@adcp/sdk 14.0.0 → 14.1.0

package/dist/lib/server/index.d.mts

@@ -83,8 +83,8 @@ export { createPinAndBindFetch, WEBHOOK_SSRF_POLICY, LOOPBACK_OK_WEBHOOK_SSRF_PO
 export type { PinAndBindFetchOptions, DnsLookupAll } from './pin-and-bind-fetch.mjs';
 export { checkGovernance, createAdcpGovernanceEnforcementMiddleware, governanceDeniedError, governanceUnavailableError, } from './governance.mjs';
 export type { AdcpGovernanceEnforcementMiddleware, CheckGovernanceOptions, GovernanceCallResult, GovernanceApproved, GovernanceDenied, GovernanceConditions, } from './governance.mjs';
-export { GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, verifyGovernanceAuthorization, } from '../governance/index.mjs';
-export type { BuildGovernanceExecutionRequestInput, GovernanceAuthorizationClaims, GovernanceAuthorizationErrorCode, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, VerifyGovernanceAuthorizationOptions, } from '../governance/index.mjs';
+export { GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, verifyGovernanceAuthorization, createGovernanceAgentJwksResolver, } from '../governance/index.mjs';
+export type { BuildGovernanceExecutionRequestInput, GovernanceAuthorizationClaims, GovernanceAuthorizationErrorCode, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, VerifyGovernanceAuthorizationOptions, GovernanceBuyerIdentity, } from '../governance/index.mjs';
 export { clearDefaultResolvedListCache, createResolvedListCache, DEFAULT_RESOLVE_LIST_PAGE_SIZE, defaultResolvedListCache, resolvePropertyList, resolveCollectionList, resolvedListCacheKey, matchesPropertyList, matchesCollectionList, } from './targeting-helpers.mjs';
 export type { ResolvedListCache, ResolvedListCacheEntry, ResolvedListCacheValue, ResolvedListKind, ResolvedPropertyList, ResolvedCollectionList, ResolvedCollection, ResolveListCallTool, ResolveListOptions, } from './targeting-helpers.mjs';
 export * from './decisioning/index.mjs';

package/dist/lib/server/index.d.ts

@@ -83,8 +83,8 @@ export { createPinAndBindFetch, WEBHOOK_SSRF_POLICY, LOOPBACK_OK_WEBHOOK_SSRF_PO
 export type { PinAndBindFetchOptions, DnsLookupAll } from './pin-and-bind-fetch';
 export { checkGovernance, createAdcpGovernanceEnforcementMiddleware, governanceDeniedError, governanceUnavailableError, } from './governance';
 export type { AdcpGovernanceEnforcementMiddleware, CheckGovernanceOptions, GovernanceCallResult, GovernanceApproved, GovernanceDenied, GovernanceConditions, } from './governance';
-export { GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, verifyGovernanceAuthorization, } from '../governance';
-export type { BuildGovernanceExecutionRequestInput, GovernanceAuthorizationClaims, GovernanceAuthorizationErrorCode, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, VerifyGovernanceAuthorizationOptions, } from '../governance';
+export { GovernanceAuthorizationError, GovernanceReplayStoreAdapter, InMemoryGovernanceReplayStore, buildGovernanceExecutionCommitment, buildGovernanceExecutionRequest, computeGovernedPayloadHash, createGovernanceEnforcementMiddleware, verifyGovernanceAuthorization, createGovernanceAgentJwksResolver, } from '../governance';
+export type { BuildGovernanceExecutionRequestInput, GovernanceAuthorizationClaims, GovernanceAuthorizationErrorCode, GovernanceAuthorizationResult, GovernanceAuthorizationSuccess, GovernanceCommitment, GovernanceEnforcementMiddleware, GovernanceEnforcementMiddlewareConfig, GovernanceEnforcementMiddlewareInput, GovernanceReplayStore, GovernanceReplayBinding, GovernanceRevocationResolver, GovernanceRevocationStatus, VerifyGovernanceAuthorizationOptions, GovernanceBuyerIdentity, } from '../governance';
 export { clearDefaultResolvedListCache, createResolvedListCache, DEFAULT_RESOLVE_LIST_PAGE_SIZE, defaultResolvedListCache, resolvePropertyList, resolveCollectionList, resolvedListCacheKey, matchesPropertyList, matchesCollectionList, } from './targeting-helpers';
 export type { ResolvedListCache, ResolvedListCacheEntry, ResolvedListCacheValue, ResolvedListKind, ResolvedPropertyList, ResolvedCollectionList, ResolvedCollection, ResolveListCallTool, ResolveListOptions, } from './targeting-helpers';
 export * from './decisioning';

