@adcp/sdk 14.0.0-rc.49 → 14.0.0-rc.50

package/dist/lib/testing/storyboard/request-signing/builder.mjs

@@ -1,6 +1,7 @@
 import { createPrivateKey, randomBytes, randomUUID, sign as nodeSign } from "crypto";
 import {
   buildSignatureBase,
+  computeContentDigest,
   finalizeRequestSignature,
   formatSignatureParams,
   prepareRequestSignature,
@@ -174,8 +175,44 @@ const MUTATIONS = {
   // transport-ungradable by the live probe because no HTTP client can route
   // to that intentionally invalid host spelling.
   "profile-3.2/negative/001-base64url-sf-binary": (vector, _keys, options) => passthrough(vector, options),
-  "profile-3.2/negative/002-multiple-trailing-dots": (vector, _keys, options) => passthrough(vector, options)
+  "profile-3.2/negative/002-multiple-trailing-dots": (vector, _keys, options) => passthrough(vector, options),
+  "profile-3.2/negative/002-wrong-tag": delegateToRoot("002-wrong-tag"),
+  "profile-3.2/negative/003-expired-signature": delegateToRoot("003-expired-signature"),
+  "profile-3.2/negative/004-window-too-long": delegateToRoot("004-window-too-long"),
+  "profile-3.2/negative/005-alg-not-allowed": delegateToRoot("005-alg-not-allowed"),
+  "profile-3.2/negative/006-missing-covered-component": (vector, keys, options) => signWithComponents(
+    signerKeyFor(vector, keys),
+    vector,
+    options,
+    ["@method", "@target-uri", "content-type", "content-digest"],
+    true
+  ),
+  "profile-3.2/negative/007-missing-content-digest": delegateToRoot("007-missing-content-digest"),
+  "profile-3.2/negative/008-unknown-keyid": delegateToRoot("008-unknown-keyid"),
+  "profile-3.2/negative/009-key-ops-missing-verify": delegateToRoot("009-key-ops-missing-verify"),
+  "profile-3.2/negative/010-content-digest-mismatch": delegateToRoot("010-content-digest-mismatch"),
+  "profile-3.2/negative/012-missing-expires-param": delegateToRoot("012-missing-expires-param"),
+  "profile-3.2/negative/013-expires-le-created": delegateToRoot("013-expires-le-created"),
+  "profile-3.2/negative/014-missing-nonce-param": delegateToRoot("014-missing-nonce-param"),
+  "profile-3.2/negative/015-signature-invalid": (vector, keys, options) => {
+    const signed = sign(signerKeyFor(vector, keys), vector, options);
+    return {
+      ...signed,
+      headers: { ...signed.headers, Signature: `sig1=:${Buffer.alloc(64).toString("base64")}:` }
+    };
+  },
+  "profile-3.2/negative/016-replayed-nonce": delegateToRoot("016-replayed-nonce"),
+  "profile-3.2/negative/017-key-revoked": delegateToRoot("017-key-revoked"),
+  "profile-3.2/negative/020-rate-abuse": delegateToRoot("020-rate-abuse"),
+  "profile-3.2/negative/025-jwk-alg-crv-mismatch": delegateToRoot("025-jwk-alg-crv-mismatch")
 };
+function delegateToRoot(rootId) {
+  return (vector, keys, options) => {
+    const mutation = MUTATIONS[rootId];
+    if (!mutation) throw new Error(`Missing root request-signing mutation "${rootId}"`);
+    return mutation(vector, keys, options);
+  };
+}
 function passthrough(vector, options) {
   const shaped = applyTransport(vector, options);
   return {
@@ -199,6 +236,12 @@ function protocolMethodPassthrough(vector, options) {
     body: vector.request.body
   };
 }
+function binaryEncoding(vector) {
+  return requestSigningEncodingForVersion(vector.signing_profile_version) === "rfc8941-base64" ? "base64" : "base64url";
+}
+function canonicalizationProfile(vector) {
+  return binaryEncoding(vector) === "base64" ? "3.2" : "legacy";
+}
 function sign(key, vector, args) {
   const shaped = applyTransport(vector, args);
   const request = {
@@ -211,7 +254,7 @@ function sign(key, vector, args) {
     request,
     { keyid: key.keyid, alg: key.alg },
     {
-      coverContentDigest: args.coverContentDigest === true,
+      coverContentDigest: args.coverContentDigest ?? vector.verifier_capability.covers_content_digest === "required",
       now: args.now !== void 0 ? () => args.now : void 0,
       nonce: args.nonce,
       windowSeconds: args.windowSeconds,
@@ -309,6 +352,7 @@ function wrapMcpEnvelope(operation, rawBody, idOverride) {
 }
 function signWithParamOverride(key, vector, options, override) {
   const shaped = applyTransport(vector, options);
+  if (vector.verifier_capability.covers_content_digest === "required") refreshContentDigest(shaped, vector);
   const url = shaped.url;
   const request = {
     method: shaped.method,
@@ -318,6 +362,9 @@ function signWithParamOverride(key, vector, options, override) {
   };
   const hasBody = (request.body ?? "").length > 0;
   const components = hasBody ? ["@method", "@target-uri", "@authority", "content-type"] : ["@method", "@target-uri", "@authority"];
+  if (hasBody && vector.verifier_capability.covers_content_digest === "required") {
+    components.push("content-digest");
+  }
   const now = nowSeconds(options);
   const windowSeconds = options.windowSeconds ?? 300;
   const params = {
@@ -329,7 +376,7 @@ function signWithParamOverride(key, vector, options, override) {
     tag: override.tag ?? REQUEST_SIGNING_TAG
   };
   const paramsString = formatParamsWithOmissions(components, params, override);
-  const base = buildSignatureBase(components, request, params, paramsString);
+  const base = buildSignatureBase(components, request, params, paramsString, canonicalizationProfile(vector));
   const signature = produceSignature(key, Buffer.from(base, "utf8"));
   return {
     method: shaped.method,
@@ -337,13 +384,14 @@ function signWithParamOverride(key, vector, options, override) {
     headers: {
       ...shaped.headers,
       "Signature-Input": `sig1=${paramsString}`,
-      Signature: `sig1=:${Buffer.from(signature).toString("base64url")}:`
+      Signature: `sig1=:${Buffer.from(signature).toString(binaryEncoding(vector))}:`
     },
     body: shaped.body
   };
 }
-function signWithComponents(key, vector, options, components) {
+function signWithComponents(key, vector, options, components, refreshDigest = false) {
   const shaped = applyTransport(vector, options);
+  if (refreshDigest) refreshContentDigest(shaped, vector);
   const url = shaped.url;
   const request = {
     method: shaped.method,
@@ -362,7 +410,7 @@ function signWithComponents(key, vector, options, components) {
     tag: REQUEST_SIGNING_TAG
   };
   const paramsString = formatSignatureParams(components, params);
-  const base = buildSignatureBase(components, request, params, paramsString);
+  const base = buildSignatureBase(components, request, params, paramsString, canonicalizationProfile(vector));
   const signature = produceSignature(key, Buffer.from(base, "utf8"));
   return {
     method: shaped.method,
@@ -370,11 +418,19 @@ function signWithComponents(key, vector, options, components) {
     headers: {
       ...shaped.headers,
       "Signature-Input": `sig1=${paramsString}`,
-      Signature: `sig1=:${Buffer.from(signature).toString("base64url")}:`
+      Signature: `sig1=:${Buffer.from(signature).toString(binaryEncoding(vector))}:`
     },
     body: shaped.body
   };
 }
+function refreshContentDigest(shaped, vector) {
+  shaped.headers = mergeHeadersCaseInsensitively(shaped.headers, {
+    "Content-Digest": computeContentDigest(
+      shaped.body ?? "",
+      requestSigningEncodingForVersion(vector.signing_profile_version)
+    )
+  });
+}
 function formatParamsWithOmissions(components, params, override) {
   const componentList = components.map((c) => `"${c}"`).join(" ");
   const pairs = [];

