@adcp/sdk 14.0.0 → 14.1.0

package/dist/lib/signing/agent-resolver/operator-authorization.mjs

@@ -0,0 +1,84 @@
+const AUTHORIZED_OPERATOR_SCOPES = /* @__PURE__ */ new Set([
+  "all",
+  "media_buying",
+  "creative_generation",
+  "rights_clearance",
+  "governance",
+  "measurement",
+  "agent_operations"
+]);
+const AUTHORIZED_OPERATOR_DOMAIN = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/;
+function checkDelegatedOperatorAuthorization(brandJson, agentEtld1, now, options) {
+  if (!brandJson || typeof brandJson !== "object") return void 0;
+  const operators = brandJson.authorized_operators;
+  if (!Array.isArray(operators)) return void 0;
+  let latestValidUntil;
+  let matched = false;
+  for (const op of operators) {
+    if (!op || typeof op !== "object" || Array.isArray(op)) continue;
+    const candidate = op;
+    const domain = candidate.domain;
+    const brands = candidate.brands;
+    if (typeof domain !== "string" || !AUTHORIZED_OPERATOR_DOMAIN.test(domain) || !isValidBrandGrant(brands)) {
+      continue;
+    }
+    if (domain !== agentEtld1) continue;
+    const scopes = candidate.scopes;
+    if (scopes !== void 0 && !isValidScopeGrant(scopes)) continue;
+    const countries = candidate.countries;
+    if (countries !== void 0 && !isValidCountryGrant(countries)) continue;
+    const validFrom = parseOptionalRfc3339(candidate.valid_from);
+    const validUntil = parseOptionalRfc3339(candidate.valid_until);
+    if (validFrom === null || validUntil === null) continue;
+    if (validFrom !== void 0 && validUntil !== void 0 && validFrom >= validUntil) continue;
+    if (validFrom !== void 0 && now < validFrom) continue;
+    if (validUntil !== void 0 && now >= validUntil) continue;
+    if (!matchesGrant(brands, options.requiredOperatorBrand, "*")) continue;
+    if (scopes !== void 0 && !matchesGrant(scopes, options.requiredOperatorScope, "all")) continue;
+    if (countries !== void 0 && !matchesGrant(countries, options.requiredOperatorCountry)) continue;
+    matched = true;
+    if (validUntil === void 0) return {};
+    latestValidUntil = Math.max(latestValidUntil ?? Number.NEGATIVE_INFINITY, validUntil);
+  }
+  return matched ? { validUntil: latestValidUntil } : void 0;
+}
+function isValidBrandGrant(value) {
+  return Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === "string" && (item === "*" || /^[a-z0-9_]+$/.test(item)));
+}
+function isValidScopeGrant(value) {
+  return Array.isArray(value) && value.length > 0 && new Set(value).size === value.length && value.every((item) => typeof item === "string" && AUTHORIZED_OPERATOR_SCOPES.has(item));
+}
+function isValidCountryGrant(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string" && /^[A-Z]{2}$/.test(item));
+}
+function matchesGrant(grants, required, wildcard) {
+  if (wildcard !== void 0 && grants.includes(wildcard)) return true;
+  return required !== void 0 && grants.includes(required);
+}
+function parseOptionalRfc3339(value) {
+  if (value === void 0) return void 0;
+  if (typeof value !== "string") return null;
+  const match = /^(\d{4})-(\d{2})-(\d{2})[Tt](\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?([Zz]|([+-])(\d{2}):(\d{2}))$/.exec(
+    value
+  );
+  if (!match) return null;
+  const year = Number(match[1]);
+  const month = Number(match[2]);
+  const day = Number(match[3]);
+  const hour = Number(match[4]);
+  const minute = Number(match[5]);
+  const second = Number(match[6]);
+  const offsetHour = match[10] === void 0 ? 0 : Number(match[10]);
+  const offsetMinute = match[11] === void 0 ? 0 : Number(match[11]);
+  if (month < 1 || month > 12 || day < 1 || day > daysInMonth(year, month) || hour > 23 || minute > 59 || second > 59 || offsetHour > 23 || offsetMinute > 59) {
+    return null;
+  }
+  const parsed = Date.parse(value) / 1e3;
+  return Number.isFinite(parsed) ? parsed : null;
+}
+function daysInMonth(year, month) {
+  return new Date(Date.UTC(year, month, 0)).getUTCDate();
+}
+export {
+  checkDelegatedOperatorAuthorization
+};

package/dist/lib/signing/agent-resolver/resolve-agent.d.mts

@@ -28,6 +28,7 @@
  *     `SsrfRefusedError` carries.