package/dist/lib/server/index.js

@@ -112,6 +112,7 @@ __export(server_exports, {
   createDerivedAccountStore: () => import_derived_account_store.createDerivedAccountStore,
   createDynamicRegistry: () => import_dynamic_registry.createDynamicRegistry,
   createExpressAdapter: () => import_express_adapter.createExpressAdapter,
+  createGovernanceAgentJwksResolver: () => import_governance2.createGovernanceAgentJwksResolver,
   createGovernanceEnforcementMiddleware: () => import_governance2.createGovernanceEnforcementMiddleware,
   createIdempotencyStore: () => import_idempotency.createIdempotencyStore,
   createLazyBackend: () => import_idempotency.createLazyBackend,
@@ -439,6 +440,7 @@ var import_media_buy_action_resolver = require('./media-buy-action-resolver.js')
   createDerivedAccountStore,
   createDynamicRegistry,
   createExpressAdapter,
+  createGovernanceAgentJwksResolver,
   createGovernanceEnforcementMiddleware,
   createIdempotencyStore,
   createLazyBackend,

package/dist/lib/server/index.mjs

@@ -234,7 +234,8 @@ import {
   buildGovernanceExecutionRequest,
   computeGovernedPayloadHash,
   createGovernanceEnforcementMiddleware,
-  verifyGovernanceAuthorization
+  verifyGovernanceAuthorization,
+  createGovernanceAgentJwksResolver
 } from "../governance/index.mjs";
 import {
   clearDefaultResolvedListCache,
@@ -387,6 +388,7 @@ export {
   createDerivedAccountStore,
   createDynamicRegistry,
   createExpressAdapter,
+  createGovernanceAgentJwksResolver,
   createGovernanceEnforcementMiddleware,
   createIdempotencyStore,
   createLazyBackend,

package/dist/lib/signing/agent-resolver/consistency.d.mts

@@ -5,9 +5,8 @@
  *
  *   `request_signature_key_origin_mismatch` — the resolved `jwks_uri` host
  *     does not match the operator's declared `identity.key_origins.{purpose}`
- *     value. Skipped only for the specific (agent, purpose, role) tuple
- *     whose JWKS source was a publisher `adagents.json signing_keys` pin —
- *     operator-side use of the same purpose is still checked.
+ *     value. Publisher pins never skip this check because they only narrow
+ *     keys in the operator's JWKS.
  *
  *   `request_signature_key_origin_missing` — the agent's capabilities
  *     declare a signing posture for a purpose (e.g. `request_signing.supported_for`
@@ -36,24 +35,18 @@ export interface KeyOriginMissing {
 export type ConsistencyResult = {
     ok: true;
 } | KeyOriginMismatch | KeyOriginMissing;
-/**
- * Inputs for the per-purpose origin check. The caller is responsible for
- * deciding whether `publisherPinned` is true — the carve-out applies only
- * to (agent, webhook-signing, sell-side) tuples whose JWKS came from an
- * `adagents.json signing_keys` pin. For request-signing, governance-signing,
- * TMP-signing, and buyer-side webhook receivers, `publisherPinned` MUST
- * always be false.
- */
+/** Inputs for the per-purpose origin check. Publisher pin markers are ignored. */
 export interface OriginCheckInput {
     purpose: IdentityKeyOriginPurpose;
     declaredOrigin: string | undefined;
     resolvedJwksUri: string;
-    publisherPinned: boolean;
+    /** @deprecated Pins narrow JWKS keys and never bypass origin checks. */
+    publisherPinned?: boolean;
 }
 /**
  * Check origin consistency for a single (purpose, jwksUri) pair against the
  * declared `identity.key_origins.{purpose}` value. Returns `{ ok: true }`
- * when the check passes or is skipped (publisher pin); a typed mismatch
+ * when the check passes; a typed mismatch
  * result on failure. `key_origin_missing` is NOT raised here — that is a
  * separate check (`checkRequiredOrigins`) because it depends on which
  * purposes the agent has declared signing for.