package/dist/lib/testing/storyboard/request-signing/grader.d.mts

@@ -1,6 +1,8 @@
 import { type LoadVectorsOptions } from './vector-loader.mjs';
 import type { NegativeVector, PositiveVector, VerifierCapabilityFixture } from './types.mjs';
 export interface GradeOptions extends LoadVectorsOptions {
+    /** Grade only authored 3.2 profile vectors. Omit for the legacy root corpus. */
+    signingProfileVersion?: '3.2';
     /** Allow http:// and private-IP destinations. Off by default (match fetchProbe). */
     allowPrivateIp?: boolean;
     /** Skip the rate-abuse vector (it sends 100+ requests; slow). Defaults to false. */
@@ -30,7 +32,8 @@ export interface GradeOptions extends LoadVectorsOptions {
      * each vector's `Signature-Input` and auto-skips vectors whose actual
      * signed components are structurally incompatible with the agent's
      * policy (uncovered `content-digest` against a `'required'` verifier,
-     * or covered `content-digest` against a `'forbidden'` verifier).
+     * or covered `content-digest` against a `'forbidden'` verifier). A vector
+     * expecting that exact policy refusal remains gradable.
      *
      * Without this option, every vector runs and cap-profile mismatches
      * produce failed vectors that the operator has to manually translate
@@ -69,11 +72,11 @@ export interface GradeOptions extends LoadVectorsOptions {
      *   - Vectors whose actual `Signature-Input` covers `content-digest`
      *     against a `'forbidden'` agent (rejected with
      *     `request_signature_components_unexpected` before the intended
-     *     error path).
+     *     error path, unless that is the vector's expected error).
      *   - Vectors whose actual `Signature-Input` does not cover
      *     `content-digest` against a `'required'` agent (rejected with
      *     `request_signature_components_incomplete` before the intended
-     *     error path).
+     *     error path, unless that is the vector's expected error).
      *
      * Skipped vectors use `skip_reason: 'capability_profile_mismatch'`.
      *
@@ -201,7 +204,7 @@ export interface GradeReport {
     total_duration_ms: number;
 }
 /**
- * Grade an agent's RFC 9421 verifier against the 28 conformance vectors.
+ * Grade an agent's RFC 9421 verifier against the selected conformance vectors.
  *
  * Preconditions the caller owns:
  *   - Agent advertises `request_signing.supported: true` in `get_adcp_capabilities`.