  */
 import type { IdentityKeyOriginPurpose, IdentityPosture } from './capabilities-types.mjs';
+import type { SsrfDnsLookup } from '../../net/index.mjs';
 import { type ConsistencyResult } from './consistency.mjs';
 import { type AgentResolverErrorDetail } from './errors.mjs';
 import { type AgentEntry } from './select-agent.mjs';
@@ -48,6 +49,13 @@ export interface FetchCapabilitiesFn {
 export interface ResolveAgentOptions {
     /** Default `'mcp'`. Ignored when `fetchCapabilities` is supplied. */
     protocol?: AgentProtocol;
+    /** URL matching is mandatory; these filters may only narrow it. */
+    expectedBrandJsonUrl?: string;
+    agentType?: string;
+    agentId?: string;
+    /** Enable the 3.x webhook-only fallback when brand_json_url is absent. */
+    legacyWebhookFallback?: boolean;
+    lookup?: SsrfDnsLookup;
     /**
      * Override the capabilities-fetch step entirely. Tests pass a fake; production
      * callers who already hold a configured protocol client can wire it through
@@ -85,10 +93,7 @@ export interface ResolveAgentOptions {
      */
     declaredPurposes?: readonly IdentityKeyOriginPurpose[];
     /**
-     * Sell-side webhook publisher pin marker — when `webhook_signing` is
-     * `true`, the step-7 origin-consistency check is skipped for the
-     * webhook-signing purpose only (operator-side webhook-signing remains
-     * checked). Buyer-side / receive-side verifiers MUST leave this unset.
+     * @deprecated Publisher pins never skip origin consistency. Ignored.
      */
     publisherPinned?: {
         webhook_signing?: boolean;
@@ -126,6 +131,11 @@ export interface TraceStep {
 export interface AgentResolution {
     agentUrl: string;
     brandJsonUrl: string;
+    /** Exact selected operator record; use it for signed-buyer governance. */
+    brandJson?: unknown;
+    brandJsonCacheControl?: string;
+    /** True only on the explicitly enabled 3.x webhook compatibility path. */
+    legacyWebhookFallback?: boolean;
     agentEntry: AgentEntry;
     jwksUri: string;
     jwks: {

package/dist/lib/signing/agent-resolver/resolve-agent.d.ts

@@ -28,6 +28,7 @@
  *     `SsrfRefusedError` carries.
  */
 import type { IdentityKeyOriginPurpose, IdentityPosture } from './capabilities-types';
+import type { SsrfDnsLookup } from '../../net';
 import { type ConsistencyResult } from './consistency';
 import { type AgentResolverErrorDetail } from './errors';
 import { type AgentEntry } from './select-agent';
@@ -48,6 +49,13 @@ export interface FetchCapabilitiesFn {
 export interface ResolveAgentOptions {
     /** Default `'mcp'`. Ignored when `fetchCapabilities` is supplied. */
     protocol?: AgentProtocol;
+    /** URL matching is mandatory; these filters may only narrow it. */
+    expectedBrandJsonUrl?: string;
+    agentType?: string;
+    agentId?: string;
+    /** Enable the 3.x webhook-only fallback when brand_json_url is absent. */
+    legacyWebhookFallback?: boolean;
+    lookup?: SsrfDnsLookup;
     /**
      * Override the capabilities-fetch step entirely. Tests pass a fake; production
      * callers who already hold a configured protocol client can wire it through
@@ -85,10 +93,7 @@ export interface ResolveAgentOptions {
      */
     declaredPurposes?: readonly IdentityKeyOriginPurpose[];
     /**
-     * Sell-side webhook publisher pin marker — when `webhook_signing` is
-     * `true`, the step-7 origin-consistency check is skipped for the
-     * webhook-signing purpose only (operator-side webhook-signing remains
-     * checked). Buyer-side / receive-side verifiers MUST leave this unset.