package/dist/lib/signing/agent-resolver/consistency.d.ts

@@ -5,9 +5,8 @@
  *
  *   `request_signature_key_origin_mismatch` — the resolved `jwks_uri` host
  *     does not match the operator's declared `identity.key_origins.{purpose}`
- *     value. Skipped only for the specific (agent, purpose, role) tuple
- *     whose JWKS source was a publisher `adagents.json signing_keys` pin —
- *     operator-side use of the same purpose is still checked.
+ *     value. Publisher pins never skip this check because they only narrow
+ *     keys in the operator's JWKS.
  *
  *   `request_signature_key_origin_missing` — the agent's capabilities
  *     declare a signing posture for a purpose (e.g. `request_signing.supported_for`
@@ -36,24 +35,18 @@ export interface KeyOriginMissing {
 export type ConsistencyResult = {
     ok: true;
 } | KeyOriginMismatch | KeyOriginMissing;
-/**
- * Inputs for the per-purpose origin check. The caller is responsible for
- * deciding whether `publisherPinned` is true — the carve-out applies only
- * to (agent, webhook-signing, sell-side) tuples whose JWKS came from an
- * `adagents.json signing_keys` pin. For request-signing, governance-signing,
- * TMP-signing, and buyer-side webhook receivers, `publisherPinned` MUST
- * always be false.
- */
+/** Inputs for the per-purpose origin check. Publisher pin markers are ignored. */
 export interface OriginCheckInput {
     purpose: IdentityKeyOriginPurpose;
     declaredOrigin: string | undefined;
     resolvedJwksUri: string;
-    publisherPinned: boolean;
+    /** @deprecated Pins narrow JWKS keys and never bypass origin checks. */
+    publisherPinned?: boolean;
 }
 /**
  * Check origin consistency for a single (purpose, jwksUri) pair against the
  * declared `identity.key_origins.{purpose}` value. Returns `{ ok: true }`
- * when the check passes or is skipped (publisher pin); a typed mismatch
+ * when the check passes; a typed mismatch
  * result on failure. `key_origin_missing` is NOT raised here — that is a
  * separate check (`checkRequiredOrigins`) because it depends on which
  * purposes the agent has declared signing for.

package/dist/lib/signing/agent-resolver/consistency.js

@@ -25,7 +25,6 @@ __export(consistency_exports, {
 module.exports = __toCommonJS(consistency_exports);
 var import_canonicalize = require('./canonicalize.js');
 function checkOriginConsistency(input) {
-  if (input.publisherPinned) return { ok: true };
   if (!input.declaredOrigin) return { ok: true };
   let expected;
   let actual;

package/dist/lib/signing/agent-resolver/consistency.mjs

@@ -1,6 +1,5 @@
 import { canonicalizeOrigin } from "./canonicalize.mjs";
 function checkOriginConsistency(input) {
-  if (input.publisherPinned) return { ok: true };
   if (!input.declaredOrigin) return { ok: true };
   let expected;
   let actual;

package/dist/lib/signing/agent-resolver/errors.d.mts

@@ -17,7 +17,7 @@
  *     `address` or `hostname` fields the underlying error carries.
  */
 export declare const ATTACKER_INFLUENCED: unique symbol;
-export type AgentResolverErrorCode = 'request_signature_brand_json_url_missing' | 'request_signature_capabilities_unreachable' | 'request_signature_brand_json_unreachable' | 'request_signature_brand_json_malformed' | 'request_signature_brand_origin_mismatch' | 'request_signature_agent_not_in_brand_json' | 'request_signature_brand_json_ambiguous' | 'request_signature_key_origin_mismatch' | 'request_signature_key_origin_missing' | 'request_signature_jwks_unavailable' | 'request_signature_jwks_untrusted' | 'request_signature_key_purpose_invalid';
+export type AgentResolverErrorCode = 'request_signature_brand_json_url_missing' | 'request_signature_key_unknown' | 'request_signature_capabilities_unreachable' | 'request_signature_brand_json_unreachable' | 'request_signature_brand_json_malformed' | 'request_signature_brand_origin_mismatch' | 'request_signature_agent_not_in_brand_json' | 'request_signature_brand_json_ambiguous' | 'request_signature_key_origin_mismatch' | 'request_signature_key_origin_missing' | 'request_signature_jwks_unavailable' | 'request_signature_jwks_untrusted' | 'request_signature_key_purpose_invalid';
 export interface AgentResolverErrorDetail {
     agent_url?: string;
     brand_json_url?: string;