package/dist/lib/testing/storyboard/request-signing/grader.d.ts

@@ -1,6 +1,8 @@
 import { type LoadVectorsOptions } from './vector-loader';
 import type { NegativeVector, PositiveVector, VerifierCapabilityFixture } from './types';
 export interface GradeOptions extends LoadVectorsOptions {
+    /** Grade only authored 3.2 profile vectors. Omit for the legacy root corpus. */
+    signingProfileVersion?: '3.2';
     /** Allow http:// and private-IP destinations. Off by default (match fetchProbe). */
     allowPrivateIp?: boolean;
     /** Skip the rate-abuse vector (it sends 100+ requests; slow). Defaults to false. */
@@ -30,7 +32,8 @@ export interface GradeOptions extends LoadVectorsOptions {
      * each vector's `Signature-Input` and auto-skips vectors whose actual
      * signed components are structurally incompatible with the agent's
      * policy (uncovered `content-digest` against a `'required'` verifier,
-     * or covered `content-digest` against a `'forbidden'` verifier).
+     * or covered `content-digest` against a `'forbidden'` verifier). A vector
+     * expecting that exact policy refusal remains gradable.
      *
      * Without this option, every vector runs and cap-profile mismatches
      * produce failed vectors that the operator has to manually translate
@@ -69,11 +72,11 @@ export interface GradeOptions extends LoadVectorsOptions {
      *   - Vectors whose actual `Signature-Input` covers `content-digest`
      *     against a `'forbidden'` agent (rejected with
      *     `request_signature_components_unexpected` before the intended
-     *     error path).
+     *     error path, unless that is the vector's expected error).
      *   - Vectors whose actual `Signature-Input` does not cover
      *     `content-digest` against a `'required'` agent (rejected with
      *     `request_signature_components_incomplete` before the intended
-     *     error path).
+     *     error path, unless that is the vector's expected error).
      *
      * Skipped vectors use `skip_reason: 'capability_profile_mismatch'`.
      *
@@ -201,7 +204,7 @@ export interface GradeReport {
     total_duration_ms: number;
 }
 /**
- * Grade an agent's RFC 9421 verifier against the 28 conformance vectors.
+ * Grade an agent's RFC 9421 verifier against the selected conformance vectors.
  *
  * Preconditions the caller owns:
  *   - Agent advertises `request_signing.supported: true` in `get_adcp_capabilities`.