+     * @deprecated Publisher pins never skip origin consistency. Ignored.
      */
     publisherPinned?: {
         webhook_signing?: boolean;
@@ -126,6 +131,11 @@ export interface TraceStep {
 export interface AgentResolution {
     agentUrl: string;
     brandJsonUrl: string;
+    /** Exact selected operator record; use it for signed-buyer governance. */
+    brandJson?: unknown;
+    brandJsonCacheControl?: string;
+    /** True only on the explicitly enabled 3.x webhook compatibility path. */
+    legacyWebhookFallback?: boolean;
     agentEntry: AgentEntry;
     jwksUri: string;
     jwks: {

package/dist/lib/signing/agent-resolver/resolve-agent.js

@@ -25,7 +25,8 @@ var import_tldts = require("tldts");
 var import_protocols = require('../../protocols/index.js');
 var import_domain = require('../../brand/domain.js');
 var import_capabilities_types = require('./capabilities-types.js');
-var import_canonicalize = require('./canonicalize.js');
+var import_operator_authorization = require('./operator-authorization.js');
+var import_legacy_brand = require('./legacy-brand.js');
 var import_consistency = require('./consistency.js');
 var import_errors = require('./errors.js');
 var import_etld = require('./etld.js');
@@ -69,7 +70,10 @@ async function resolveAgent(agentUrl, options = {}) {
       ["agent_url"]
     );
   }
-  const brandJsonUrl = (0, import_capabilities_types.readBrandJsonUrl)(capabilitiesPayload);
+  let brandJsonUrl = (0, import_capabilities_types.readBrandJsonUrl)(capabilitiesPayload);
+  const identity = capabilitiesPayload?.identity;
+  const legacyFallback = options.legacyWebhookFallback === true && identity?.brand_json_url === void 0 && permitsLegacyWebhookDiscovery(capabilitiesPayload);
+  if (legacyFallback) brandJsonUrl = `${new URL(agentUrl).origin}/.well-known/brand.json`;
   const identityPosture = (0, import_capabilities_types.readIdentityPosture)(capabilitiesPayload);
   const acceptsScheme = (url) => {
     if (!url) return false;
@@ -87,24 +91,43 @@ async function resolveAgent(agentUrl, options = {}) {
       ["agent_url"]
     );
   }
+  if (!legacyFallback && options.expectedBrandJsonUrl !== void 0 && (0, import_select_agent.canonicalAgentUrl)(brandJsonUrl) !== (0, import_select_agent.canonicalAgentUrl)(options.expectedBrandJsonUrl)) {
+    throw new import_errors.AgentResolverError(
+      "request_signature_brand_origin_mismatch",
+      "Cached operator mapping disagrees with identity.brand_json_url",
+      { agent_url: agentUrl },
+      ["agent_url"]
+    );
+  }
   pushTrace(trace, { step: 2, name: "read_brand_json_url", ok: true, detail: { brand_json_url: brandJsonUrl } });
-  let agentEtld1;
-  let brandEtld1;
-  let sameOrigin;
-  try {
-    agentEtld1 = (0, import_etld.eTldPlusOne)(agentUrl);
-    brandEtld1 = (0, import_etld.eTldPlusOne)(brandJsonUrl);
-    sameOrigin = (0, import_etld.sameEtldPlusOne)(agentUrl, brandJsonUrl);
-  } catch {
-    if (allowPrivateIp) {
-      const agentHost = new URL(agentUrl).hostname;
-      const brandHost = new URL(brandJsonUrl).hostname;
-      const agentIsExplicitDevelopmentHost = agentHost === "localhost" || (0, import_domain.isDevelopmentBrandDomain)(agentHost) || (0, import_tldts.parse)(agentHost, { extractHostname: false }).isIp;
-      const brandIsExplicitDevelopmentHost = brandHost === "localhost" || (0, import_domain.isDevelopmentBrandDomain)(brandHost) || (0, import_tldts.parse)(brandHost, { extractHostname: false }).isIp;