package/dist/lib/signing/agent-resolver/errors.d.ts

@@ -17,7 +17,7 @@
  *     `address` or `hostname` fields the underlying error carries.
  */
 export declare const ATTACKER_INFLUENCED: unique symbol;
-export type AgentResolverErrorCode = 'request_signature_brand_json_url_missing' | 'request_signature_capabilities_unreachable' | 'request_signature_brand_json_unreachable' | 'request_signature_brand_json_malformed' | 'request_signature_brand_origin_mismatch' | 'request_signature_agent_not_in_brand_json' | 'request_signature_brand_json_ambiguous' | 'request_signature_key_origin_mismatch' | 'request_signature_key_origin_missing' | 'request_signature_jwks_unavailable' | 'request_signature_jwks_untrusted' | 'request_signature_key_purpose_invalid';
+export type AgentResolverErrorCode = 'request_signature_brand_json_url_missing' | 'request_signature_key_unknown' | 'request_signature_capabilities_unreachable' | 'request_signature_brand_json_unreachable' | 'request_signature_brand_json_malformed' | 'request_signature_brand_origin_mismatch' | 'request_signature_agent_not_in_brand_json' | 'request_signature_brand_json_ambiguous' | 'request_signature_key_origin_mismatch' | 'request_signature_key_origin_missing' | 'request_signature_jwks_unavailable' | 'request_signature_jwks_untrusted' | 'request_signature_key_purpose_invalid';
 export interface AgentResolverErrorDetail {
     agent_url?: string;
     brand_json_url?: string;

package/dist/lib/signing/agent-resolver/fetch-helpers.d.mts

@@ -8,6 +8,7 @@
  * `hostname` fields MUST NOT propagate onto `AgentResolverError.detail`
  * (internal-topology leak). We surface the `code` only.
  */
+import { type SsrfDnsLookup } from '../../net/index.mjs';
 export declare const MAX_CAPABILITIES_BYTES = 65536;
 export declare const MAX_BRAND_JSON_BYTES = 262144;
 export declare const MAX_JWKS_BYTES = 65536;
@@ -37,4 +38,5 @@ export declare function safeFetchJson(url: string, kind: FetchKind, options: {
     allowPrivateIp?: boolean;
     timeoutMs?: number;
     maxBodyBytes: number;
+    lookup?: SsrfDnsLookup;
 }): Promise<SafeFetchJsonResult>;

package/dist/lib/signing/agent-resolver/fetch-helpers.d.ts

@@ -8,6 +8,7 @@
  * `hostname` fields MUST NOT propagate onto `AgentResolverError.detail`
  * (internal-topology leak). We surface the `code` only.
  */
+import { type SsrfDnsLookup } from '../../net';
 export declare const MAX_CAPABILITIES_BYTES = 65536;
 export declare const MAX_BRAND_JSON_BYTES = 262144;
 export declare const MAX_JWKS_BYTES = 65536;
@@ -37,4 +38,5 @@ export declare function safeFetchJson(url: string, kind: FetchKind, options: {
     allowPrivateIp?: boolean;
     timeoutMs?: number;
     maxBodyBytes: number;
+    lookup?: SsrfDnsLookup;
 }): Promise<SafeFetchJsonResult>;

package/dist/lib/signing/agent-resolver/fetch-helpers.js

@@ -52,7 +52,8 @@ async function safeFetchJson(url, kind, options) {
     headers: { accept: "application/json" },
     allowPrivateIp: options.allowPrivateIp === true,
     timeoutMs: options.timeoutMs ?? DEFAULT_TOTAL_TIMEOUT_MS,
-    maxBodyBytes: options.maxBodyBytes
+    maxBodyBytes: options.maxBodyBytes,
+    lookup: options.lookup
   };
   let res;
   try {

package/dist/lib/signing/agent-resolver/fetch-helpers.mjs

@@ -23,7 +23,8 @@ async function safeFetchJson(url, kind, options) {
     headers: { accept: "application/json" },
     allowPrivateIp: options.allowPrivateIp === true,
     timeoutMs: options.timeoutMs ?? DEFAULT_TOTAL_TIMEOUT_MS,
-    maxBodyBytes: options.maxBodyBytes
+    maxBodyBytes: options.maxBodyBytes,
+    lookup: options.lookup
   };
   let res;
   try {