package/dist/lib/testing/storyboard/request-signing/grader.js

@@ -36,9 +36,10 @@ var import_parser = require('../../../signing/parser.js');
 async function gradeRequestSigning(agentUrl, options = {}) {
   const start = Date.now();
   const loaded = (0, import_vector_loader.loadRequestSigningVectors)(options);
+  const selected = (0, import_vector_loader.selectRequestSigningVectors)(loaded, options.signingProfileVersion);
   const contract = (0, import_test_kit.loadSignedRequestsRunnerContract)(options);
   const transport = options.transport ?? "mcp";
-  const hasRunnableNetworkVector = loaded.positive.some((vector) => !preflightSkip(vector, "positive", contract, options)) || loaded.negative.some((vector) => !vector.jwks_override && !preflightSkip(vector, "negative", contract, options));
+  const hasRunnableNetworkVector = selected.positive.some((vector) => !preflightSkip(vector, "positive", contract, options)) || selected.negative.some((vector) => !vector.jwks_override && !preflightSkip(vector, "negative", contract, options));
   let mcpSessionId = options.mcpSessionId;
   let mcpProtocolVersion = options.mcpProtocolVersion;
   if (transport === "mcp" && hasRunnableNetworkVector && mcpSessionId === void 0) {
@@ -63,7 +64,7 @@ async function gradeRequestSigning(agentUrl, options = {}) {
     mcpProtocolVersion: transport === "mcp" ? mcpProtocolVersion : void 0
   };
   const positive = [];
-  for (const vector of loaded.positive) {
+  for (const vector of selected.positive) {
     const skip = preflightSkip(vector, "positive", contract, options);
     if (skip) {
       positive.push(skip);
@@ -75,7 +76,7 @@ async function gradeRequestSigning(agentUrl, options = {}) {
     positive.push(withA2aProbeUrl(gradePositive(vector, probed), buildOpts));
   }
   const negative = [];
-  for (const vector of loaded.negative) {
+  for (const vector of selected.negative) {
     const skip = preflightSkip(vector, "negative", contract, options);
     if (skip) {
       negative.push(skip);
@@ -116,7 +117,15 @@ const MCP_FLATTENED_VECTORS = /* @__PURE__ */ new Set([
   "009-percent-encoded-unreserved-decoded",
   "010-percent-encoded-slash-preserved",
   "011-ipv6-authority",
-  "012-ipv6-authority-default-port-stripped"
+  "012-ipv6-authority-default-port-stripped",
+  "profile-3.2/positive/005-default-port-stripped",
+  "profile-3.2/positive/006-dot-segment-path",
+  "profile-3.2/positive/007-query-byte-preserved",
+  "profile-3.2/positive/008-percent-encoded-path",
+  "profile-3.2/positive/009-percent-encoded-unreserved-decoded",
+  "profile-3.2/positive/010-percent-encoded-slash-preserved",
+  "profile-3.2/positive/011-ipv6-authority",
+  "profile-3.2/positive/012-ipv6-authority-default-port-stripped"
 ]);
 const TRANSPORT_UNGRADABLE = {
   // fetch() and the Node URL parser normalize U-labels to A-labels before
@@ -264,9 +273,10 @@ function parseJsonRpcEnvelope(body) {
 }
 async function gradeOneVector(vectorId, kind, agentUrl, options = {}) {
   const loaded = (0, import_vector_loader.loadRequestSigningVectors)(options);
+  const selected = (0, import_vector_loader.selectRequestSigningVectors)(loaded, options.signingProfileVersion);
   const contract = (0, import_test_kit.loadSignedRequestsRunnerContract)(options);
   const transport = options.transport ?? "mcp";
-  const vector = kind === "positive" ? loaded.positive.find((v) => v.id === vectorId) : loaded.negative.find((v) => v.id === vectorId);
+  const vector = kind === "positive" ? selected.positive.find((v) => v.id === vectorId) : selected.negative.find((v) => v.id === vectorId);
   if (!vector) throw new Error(`Unknown ${kind} vector "${vectorId}"`);
   const skip = preflightSkip(vector, kind, contract, options);
   if (skip) return skip;
@@ -524,24 +534,30 @@ function buildPositiveRequestFromNegative(vector, loaded, options) {
 function negativeAcceptedErrorCode(vector, probe) {
   return probe.status === 401 && probe.wwwAuthenticateErrorCode === vector.expected_error_code;
 }
-function vectorSignsContentDigest(vector) {
+function vectorCoveredComponents(vector) {
   const headers = vector.request.headers;
   const sigInput = headers["Signature-Input"] ?? headers["signature-input"];
   if (!sigInput) return void 0;
   try {
     const parsed = (0, import_parser.parseSignatureInput)(sigInput);
-    return parsed.components.includes("content-digest");
+    return parsed.components;
   } catch {
     return void 0;
   }
 }
 function contentDigestStructuralMismatch(vector, agentCoversContentDigest) {
-  const signsCd = vectorSignsContentDigest(vector);
-  if (signsCd === void 0) return void 0;
-  if (signsCd && agentCoversContentDigest === "forbidden") {
+  const components = vectorCoveredComponents(vector);
+  if (components === void 0) return void 0;
+  const signsCd = components.includes("content-digest");
+  const coversOtherRequiredComponents = import_signing.MANDATORY_COMPONENTS.every((component) => components.includes(component)) && (!(vector.request.body && vector.request.body.length > 0) || components.includes("content-type"));
+  const expectsOnlyDigestUnexpected = "expected_error_code" in vector && vector.expected_error_code === "request_signature_components_unexpected" && coversOtherRequiredComponents && components.every(
+    (component) => import_signing.MANDATORY_COMPONENTS.some((required) => required === component) || component === "content-type" || component === "content-digest"
+  );
+  if (signsCd && agentCoversContentDigest === "forbidden" && !expectsOnlyDigestUnexpected) {
     return `Vector's Signature-Input covers content-digest but agent declares covers_content_digest='forbidden'. The verifier rejects with request_signature_components_unexpected before the vector's intended error path can fire.`;
   }
-  if (!signsCd && agentCoversContentDigest === "required") {
+  const expectsOnlyDigestRefusal = "expected_error_code" in vector && vector.expected_error_code === "request_signature_components_incomplete" && coversOtherRequiredComponents;
+  if (!signsCd && agentCoversContentDigest === "required" && !expectsOnlyDigestRefusal) {
     return `Vector's Signature-Input does not cover content-digest but agent declares covers_content_digest='required'. The verifier rejects with request_signature_components_incomplete before the vector's intended error path can fire.`;
   }
   return void 0;