-      if (agentIsExplicitDevelopmentHost && brandIsExplicitDevelopmentHost) {
-        agentEtld1 = agentHost;
-        brandEtld1 = brandHost;
-        sameOrigin = agentHost === brandHost;
+  let agentEtld1 = "";
+  let brandEtld1 = "";
+  let sameOrigin = true;
+  if (!legacyFallback) {
+    try {
+      agentEtld1 = (0, import_etld.eTldPlusOne)(agentUrl);
+      brandEtld1 = (0, import_etld.eTldPlusOne)(brandJsonUrl);
+      sameOrigin = (0, import_etld.sameEtldPlusOne)(agentUrl, brandJsonUrl);
+    } catch {
+      if (allowPrivateIp) {
+        const agentHost = new URL(agentUrl).hostname;
+        const brandHost = new URL(brandJsonUrl).hostname;
+        const agentIsExplicitDevelopmentHost = agentHost === "localhost" || (0, import_domain.isDevelopmentBrandDomain)(agentHost) || (0, import_tldts.parse)(agentHost, { extractHostname: false }).isIp;
+        const brandIsExplicitDevelopmentHost = brandHost === "localhost" || (0, import_domain.isDevelopmentBrandDomain)(brandHost) || (0, import_tldts.parse)(brandHost, { extractHostname: false }).isIp;
+        if (agentIsExplicitDevelopmentHost && brandIsExplicitDevelopmentHost) {
+          agentEtld1 = agentHost;
+          brandEtld1 = brandHost;
+          sameOrigin = agentHost === brandHost;
+        } else {
+          const detail = { agent_url: agentUrl, brand_json_url: brandJsonUrl };
+          pushTrace(trace, { step: 3, name: "etld1_binding", ok: false, detail });
+          throw new import_errors.AgentResolverError(
+            "request_signature_brand_origin_mismatch",
+            `Cannot compute eTLD+1 for agent or brand.json host`,
+            detail,
+            ["agent_url", "brand_json_url"]
+          );
+        }
       } else {
         const detail = { agent_url: agentUrl, brand_json_url: brandJsonUrl };
         pushTrace(trace, { step: 3, name: "etld1_binding", ok: false, detail });
@@ -115,25 +138,24 @@ async function resolveAgent(agentUrl, options = {}) {
           ["agent_url", "brand_json_url"]
         );
       }
-    } else {
-      const detail = { agent_url: agentUrl, brand_json_url: brandJsonUrl };
-      pushTrace(trace, { step: 3, name: "etld1_binding", ok: false, detail });
-      throw new import_errors.AgentResolverError(
-        "request_signature_brand_origin_mismatch",
-        `Cannot compute eTLD+1 for agent or brand.json host`,
-        detail,
-        ["agent_url", "brand_json_url"]
-      );
     }
   }
   let brandJson;
   let brandJsonFetchedAt;
+  let brandJsonCacheControl;
   try {
-    const fetched = await (0, import_fetch_helpers.safeFetchJson)(brandJsonUrl, "brand.json", {
-      allowPrivateIp,
-      timeoutMs,
-      maxBodyBytes: brandJsonCap
-    });
+    const fetchOptions = { allowPrivateIp, timeoutMs, maxBodyBytes: brandJsonCap, lookup: options.lookup };
+    const fetched = legacyFallback ? await (0, import_legacy_brand.fetchLegacyBrandJson)(agentUrl, fetchOptions) : await (0, import_fetch_helpers.safeFetchJson)(brandJsonUrl, "brand.json", fetchOptions);
+    if (legacyFallback && "url" in fetched) brandJsonUrl = fetched.url;
+    brandJsonCacheControl = fetched.headers["cache-control"];
+    if (legacyFallback && options.expectedBrandJsonUrl !== void 0 && (0, import_select_agent.canonicalAgentUrl)(brandJsonUrl) !== (0, import_select_agent.canonicalAgentUrl)(options.expectedBrandJsonUrl) && (0, import_select_agent.canonicalAgentUrl)(`${new URL(agentUrl).origin}/.well-known/brand.json`) !== (0, import_select_agent.canonicalAgentUrl)(options.expectedBrandJsonUrl)) {