package/dist/lib/signing/agent-resolver/jwks-set.js

@@ -58,10 +58,11 @@ function createAgentJwksSet(agentUrl, options) {
   }
   const now = options.now ?? (() => Date.now() / 1e3);
   let cache;
-  let lastRefetchAt = 0;
+  let lastRefetchAt = Number.NEGATIVE_INFINITY;
   let inFlight;
   const refresh = async () => {
     if (inFlight) return inFlight;
+    lastRefetchAt = now();
     inFlight = (async () => {
       const resolution = await (0, import_resolve_agent.resolveAgent)(agentUrl, options);
       const refreshedAt = now();
@@ -85,7 +86,21 @@ function createAgentJwksSet(agentUrl, options) {
     return inFlight;
   };
   const ensureFresh = async () => {
-    if (!cache || now() - cache.fetchedAt >= cacheMaxAge || cache.resolution.operatorAuthorizationValidUntil !== void 0 && now() >= cache.resolution.operatorAuthorizationValidUntil) {
+    if (!cache || now() - cache.fetchedAt >= Math.min(
+      cacheMaxAge,
+      1800,
+      Math.max(30, headerLifetime(cache.resolution.brandJsonCacheControl)),
+      Math.max(60, headerLifetime(cache.resolution.jwksCacheControl))
+    ) || cache.resolution.operatorAuthorizationValidUntil !== void 0 && now() >= cache.resolution.operatorAuthorizationValidUntil) {
+      if (!inFlight && now() - lastRefetchAt < 30) {
+        const expired = cache?.resolution.operatorAuthorizationValidUntil !== void 0 && now() >= cache.resolution.operatorAuthorizationValidUntil;
+        throw new import_errors.AgentResolverError(
+          expired ? "request_signature_brand_origin_mismatch" : "request_signature_brand_json_unreachable",
+          "Expired operator mapping cannot be used during the discovery cooldown",
+          { agent_url: agentUrl },
+          ["agent_url"]
+        );
+      }
       return refresh();
     }
     return cache;
@@ -95,7 +110,7 @@ function createAgentJwksSet(agentUrl, options) {
     try {
       return await fresh.getKey(protectedHeader, token);
     } catch (err) {
-      if (now() - lastRefetchAt < kidCooldown) throw err;
+      if (now() - lastRefetchAt < Math.max(30, kidCooldown)) throw err;
       const refreshed = await refresh();
       return refreshed.getKey(protectedHeader, token);
     }
@@ -118,6 +133,12 @@ function assertAllJwksAllowed(jwks, allowedAlgs, agentUrl) {
 function filterJwksToAllowedAlgs(jwks, allowedAlgs) {
   return jwks.keys.filter((jwk) => typeof jwk.alg !== "string" || allowedAlgs.has(jwk.alg));
 }
+function headerLifetime(value) {
+  if (!value) return Infinity;
+  if (/\bno-cache\b|\bno-store\b/i.test(value)) return 0;
+  const match = /(?:^|,)\s*max-age\s*=\s*"?(\d+)/i.exec(value);
+  return match ? Number(match[1]) : Infinity;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   createAgentJwksSet,