package/dist/lib/testing/storyboard/request-signing/grader.mjs

@@ -1,12 +1,13 @@
 import { randomBytes } from "crypto";
 import { buildNegativeRequest, buildPositiveRequest } from "./builder.mjs";
 import { initializeMcpSession, probeSignedRequest } from "./probe.mjs";
-import { loadRequestSigningVectors } from "./vector-loader.mjs";
+import { loadRequestSigningVectors, selectRequestSigningVectors } from "./vector-loader.mjs";
 import { captureA2aRequest, operationFromVectorUrl } from "./a2a-dispatch.mjs";
 import { loadSignedRequestsRunnerContract } from "./test-kit.mjs";
 import {
   InMemoryReplayStore,
   InMemoryRevocationStore,
+  MANDATORY_COMPONENTS,
   RequestSignatureError,
   StaticJwksResolver,
   verifyRequestSignature
@@ -15,9 +16,10 @@ import { parseSignatureInput } from "../../../signing/parser.mjs";
 async function gradeRequestSigning(agentUrl, options = {}) {
   const start = Date.now();
   const loaded = loadRequestSigningVectors(options);
+  const selected = selectRequestSigningVectors(loaded, options.signingProfileVersion);
   const contract = loadSignedRequestsRunnerContract(options);
   const transport = options.transport ?? "mcp";
-  const hasRunnableNetworkVector = loaded.positive.some((vector) => !preflightSkip(vector, "positive", contract, options)) || loaded.negative.some((vector) => !vector.jwks_override && !preflightSkip(vector, "negative", contract, options));
+  const hasRunnableNetworkVector = selected.positive.some((vector) => !preflightSkip(vector, "positive", contract, options)) || selected.negative.some((vector) => !vector.jwks_override && !preflightSkip(vector, "negative", contract, options));
   let mcpSessionId = options.mcpSessionId;
   let mcpProtocolVersion = options.mcpProtocolVersion;
   if (transport === "mcp" && hasRunnableNetworkVector && mcpSessionId === void 0) {
@@ -42,7 +44,7 @@ async function gradeRequestSigning(agentUrl, options = {}) {
     mcpProtocolVersion: transport === "mcp" ? mcpProtocolVersion : void 0
   };
   const positive = [];
-  for (const vector of loaded.positive) {
+  for (const vector of selected.positive) {
     const skip = preflightSkip(vector, "positive", contract, options);
     if (skip) {
       positive.push(skip);
@@ -54,7 +56,7 @@ async function gradeRequestSigning(agentUrl, options = {}) {
     positive.push(withA2aProbeUrl(gradePositive(vector, probed), buildOpts));
   }
   const negative = [];
-  for (const vector of loaded.negative) {
+  for (const vector of selected.negative) {
     const skip = preflightSkip(vector, "negative", contract, options);
     if (skip) {
       negative.push(skip);
@@ -95,7 +97,15 @@ const MCP_FLATTENED_VECTORS = /* @__PURE__ */ new Set([
   "009-percent-encoded-unreserved-decoded",
   "010-percent-encoded-slash-preserved",
   "011-ipv6-authority",
-  "012-ipv6-authority-default-port-stripped"
+  "012-ipv6-authority-default-port-stripped",
+  "profile-3.2/positive/005-default-port-stripped",
+  "profile-3.2/positive/006-dot-segment-path",
+  "profile-3.2/positive/007-query-byte-preserved",
+  "profile-3.2/positive/008-percent-encoded-path",
+  "profile-3.2/positive/009-percent-encoded-unreserved-decoded",
+  "profile-3.2/positive/010-percent-encoded-slash-preserved",
+  "profile-3.2/positive/011-ipv6-authority",
+  "profile-3.2/positive/012-ipv6-authority-default-port-stripped"
 ]);
 const TRANSPORT_UNGRADABLE = {
   // fetch() and the Node URL parser normalize U-labels to A-labels before
@@ -243,9 +253,10 @@ function parseJsonRpcEnvelope(body) {
 }
 async function gradeOneVector(vectorId, kind, agentUrl, options = {}) {
   const loaded = loadRequestSigningVectors(options);
+  const selected = selectRequestSigningVectors(loaded, options.signingProfileVersion);
   const contract = loadSignedRequestsRunnerContract(options);
   const transport = options.transport ?? "mcp";
-  const vector = kind === "positive" ? loaded.positive.find((v) => v.id === vectorId) : loaded.negative.find((v) => v.id === vectorId);
+  const vector = kind === "positive" ? selected.positive.find((v) => v.id === vectorId) : selected.negative.find((v) => v.id === vectorId);
   if (!vector) throw new Error(`Unknown ${kind} vector "${vectorId}"`);
   const skip = preflightSkip(vector, kind, contract, options);
   if (skip) return skip;
@@ -503,24 +514,30 @@ function buildPositiveRequestFromNegative(vector, loaded, options) {
 function negativeAcceptedErrorCode(vector, probe) {
   return probe.status === 401 && probe.wwwAuthenticateErrorCode === vector.expected_error_code;
 }
-function vectorSignsContentDigest(vector) {
+function vectorCoveredComponents(vector) {
   const headers = vector.request.headers;
   const sigInput = headers["Signature-Input"] ?? headers["signature-input"];
   if (!sigInput) return void 0;
   try {
     const parsed = parseSignatureInput(sigInput);
-    return parsed.components.includes("content-digest");
+    return parsed.components;
   } catch {
     return void 0;
   }
 }
 function contentDigestStructuralMismatch(vector, agentCoversContentDigest) {
-  const signsCd = vectorSignsContentDigest(vector);
-  if (signsCd === void 0) return void 0;
-  if (signsCd && agentCoversContentDigest === "forbidden") {
+  const components = vectorCoveredComponents(vector);
+  if (components === void 0) return void 0;
+  const signsCd = components.includes("content-digest");
+  const coversOtherRequiredComponents = MANDATORY_COMPONENTS.every((component) => components.includes(component)) && (!(vector.request.body && vector.request.body.length > 0) || components.includes("content-type"));
+  const expectsOnlyDigestUnexpected = "expected_error_code" in vector && vector.expected_error_code === "request_signature_components_unexpected" && coversOtherRequiredComponents && components.every(
+    (component) => MANDATORY_COMPONENTS.some((required) => required === component) || component === "content-type" || component === "content-digest"
+  );
+  if (signsCd && agentCoversContentDigest === "forbidden" && !expectsOnlyDigestUnexpected) {
     return `Vector's Signature-Input covers content-digest but agent declares covers_content_digest='forbidden'. The verifier rejects with request_signature_components_unexpected before the vector's intended error path can fire.`;
   }
-  if (!signsCd && agentCoversContentDigest === "required") {
+  const expectsOnlyDigestRefusal = "expected_error_code" in vector && vector.expected_error_code === "request_signature_components_incomplete" && coversOtherRequiredComponents;
+  if (!signsCd && agentCoversContentDigest === "required" && !expectsOnlyDigestRefusal) {
     return `Vector's Signature-Input does not cover content-digest but agent declares covers_content_digest='required'. The verifier rejects with request_signature_components_incomplete before the vector's intended error path can fire.`;
   }
   return void 0;