+      throw new import_errors.AgentResolverError(
+        "request_signature_brand_origin_mismatch",
+        "Cached mapping disagrees with legacy discovery",
+        { agent_url: agentUrl },
+        ["agent_url"]
+      );
+    }
     brandJson = fetched.body;
     brandJsonFetchedAt = fetched.fetchedAt;
     pushTrace(trace, {
@@ -144,6 +166,7 @@ async function resolveAgent(agentUrl, options = {}) {
       url: brandJsonUrl
     });
   } catch (err) {
+    if (err instanceof import_errors.AgentResolverError) throw err;
     if (err instanceof import_fetch_helpers.SafeFetchError && /strict-JSON parse/.test(err.message)) {
       const detail2 = {
         brand_json_url: brandJsonUrl,
@@ -187,7 +210,17 @@ async function resolveAgent(agentUrl, options = {}) {
         ["agent_url"]
       );
     }
-    operatorAuthorizationValidUntil = delegation.validUntil;
+    if (options.requiredOperatorBrand !== void 0 || options.requiredOperatorScope !== void 0 || options.requiredOperatorCountry !== void 0) {
+      const authorization = (0, import_operator_authorization.checkDelegatedOperatorAuthorization)(brandJson, agentEtld1, now(), options);
+      if (!authorization)
+        throw new import_errors.AgentResolverError(
+          "request_signature_brand_origin_mismatch",
+          "Delegated operator does not satisfy the receiver account authorization policy",
+          { agent_url: agentUrl },
+          ["agent_url"]
+        );
+      operatorAuthorizationValidUntil = authorization.validUntil;
+    }
     pushTrace(trace, {
       step: 3,
       name: "etld1_binding",
@@ -204,7 +237,7 @@ async function resolveAgent(agentUrl, options = {}) {
   }
   let agentEntry;
   try {
-    agentEntry = (0, import_select_agent.selectAgentByUrl)(brandJson, agentUrl);
+    agentEntry = (0, import_select_agent.selectAgentByUrl)(brandJson, agentUrl, options);
     pushTrace(trace, { step: 5, name: "select_agent", ok: true, detail: { url: agentEntry.url } });
   } catch (err) {
     if (err instanceof import_select_agent.AgentSelectorError) {
@@ -227,17 +260,19 @@ async function resolveAgent(agentUrl, options = {}) {
       pushTrace(trace, { step: 5, name: "select_agent", ok: false, detail });
       throw new import_errors.AgentResolverError(code, err.message, detail, attacker);
     }
-    throw err;
+    throw new import_errors.AgentResolverError(
+      "request_signature_brand_json_malformed",
+      "Matched agent has an invalid URL or JWKS source",
+      { brand_json_url: brandJsonUrl },
+      ["brand_json_url"]
+    );
   }
-  const declaredJwksUri = agentEntry.jwks_uri;
-  const jwksUriFromEntry = typeof declaredJwksUri === "string" && acceptsScheme(declaredJwksUri) ? declaredJwksUri : void 0;
-  const jwksUri = jwksUriFromEntry ?? `${originOf(agentUrl)}/.well-known/jwks.json`;
+  const jwksUri = (0, import_select_agent.agentJwksUri)(agentEntry);
   pushTrace(trace, { step: 6, name: "resolve_jwks_uri", ok: true, detail: { jwks_uri: jwksUri } });
-  const consistencyResults = runConsistencyChecks({
+  const consistencyResults = legacyFallback ? [] : runConsistencyChecks({
     capabilitiesPayload,
     identityPosture,
     jwksUri,
-    publisherPinnedWebhookSigning: options.publisherPinned?.webhook_signing === true,
     extraDeclaredPurposes: options.declaredPurposes ?? []
   });
   const failedConsistency = consistencyResults.filter((r) => r.ok === false);
@@ -270,7 +305,8 @@ async function resolveAgent(agentUrl, options = {}) {