package/dist/lib/signing/agent-resolver/jwks-set.mjs

@@ -34,10 +34,11 @@ function createAgentJwksSet(agentUrl, options) {
   }
   const now = options.now ?? (() => Date.now() / 1e3);
   let cache;
-  let lastRefetchAt = 0;
+  let lastRefetchAt = Number.NEGATIVE_INFINITY;
   let inFlight;
   const refresh = async () => {
     if (inFlight) return inFlight;
+    lastRefetchAt = now();
     inFlight = (async () => {
       const resolution = await resolveAgent(agentUrl, options);
       const refreshedAt = now();
@@ -61,7 +62,21 @@ function createAgentJwksSet(agentUrl, options) {
     return inFlight;
   };
   const ensureFresh = async () => {
-    if (!cache || now() - cache.fetchedAt >= cacheMaxAge || cache.resolution.operatorAuthorizationValidUntil !== void 0 && now() >= cache.resolution.operatorAuthorizationValidUntil) {
+    if (!cache || now() - cache.fetchedAt >= Math.min(
+      cacheMaxAge,
+      1800,
+      Math.max(30, headerLifetime(cache.resolution.brandJsonCacheControl)),
+      Math.max(60, headerLifetime(cache.resolution.jwksCacheControl))
+    ) || cache.resolution.operatorAuthorizationValidUntil !== void 0 && now() >= cache.resolution.operatorAuthorizationValidUntil) {
+      if (!inFlight && now() - lastRefetchAt < 30) {
+        const expired = cache?.resolution.operatorAuthorizationValidUntil !== void 0 && now() >= cache.resolution.operatorAuthorizationValidUntil;
+        throw new AgentResolverError(
+          expired ? "request_signature_brand_origin_mismatch" : "request_signature_brand_json_unreachable",
+          "Expired operator mapping cannot be used during the discovery cooldown",
+          { agent_url: agentUrl },
+          ["agent_url"]
+        );
+      }
       return refresh();
     }
     return cache;
@@ -71,7 +86,7 @@ function createAgentJwksSet(agentUrl, options) {
     try {
       return await fresh.getKey(protectedHeader, token);
     } catch (err) {
-      if (now() - lastRefetchAt < kidCooldown) throw err;
+      if (now() - lastRefetchAt < Math.max(30, kidCooldown)) throw err;
       const refreshed = await refresh();
       return refreshed.getKey(protectedHeader, token);
     }
@@ -94,6 +109,12 @@ function assertAllJwksAllowed(jwks, allowedAlgs, agentUrl) {
 function filterJwksToAllowedAlgs(jwks, allowedAlgs) {
   return jwks.keys.filter((jwk) => typeof jwk.alg !== "string" || allowedAlgs.has(jwk.alg));
 }
+function headerLifetime(value) {
+  if (!value) return Infinity;
+  if (/\bno-cache\b|\bno-store\b/i.test(value)) return 0;
+  const match = /(?:^|,)\s*max-age\s*=\s*"?(\d+)/i.exec(value);
+  return match ? Number(match[1]) : Infinity;
+}
 export {
   createAgentJwksSet,
   getAgentJwks

package/dist/lib/signing/agent-resolver/legacy-brand.d.mts

@@ -0,0 +1,15 @@
+import type { SsrfDnsLookup } from '../../net/index.mjs';
+/** 3.x webhook compatibility only; explicit capability URLs never use this path. */
+export declare function fetchLegacyBrandJson(agentUrl: string, options: {
+    allowPrivateIp?: boolean;
+    timeoutMs?: number;
+    maxBodyBytes: number;
+    lookup?: SsrfDnsLookup;
+}): Promise<{
+    body: unknown;
+    url: string;
+    fetchedAt: number;
+    headers: {
+        'cache-control': string | undefined;
+    };
+}>;

package/dist/lib/signing/agent-resolver/legacy-brand.d.ts

@@ -0,0 +1,15 @@
+import type { SsrfDnsLookup } from '../../net';
+/** 3.x webhook compatibility only; explicit capability URLs never use this path. */
+export declare function fetchLegacyBrandJson(agentUrl: string, options: {
+    allowPrivateIp?: boolean;
+    timeoutMs?: number;
+    maxBodyBytes: number;
+    lookup?: SsrfDnsLookup;
+}): Promise<{
+    body: unknown;
+    url: string;
+    fetchedAt: number;
+    headers: {
+        'cache-control': string | undefined;
+    };
+}>;

package/dist/lib/signing/agent-resolver/legacy-brand.js

@@ -0,0 +1,60 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var legacy_brand_exports = {};
+__export(legacy_brand_exports, {
+  fetchLegacyBrandJson: () => fetchLegacyBrandJson
+});
+module.exports = __toCommonJS(legacy_brand_exports);
+var import_brand_jwks = require('../brand-jwks.js');
+var import_etld = require('./etld.js');
+var import_fetch_helpers = require('./fetch-helpers.js');
+async function fetchLegacyBrandJson(agentUrl, options) {
+  const agent = new URL(agentUrl);
+  let startUrl = `${agent.origin}/.well-known/brand.json`;
+  const fetch = (url) => (0, import_brand_jwks.fetchBrandJson)({ ...options, startUrl: url, domainDerived: true, maxRedirects: 1 });
+  let result;
+  try {
+    try {
+      result = await fetch(startUrl);
+    } catch (err) {
+      if (!(err instanceof import_brand_jwks.BrandJsonResolverError) || err.httpStatus !== 404 && err.httpStatus !== 410) throw err;
+      const domain = (0, import_etld.eTldPlusOne)(agentUrl);
+      if (domain === agent.hostname) throw err;
+      startUrl = `https://${domain}/.well-known/brand.json`;
+      result = await fetch(startUrl);
+    }
+  } catch (err) {
+    throw new import_fetch_helpers.SafeFetchError(
+      "brand.json",
+      "fetch_failed",
+      err instanceof import_brand_jwks.BrandJsonResolverError && err.code === "invalid_body" ? "brand.json body failed strict-JSON parse" : "Legacy brand.json discovery failed",
+      err instanceof import_brand_jwks.BrandJsonResolverError ? err.httpStatus : void 0
+    );
+  }
+  return {
+    body: result.data,
+    url: result.finalUrl,
+    fetchedAt: Math.floor(Date.now() / 1e3),
+    headers: { "cache-control": result.cacheControl }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  fetchLegacyBrandJson
+});