package/dist/lib/testing/storyboard/request-signing/probe-dispatch.js

@@ -105,7 +105,9 @@ async function probeRequestSigningVector(stepId, agentUrl, options) {
       `request_signing_probe: could not load request-signing vectors: ${err instanceof Error ? err.message : String(err)}`
     );
   }
-  const vector = parsed.kind === "negative" ? loaded.negative.find((v) => v.id === parsed.vector_id) : loaded.positive.find((v) => v.id === parsed.vector_id);
+  const signingProfileVersion = (0, import_vector_loader.signingProfileForAdcpVersion)(options.adcpVersion);
+  const selected = (0, import_vector_loader.selectRequestSigningVectors)(loaded, signingProfileVersion);
+  const vector = parsed.kind === "negative" ? selected.negative.find((v) => v.id === parsed.vector_id) : selected.positive.find((v) => v.id === parsed.vector_id);
   if (!vector) {
     return probeError(
       agentUrl,
@@ -132,6 +134,7 @@ async function probeRequestSigningVector(stepId, agentUrl, options) {
     const result = await (0, import_grader.gradeOneVector)(parsed.vector_id, parsed.kind, agentUrl, {
       ...options.adcpVersion && { version: options.adcpVersion },
       ...options.complianceDir && { complianceDir: options.complianceDir },
+      signingProfileVersion,
       allowPrivateIp: options.allow_http === true,
       rateAbuseCap: rsOpts.rateAbuseCap,
       allowLiveSideEffects: rsOpts.allowLiveSideEffects,