     const fetched = await (0, import_fetch_helpers.safeFetchJson)(jwksUri, "jwks", {
       allowPrivateIp,
       timeoutMs,
-      maxBodyBytes: jwksCap
+      maxBodyBytes: jwksCap,
+      lookup: options.lookup
     });
     if (!fetched.body || typeof fetched.body !== "object" || !Array.isArray(fetched.body.keys)) {
       throw new import_fetch_helpers.SafeFetchError("jwks", "fetch_failed", "JWKS document has no keys[] array");
@@ -307,8 +343,11 @@ async function resolveAgent(agentUrl, options = {}) {
     );
   }
   return {
-    agentUrl,
+    agentUrl: (0, import_select_agent.canonicalAgentUrl)(agentEntry.url),
     brandJsonUrl,
+    brandJson,
+    ...legacyFallback && { legacyWebhookFallback: true },
+    ...brandJsonCacheControl !== void 0 && { brandJsonCacheControl },
     agentEntry,
     jwksUri,
     jwks,
@@ -335,95 +374,14 @@ function defaultFetchCapabilities(agentUrl, protocol) {
     return client.callTool("get_adcp_capabilities", {});
   };
 }
-const AUTHORIZED_OPERATOR_SCOPES = /* @__PURE__ */ new Set([
-  "all",
-  "media_buying",
-  "creative_generation",
-  "rights_clearance",
-  "governance",
-  "measurement",
-  "agent_operations"
-]);
-const AUTHORIZED_OPERATOR_DOMAIN = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/;
-function findAuthorizedOperator(brandJson, agentEtld1, now, options) {
+function findAuthorizedOperator(brandJson, agentEtld1, _now, _options) {
   if (!brandJson || typeof brandJson !== "object") return void 0;
-  const operators = brandJson.authorized_operators;
-  if (!Array.isArray(operators)) return void 0;
-  let latestValidUntil;
-  let matched = false;
-  for (const op of operators) {
-    if (!op || typeof op !== "object" || Array.isArray(op)) continue;
-    const candidate = op;
-    const domain = candidate.domain;
-    const brands = candidate.brands;
-    if (typeof domain !== "string" || !AUTHORIZED_OPERATOR_DOMAIN.test(domain) || !isValidBrandGrant(brands)) {
-      continue;
-    }
-    try {
-      if ((0, import_etld.eTldPlusOne)(domain) !== agentEtld1) continue;
-    } catch {
-      if (!(options.allowPrivateIp && (0, import_domain.isDevelopmentBrandDomain)(domain) && domain === agentEtld1)) {
-        continue;
-      }
-    }
-    const scopes = candidate.scopes;
-    if (scopes !== void 0 && !isValidScopeGrant(scopes)) continue;
-    const countries = candidate.countries;
-    if (countries !== void 0 && !isValidCountryGrant(countries)) continue;
-    const validFrom = parseOptionalRfc3339(candidate.valid_from);
-    const validUntil = parseOptionalRfc3339(candidate.valid_until);
-    if (validFrom === null || validUntil === null) continue;
-    if (validFrom !== void 0 && validUntil !== void 0 && validFrom >= validUntil) continue;
-    if (validFrom !== void 0 && now < validFrom) continue;
-    if (validUntil !== void 0 && now >= validUntil) continue;
-    if (!matchesGrant(brands, options.requiredOperatorBrand, "*")) continue;
-    if (scopes !== void 0 && !matchesGrant(scopes, options.requiredOperatorScope, "all")) continue;
-    if (countries !== void 0 && !matchesGrant(countries, options.requiredOperatorCountry)) continue;
-    matched = true;
-    if (validUntil === void 0) return {};
-    latestValidUntil = Math.max(latestValidUntil ?? Number.NEGATIVE_INFINITY, validUntil);
+  const obj = brandJson;
+  if (!obj.house || typeof obj.house !== "object" || Array.isArray(obj.house) || !Array.isArray(obj.brands)) {
+    return void 0;
   }
-  return matched ? { validUntil: latestValidUntil } : void 0;