package/dist/lib/signing/agent-resolver/legacy-brand.mjs

@@ -0,0 +1,36 @@
+import { fetchBrandJson, BrandJsonResolverError } from "../brand-jwks.mjs";
+import { eTldPlusOne } from "./etld.mjs";
+import { SafeFetchError } from "./fetch-helpers.mjs";
+async function fetchLegacyBrandJson(agentUrl, options) {
+  const agent = new URL(agentUrl);
+  let startUrl = `${agent.origin}/.well-known/brand.json`;
+  const fetch = (url) => fetchBrandJson({ ...options, startUrl: url, domainDerived: true, maxRedirects: 1 });
+  let result;
+  try {
+    try {
+      result = await fetch(startUrl);
+    } catch (err) {
+      if (!(err instanceof BrandJsonResolverError) || err.httpStatus !== 404 && err.httpStatus !== 410) throw err;
+      const domain = eTldPlusOne(agentUrl);
+      if (domain === agent.hostname) throw err;
+      startUrl = `https://${domain}/.well-known/brand.json`;
+      result = await fetch(startUrl);
+    }
+  } catch (err) {
+    throw new SafeFetchError(
+      "brand.json",
+      "fetch_failed",
+      err instanceof BrandJsonResolverError && err.code === "invalid_body" ? "brand.json body failed strict-JSON parse" : "Legacy brand.json discovery failed",
+      err instanceof BrandJsonResolverError ? err.httpStatus : void 0
+    );
+  }
+  return {
+    body: result.data,
+    url: result.finalUrl,
+    fetchedAt: Math.floor(Date.now() / 1e3),
+    headers: { "cache-control": result.cacheControl }
+  };
+}
+export {
+  fetchLegacyBrandJson
+};

package/dist/lib/signing/agent-resolver/operator-authorization.d.mts

@@ -0,0 +1,13 @@
+/** Optional receiver account authorization, separate from agent origin binding. */
+import type { ResolveAgentOptions } from './resolve-agent.mjs';
+interface ActiveOperatorDelegation {
+    validUntil?: number;
+}
+/**
+ * Evaluate the complete cross-origin delegation tuple. Domain matching is
+ * against the exact agent eTLD+1 to match step 3 of the
+ * discovery algorithm; brand, activity, country, and time remain independent
+ * authorization dimensions and must all match the same entry.
+ */
+export declare function checkDelegatedOperatorAuthorization(brandJson: unknown, agentEtld1: string, now: number, options: Pick<ResolveAgentOptions, 'requiredOperatorBrand' | 'requiredOperatorScope' | 'requiredOperatorCountry' | 'allowPrivateIp'>): ActiveOperatorDelegation | undefined;
+export {};

package/dist/lib/signing/agent-resolver/operator-authorization.d.ts

@@ -0,0 +1,13 @@
+/** Optional receiver account authorization, separate from agent origin binding. */
+import type { ResolveAgentOptions } from './resolve-agent';
+interface ActiveOperatorDelegation {
+    validUntil?: number;
+}
+/**
+ * Evaluate the complete cross-origin delegation tuple. Domain matching is
+ * against the exact agent eTLD+1 to match step 3 of the
+ * discovery algorithm; brand, activity, country, and time remain independent
+ * authorization dimensions and must all match the same entry.
+ */
+export declare function checkDelegatedOperatorAuthorization(brandJson: unknown, agentEtld1: string, now: number, options: Pick<ResolveAgentOptions, 'requiredOperatorBrand' | 'requiredOperatorScope' | 'requiredOperatorCountry' | 'allowPrivateIp'>): ActiveOperatorDelegation | undefined;
+export {};