package/dist/lib/testing/storyboard/request-signing/probe-dispatch.mjs

@@ -1,7 +1,7 @@
 import { basename, dirname } from "path";
 import { advertisedContentDigestPolicyExclusion, gradeOneVector, semanticVectorExclusion } from "./grader.mjs";
 import { parseRequestSigningStepId } from "./synthesize.mjs";
-import { loadRequestSigningVectors } from "./vector-loader.mjs";
+import { loadRequestSigningVectors, selectRequestSigningVectors, signingProfileForAdcpVersion } from "./vector-loader.mjs";
 import { ADCP_VERSION } from "../../../version.mjs";
 import { redactCredentialPatterns } from "../../../utils/redact-credential-patterns.mjs";
 const SIGNING_VECTORS_UNAVAILABLE_DETAIL = "Coverage unavailable: the official A2A client could not prepare a dispatch, so the runner refused to invent an endpoint or wire envelope and no request-signing vector reached the agent's verifier. Remedy: verify the A2A SDK peer is installed and publish a reachable modern or legacy Agent Card with a supported JSON-RPC interface, or grade the verifier through an MCP or REST binding.";
@@ -68,7 +68,9 @@ async function probeRequestSigningVector(stepId, agentUrl, options) {
       `request_signing_probe: could not load request-signing vectors: ${err instanceof Error ? err.message : String(err)}`
     );
   }
-  const vector = parsed.kind === "negative" ? loaded.negative.find((v) => v.id === parsed.vector_id) : loaded.positive.find((v) => v.id === parsed.vector_id);
+  const signingProfileVersion = signingProfileForAdcpVersion(options.adcpVersion);
+  const selected = selectRequestSigningVectors(loaded, signingProfileVersion);
+  const vector = parsed.kind === "negative" ? selected.negative.find((v) => v.id === parsed.vector_id) : selected.positive.find((v) => v.id === parsed.vector_id);
   if (!vector) {
     return probeError(
       agentUrl,
@@ -95,6 +97,7 @@ async function probeRequestSigningVector(stepId, agentUrl, options) {
     const result = await gradeOneVector(parsed.vector_id, parsed.kind, agentUrl, {
       ...options.adcpVersion && { version: options.adcpVersion },
       ...options.complianceDir && { complianceDir: options.complianceDir },
+      signingProfileVersion,
       allowPrivateIp: options.allow_http === true,
       rateAbuseCap: rsOpts.rateAbuseCap,
       allowLiveSideEffects: rsOpts.allowLiveSideEffects,

package/dist/lib/testing/storyboard/request-signing/synthesize.d.mts

@@ -4,6 +4,8 @@ export declare const REQUEST_SIGNING_PROBE_TASK = "request_signing_probe";
 export declare const POSITIVE_STEP_PREFIX = "positive-";
 export declare const NEGATIVE_STEP_PREFIX = "negative-";
 export interface SynthesizeOptions extends LoadVectorsOptions {
+    /** Override profile selection inferred from the storyboard AdCP version. */
+    signingProfileVersion?: '3.2';
     /** Vector IDs to omit (e.g., capability-profile mismatches). */
     skipVectors?: string[];
 }

package/dist/lib/testing/storyboard/request-signing/synthesize.d.ts

@@ -4,6 +4,8 @@ export declare const REQUEST_SIGNING_PROBE_TASK = "request_signing_probe";
 export declare const POSITIVE_STEP_PREFIX = "positive-";
 export declare const NEGATIVE_STEP_PREFIX = "negative-";
 export interface SynthesizeOptions extends LoadVectorsOptions {
+    /** Override profile selection inferred from the storyboard AdCP version. */
+    signingProfileVersion?: '3.2';
     /** Vector IDs to omit (e.g., capability-profile mismatches). */
     skipVectors?: string[];
 }

package/dist/lib/testing/storyboard/request-signing/synthesize.js

@@ -32,13 +32,17 @@ const NEGATIVE_STEP_PREFIX = "negative-";
 function synthesizeRequestSigningSteps(storyboard, options = {}) {
   if (storyboard.id !== "signed_requests") return storyboard;
   const loaded = (0, import_vector_loader.loadRequestSigningVectors)(options);
+  const selected = (0, import_vector_loader.selectRequestSigningVectors)(
+    loaded,
+    options.signingProfileVersion ?? (0, import_vector_loader.signingProfileForAdcpVersion)(options.version ?? storyboard.adcp_version)
+  );
   const skip = new Set(options.skipVectors ?? []);
   const phases = storyboard.phases.map((phase) => {
     if (phase.id === "positive_vectors") {
-      return { ...phase, steps: loaded.positive.filter((v) => !skip.has(v.id)).map(synthesizePositiveStep) };
+      return { ...phase, steps: selected.positive.filter((v) => !skip.has(v.id)).map(synthesizePositiveStep) };
     }
     if (phase.id === "negative_vectors") {
-      return { ...phase, steps: loaded.negative.filter((v) => !skip.has(v.id)).map(synthesizeNegativeStep) };
+      return { ...phase, steps: selected.negative.filter((v) => !skip.has(v.id)).map(synthesizeNegativeStep) };
     }
     return phase;
   });