-}
-function isValidBrandGrant(value) {
-  return Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === "string" && (item === "*" || /^[a-z0-9_]+$/.test(item)));
-}
-function isValidScopeGrant(value) {
-  return Array.isArray(value) && value.length > 0 && new Set(value).size === value.length && value.every((item) => typeof item === "string" && AUTHORIZED_OPERATOR_SCOPES.has(item));
-}
-function isValidCountryGrant(value) {
-  return Array.isArray(value) && value.every((item) => typeof item === "string" && /^[A-Z]{2}$/.test(item));
-}
-function matchesGrant(grants, required, wildcard) {
-  if (wildcard !== void 0 && grants.includes(wildcard)) return true;
-  return required !== void 0 && grants.includes(required);
-}
-function parseOptionalRfc3339(value) {
-  if (value === void 0) return void 0;
-  if (typeof value !== "string") return null;
-  const match = /^(\d{4})-(\d{2})-(\d{2})[Tt](\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?([Zz]|([+-])(\d{2}):(\d{2}))$/.exec(
-    value
-  );
-  if (!match) return null;
-  const year = Number(match[1]);
-  const month = Number(match[2]);
-  const day = Number(match[3]);
-  const hour = Number(match[4]);
-  const minute = Number(match[5]);
-  const second = Number(match[6]);
-  const offsetHour = match[10] === void 0 ? 0 : Number(match[10]);
-  const offsetMinute = match[11] === void 0 ? 0 : Number(match[11]);
-  if (month < 1 || month > 12 || day < 1 || day > daysInMonth(year, month) || hour > 23 || minute > 59 || second > 59 || offsetHour > 23 || offsetMinute > 59) {
-    return null;
-  }
-  const parsed = Date.parse(value) / 1e3;
-  return Number.isFinite(parsed) ? parsed : null;
-}
-function daysInMonth(year, month) {
-  return new Date(Date.UTC(year, month, 0)).getUTCDate();
-}
-function originOf(url) {
-  return (0, import_canonicalize.canonicalizeOrigin)(url);
+  if (!Array.isArray(obj.authorized_operators)) return void 0;
+  return obj.authorized_operators.some((op) => op && typeof op === "object" && op.domain === agentEtld1) ? {} : void 0;
 }
 function pushTrace(trace, step) {
   trace.push(step);
@@ -445,14 +403,25 @@ function runConsistencyChecks(args) {
       const result = (0, import_consistency.checkOriginConsistency)({
         purpose,
         declaredOrigin,
-        resolvedJwksUri: args.jwksUri,
-        publisherPinned: purpose === "webhook_signing" && args.publisherPinnedWebhookSigning
+        resolvedJwksUri: args.jwksUri
       });
       if (result.ok === false) results.push(result);
     }
   }
   return results;
 }
+function permitsLegacyWebhookDiscovery(payload) {
+  if (!payload || typeof payload !== "object") return true;
+  const caps = payload;
+  const major = (value) => typeof value === "string" ? Number(/^(\d+)\./.exec(value)?.[1]) : value;
+  if (Number(major(caps.adcp_version)) >= 4 || Array.isArray(caps.adcp?.supported_versions) && caps.adcp.supported_versions.some((v) => Number(major(v)) >= 4) || Array.isArray(caps.adcp?.major_versions) && caps.adcp.major_versions.some((v) => typeof v === "number" && v >= 4))
+    return false;
+  if (caps.adcp_version !== void 0) return typeof caps.adcp_version === "string" && /^3\./.test(caps.adcp_version);
+  if (Array.isArray(caps.adcp?.supported_versions))
+    return caps.adcp.supported_versions.some((v) => typeof v === "string" && /^3\./.test(v));
+  if (Array.isArray(caps.adcp?.major_versions)) return caps.adcp.major_versions.includes(3);
+  return true;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   resolveAgent