package/dist/lib/signing/agent-resolver/operator-authorization.js

@@ -0,0 +1,108 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var operator_authorization_exports = {};
+__export(operator_authorization_exports, {
+  checkDelegatedOperatorAuthorization: () => checkDelegatedOperatorAuthorization
+});
+module.exports = __toCommonJS(operator_authorization_exports);
+const AUTHORIZED_OPERATOR_SCOPES = /* @__PURE__ */ new Set([
+  "all",
+  "media_buying",
+  "creative_generation",
+  "rights_clearance",
+  "governance",
+  "measurement",
+  "agent_operations"
+]);
+const AUTHORIZED_OPERATOR_DOMAIN = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/;
+function checkDelegatedOperatorAuthorization(brandJson, agentEtld1, now, options) {
+  if (!brandJson || typeof brandJson !== "object") return void 0;
+  const operators = brandJson.authorized_operators;
+  if (!Array.isArray(operators)) return void 0;
+  let latestValidUntil;
+  let matched = false;
+  for (const op of operators) {
+    if (!op || typeof op !== "object" || Array.isArray(op)) continue;
+    const candidate = op;
+    const domain = candidate.domain;
+    const brands = candidate.brands;
+    if (typeof domain !== "string" || !AUTHORIZED_OPERATOR_DOMAIN.test(domain) || !isValidBrandGrant(brands)) {
+      continue;
+    }
+    if (domain !== agentEtld1) continue;
+    const scopes = candidate.scopes;
+    if (scopes !== void 0 && !isValidScopeGrant(scopes)) continue;
+    const countries = candidate.countries;
+    if (countries !== void 0 && !isValidCountryGrant(countries)) continue;
+    const validFrom = parseOptionalRfc3339(candidate.valid_from);
+    const validUntil = parseOptionalRfc3339(candidate.valid_until);
+    if (validFrom === null || validUntil === null) continue;
+    if (validFrom !== void 0 && validUntil !== void 0 && validFrom >= validUntil) continue;
+    if (validFrom !== void 0 && now < validFrom) continue;
+    if (validUntil !== void 0 && now >= validUntil) continue;
+    if (!matchesGrant(brands, options.requiredOperatorBrand, "*")) continue;
+    if (scopes !== void 0 && !matchesGrant(scopes, options.requiredOperatorScope, "all")) continue;
+    if (countries !== void 0 && !matchesGrant(countries, options.requiredOperatorCountry)) continue;
+    matched = true;
+    if (validUntil === void 0) return {};
+    latestValidUntil = Math.max(latestValidUntil ?? Number.NEGATIVE_INFINITY, validUntil);
+  }
+  return matched ? { validUntil: latestValidUntil } : void 0;
+}
+function isValidBrandGrant(value) {
+  return Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === "string" && (item === "*" || /^[a-z0-9_]+$/.test(item)));
+}
+function isValidScopeGrant(value) {
+  return Array.isArray(value) && value.length > 0 && new Set(value).size === value.length && value.every((item) => typeof item === "string" && AUTHORIZED_OPERATOR_SCOPES.has(item));
+}
+function isValidCountryGrant(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string" && /^[A-Z]{2}$/.test(item));
+}
+function matchesGrant(grants, required, wildcard) {
+  if (wildcard !== void 0 && grants.includes(wildcard)) return true;
+  return required !== void 0 && grants.includes(required);
+}
+function parseOptionalRfc3339(value) {
+  if (value === void 0) return void 0;
+  if (typeof value !== "string") return null;
+  const match = /^(\d{4})-(\d{2})-(\d{2})[Tt](\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?([Zz]|([+-])(\d{2}):(\d{2}))$/.exec(
+    value
+  );
+  if (!match) return null;
+  const year = Number(match[1]);
+  const month = Number(match[2]);
+  const day = Number(match[3]);
+  const hour = Number(match[4]);
+  const minute = Number(match[5]);
+  const second = Number(match[6]);
+  const offsetHour = match[10] === void 0 ? 0 : Number(match[10]);
+  const offsetMinute = match[11] === void 0 ? 0 : Number(match[11]);
+  if (month < 1 || month > 12 || day < 1 || day > daysInMonth(year, month) || hour > 23 || minute > 59 || second > 59 || offsetHour > 23 || offsetMinute > 59) {
+    return null;
+  }
+  const parsed = Date.parse(value) / 1e3;
+  return Number.isFinite(parsed) ? parsed : null;
+}
+function daysInMonth(year, month) {
+  return new Date(Date.UTC(year, month, 0)).getUTCDate();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  checkDelegatedOperatorAuthorization
+});