package/dist/lib/testing/storyboard/request-signing/synthesize.mjs

@@ -1,17 +1,25 @@
-import { loadRequestSigningVectors } from "./vector-loader.mjs";
+import {
+  loadRequestSigningVectors,
+  selectRequestSigningVectors,
+  signingProfileForAdcpVersion
+} from "./vector-loader.mjs";
 const REQUEST_SIGNING_PROBE_TASK = "request_signing_probe";
 const POSITIVE_STEP_PREFIX = "positive-";
 const NEGATIVE_STEP_PREFIX = "negative-";
 function synthesizeRequestSigningSteps(storyboard, options = {}) {
   if (storyboard.id !== "signed_requests") return storyboard;
   const loaded = loadRequestSigningVectors(options);
+  const selected = selectRequestSigningVectors(
+    loaded,
+    options.signingProfileVersion ?? signingProfileForAdcpVersion(options.version ?? storyboard.adcp_version)
+  );
   const skip = new Set(options.skipVectors ?? []);
   const phases = storyboard.phases.map((phase) => {
     if (phase.id === "positive_vectors") {
-      return { ...phase, steps: loaded.positive.filter((v) => !skip.has(v.id)).map(synthesizePositiveStep) };
+      return { ...phase, steps: selected.positive.filter((v) => !skip.has(v.id)).map(synthesizePositiveStep) };
     }
     if (phase.id === "negative_vectors") {
-      return { ...phase, steps: loaded.negative.filter((v) => !skip.has(v.id)).map(synthesizeNegativeStep) };
+      return { ...phase, steps: selected.negative.filter((v) => !skip.has(v.id)).map(synthesizeNegativeStep) };
     }
     return phase;
   });

package/dist/lib/testing/storyboard/request-signing/vector-loader.d.mts

@@ -13,6 +13,9 @@ export interface LoadedVectors {
     keys: TestKeyset;
     sourceDir: string;
 }
+/** A selected signing profile uses only its authored fixtures and wire encoding. */
+export declare function selectRequestSigningVectors(loaded: LoadedVectors, signingProfileVersion?: '3.2'): Pick<LoadedVectors, 'positive' | 'negative'>;
+export declare function signingProfileForAdcpVersion(version?: string): '3.2' | undefined;
 export declare function loadRequestSigningVectors(options?: LoadVectorsOptions): LoadedVectors;
 /** Load only the shared signing keyset, without requiring the grader vectors. */
 export declare function loadRequestSigningKeys(options?: LoadVectorsOptions): TestKeyset;

package/dist/lib/testing/storyboard/request-signing/vector-loader.d.ts

@@ -13,6 +13,9 @@ export interface LoadedVectors {
     keys: TestKeyset;
     sourceDir: string;
 }
+/** A selected signing profile uses only its authored fixtures and wire encoding. */
+export declare function selectRequestSigningVectors(loaded: LoadedVectors, signingProfileVersion?: '3.2'): Pick<LoadedVectors, 'positive' | 'negative'>;
+export declare function signingProfileForAdcpVersion(version?: string): '3.2' | undefined;
 export declare function loadRequestSigningVectors(options?: LoadVectorsOptions): LoadedVectors;
 /** Load only the shared signing keyset, without requiring the grader vectors. */
 export declare function loadRequestSigningKeys(options?: LoadVectorsOptions): TestKeyset;

package/dist/lib/testing/storyboard/request-signing/vector-loader.js

@@ -21,13 +21,26 @@ __export(vector_loader_exports, {
   __resetVectorCache: () => __resetVectorCache,
   findKey: () => findKey,
   loadRequestSigningKeys: () => loadRequestSigningKeys,
-  loadRequestSigningVectors: () => loadRequestSigningVectors
+  loadRequestSigningVectors: () => loadRequestSigningVectors,
+  selectRequestSigningVectors: () => selectRequestSigningVectors,
+  signingProfileForAdcpVersion: () => signingProfileForAdcpVersion
 });
 module.exports = __toCommonJS(vector_loader_exports);
 var import_fs = require("fs");
 var import_path = require("path");
 var import_compliance = require('../compliance.js');
 var import_types = require('./types.js');
+function selectRequestSigningVectors(loaded, signingProfileVersion) {
+  const profile = signingProfileVersion ? loaded.profiles[signingProfileVersion] : void 0;
+  if (!signingProfileVersion) return { positive: loaded.positive, negative: loaded.negative };
+  if (!profile)
+    throw new Error(`Request-signing profile ${signingProfileVersion} is unavailable in ${loaded.sourceDir}`);
+  return profile;
+}
+function signingProfileForAdcpVersion(version) {
+  const match = /^(\d+)\.(\d+)/.exec(version ?? "");
+  return match && Number(match[1]) === 3 && Number(match[2]) === 2 ? "3.2" : void 0;
+}
 const ERROR_CODES = /* @__PURE__ */ new Set([
   "request_signature_required",
   "request_signature_header_malformed",
@@ -274,5 +287,7 @@ function strArray(v, where) {
   __resetVectorCache,
   findKey,
   loadRequestSigningKeys,
-  loadRequestSigningVectors
+  loadRequestSigningVectors,
+  selectRequestSigningVectors,
+  signingProfileForAdcpVersion
 });