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
           return await this.applyProductPropertyPolicy(
             completed,
             taskType,
-            policyState.request ?? {}
+            policyState.request ?? {},
+            signal ?? options?.signal
           );
         } finally {
           if (terminal) {
@@ -3812,8 +3840,9 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     };
     return result;
   }
-  async applyProductPropertyPolicyToTaskInfo(taskInfo, taskType, requestParams) {
-    if (taskType !== "get_products" || taskInfo.status !== "completed" || !taskInfo.result) return taskInfo;
+  async applyProductPropertyPolicyToTaskInfo(taskInfo, taskType, requestParams, taskSignal) {
+    if (taskType !== "get_products" && !(taskType === "list_products" && this.config.validation?.supplyPathVerification) || taskInfo.status !== "completed" || !taskInfo.result)
+      return taskInfo;
     const policyResult = await this.applyProductPropertyPolicy(
       attachMatch({
         success: true,
@@ -3831,7 +3860,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
         debug_logs: []
       }),
       taskType,
-      requestParams
+      requestParams,
+      taskSignal
     );
     if (policyResult.success) {
       return { ...taskInfo, result: policyResult.data };
@@ -3856,7 +3886,7 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     return state.request;
   }
   async applyProductPropertyPolicyToWebhookResult(result, metadata) {
-    if (metadata.task_type !== "get_products" || metadata.status !== "completed" || !result) {
+    if (metadata.task_type !== "get_products" && !(metadata.task_type === "list_products" && this.config.validation?.supplyPathVerification) || metadata.status !== "completed" || !result) {
       return { result, metadata, suppressHandler: false };
     }
     const policyResult = await this.applyProductPropertyPolicy(
@@ -4083,6 +4113,16 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
       projectionCatalogs
     );
   }
+  /** Discover products through the compact AdCP 3.2 catalog task. */
+  async listProducts(params, inputHandler, options) {
+    return this.executeAndHandle(
+      "list_products",
+      "onListProductsStatusChange",
+      params,
+      inputHandler,
+      options
+    );
+  }
   /** @deprecated Explicit raw-wire escape hatch for migration tooling. */
   async getProductsLegacy(params, inputHandler, options) {
     return this.executeTaskUnprojected("get_products", params, inputHandler, options);
@@ -4938,6 +4978,8 @@ Hint: this usually means agent_uri does not include the MCP endpoint path. The S
     switch (taskName) {
       case "get_products":
         return this.getProducts(params, inputHandler, options);
+      case "list_products":
+        return this.listProducts(params, inputHandler, options);
       case "create_media_buy":
         return await this.createMediaBuy(
           params,

package/dist/lib/discovery/adagents-redirects.d.mts

@@ -11,11 +11,15 @@ export declare class AdAgentsRedirectRefusedError extends Error {
 }
 export type AdAgentsRedirectPolicy = {
     mode: 'none';
+} | {
+    mode: 'same-origin';
+    originUrl: string;
+    maxRedirects?: number;
 } | {
     mode: 'same-registrable-domain';
     originUrl: string;
     maxRedirects?: number;
 };
-export declare function ssrfSafeFetchAdAgents(url: string, options: SsrfFetchOptions, policy: AdAgentsRedirectPolicy): Promise<SsrfFetchResult>;
+export declare function ssrfSafeFetchAdAgents(url: string, options: SsrfFetchOptions, policy: AdAgentsRedirectPolicy, onResponse?: (response: SsrfFetchResult) => void): Promise<SsrfFetchResult>;
 export declare function validateSameRegistrableDomainRedirect(originUrl: string, currentUrl: string, nextUrl: string): void;
 export declare function sameRegistrableDomain(a: URL, b: URL): boolean;

package/dist/lib/discovery/adagents-redirects.d.ts

@@ -11,11 +11,15 @@ export declare class AdAgentsRedirectRefusedError extends Error {
 }
 export type AdAgentsRedirectPolicy = {
     mode: 'none';
+} | {
+    mode: 'same-origin';
+    originUrl: string;
+    maxRedirects?: number;
 } | {
     mode: 'same-registrable-domain';
     originUrl: string;
     maxRedirects?: number;
 };
-export declare function ssrfSafeFetchAdAgents(url: string, options: SsrfFetchOptions, policy: AdAgentsRedirectPolicy): Promise<SsrfFetchResult>;
+export declare function ssrfSafeFetchAdAgents(url: string, options: SsrfFetchOptions, policy: AdAgentsRedirectPolicy, onResponse?: (response: SsrfFetchResult) => void): Promise<SsrfFetchResult>;
 export declare function validateSameRegistrableDomainRedirect(originUrl: string, currentUrl: string, nextUrl: string): void;
 export declare function sameRegistrableDomain(a: URL, b: URL): boolean;

package/dist/lib/discovery/adagents-redirects.js

@@ -41,13 +41,14 @@ class AdAgentsRedirectRefusedError extends Error {
     this.location = meta.location;
   }
 }
-async function ssrfSafeFetchAdAgents(url, options, policy) {
+async function ssrfSafeFetchAdAgents(url, options, policy, onResponse) {
   let currentUrl = url;
   let redirects = 0;
-  const originUrl = policy.mode === "same-registrable-domain" ? policy.originUrl : url;
-  const maxRedirects = policy.mode === "same-registrable-domain" ? policy.maxRedirects ?? DEFAULT_WELL_KNOWN_REDIRECT_HOPS : 0;
+  const originUrl = policy.mode !== "none" ? policy.originUrl : url;
+  const maxRedirects = policy.mode !== "none" ? policy.maxRedirects ?? DEFAULT_WELL_KNOWN_REDIRECT_HOPS : 0;
   while (true) {
     const result = await (0, import_ssrf_fetch.ssrfSafeFetch)(currentUrl, options);
+    onResponse?.(result);
     if (!REDIRECT_STATUSES.has(result.status)) return result;
     const location = result.headers["location"];
     if (!location) {
@@ -87,6 +88,12 @@ async function ssrfSafeFetchAdAgents(url, options, policy) {
         { url: currentUrl, location: scrubUrl(next) }
       );
     }
+    if (policy.mode === "same-origin" && new URL(originUrl).origin !== next.origin) {
+      throw new AdAgentsRedirectRefusedError("redirect_refused", "Authoritative evidence redirect changed origin", {
+        url: currentUrl,
+        location: scrubUrl(next)
+      });
+    }
     validateSameRegistrableDomainRedirect(originUrl, currentUrl, nextUrl);
     redirects++;
     currentUrl = nextUrl;